xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000040)=0x1) write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="00020002000000000000000000000000000000"], 0x20) 14:11:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000) 14:11:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x4, 0x1000, [], 0x1, &(0x7f0000000140)=[{}], &(0x7f0000001200)=""/4096}, &(0x7f0000000200)=0x78) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x5, 0xffffffff, 0x4b, 0x9, 0x0, 0xffffffff, 0x1, 0x2, 0x56f, 0x800, 0x0, 0xfa, 0x35bd4254, 0xbd, 0x9ad, 0x8, 0x1, 0x2, 0x401, 0xfffffffffffffff7, 0x5c, 0x1ff, 0x81, 0x3, 0x800, 0xe4b2, 0xfffffffffffffffd, 0x4, 0x401, 0xdb7, 0x7, 0xbd8, 0xe389, 0x1, 0x5, 0x200, 0x0, 0x6, 0x4, @perf_config_ext={0x336, 0x8}, 0x20000, 0x2, 0x3, 0x6, 0x401, 0x1f, 0x317}, 0x0, 0xe, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) [ 2521.694992] device nr0 entered promiscuous mode 14:11:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) ptrace$cont(0x19, r1, 0x4, 0x1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1b) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x11) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x109000, 0x0) r8 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x100000001, 0x2000) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r7, 0x3, 0x7, r8}) 14:11:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x1800000000000000) 14:11:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000) [ 2522.325972] device nr0 entered promiscuous mode 14:11:50 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 14:11:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000000000) 14:11:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1\x00', 0x200}) 14:11:50 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:11:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x4fff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:11:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000000)='syz1\x00') write$binfmt_aout(r1, &(0x7f00000006c0)={{0x0, 0x3, 0x0, 0x1000032c, 0x3a8, 0x0, 0xfffffffffffffffe, 0x1}, "", [[], [], [], [], [], [], [], [], []]}, 0xffffff73) [ 2524.476595] device nr0 entered promiscuous mode [ 2524.490629] net_ratelimit: 26 callbacks suppressed [ 2524.490636] protocol 88fb is buggy, dev hsr_slave_0 [ 2524.490657] protocol 88fb is buggy, dev hsr_slave_0 [ 2524.495613] protocol 88fb is buggy, dev hsr_slave_1 [ 2524.500672] protocol 88fb is buggy, dev hsr_slave_1 [ 2524.505709] protocol 88fb is buggy, dev hsr_slave_0 [ 2524.515755] protocol 88fb is buggy, dev hsr_slave_1 14:11:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x3, "9f9cdc5b5c15c60d"}) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8000, 0x44000) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:11:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0xe803000000000000) 14:11:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = shmget(0x1, 0x4000, 0x80, &(0x7f0000001000/0x4000)=nil) shmat(r2, &(0x7f0000011000/0x4000)=nil, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000080)={{0x10000, 0xf000, 0xe, 0x3, 0x81, 0x2, 0xfffffffffffffff9, 0x7, 0x40, 0x9, 0x0, 0x3}, {0x10001, 0x4000, 0x9, 0x3ff, 0x9, 0xc0, 0x1000, 0xd4, 0xf6, 0x6, 0x100, 0x4}, {0x101002, 0x4000, 0xf, 0x2, 0x8000, 0x7ff, 0x7, 0x33, 0x1, 0x3ff, 0xfffffffffffffe00, 0x7}, {0xf004, 0x0, 0x7, 0xffffffff, 0x6, 0x8, 0x3, 0x3, 0x0, 0x1, 0x40, 0x101}, {0x1000, 0x107001, 0xf, 0x5, 0x2, 0x6, 0x0, 0x33, 0xfffffffffffffe00, 0xffff, 0x4, 0x9}, {0x5000, 0x4, 0x3, 0x7fffffff, 0x1, 0x9, 0x7, 0x100000000000000, 0x1, 0x200, 0x100000000, 0xd2}, {0x2, 0x7000, 0x1f, 0x800, 0x6aaca3a4, 0x1, 0xf276, 0x1, 0xc04, 0x800, 0x7, 0x80}, {0xd000, 0x4000, 0x0, 0x9, 0x1000, 0x1f, 0x0, 0x2, 0x80000000, 0x4, 0x0, 0x2}, {0x3000, 0x10f000}, {0xf001}, 0x80000010, 0x0, 0x6000, 0x200, 0x9, 0x400, 0x3000, [0xfffffffffffffffe, 0x9, 0xffff, 0x3]}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) fstat(r4, &(0x7f00000001c0)) accept$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000007c0)={0x0, 0x0, @pic={0x1ff, 0x8, 0x2c9, 0x0, 0x10001, 0x5, 0x80, 0x2, 0xa077, 0x4, 0x7, 0x20, 0x7fffffff, 0x0, 0x200, 0x35ec}}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@remote, @in6=@local, 0x4e24, 0x85b, 0x4e23, 0x334d, 0xa, 0x0, 0xa0, 0x16, r5, r6}, {0xffff, 0x1, 0x2b52, 0x0, 0x1a69, 0x7, 0xffffffffffffbd37, 0x2}, {0x400, 0x4, 0xfffffffffffffffa, 0x2}, 0x26e3117a, 0x6e6bb7, 0x0, 0x1, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x4d3, 0x32}, 0x2, @in=@local, 0x3503, 0x23d0676e7efca008, 0x3, 0xbabffe8, 0x1000, 0x2, 0x10001}}, 0xe8) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff00000000) [ 2525.130645] protocol 88fb is buggy, dev hsr_slave_0 [ 2525.135830] protocol 88fb is buggy, dev hsr_slave_1 [ 2525.140989] protocol 88fb is buggy, dev hsr_slave_0 [ 2525.146054] protocol 88fb is buggy, dev hsr_slave_1 [ 2525.174388] device nr0 entered promiscuous mode 14:11:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000080)={0x3a, @local, 0x4e22, 0x3, 'fo\x00', 0x11, 0x8001, 0x2a}, 0x2c) write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) [ 2525.332640] device nr0 entered promiscuous mode 14:11:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) [ 2525.353923] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002 [ 2525.375033] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002 14:11:54 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 14:11:54 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:11:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x4005}) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7, 0x200200) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = dup3(r0, r2, 0x80000) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000000)='nr0\x01\x00') write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="00000000cd06000010f100000200000000000000000000000000000000000000"], 0x20) prctl$PR_GET_DUMPABLE(0x3) 14:11:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x10100) ioctl$RTC_UIE_ON(r1, 0x7003) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:11:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8000, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"5d14b4da3c98bd30bf09d333784bc7436cdfa004c242abc0322cdd95af134a0cbe1c7c4bc76d8947ed589db1c23f35fca53bff2b255705fd27def8815202b839a12f1cb80ab952717719162cbbd22e7bb5e521ecf3a2f4e9a166015f2505b5af33be2db2b1b2fdef4af650c1134febdbd23aac9ca02ba8c189bf3f00d0db68d56d248801d9b4615cb21fe291b418e4069058c3aa81dc3702c156d61bfb25c8f0a7fdf602175cb77cf9fad2063b8495e84f68cead20456256799112a37d5499677509f69a6ff202e780bc9ab4ea197958293673b695d363b05d64581852dac15d20abd45f60166186d33c5783cd96392956b4a5e4e99036e5d81296c301ac3e68069e8a1666c9477549000e827b8fef67b1afa51f983887793ca2ec3e4a54b56edb6993a8fa2906c406ef6a586b1bc6ceb98376f7ac343a69d5769c6e1ad176f18b62eef98ef1b49400af0bd2460dfca2495495d8ca7e0433b3b7495beaa172906651f1eff5361b61d04b2c37c4b6c19ec3b4c649eca7a951f49c5f8c03a2546e866f9af85ccef4b0b0f9546771eeb039ff1c9449aafae9e179010f618a4da9f931d3db42980e921cfc589152d0b77a097d9563c2caf4854aa25d5e2e62b7d5835585ae2cd06153041925641de8fb6408885539122b227df456f0a2c2f2b6f1bddf7cd6bc6c2267ec8cae6e18981d0775998c316bf4cd6bb1ce028e16f18adcf2ad8c2a07a266c5f01bdcfe72da20c004d35d25876b6916c4738d3b8343a6ba2c0c65275e03f41ddfc89c67cde3839b105e0006cbc404004d433dd17366e6118e0fe2e5b8fbc8c37791488977731f374127b3b8a8d584e02434ccc360f45e7059b7fe2ed17187afc33d87eac1a6b1e4de6f0655b431a0f74e8eaee1db4b0fc280ba40008db776ee97aa914d21cb399ffaa9859bc04f62cb1c8fa97ba66a2a2751681cd49e02fd6c61fb8f2dca33b9c95fdf53bfcfe58df73483feb7b6588566adc7aa481474c8e4cf40f21f727e4d93a8be01214e577922ddc4592535f950d1d22c115713c78d7f3014398257dad7bc8116a2275798a424294362c9693d600dae728f8e49c7ac4965aba009c99b86732b5b7b3a4b4d04bc3f822e7f7cc67387360ecaf894796d5096800d41259dbdffe463801cbc3166a47b4420b5baa8a5e1bbbb335f67e2258bd38a9ac19f09a0106743b5c6ce4831ad9c8a270c8b23b2883ddfb1ca1e711dfa2925424f3ff0e3c522085c1dc709f801ec6629c534165b1fbf4803af50dd3864fd3df8074df711dd7c033137acc1f1e0c30d47ff68f2422b2a5c977f29b203f6cbcb9a7bc1b366cd71a5fdf49f1d06311f1844ea186ba54930b1d142b50501eec880af367c6c1a242a628ef435bc1e1ad96c9f7e2315d3bb191759fa7e1c4c2ad3d719c19723a989d1eec15a020db06ef831239a0ca584d0ee"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:11:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') timer_create(0x3, &(0x7f00000002c0)={0x0, 0x26, 0x1, @thr={&(0x7f0000000140)="d94dff6f6778fae2d69956d17c3f43332acf05ed92e23331f85b209af1840f2509e4bc0d9a62dd5c19a500cbf346506310e44ad249ea960d96e5c96f2edb6ac0a1a2e7fef027c5eec8f39ec9ff068d832b75e9de49f295d940041dbea6e97b3d6963506d38b21356a4242aa731a4dc49c8004a922c51f491e9c95ae2f7ba4d41282a562b8a2cf54a789cab19d5b7b0e6f31c8414fa97fcea2b586640", &(0x7f0000000200)="7b0c1b58cc10ebeca434f31909cbb80dbff5c28b2d17efe3eb1aae6fbbad9669ee3e56aa8d84874448969e48ac0010c35e67c06762ca8733dea28b6148abe172dce4befe260e445e7eba40d1ea625f15cc09f9ba6fc91ef0ab1f30504fbc4ac46b4cb0d869a65c558d6e9c14814ac5d7181f94473bd085427a358aa5887e2f504e28f0a625249554213e9447a2a35027103a230f8629f39cf2041ab1072b8705c702"}}, &(0x7f0000000340)=0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f00000003c0)={{0x77359400}, {r3, r4+10000000}}, &(0x7f0000000400)) write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[], 0x1f7) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f00000004c0)={'bridge_slave_1\x00', {0x2, 0x4e22, @local}}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000040)={0x81, 0x8001, 0x8, {}, 0x10001, 0x408000000000000}) prctl$PR_GET_FP_MODE(0x2e) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) fstatfs(r6, &(0x7f0000000d00)=""/37) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f00000006c0)={{0xa, 0x0, 0x3f, 0x6, 'syz1\x00', 0x7fffffff}, 0x0, [0x6, 0xb5, 0x9, 0x5fa, 0x3, 0x0, 0x4, 0x4, 0x1000, 0x3, 0xffffffff, 0x5, 0x80000001, 0x8001, 0x7f, 0xc07, 0x7, 0x1ff, 0x3, 0x6, 0xf, 0xff, 0x7fffffff, 0x2, 0x7, 0x8, 0x1, 0xa8, 0x3, 0x5, 0x100000000, 0x0, 0xffffffffffffffff, 0x8, 0x7, 0x7, 0x7ff, 0x1000, 0xeb, 0x7fffffff, 0x3, 0x24000, 0x1, 0x7abe9878, 0x7, 0x2, 0x24, 0x9, 0x4, 0x3, 0xff, 0x0, 0xffffffffffffda43, 0x8, 0x1, 0x893, 0x4, 0x10001, 0x6, 0x8, 0x8001, 0x5, 0x5, 0x4, 0x3, 0x0, 0x5, 0x3, 0x946, 0x0, 0x8001, 0xd94, 0xf01, 0x7fff, 0xd, 0x35d3, 0x1, 0x8, 0x0, 0x6, 0x800, 0x3ff, 0x7, 0x4, 0xcd44, 0x7, 0x4000000000, 0x100000001, 0x4, 0x1, 0x0, 0x5, 0x5, 0x9, 0x594c894a, 0x8001, 0x1, 0x3ff, 0x8, 0xf9, 0x8, 0x3, 0x9, 0xfff, 0x3, 0x8001, 0x9ff, 0x7, 0x0, 0x400, 0x6, 0x4, 0x6, 0x5, 0x1, 0x9, 0xffff, 0xfffffffffffffff8, 0x3, 0xe1, 0x7fffffff, 0x7, 0x1, 0x80, 0x7, 0x10000, 0x5, 0x100000000]}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000440)={0xffffffffffffffff}, 0x111, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000bc0)={0x6, 0x118, 0xfa00, {{0xffffffff, 0x0, "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", 0x96, 0x0, 0x4, 0x100000001, 0x0, 0x6, 0x3f}, r7}}, 0x120) [ 2527.653920] device nr0 entered promiscuous mode 14:11:54 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) 14:11:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:11:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr="463e7b1b7e1caa4e1e49d335f79b3cca", 0x9524, 0x0, 0x0, 0x5, 0x9, 0xffffffffffffe068}, &(0x7f0000000180)=0x20) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000080)={0x2, 0x0, 0xffff, 0x3, 0x15, 0x513, 0x3, 0x2, 0x5, 0xb6df}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:11:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x2000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:11:54 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:11:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x400, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@can={0x1d, 0x0}, &(0x7f0000000180)=0x80) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@exit, @call={0x85, 0x0, 0x0, 0x3f}, @map={0x18, 0x7, 0x1, 0x0, r2}, @jmp={0x5, 0x9, 0xc, 0x3, 0x4, 0x20}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, [], r3, 0x9}, 0x48) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:bsdpty_device_t:s0\x00', 0x25, 0x3) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080)=0x2fe, 0x4) write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) 14:11:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:11:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) [ 2528.361744] device nr0 entered promiscuous mode [ 2528.396216] device nr0 entered promiscuous mode 14:11:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x100420c0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:11:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8, 0x4000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000140)={r3, &(0x7f00000000c0)=""/109}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:11:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x78) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:11:57 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 14:11:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000007c0)=""/4096) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:11:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000cd010000a80300000000000000000000ecff0000000000000000000000fea3a4082ea564be1a54fa5429d1c1a2c16e69357d9ab933e1bf22d177fb40328b4a7dbfc233079549074d2005e2c1c44678cb"], 0x20) 14:11:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0000000200000000020000c07fc4b7259aa5fb67406c9c9b7800000000000000"], 0x20) 14:11:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmget(0x3, 0x3000, 0x400, &(0x7f0000000000/0x3000)=nil) shmget(0x0, 0x3000, 0x54000024, &(0x7f0000001000/0x3000)=nil) r2 = shmget(0x1, 0x3000, 0x1020, &(0x7f0000000000/0x3000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x4140, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}}, [0x7a, 0x2, 0x8, 0xff, 0x6, 0x40, 0x1, 0xb9d0, 0x992, 0x7, 0x100000000, 0x2, 0x0, 0xc000, 0x400]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e22, @multicast2}}, 0x7, 0x2cbc}, &(0x7f0000000280)=0x90) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14:11:57 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x1507000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 2530.730655] net_ratelimit: 25 callbacks suppressed [ 2530.730664] protocol 88fb is buggy, dev hsr_slave_0 [ 2530.730670] protocol 88fb is buggy, dev hsr_slave_0 [ 2530.730752] protocol 88fb is buggy, dev hsr_slave_1 [ 2530.735695] protocol 88fb is buggy, dev hsr_slave_1 [ 2530.755779] protocol 88fb is buggy, dev hsr_slave_0 [ 2530.760866] protocol 88fb is buggy, dev hsr_slave_1 [ 2530.841749] device nr0 entered promiscuous mode [ 2530.857816] device nr0 entered promiscuous mode 14:11:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockname$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:11:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:11:57 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="00060000cd010000a80300000000000000000000000000000000000000000000"], 0x20) 14:11:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0000000200000000000000000008000000000000000000000000000000000000"], 0x20) [ 2531.337175] device nr0 entered promiscuous mode [ 2531.370662] protocol 88fb is buggy, dev hsr_slave_0 [ 2531.375797] protocol 88fb is buggy, dev hsr_slave_1 [ 2531.380951] protocol 88fb is buggy, dev hsr_slave_0 [ 2531.386013] protocol 88fb is buggy, dev hsr_slave_1 [ 2531.410262] device nr0 entered promiscuous mode 14:11:57 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:11:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = shmget(0x3, 0x1000, 0x42, &(0x7f0000ffc000/0x1000)=nil) shmat(r3, &(0x7f0000001000/0x3000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f00000007c0)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:00 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 14:12:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket(0x15, 0xf, 0x10000) bind$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) unshare(0x10220000) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$BLKSECDISCARD(r3, 0x127d, &(0x7f0000000080)=0x1) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000540)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'erspan0\x00', r2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r3 = socket$kcm(0x29, 0x5, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7, 0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000140)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYRES64], 0xff) 14:12:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x4002}) r1 = socket$kcm(0x29, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140)=0x8000, 0x4) r2 = socket$kcm(0x29, 0xfffffffffffffffe, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80000, 0x0) epoll_wait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0xfffffffffffeffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x7f5b, @mcast2, 0xfff}}, 0x1, 0x7, 0xff, 0x7, 0x2}, &(0x7f0000000240)=0x98) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000280)={r4, 0xffffffffffffffff}, 0x8) write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) 14:12:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x58dcaf096a5ca574, 0x0) write$P9_RXATTRWALK(r3, &(0x7f0000000080)={0xf, 0x1f, 0x2, 0x100}, 0xf) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:00 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 2533.915304] device nr0 entered promiscuous mode 14:12:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="00000000cd010000a8032c42bcbf620d00000000000000000000000000000000"], 0x20) 14:12:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x100000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x408480, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x5, 0x10000, 0x3, 0xffff, 0x1], 0x5, 0x274a, 0x1000, 0x0, 0xff, 0x7fffffff, {0x1, 0x6, 0x6, 0x4, 0x80000000, 0x6, 0x56, 0x0, 0x0, 0x100000001, 0x2, 0x3f, 0xffffffffffffffff, 0x3322, "8f95d4f7d2ddd283cce9f9b43f9b253c4c6968ebc4d076d0b5862ec2046e821b"}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x1f], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e23, 0x4, @mcast2, 0x2}}}, 0x3a) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x4) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {}]}) [ 2534.162570] device nr0 entered promiscuous mode [ 2534.257824] device nr0 entered promiscuous mode 14:12:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000080)=@rc, &(0x7f0000000000)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x8, @rand_addr="83662e48ede0cb6942bb0a1b2da44031", 0xe87a}}, 0x6, 0x6}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={r3, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000002c0)=0x84) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000340)={@rand_addr, 0x0}, &(0x7f0000000440)=0x14) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000500)={@hci={0x1f, r4}, {&(0x7f0000000480)=""/19, 0x13}, &(0x7f00000004c0), 0xa}, 0xa0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) r6 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x7fff, 0x20000) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000017c0)={0x2, 0x0, [{0x1000, 0x1000, &(0x7f00000007c0)=""/4096}, {0xf003, 0xe4, &(0x7f00000005c0)=""/228}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14:12:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10000000000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) getpeername$netlink(r3, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 14:12:03 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 14:12:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:03 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000cd010000a80300000000007967113549f500a43899ba483b8d0000000000000000000000000000000000"], 0x20) 14:12:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x7, 0x28080) r3 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000140)={0x7, 0x5, 0x8}) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000100)=0x100) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000000080)={0x7fffffff, 0x8}) 14:12:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socket$kcm(0x29, 0x5, 0x0) write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0000000210000000000000000000000000000000000000000000000000000000"], 0x20) [ 2536.970700] net_ratelimit: 26 callbacks suppressed [ 2536.970707] protocol 88fb is buggy, dev hsr_slave_0 [ 2536.970737] protocol 88fb is buggy, dev hsr_slave_0 [ 2536.975736] protocol 88fb is buggy, dev hsr_slave_1 [ 2536.980801] protocol 88fb is buggy, dev hsr_slave_1 [ 2536.985834] protocol 88fb is buggy, dev hsr_slave_0 [ 2536.995833] protocol 88fb is buggy, dev hsr_slave_1 [ 2537.028046] device nr0 entered promiscuous mode 14:12:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10800, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r2}) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) 14:12:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)) accept4$alg(r2, 0x0, 0x0, 0x800) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x20000, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000080)=0x0) tgkill(r3, r6, 0xb) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000200)={0x100003001, 0x83000, 0x8, 0x81, 0x2}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) write$cgroup_type(r8, &(0x7f0000000100)='threaded\x00', 0x9) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x8, 0x100000000, 0x80000001, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYBLOB="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"], 0xe9) 14:12:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x20182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x28000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r1, 0x6, 0x1, 0xf3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000140)={0x7, &(0x7f00000000c0)=[{0x0, 0x8}, {0x800, 0x4}, {0xfffffffffffffff9, 0x4}, {0x0, 0x7fff}, {0x3, 0x516}, {0x4, 0xfff}, {0x9, 0x3}]}) [ 2537.278067] device nr0 entered promiscuous mode 14:12:03 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="f9fd078591b32427f7c7c79ab66d535560b6e1a51275ff000000f3ec6d8776a7d6dc8055170530844a1cef6f47e09f4909348b4671976626f153d7228bbe879e1171ac775b08cf8a2a94d0dd1a297a34e01a932578219c7bc41bb5707a65b4ab51238b08f6b30e428fb6bf48be954c4e5a3b3b88a3f0a4e098ddd0eab615a35748b78598e152d31ae605261b4f9de8e69f7bdae0af907d00c4cad4f6d12678e2e58d1a913bf95e40274fc48f40276675e1d1cd66b564b567b3aee9eaa8c5180ae8cfc11575d1e2d31c00210581b6b6ce93d349c2298552f5f4893d3696d6cf1a655762ed2ab7640153b976b75ac90a62ff27dce6ad19b0c28778c56347e5f2ef") ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) 14:12:03 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socket$kcm(0x29, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x7, 0x70, 0x4, 0x7, 0x8000000000000, 0xffffffffffffff81, 0x0, 0x8001, 0x10000, 0xa, 0x8001, 0x7, 0x6, 0x3ff, 0x14, 0xcf, 0xffff, 0xffffffffffffffff, 0x1, 0x9, 0x4, 0x9, 0x3, 0x0, 0x0, 0x3, 0x7fffffff, 0x3ff, 0x0, 0x2a, 0x0, 0x3, 0x6e1, 0x6, 0x3, 0x2, 0xffffffffffffff39, 0x1, 0x0, 0xffff, 0x3, @perf_config_ext={0x4, 0x35}, 0x8800, 0x3, 0x10000, 0xb, 0xfffffffffffffffb, 0x4, 0xffffffff}, 0x0, 0x5, 0xffffffffffffff9c, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000140)='}\x00') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) [ 2537.503228] device nr0 entered promiscuous mode [ 2537.610681] protocol 88fb is buggy, dev hsr_slave_0 [ 2537.615815] protocol 88fb is buggy, dev hsr_slave_1 [ 2537.620937] protocol 88fb is buggy, dev hsr_slave_0 [ 2537.625995] protocol 88fb is buggy, dev hsr_slave_1 14:12:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) 14:12:06 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x1a) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000006c0)={{0x0, 0x4000000000000, 0x0, 0x1cd, 0x800000003a8}, "", [[], [], [], []]}, 0x420) 14:12:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)={0x3, 0x0, @ioapic={0xd002, 0x100000000, 0xfffffffffffffff8, 0x4, 0x0, [{0xe2f2, 0x1, 0x101, [], 0x4}, {0x9ea, 0x80000000, 0x9, [], 0x2f}, {0x7, 0x401, 0x3, [], 0x3}, {0xe0000000000, 0xfff, 0x100000000, [], 0x8}, {0xffff, 0x5, 0x100, [], 0x6}, {0x9, 0x6, 0x7, [], 0x9}, {0x81, 0xff, 0x6, [], 0x800}, {0xce8, 0xd8db, 0x80000000, [], 0x9}, {0x5, 0xfffe, 0x3f, [], 0x7}, {0x800, 0x8, 0x3, [], 0xfffffffffffffffb}, {0x600000000000, 0xffffffffffffff4d, 0x4, [], 0x6}, {0x3, 0xfff, 0x1, [], 0x200}, {0x2, 0x5, 0x101, [], 0x1}, {0xc4e, 0x8000, 0x27c7, [], 0x9}, {0x9, 0x2, 0x1f, [], 0x7c}, {0x7, 0x8001, 0x6, [], 0x16f}, {0xffffffffffffff19, 0x881d, 0x7fffffff, [], 0x4}, {0x7, 0x5, 0x81, [], 0x4}, {0xff, 0x1, 0x5, [], 0x7}, {0x5, 0x2, 0x7, [], 0xc1fd}, {0x6, 0x7f, 0x6, [], 0x6}, {0x10000, 0x5, 0x40, [], 0x40}, {0x5, 0xfffffffffffffff7, 0x800, [], 0x40}, {0x100000000, 0x5a09, 0x778, [], 0x1f}]}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:06 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:06 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000020000000000000000000000000000000000000000000000000000000067e59b02846fb61b809828cb0cd6addf8fec0d0e6ff0675b4d48efdf535d359fda3441389de4086c0e1d7a2c97433093bf0dfa4ee515df745b1ee499543b15618e701a33d71bd6b0a0f38d94856bf07046d873809ca5e4ae876f7f129d249abf19ae137a8911e81ffbc69f08b1fe66547164d79dcf3173788d54a706c9f6bd8612c54091e2c781475d8a1de70ce6e7569faf32fd84a961543deadbf0bc12c3136ee9e2a5d0e89dc9f7369176ab813782d3ca61eb786294d14a7008994c55b832510ae7cacffcdd5e"], 0x20) 14:12:06 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/243, 0xf3}], 0x1, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r1}) [ 2540.083074] device nr0 entered promiscuous mode 14:12:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x2, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x80) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080), 0x2) unshare(0x1000000200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x71) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000004d00)={0x7, 0x0, {0x57, 0x5, 0x4, {0x0, 0x400}, {0x10001, 0x56}, @rumble={0x3, 0x40}}, {0x55, 0x5, 0x1, {0x2, 0x1ff}, {0x1, 0xac}, @const={0x1, {0x8, 0x7, 0x61, 0x5}}}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000004c80)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000004a80)=[{{&(0x7f0000000080)=@nl=@proc, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/55, 0x37}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/64, 0x40}, {&(0x7f00000001c0)=""/43, 0x2b}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x6, &(0x7f0000000280)=""/25, 0x19}, 0x80}, {{&(0x7f00000002c0)=@l2, 0x80, &(0x7f0000000340)=[{&(0x7f0000000440)=""/144, 0x90}], 0x1}, 0x1}, {{&(0x7f0000000500)=@alg, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/11, 0xb}], 0x1, &(0x7f00000027c0)=""/220, 0xdc}, 0x1ff}, {{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000680)=[{&(0x7f00000028c0)=""/191, 0xbf}, {&(0x7f0000002980)=""/200, 0xc8}, {&(0x7f0000002a80)=""/225, 0xe1}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x4}, 0x4}, {{&(0x7f0000003b80)=@can, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003c00)=""/209, 0xd1}, {&(0x7f0000003d00)=""/97, 0x61}, {&(0x7f0000003d80)=""/215, 0xd7}, {&(0x7f0000003e80)=""/101, 0x65}], 0x4}, 0x5}, {{&(0x7f0000003f40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000004300)=[{&(0x7f0000003fc0)=""/109, 0x6d}, {&(0x7f0000004040)=""/113, 0x71}, {&(0x7f00000040c0)=""/210, 0xd2}, {&(0x7f00000041c0)=""/246, 0xf6}, {&(0x7f00000042c0)=""/6, 0x6}], 0x5}, 0x4}, {{&(0x7f0000004380)=@isdn, 0x80, &(0x7f0000004600)=[{&(0x7f0000004400)=""/10, 0xa}, {&(0x7f0000004440)=""/188, 0xbc}, {&(0x7f0000004500)=""/212, 0xd4}], 0x3}, 0x80}, {{&(0x7f0000004640)=@xdp, 0x80, &(0x7f0000004a00)=[{&(0x7f00000046c0)=""/94, 0x5e}, {&(0x7f0000004740)=""/14, 0xe}, {&(0x7f0000004780)=""/71, 0x47}, {&(0x7f0000004800)=""/197, 0xc5}, {&(0x7f0000004900)=""/230, 0xe6}], 0x5}, 0x9}], 0x8, 0x100, &(0x7f0000004cc0)={r3, r4+30000000}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000004e00)=0xfff, 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x5) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000004d80)=""/63) openat$zero(0xffffffffffffff9c, &(0x7f0000004dc0)='/dev/zero\x00', 0x10001, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 14:12:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="66b801010f00d06736460f9cd066ba4100ed660f3835fb400f01cac44175fec066baf80cb878300d8eef66bafc0cb809000000ef420f381d8b5c8f0000c421fe11b20000000066ba4100b000ee", 0x4d}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2540.566035] device nr0 entered promiscuous mode 14:12:07 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) 14:12:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x110) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000140)) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="000000020000000000000000000000000000"], 0x20) 14:12:07 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r2, &(0x7f00000006c0)=""/177, 0xb1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000cd010000a8030000000000000000000000000000000000000000000069a64464fda6ea6c128fd9f7ed7f37fddd6b1a4c73e161d6cbbe2819d2954b3e04d52e4f6b05c0186dca9763c88110e2f38b4eb65ef3d7"], 0x20) r3 = dup2(r1, r1) r4 = openat$cgroup_ro(r3, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000180)={0x0, @pix_mp={0xa, 0x3, 0x32315258, 0x5, 0x0, [{0x1, 0x9}, {0x7fff, 0xff}, {0x6, 0x15e}, {0x2, 0x80}, {0x0, 0x49be}, {0x7fffffff, 0x3}, {0x5}, {0x10001, 0x10000}], 0x841c, 0x2, 0x6, 0x0, 0x5}}) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x731, 0x187c, 0x800, 0x1, 0x1, 0x9a4, 0x3, {0x0, @in6={{0xa, 0x4e23, 0x614, @ipv4={[], [], @rand_addr=0x7}, 0x7}}, 0x0, 0x4, 0x3ff, 0x8}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000002c0)={0x4, 0x4, 0x1, 0x100, 0x2, 0x9, 0x7, 0xfffffffffffff9bb, r5}, 0x20) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x6, 0x1, 0x400, 0x10000}, {0x0, 0x5, 0x3, 0x9}, {0x80000000, 0x1, 0x1}, {0x5, 0x4, 0x800, 0x9}, {0x100000001, 0x7a38, 0x4, 0x2}, {0x3ff, 0x4, 0x9, 0x8}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x0, 0x7, 0x100, 0x8, 'syz0\x00', 0x1}, 0x0, [0x200, 0x749, 0x5, 0xb86c, 0x4, 0x2, 0x100000001, 0x6, 0x843, 0x6, 0x611e, 0x1, 0x6, 0x6, 0x0, 0x8, 0x7, 0x7, 0x3, 0xf883, 0x4, 0xfffffffffffffffd, 0x3df, 0x5, 0x20, 0x1, 0x100000001, 0x6, 0x8, 0x4, 0x200, 0x7fffffff, 0x80000000, 0x3, 0x0, 0x3b4, 0x5, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x80000001, 0x7, 0x4e3b, 0x5, 0x6b, 0x80, 0x7, 0x5, 0x7fffffff, 0x7f, 0x2, 0x4, 0x8, 0x457090e4, 0x4, 0x1, 0x44a, 0x9, 0x8, 0x4, 0x6, 0x5, 0xfffffffffffff800, 0x2, 0x4, 0x6, 0x7fffffff, 0x101, 0x3, 0x19, 0x3, 0x1, 0xe9, 0x200, 0xffffffff, 0x200, 0xac, 0x1, 0x3, 0xffff, 0x38, 0x633, 0x0, 0x728, 0x7, 0x1, 0x0, 0x9, 0xb853, 0x1, 0x172, 0x6, 0x80000001, 0x2, 0x5, 0x10001, 0x4d63713a, 0x4, 0x3ff, 0x3, 0xde4, 0x7fffffff, 0x0, 0x9, 0x1ff, 0x8, 0x80000001, 0x1, 0x7fff, 0x7, 0x6, 0x6, 0x5, 0x0, 0x3, 0x7, 0xffff, 0xfffffffffffffff9, 0x0, 0xffff, 0xa0, 0xb9, 0xdc, 0x2, 0x100, 0xf2, 0x6, 0x1, 0xdf], {0x77359400}}) [ 2540.738386] device nr0 entered promiscuous mode 14:12:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) rt_sigprocmask(0x3, &(0x7f0000000000), 0x0, 0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:07 executing program 0: r0 = socket$inet6(0x10, 0x100000003, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a280930a06030000a8430891000000390008000800020000dc1338d54400109b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000e00000000", 0x55}], 0x1}, 0x0) 14:12:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0xffffffffbffbffff, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:07 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r3, 0x700, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xffff, 0x6, 0xfffffffffffffffa, 0xffffffff]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x8045) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = dup2(r0, r1) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f0000000000)={0x2d, 0x4, 0x6, 0xfffffffffffffff8, 0x2, 0x9c8}) 14:12:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x401) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000140)={0x9, 0xc496, 0x10000, 0x2, 0x100000001}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) set_mempolicy(0x8003, &(0x7f0000000000)=0x1400, 0x8001) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x40082}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2541.387181] device nr0 entered promiscuous mode 14:12:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f00000003c0)={0x84, @local, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '}, 0x2c) 14:12:07 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x41, 0x0) mq_timedsend(r1, &(0x7f0000000080)="767574617c994f2be5d06e4430c520d5e0af2b840eab9ba2b0fc92a296b99aea03e276e4e195cda80af90f2968c377118d580d80777f63771ba31557a7bf1f14f70a962cc4044115ca7febb9384b74feaf95a3806a", 0x55, 0xe6, &(0x7f0000000140)={0x0, 0x1c9c380}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x335000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xffffffffffffff55) 14:12:08 executing program 0: r0 = getpgrp(0xffffffffffffffff) geteuid() getresgid(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(r0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) 14:12:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) syncfs(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="00000000cd010000a80300000000000000330000000000000000000000000000"], 0x20) 14:12:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2541.622691] device nr0 entered promiscuous mode 14:12:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x880, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f00000000c0)={r4}) mq_timedsend(r3, &(0x7f0000000100)="b93272a8e01deaa04657c0a5165909059acafee583b0043c2261b076621e37c89115e5efb2bdbfeab5d038f9f96931f54a991882e58ddbe1ac98292bd92f0405a5d641bb40ea68b8af2674a2aa99e889a0c6dd224a2b8de26b04a99f29f485c3e986e0482667a723948d81e9403b8f9b1d51725df5e917f6ca4c57fa684d71e757da7d375d9fdd801f3a369f84450111d9f493e2dcf7764eb081bdead930b2389f9da4fc841a93e13559282dab4ad47d30b99940c20c3b0f817bcaa929b267ab517d", 0xc2, 0x0, &(0x7f0000000200)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:08 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) arch_prctl$ARCH_SET_GS(0x1001, 0x0) dup3(r0, r1, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, 0x0) [ 2541.692866] device nr0 entered promiscuous mode 14:12:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x78) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x101ff, 0x3, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 14:12:08 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000000)=0x68) 14:12:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) setpgid(r2, r3) 14:12:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x4fff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:08 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x400, 0x8200) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2410400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r3, 0x228, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x10001, @media='ib\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x844) write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) 14:12:08 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x400, 0x40) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f00000000c0)=""/232, 0xe8}, {&(0x7f00000001c0)=""/209, 0xd1}, {&(0x7f00000002c0)=""/156, 0x9c}, {&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/90, 0x5a}], 0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2542.488058] device nr0 entered promiscuous mode 14:12:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2542.541218] device nr0 entered promiscuous mode 14:12:09 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f28"], 0x32) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = getpgid(0xffffffffffffffff) ptrace$getsig(0x4202, r1, 0x9, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x78000006, &(0x7f000000c000/0x1000)=nil) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:09 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x0, 0x1f}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200000, 0x0) connect$can_bcm(r2, &(0x7f0000000080), 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:09 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'bridge_slave_0\x00', 0x4000}) write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) 14:12:09 executing program 0 (fault-call:12 fault-nth:0): clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0000000200080000000000000000000000000000000000000000000000000000"], 0x20) [ 2543.210632] net_ratelimit: 25 callbacks suppressed [ 2543.210639] protocol 88fb is buggy, dev hsr_slave_0 [ 2543.210673] protocol 88fb is buggy, dev hsr_slave_1 [ 2543.215632] protocol 88fb is buggy, dev hsr_slave_1 [ 2543.230751] protocol 88fb is buggy, dev hsr_slave_0 [ 2543.230791] protocol 88fb is buggy, dev hsr_slave_1 [ 2543.324038] device nr0 entered promiscuous mode 14:12:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2543.353400] device nr0 entered promiscuous mode 14:12:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x10000, 0x200) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000080)) unshare(0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0xff, @empty, 0x43b}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000200)=0xa) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x4, 0x4000}) 14:12:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) socketpair(0x5, 0x6, 0x2, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2543.850790] protocol 88fb is buggy, dev hsr_slave_0 [ 2543.855891] protocol 88fb is buggy, dev hsr_slave_1 [ 2543.861027] protocol 88fb is buggy, dev hsr_slave_0 [ 2543.866128] protocol 88fb is buggy, dev hsr_slave_1 [ 2543.871528] protocol 88fb is buggy, dev hsr_slave_0 14:12:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:10 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x800}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000cd010000a80300000000000000000000000000000000000000000024bd7179747c5d4900"], 0x20) 14:12:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) socket$caif_stream(0x25, 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000002000000000000000000000000ae011e7ae03fe5000000000000000000661c7444955509a128472816e8be616da898ba1f4918e2593939e57b12f7bbe3d9e06c72edb23beb418d8877fdbca3745b1a0bc4a8c91ee3e5fb9882993ca9752b6ece3e085873094a0f46d013c96e2589efeb8e816f26ac6f76f52e2b74464486c853401e142f05a3996b8d7720fdc82208c7a81715059416f6364faaceb13d8b0b0420e0b8b4067f0613b9879157f7fad687bcf815ba0215739d89b8eb46804af24f04fa6968f78708f8bb504d778c22"], 0x20) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x6000}, {r1, 0xc0}, {r1, 0x104}, {r1, 0x2018}, {r1, 0x8000}, {r1, 0x8000}, {r1, 0x4690}], 0x7, &(0x7f0000000180)={r2, r3+10000000}, &(0x7f00000001c0), 0x8) 14:12:12 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x4000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x181400, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x70, 0x9, 0x0, 0x2, 0xda, 0x0, 0x81, 0xc000, 0xa, 0x0, 0x6d4, 0x74c, 0x20000000000, 0x5, 0x0, 0x273, 0xfff, 0x8, 0x10001, 0x5, 0x0, 0x1, 0x8, 0x9, 0x80000001, 0x8, 0x7a3c, 0x8, 0x6, 0x0, 0xfffffffffffffff9, 0x0, 0x2, 0x4, 0x82af, 0x5, 0x3, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x8, 0x5, 0x7c000000000, 0xf, 0x8, 0x7f}, r2, 0x8, r2, 0x1) write$uinput_user_dev(r2, &(0x7f00000007c0)={'syz0\x00', {0x3, 0x6, 0xfff, 0x8}, 0x33, [0xfffffffffffffff8, 0x9, 0x5, 0x3, 0x58, 0x1, 0x81, 0x2, 0x9, 0xfffffffffffffffb, 0xe8, 0x0, 0x20fc891c, 0x2, 0x0, 0xe8f8, 0x401, 0x8, 0x0, 0x100000000, 0x5, 0xb5db, 0x2, 0x1, 0x5, 0x9, 0xe3e9, 0x6, 0x27, 0x9, 0x4, 0xffffffff, 0x0, 0x0, 0x800, 0x8, 0x100000000, 0x10000, 0x3000000000, 0x3, 0x2, 0x9071, 0x2, 0xf19, 0x7, 0x2, 0x8, 0x10001, 0x3, 0x640, 0x5, 0x3, 0xb5, 0xfff, 0x40000400, 0xbc, 0xffffffffffffffe0, 0x1, 0x100, 0x6, 0x1, 0x8000000000000, 0x343e, 0x81], [0xf, 0x4, 0x5, 0xb6, 0x3, 0x5, 0x8000000000000000, 0x1, 0x400, 0x2, 0x101, 0x488e000000000000, 0x55, 0x8, 0x2, 0xddcd04a, 0x56, 0x7590, 0x80, 0xbcaf, 0x100000000, 0x3, 0x9, 0x1f, 0x1, 0x6, 0x7f, 0x3, 0x6, 0x200, 0x948, 0x15ebd7c7, 0x4, 0xba, 0xdf5, 0xfffffffffffffff9, 0x3, 0x9, 0x7, 0x1, 0x2, 0x8, 0x1000, 0x8, 0x8, 0x7, 0xfff, 0x9, 0x6, 0x7ff, 0x7fffffff, 0x7fffffff, 0x2, 0x4, 0x7, 0x6, 0xd0, 0x100000001, 0x6, 0x6, 0x1ff, 0x9, 0x8, 0x39], [0x8, 0x4, 0x0, 0x9, 0x2, 0x1, 0x1, 0x4, 0x8, 0x4, 0x7, 0x240, 0x2, 0x9, 0x7, 0x9, 0x401, 0x9, 0xc9d, 0x3ff, 0xa81, 0x6b, 0xf106, 0x7, 0x2, 0x9, 0x1, 0x3ff, 0x3, 0x5, 0x2, 0xd411, 0x3, 0xca4b, 0x9b, 0x1, 0x7fffffff, 0x5e4, 0x40, 0x4, 0x5, 0x3, 0x20, 0x8, 0x1f, 0x3, 0xba97, 0x9, 0x800, 0x40, 0x3, 0x2, 0x84b7, 0x2cb38b730000, 0xfffffffffffffffe, 0xffffffffffff1f9b, 0x4, 0x2, 0x6, 0x145, 0x200, 0x46ed, 0xffffffff, 0x100000000], [0x7, 0xfff, 0x2, 0x8, 0x8000, 0x3ff, 0x3, 0x7f, 0x1ff, 0x8, 0x7fffffff, 0x9f2, 0x4, 0x2, 0x4, 0x3, 0x6, 0x3, 0x200, 0x5, 0xfffffffffffffaad, 0x2, 0xca, 0x3f, 0x5, 0x9a83, 0x100000000, 0x4, 0x1, 0x5, 0x2, 0x10003, 0x1000, 0x3ff, 0x5, 0x100000001, 0x8, 0x6, 0xffffffffffffffd0, 0x4, 0x6, 0x5, 0x9, 0x8, 0x10000, 0x3, 0x6, 0x8, 0x100000001, 0x80000001, 0xb42, 0x8, 0x9, 0x7de0, 0x3, 0xffffffffffffffe0, 0x3, 0x40, 0x8000, 0x7, 0x9, 0x7fffffff, 0x9, 0x200]}, 0x45c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000000c0)={0x7fffffff, {{0xa, 0x4e23, 0xfff, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xaa}}}, 0x88) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socket$kcm(0x29, 0x5, 0x0) write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) 14:12:12 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'eql\x00', 0x4001}) r1 = socket$kcm(0x29, 0x5, 0x0) getresgid(&(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)=0x0) setfsgid(r2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000404}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xb8, r5, 0x224, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9e35}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6d51}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x34ae}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x840}, 0x800) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000240)={{0x8, 0xff, 0xcb7, 0x4}, 'syz0\x00', 0x1}) 14:12:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x1, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x8000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={r2, r3, 0x5, 0x2}, 0x10) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000000c0)={r4, 0x10}) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000440)={r0, r2, 0x0, 0x42, &(0x7f0000000300)="3ece9997969a3f5ea0e70f36fc041602e38834718035e1de628f71f15b786c85dcdd4282e76e84517356979e89bb28a73a1bded5d6974874186a545bcb7537db1694", 0x6, 0xd9, 0xfffffffffffeffff, 0x7, 0x43e, 0x1, 0x2, 'syz1\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000001c0)={0x3, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14:12:12 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:12 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfff, 0x20000) ioctl$sock_ifreq(r1, 0x8949, &(0x7f0000000140)={'veth1_to_team\x00', @ifru_flags}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) socket$kcm(0x29, 0x5, 0x0) write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) 14:12:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200800, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000040)={0x0, {0x200, 0x4}}) r2 = socket$kcm(0x29, 0x205, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="000000020000d800000000000000f1ff0000d2f0bf02ba23ef6a77c9c835000092371c352168583844b5b957044d464e951454d896883837fbd3eec1311e0301ba22061aaa23b9bada66fde47aaf4416676d"], 0x20) 14:12:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000180)={[{0x1d81, 0x7fffffff, 0x40, 0x5, 0x2, 0x439, 0xad, 0x6, 0x9, 0x7, 0x5, 0xa7ca, 0x8}, {0x8, 0xe51, 0x2, 0x1, 0x5, 0x1, 0x8001, 0x10001, 0x3, 0xfff, 0x81, 0x336, 0x1}, {0x6, 0x3ff, 0x6, 0x6, 0x8, 0x3, 0xfffffffffffffffa, 0x5, 0x8a, 0xffff, 0xffff, 0x2, 0x8}], 0xe6}) r2 = socket(0x15, 0xa, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x1, 0x4}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000340)={r3, 0xff}, 0x8) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x10000, 0x0) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x4c, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x3, @mcast1, 0x10001}, @in={0x2, 0x4e23, @empty}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000140)={0xce0000000000000, 0x200, 0xffffffff80000001, 0x9, r6}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14:12:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000080)={0x9, 0x3, 0x5}) 14:12:13 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socket$kcm(0x29, 0x5, 0x0) write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) 14:12:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') prctl$PR_GET_THP_DISABLE(0x2a) write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) [ 2546.849825] device nr0 entered promiscuous mode 14:12:15 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x3f00, 0x0) 14:12:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) 14:12:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) shmget$private(0x0, 0x2000, 0x203, &(0x7f0000015000/0x2000)=nil) shmget$private(0x0, 0x4000, 0x78000804, &(0x7f0000002000/0x4000)=nil) r2 = shmget(0x3, 0x3000, 0x540001c0, &(0x7f0000015000/0x3000)=nil) shmat(r2, &(0x7f0000003000/0x4000)=nil, 0x5000) r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000080)={0xf51, 0x1312, 0x7, 'queue1\x00', 0x7}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x3, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x3bbb}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000007c0)={r5, 0x1000, "bac74520503c9fcb4f4442aac0afbe1da6e1e2c7f57860f1649e567f00c37353ea199a84ab3eac4b66eed4fb924154b8fcd87ef99fbe822d3547533aa08df2f5da255285456e659ba7d08d7014afba6be6c8dae1098ae5d051440d0779311f40c3f13adcf7dad17c20afb50fc59526680ba8685f777acbc2559df49190e9dc6ae2823712d134bc8dab0f6e9bad482bf6fc1afcf0ed4cbf6dc3e90ddeb6c512f225e4f2dd9f848b91cae3d43066eaf7301c5c15bd2ea6df28efeb2475b198104dadb224b0683be7786a24b62db29ac78a23f37ecce24a9f2363876467ce337eacea0da960e38371bebf7e887700c0147dca72040658067f0a05f9ecc451d3ab901f230eb55f4e1434ef654b946cdba90c093abf3b523980a25cc1d33c3b6f865ea6024455253dfbdb9bbb93a9ecda5defddc09c613a1ce3b303210c9f5d63ed367003f53d14e57646f800e98de9aa669ef8fd485b4d995e038c5de46f2de32b1dfda96657dd3637f39d155c92594a2154dea2de8fa8cd5704db5bd6e2a808dee3ee7c2390670886f8a86b9567fc377b4f1b4db217691b910bf148854af0113c51ae6bb89db20741083978852626d9b851bd53662843ac2662ecd66bac249f158c1a1e944fc1f6694afb176cc2acbb484fb1704e720b9ad99a00cffdfa004d7beb04ef1e2bb47d1f97b54c6457a49881d4cb045e3f07ed6705c2abdde2083cd075817ef957446e56f7e0dad7941d9e27412750aa613a01d46caa2a800dfa23659277e77faa09bb90afb4a8ce2c95beeaeb6e2263484d5baea97515b20933ab147aa39853d325c733153c7be2edb5cb90c6a2edb059681b204e67ea384caf5eaa21663e1d9898ec64ae48cf08a51fec00d1fedf705cd03e289c91f4955d55cd9e0b6e79268ace5419bdf2af566923fcc0dabc6c76c24eea35bc40fba535f4ef2c56746ed3f885cfb738dc7fb99af9aa7d2319884dc22898d8934c477fff5845197b43f72f5d0215294711a1e530414a082134827d0bca8db9bfe7f0a8fcab88262ad2e8831fa7c82784aa6e6aaa422c44780500e00b7773eae280c32b1b1cb78aa7b8bde2fdc3927f31e996db43cc006dedd2963b27fd239745e3054f882d2decd4f44b00139c217a3e91615732a7c2ae8986f6b462f5a9dff43618109d5f136bd4f8188347ccbf1a6d28fe8db2c94829dfeca89eabd9a5d2390e284033c0615cb0eab0a20fa87c500fb4b37ea528586bb45b257a70d2188ec16f1b0c4414a54aa6d442359699cb19c457259e8137b3bc7bcb0ada61a6b2081cdffe4fb4cd113231deb2aa8ba7c4302dbc29888fe05b8d2553bcca2092e4d34396c1eee67d25c77acc80e02af9608c76a9a9d9d949799af81d2187d72b591904a2e8848d381f2ef69e5813e5145085622a7c57a53427d741788500ec3b38d419cd30b95abc7f7df3e4bd9e9313b97c245a05e951f5d50948fa1fe526aae9f56c075442ffe3e28c870b66e6fd1e676e925c50c7fc44757d9d4543bd0cad75bb7b0d8e5b578023adb279a42168e0144095419b70b535e0e737d957578a3433c5dc1805e096ef9abdaa5de6ffe21a2f9db313e6bd5dd2e7a383009512dd117ce9fb3934c079c98eeae29cdbd0832c63c843693e47a103ff91b8c9378b83f148748fda092ed22d4c2d60141fde0028dac74498c1ec05805ed8d51e8e0c12a6c7139818f57537ed8b7cf3647155620cf7921b139e660ed27df6c65a3ddcb06922fc1e6a3e062fa6e884087244ab552c45170bb4f951a78af9faea63151b61cf4a0cc65dcfb24c94617e4cb04b7e85bcf271b09886cbb3053aa2967c317fc62ceb4dc86cd90441970f514c3f297de73bd331060ded858449eb04c10a8872b08bd7265583054c73846a9f4f86c96264d5d4fa66ea77399e83c49bb2b359b099dccbf6c1586cb78d6cc088a0f5bb541a1cb464af72f348ac965c888f41980dfd06b27481b8636eea8bbebc97ce00a8aefe8bba7a5c9167683b771771d9503ec52d0b57ff5c7adba6b46fd38ad04c7e57430cb59c8d67bcf81a562b1a09b2cbb7a6fb14d66cd8f5ac66dc0ec386c19db58ff7d7c74b979b9e90583fd819dee2277b9bb8013720e27ab41d24cb088fd3767b82e6534408c03ee2636450134ca552073561f60a04ae1eb9bd2ad89d0da0c326ff78c9efe65e93a82286d1087a6c106a8f360771876c48d8cdb56e165c5c7926b862f67145b24eba31076f6dc701a84155d7d3ee917bbea477e1a3191d6d8701103950d2daab809a5cac18d486b59e9da9edc796a3d2f51d01b8807051edc35358f051c641bdac63760882bfdae1ff0312206c04b5f32b8f23e394f628962b647445d1d17f5fb25f085b02db8c0d5624ba07c808b8e9e78ce82a9115fab81ed96ea0989acc2f11879ca6ace127d7b38a09e8cda26dfeab93d70189000895e5e743ae27bc2936c794095f0e58989fae3178f211fb0c10642c7b3bdbb3e9610e8b43de22407fc1e67a45d5ee039413c5bef012c05d73daed8a0fc4786ff14dce2dcf79fab7f6092e7d91934967a920478b399890bf651e4c1e2415ea435edc7807fcab4aa6d8953fc6cf9310abf20dc59b23d7cc35787459363e3a79b3181d2eed58618ccd403905b79e6244b8347f3dd10dd7972085273fe219a85c63520c71900e5a864d6157d830bf9734b1f01819afa0215c2bcb8254bbb4c248ac3cc21dd235182d5989393c1793e4ed1d68d821038bc9c8d71ef3e31dfe57e2cb3df1e22a1e20f14041566dac289bddebc59495ead02ff805525a9cd2103c9b683641f367efb85bc1eb1a94081c6643220d059b975cc4678a2b13c18651a12e0f01479d3aecf24fa263754bdc44ec152bf2ae8f19e3423a9c1c2676554dd0a63a82eb56d1738d9f281a6cf444b62acd2a3aa9f3ca41a6e5d2ada36f0a8b54190b045eb03f6201e3275a03aea55efd2ec925855814bffee26a89534a5ceb9b9ca07f69884881761bd5f5b657bc9b8f4dc6586b24634f4e6c907b5ff2c3e177ff5259f8a63c49d7c67d7f18cf6168eab1d7cf627601c715cc0dbaaa30a6e52ead910e693fd2119793a2dd1a3d86c3232f10aee50373aa0907bfd447ddb4f837fe0b8befda323ddb9ca3829f8e3fca162b6881db8e8c18e6b7941336746e65a80b2fd889e7eeda21f63ac3febe12db92fc7649354506885bbc10b417aab7ebb05c6bb8396a10dc2e96e7e9de72c9e1547cbb1c576b5841b5fa078c4b013406d5010fe41188fdba7cdd07cb2dad13fbfab1cd1135765fba412f0d26c6ffcc463f2bd6c01f90367869630f087437786a99adb2aab390283174fdef38bf2f29e139b1182a34119bf2e13e612b6fcd9032d99e30b34527795a42d48eb0e241678113fe3f142798f4dd4a066299a9dc84562bdea973a083e0d4da962b9bcb36f477532e0fb4486a72ac12bca4a2f971ff39f6daa09ed30462a9decc0b1737507cc03dd6482ddcd35cd436d648f8daff7c173def338ac8c1e709d4fc21cac281a7e8277a7e75f36c9de69e3319ebeb6734059959fc48f238880f364cc1bd18ba72d4243f393867077a1eb5b4464af12e3e9cd9cdc544d93cf5daa406b4dacdfc7120c420baacff828a7932f53b5ef9f729cfe4c0c7a47afb582cb381306268ffbd509762e70f059d651715031a27bbce1c33896138db5bb7edfbe0f38e22cafa891a98a8aff947ed7c1a81166064839b7315f665a3c6ba4df4de2d7e5a87a2c41a60d813201c09179b06f96beefaa527f7914e3e38e808f1d99ac31db30609b367d96f36e20723e0e6e1b802f02f4a7094f1a61d53950c5c2a718e7c45f7ec565c9bd6965a09271c86d9c5b4c1c26ef3ec0b0e042fb3524023aa40c752a7eb9de1f31790482b30050abfcf517b399a24ea9299fe4ae1ebf434b3b2aceec41b914d63b32b676588c44a1fa2d92adbfa9e7d950434ed1e3cdab2842675898e27a627759ae458b51e0c79d176478954680dc6884c2ca1963a8b9b7130c70872d3675cd1db1499508c68d67a23ed442e207adb504c0dac1c550b25c0d426b832d173b9cc8ff51a72466c941b92c7dd6d9593dcdd9653c506659f2f321589a3ab66b8a24917064ab44eb70870bc354a8835b5c01511a625569268d1dc360691b4fa716d37bd24fe58793e6a42fdd225283e811d018722e096984c125adfa83aaf5f7452cea2be4787a6a84f0cb0f0a8b4c47c88353907499f31a076c8ae5364a403d674ff094d18574b461d6db1a360fb8470f30cd1c004e9ae10dae555fbed46708f9b3ec0a9b2924b5ea1466f574ee7351bcb433d54c93b6aea6e29ebaef0612c765eba6c4d61caf198aee85b6e6e638da3be6564cd6f217606154dcd98124bd50ff5ed02caa29402d8723aa54ab3f3da076df62bd85d8b8914780dc6e5aa5ce8924fff9085461324d02adb751a70aa600f0f939a553af4ae3b46392147a1ab6906b4a0fd5000c589f018622751e89ca38f888709deaac4b0a7e4bbf1ec98b288f3055778f9b62bf4f780e7e0512e4d8216a4f799f5005a10663a4a368cf4f023c79cb6aa361c2883156793713f0dbe4bd3894833468401d59a867d8a0b774a79dfdd61495a2353b6cca770349c4e0accfb68c33e4236204825e1e08a65a969afec496342b4c828c994f292e7452b38b70580415b133ebfef75cf30c3b44e3b3d91b6a2d9985ef157f0c433ddad705f5519826cbe9c00b30b1443efb0ad1659016e97d5f5adf8a02681c5e59f48d1ad70c0a18fec4cab8d89378b24e6930ecf85276b2121933de54fd4331be6f1c1a4fb652853337da482edd6545050fea998508784a978f30a5900280cbc81aa9b0ab8308e01cd9fe63b51246249292fc4bb040060639ba32f362d862107a9361bb82d6343526524160b371ab7550d988300c03ce334edb36846c7a482cc1213fa8a8300a5320a703d81c7b3477c1d14eb7376ed1ca14e7efad3b9de0a43b2d493ad0039f4ee086fb1b5bc88a8de77c551487c393225e83d9aaf5fb367dfb3b08de8ebcdedd185224a6074dbefd13b21f58aac09d423ffa39be5673f8180206b6912b8c6c6f0a923378f92ceb9728642517435ca198cbad7f34cfa2882f59310a99bcaf57a6895fa97a7b101661be18d8f423c0bfe62389fdff7ec2a7efa7b357a44ea506ba875ebcea8d0bdfd1ecad753ee1b5a2095a09547951b9cbfafbfbe62363c0eede976e714805f1576d95494f6711aae1e91cc6f34e913c35f0794dc239ec371f78c3bf92eb94ba693e8ec5392044b7c63d3d7ab383adb61f52c707e42e410d0cf7d8927a716820ddda413b3bf649038a1a3820a35c672e0156ece05b08e03fe74267ff942ab7a9d99fc304b871ca005916de8be9aa5ac3c70882fa613d45f2031cb1be898ab169afd9d6ca8a0b1af87849707a14ace75db6f601148df405d3652086984a5707feebd0c8b98b6e2f29527104bcc76ee5b393fed0fd44c1d6f9d8d57cef0f73c71db090c5a3d7a59871459bd1d5e22613ba3934d610cc54748bd4d5975775ecf6cbc5a41aeca71b8d6a1f24540d3dc269995f1dbcc3a36a8079dc7de31a14853aa5e8c6f5dd51863a4d3e4e2976f873b0225fb152226416631bc3e0add77fdbd219ee8459aa3aba8c52e93181f79de7e8d7ec179d9adf88d6a74cf96517b2e251130b2462b1916926c957947719480a83f8eca5e4fafbe78941f396f42694586ebd42a3f9e92c1b58f636210c9af2f70319ba443324b03b47fe457f691fecad1c064927d21b3a6d31042551e7f83"}, &(0x7f0000000180)=0x1008) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4400}) r1 = socket$kcm(0x29, 0x5, 0x0) writev(r1, &(0x7f00000018c0)=[{&(0x7f0000000340)="b0f77251a1dbbf56c139881df27945140c5be6c60469075b9c18ae023289a6c7e6ebdfeb2abdf52835bfe00b69967ed94b5d57b9fb2c7a1ee1701731649baaf493a77fb9d213a9abc2c1b0ae407da4f4d96208c7ed061f08a3f3bb0a37d5bdadc8604a963be53879bbf4ba17a2de68007367d1a50e92d5b5e3ca85cb6605e466b571b177480d0b088872d25ec6870d25105650ce6193b1d4a70f0d70d10289ea406ad24a64dffb27fe3636f21d005a8d561f70f7ffe4d0e725eeda246198527b68eb2d7d0d9af4b360dc92749e2a50a010", 0xd1}, {&(0x7f00000006c0)="803a66b7c05796f7ae860d41b51ab6bbe67ae00b4938d1f457cde8ce6ab635019fa3ebf95cf1ddb15cdd2cc4e97a9b39aa165d304e3f42bccf4ab7580c204a56775cf6bb78f3fc708bac5efc84096ba7f14b457cc786f1d7fdb5600287778b9639d9286d24069dbb5daee8070c675ada0ad70b91d3d9fda81df10b7af806d1c6455be33e5ea1ffe9d54f1a683973e8b961a56175a4b037844d7579b5a31719281e6b69fa372a1f7e125cc74b085d670b4474285b4837a3c109a52ff884e803d686788f92c299058d1e7c096654334b5cc21279458ec4681968fa0714deaeed6b3fdf51e74c88", 0xe6}, {&(0x7f0000000000)="4543c50ba353f32d653d820f3513e53d95a2c45fc9ff8f891709e88501020bc61ed09d2a6a1058529dc0842131879bee62aa42", 0x33}, {&(0x7f0000000040)="5e7159bfbe3ded0f83b9d0ce2ea8cf7de1d6b2da18a2634e744ab63ffe4643ce7b52f6785447", 0x26}, {&(0x7f0000000440)="a60279aaa4a2ba9f8e76e4f68d2b46abca1da02134bca9f6cbff8eedca1298d36d65df66fd49bb72d326f8b614cfe3f61960a2650f5d93510554f7537dd4aa131484c2bc726b5773a105b2a577e7bef2631a6326c31f", 0x56}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="72e87b1d7f5527782ad0e80dc087cadb3fcd798bab3ffed6c8e32f93d168a9950455037ed1d081cf18bb685aae8a79bf2542e85aadc77f33e39082a2e60ec8f003d1453a217d593748070d12382e8e74aa325d77190fc0349ef75fd8cc7aa05dd5f3d36b759925f587bb01250ab0bf3878029aa0270d2463012e818bf6ef3d43c91c7a9e16b63463be86af937229f6694849b7851e906cff13c25f91cbb3b2a938b6d12ac29b2dca5430acf3843bc37450422eb4ca742c098ceaf6d4165529e1a6abf4a2b78f8cc2c57432e6186437401a98f20008b20341a0001dd02c5c11b94eaa1e77e2", 0xe5}, {&(0x7f00000000c0)="283a98e837a14045aac8e082cf29e394d94bf92e149e542fce35a7d92590f15d1039b96c4ba6761984606880", 0x2c}], 0x8) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x10000, 0x4) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @broadcast}}, 0x1e) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000046efbcfd069082a945eb52673fb03a0200000000000000000000000000000000000000000000000000000000bae4b670fd0fc12a47db746bead928fb83d75bbf919fb74eaf6a78fcd1deda51445188331cfd8251dcde17b5f88d90eb8c6fcf03722a468c89d094b3de3e39270f9cc3449985b09ab75a569b0c43c8423ea3f7f64eb9de883084c1bd6e2bc4fbb9e9e208ea003a9e6596859253d93c3d3e2a131e3391250e308187ba1193bac0b682592f23f50cf4b0e593ba1c590bf728058af36d8399f57b72ec2489b1b14128436a7d4d3483366559b12810240b19340971e36113620b096ef4d2a125795180a54c8a5afaa06c1d850300703004f7b3233431a4d6"], 0x20) eventfd2(0xe000000000000000, 0x80001) 14:12:15 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x715}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 2549.433467] device nr0 entered promiscuous mode [ 2549.450630] net_ratelimit: 25 callbacks suppressed [ 2549.450638] protocol 88fb is buggy, dev hsr_slave_0 [ 2549.450665] protocol 88fb is buggy, dev hsr_slave_1 [ 2549.455612] protocol 88fb is buggy, dev hsr_slave_1 [ 2549.455681] protocol 88fb is buggy, dev hsr_slave_0 [ 2549.475758] protocol 88fb is buggy, dev hsr_slave_1 14:12:15 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r1}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000040)={@rand_addr, 0x0}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@mcast1, 0x2, r3}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) 14:12:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x20000) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000000080)=""/42) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000100)=0x3) write$FUSE_NOTIFY_STORE(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="5bcce416c68771300a8083120758a2a80000000025270040df000000000000018000000000c4b8d4ddc81ccec1603b00"], 0x30) [ 2549.631743] device nr0 entered promiscuous mode 14:12:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) 14:12:16 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x204002) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f00000000c0)={0x5, 0x3f}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='.posix_acl_accessvmnet0$\x00') ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0xf7fffffffffffffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = open(&(0x7f0000000000)='./file0\x00', 0x480400, 0xc4) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000140)={0x6, 0x8001, 0x7, {0x7, @sdr={0x777e7f5f, 0x20}}}) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0xffffffffffffffc0, 0x12c00, r3}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x2000000000000000, 0x0, @pic={0x6e6, 0x1, 0x40, 0x4c, 0xffffffff, 0x5, 0x1e97, 0x5, 0x8001, 0x7, 0x6861, 0x3, 0x9, 0x489, 0x0, 0x81}}) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000240)={0x81, 0x0, [0x1f, 0x3e7, 0x2, 0x3f]}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2550.090646] protocol 88fb is buggy, dev hsr_slave_0 [ 2550.095785] protocol 88fb is buggy, dev hsr_slave_1 [ 2550.100929] protocol 88fb is buggy, dev hsr_slave_0 [ 2550.105993] protocol 88fb is buggy, dev hsr_slave_1 [ 2550.111140] protocol 88fb is buggy, dev hsr_slave_0 [ 2550.177329] device nr0 entered promiscuous mode 14:12:18 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x60ff, 0x0) 14:12:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x4, 0x0, 0x2, 0x0, 0x0, 0x7}}, 0xf7) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x8800) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000140)={0xb, 'syz0\x00', 'syz0\x00', 'syz0\x00', 0x4b, 0x9, 0xffff, 0x992c, 0x0, 0x4, "7ad9eb322ad69da6bfcadbb38063709d06ed5188236993655d2858173265a7ef75349d9b7a108b2937b992f4741d13c818b0f21da33957e89cb668b52fea00c78fe10c9cefd45f61768d85"}, 0x163) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f00000000c0)={0x2, 0x8000, 0x1}) 14:12:18 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:18 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000cd010000a80300000000000000000000000000000000000000000000734958bd7e90e9073ca2702944f7c79ca3a03a23642ddeb474807baba6acfefe4468036327da7c05070e4f64872191"], 0x20) 14:12:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000080)={0x2, 0x0, @pic={0x0, 0xfffffffffffffffd}}) dup(r1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x40042, 0x0) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000000)={0x7, 0x70d, 0x3dd91080, 0x1, 0x9}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 14:12:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2552.514656] device nr0 entered promiscuous mode [ 2552.551975] device nr0 entered promiscuous mode 14:12:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = msgget(0x1, 0x400) msgctl$IPC_STAT(r2, 0x2, &(0x7f00000000c0)=""/226) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="799fad465a329bb37e9cef74cd21187d", 0x8, 0x1, 0x0, 0x2, 0x3, 0x101}, &(0x7f0000000080)=0x20) 14:12:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) timer_create(0x7, &(0x7f0000000000)={0x0, 0x11, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_gettime(r3, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:19 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x1000000, 0x0) 14:12:19 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x3f000000, 0x0) 14:12:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000bc0)={"a91e0228b7b01a7adda6aefe6a9de5a5f6b560dc0ae969f11c7d32dfac842bfd014c57f2a65ac4190c63c8da184e3ada8e3fd87a80f76a8ffbb626aebfd1b40a598c1854e503319f15082bf88d6aa4a191290b709118c93482dcd1d6beb72a45da5c205752cac04937b3d1139bb0301b414b1e281fd68dae7b70ada5451e6d5be2ffb380300aeb94ec163c75934f1c8235cf0ca76162d97c35ddd41b0427856b899f09a942331acc6a84d2f763be6d1d365a228476ec1eb128e300771ff5dcc96f4a659d1fa251346e0444037fbdd6dc4a861a5907187ee51fa63c8be5d68bd2db4df70bfb9fbebe2fab31500aeb5f17298ed9a0f1d26aa66a195a706428869bed479b93c7d00f001184e72674ec2a197292f604caca05d7dc4cebfd035cd0a923f4c3ad7b8c2cb0a1c0dc52f7d08a8d0e920795182778b12c08a4c26ba521fa75e69ab717a3dc3ce238f157feddc27f32671f11bcf5da0f13d30428b17ab39be5b369e0359cc98e7bfff6539c0dbe730187433b737f759584ae7bc7514cb1d87170a16d5999a19f97723db4204ff525cf7174376e2471cabe133dbfde59f9ed738fa9e19b690bcb3b2dd9cc5a548b77594d3206f37e08bc992ce5a8e5876936d9d90c1c8168a7f7c9ffaccd4555de5ba1a4ab547b2ce91ba247cdb16373939ad3a58db1a9a4bc1d6a309b186ccdd8b5e93ccc4ef5a8a842d8be25f45066df003764f064be8ab4d7b6e3b808b7bf5b214e6ce48a0895f2277ef8f0156745aa67d5677283c00bec717cb5b02a2547ac42fcf4ab95fb93191ac840af11580cb0ab0117270ef266d909640fdd24f388c01e3bf99dd72b760168ecfa6b97a525c46c9e3490d7c1d670b7b6c1d26ec59720aa51468f73c99e8ee50caddea3d8c80abfc05879ea96379882f94d8994158b273f1749ea2165c4299c56bd20fc86d45a4fb1e7c65a3a9fc387d3e90bcb2982fb8b177e003bfa659d8da80c049784849965d379a485d1b3c8406f6a40805816a2aa81f8022bf30e17226776a4f2ecb2b1c05a5425dc5e67c1d632dfbd60017ff5c96ae04cee148321f1fa3e4b9f40f2386255f2e50f820f7512c6aab688b3bd84155b5ae96651dd3cddbbb65ad7fd9388ca6cb409032d59c9602bc2fc6fd23e22f5eeefc0799b3ff00b18b8419601b11a878ff300a634ba5148c6fa91bafdb724da3adbb719e15c0c4323bf80424d7a24ad65d78c65a83b7613ecd420df84cf3f37ff94395aa1c6ad4c03a1bfd6ca9640449e15f40b00f54f2fa6e8ffd67462561952c7ee92110ee9c58a9d10f53a37859d26b10001c442000bd447141fda49538cb6d1f9824f14afd75bd711bd46dd1ee03e805f35d8c4f3198d9e60a1a443f89bed17b4170446494deeeb3291cd0aee141b23655cc494adae94a52bc441e1d78032cf8b9300d0317fea6f9e9bbafb6c68"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8), 0x71, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000002000104000000000065070000000000000000000000000000000000006a8ec87e7150b8bf82bda2b6c18ce41c5cfc4b31874ce7733ffc65ab6c736d971b41aa77be1c6391da0d12dcc772f63f72e2dac497ffae1154a5b96e616c1a695c5c73019061127d3a77bda4b121f3403d0fcc3433750e11f77d7f5d3a8c49e8fb360e06bbfe4ceb9edb41146bbb589da01b3be87031948e144521ed7bb1209f2f304725df7f0ad5fa65465120a9ac223f9dff45d7fa53ac69165fe5758ff7e59993d5acf225464e18714742f75fdf6c0989926807d47c61d492c2a22739091e58ddd45d1f76cc104659fb8a66c9b6e99ab4b5ce2e56045bbf98768cd81ceb8f680a97b5353f97f5b1209199a3"], 0x20) 14:12:19 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1507}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)={{0x1cf, 0xffffffffffffff70, 0x40, 0x10c, 0x1dd, 0x0, 0x2e6, 0x40}, "5a2a498a8235dea21de2d880b18ba1465a7d4262d409b64f2c7e500bec6e850ef66aa6a549d06a49c727233b3142c2f17c24d4fcf49bc45b914a08019274df03e5bc76848df946aca4548c7ed8353826fc13cedad872d16e60b3a2a3d756c86d0ac74d1913f2691821ac0356ccf85101fcb6f97f59dd0e63cc6a293034f2271b5a369b9a942b447bace5a767b0024fbf718ec3dc822ac9cfee46a15bea9a53d655fc159fc03c27b3994138112ac86a83a04c6b344bbc630d25e7fff370e5f070e8982aa7472ecc99abef8be7dbf8b542433ba197dbaa033bf0dacfbadef43d3bbf67cca455b6b3b24249f797e2070b"}, 0x10f) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) 14:12:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000100)={0x2, 0x100000001, 0x6, 0x31a, 0x3, [{0x5, 0x7, 0x1, 0x0, 0x0, 0x400}, {0x3f, 0x2, 0x7, 0x0, 0x0, 0x3}, {0x10001, 0xffffffff, 0x4}]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) shmget(0x1, 0x2000, 0x82, &(0x7f000000f000/0x2000)=nil) r3 = fcntl$dupfd(r2, 0x406, r1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000080)={0x0, 0x8, 0x3ff, 0x2, 0x5, 0x7ff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0xfffffffffffffffe], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2553.476461] device nr0 entered promiscuous mode [ 2553.520509] device nr0 entered promiscuous mode 14:12:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000040)) [ 2553.707102] device nr0 entered promiscuous mode 14:12:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000240)) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x40) sendto$inet6(r3, &(0x7f0000000140)="7982b3c5cb89730828234d90eec5fb8eb7084cbbc6472425045febb339569a50e2434ace9738ff683039efe0aaef61d6120010f70f07ff4832e793b73c052e3b0d55aa107ea2a8ba9922293167eed996c2261f648a84d6b586faa14982070ccf075903116e96ab25851bd9f31e239650e9c642b69bbfc85580e2f9135a386353e0aa6dba7fa39270b85e07090d21fa054c80d57cfbed28e75a617c79dae29cb3dc7bb482a63d96c404468f2781410f3a95cac310d423291f54c06b1211d5a3ba27ac11fbb6a0c6e299bc4d57fd2694afe0a8459b522a5fcf190a27f4381e71d817ea0114704c41895799cfc1d53b9d", 0xef, 0x40004, 0x0, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000080)=0x200) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe60, 0xfffffffffffffffd, 0x0, 0xffffeffffffffffd, 0x0, 0x100000000], 0x104000, 0x680}) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f00000007c0)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 14:12:20 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0xff600000, 0x0) 14:12:20 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x100000000b, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000040)={0x0, 0x3, 0x3013}) write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="00000000cd010000a803ea0000000000000000f2dce94c65924e510000000000"], 0x20) 14:12:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)={0x2, 0x0, @pic={0x5, 0x122c, 0x9, 0x1000, 0x1, 0x5, 0xfffffffffffff001, 0x2, 0x6, 0x1, 0x98e1, 0xfffffffffffffffd, 0x7, 0xffffffff00000001, 0x8, 0x3f}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:20 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x60ffffffffff, 0x0) 14:12:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socket$kcm(0x29, 0x5, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect$packet(r1, &(0x7f0000000180)={0x11, 0x5, r2, 0x1, 0x7fff, 0x6, @remote}, 0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x0, 0xf984, 0x30, 0x742c, 0x1}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r3, 0xff}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000010000000000000000000000000e1ff0000004e2d295e37a4132b00d7b7370f04dbc1fc9fb6c4fd7a5b8d2de635e786ef4a7d39d41d8cb2c37447b66dd7b680e0b5b93464f757bba4b7177108a203cef5bd52e69284d10cdcb51a6db46c07aaa5c3ed1dbd894d0555c3620a5a49925751aeba69bf163ceb65ed376e630f56b336f54ca50e09"], 0x20) 14:12:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000080)=0x6) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x154, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x970}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5e80}]}, @TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4a4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc47}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x98}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x154}, 0x1, 0x0, 0x0, 0xc804}, 0x20000801) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0x8, "118f29e4817141b377711b83e648f312e7cba843d7a19be51b6f05a238a0d393", 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xa0002, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000040)=0xe8) lstat(&(0x7f0000000080)='\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@empty, @in6=@dev={0xfe, 0x80, [], 0x24}, 0x4e22, 0x7, 0x4e21, 0x6, 0x2, 0xa0, 0x80, 0x1, r2, r3}, {0x4, 0x1ff, 0x80000000, 0x7, 0x9, 0x6, 0x65, 0x1}, {0x9, 0x0, 0x2, 0xffffffff}, 0x465, 0x6e6bbe, 0x2, 0x0, 0x2, 0x2}, {{@in=@multicast1, 0x4d5}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3500, 0x1, 0x0, 0x7, 0x3, 0x10001, 0x3f}}, 0xe8) r4 = socket$kcm(0x29, 0x5, 0x0) getdents(r1, &(0x7f00000006c0)=""/146, 0x92) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000cffffcd010000a80300000000000000000000000000000000000000000012a300"], 0x20) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000440)={r5, 0x401, 0x5}, 0x8) 14:12:21 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:21 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x100000000000000, 0x0) [ 2554.787041] device nr0 entered promiscuous mode 14:12:21 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x3f00000000000000, 0x0) 14:12:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1cc02) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) 14:12:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) unshare(0x2010000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000200)='batadv0\x00', 0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) rt_sigsuspend(&(0x7f00000001c0), 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x210000, 0x10) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x141300, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f00000000c0)={0xf, 0x3, 0x0, 0x80000, r5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000180)=0x2) 14:12:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x40000, 0x0) shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffa000/0x4000)=nil) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x200, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000300)=""/71, &(0x7f0000000440)=0x47) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @ioapic={0xf000, 0x4, 0xffffffffffffffff, 0x6, 0x0, [{0xce, 0x800, 0x3, [], 0x5}, {0x0, 0xfffffffffffffe00, 0x0, [], 0x7ff}, {0x3, 0x5, 0x4, [], 0xff}, {0x1, 0x401, 0xc557, [], 0x6}, {0x3ff, 0x3, 0x80000000, [], 0x7fff}, {0x2, 0x3, 0x0, [], 0x200}, {0x1f, 0x10, 0x10001}, {0x3, 0xffffffff, 0x6, [], 0x6}, {0x8, 0xffffffffffffffff, 0x3ff800000000, [], 0x20}, {0x100000001, 0x8, 0x401, [], 0x4}, {0xd86, 0x80000001, 0x9, [], 0x8}, {0x4, 0x33f, 0x0, [], 0x7}, {0x1000, 0x2, 0x0, [], 0x96c8}, {0x8d, 0xffff, 0x3, [], 0xfffffffffffffffb}, {0x5, 0x9a2f, 0x8, [], 0xffff}, {0x5, 0x3ff, 0x208a, [], 0x8}, {0x2, 0x80000001, 0x7, [], 0x8}, {0x2, 0x5, 0x5, [], 0x139}, {0xdde, 0x5, 0x200}, {0x8, 0x7fffffff, 0x69, [], 0xbc2}, {0x3, 0x9, 0x4, [], 0x1f}, {0x3, 0x6, 0x3d4, [], 0x7b4ae6da}, {0x5, 0x7f, 0x8, [], 0x5}, {0xff, 0x9e1d, 0xfff, [], 0x3f}]}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0) getsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000140)={0x1, 0xff, 0xff, 0x5, [], [], [], 0x6, 0xffffffffffff0000, 0x401, 0x1, "0f43394db6cc2e8b279079578c47af0d"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f00000000c0)={0x3, 0x3, 0x1f, 0xfffffffffffffffa, 'syz0\x00', 0x3f}) 14:12:21 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) socket$pptp(0x18, 0x1, 0x2) [ 2555.055944] device nr0 entered promiscuous mode 14:12:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x2000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:21 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 2555.467093] device nr0 entered promiscuous mode 14:12:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) shmget(0x3, 0x5000, 0x0, &(0x7f000000f000/0x5000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:22 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x200, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, r3, 0x204, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) [ 2555.656123] device nr0 entered promiscuous mode 14:12:22 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400000, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x7) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x4000)=nil) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x700, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c014}, 0x4000000) write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[], 0x0) [ 2555.690633] net_ratelimit: 25 callbacks suppressed [ 2555.690641] protocol 88fb is buggy, dev hsr_slave_0 [ 2555.691055] protocol 88fb is buggy, dev hsr_slave_0 [ 2555.695724] protocol 88fb is buggy, dev hsr_slave_1 [ 2555.701053] protocol 88fb is buggy, dev hsr_slave_1 [ 2555.705745] protocol 88fb is buggy, dev hsr_slave_0 [ 2555.720802] protocol 88fb is buggy, dev hsr_slave_1 14:12:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5002) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0xed, 0xf8, 0x80000000, 0x3, 0xfa, 0xfffffffffffffff9, 0x7, 0xfffffffffffffffe, 0xbb4, 0x1, 0x7f, 0x9, 0x7, 0x0, 0x8f, 0x4}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x7ffffffb, 0x0, 0x4, 0xfffffffffffffffd], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x208000, 0x0) write$P9_RSYMLINK(r2, &(0x7f0000000080)={0x14, 0x11, 0x1, {0x8f, 0x1, 0x6}}, 0x14) unshare(0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2556.136457] device nr0 entered promiscuous mode [ 2556.330670] protocol 88fb is buggy, dev hsr_slave_0 [ 2556.335774] protocol 88fb is buggy, dev hsr_slave_1 [ 2556.340888] protocol 88fb is buggy, dev hsr_slave_0 [ 2556.345931] protocol 88fb is buggy, dev hsr_slave_1 14:12:24 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x8000000000000000, 0x0) 14:12:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x85e64a95e640fff1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @local, 0xba9a}, 0x1c) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x10001, 0x0, 0x0, 0x0, 0x0, 0xbb], 0x0, 0x8000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:24 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) 14:12:24 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socket$kcm(0x29, 0x5, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000240)='\x00') write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000cd0000a80300000000000000000000000000000000000000000000f8faf7093296b0786cb2d8480211b62ddefa120508c961af84e9392c0be4070bccbab0e59932d55092bad032f8671398c2b7a009baa70c26d55e8912660fb5b7d0014515a498c0e772299a38ad51541aad05bf2ee4468960f4c38eb10b54fb0a58c8e7fed84d471cfdbc20245e69636f8ae3efccb40c72095ed938b50997530d518d687f95f126a26f14e5e373d4b5fe78bc239eb9c1cb6d60a2fd0ac4088a894c"], 0x20) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x101) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000340)="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") r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x8, 0x202) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'veth1_to_bridge\x00', 0x10}) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000140)=""/116) 14:12:24 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EDID(r2, 0xc0285629, &(0x7f00000000c0)={0x0, 0x8, 0x7, [], &(0x7f0000000080)=0x3}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0xe) [ 2558.021214] device nr0 entered promiscuous mode 14:12:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffa, 0x101041) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@remote, @in6=@initdev}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) write$evdev(r2, &(0x7f0000000080)=[{{}, 0x15, 0x3, 0x100000000}, {{0x0, 0x2710}, 0x1, 0x0, 0x8a}, {{0x77359400}, 0x17, 0x80000000, 0x92}, {{0x77359400}, 0x16, 0x4, 0xf05a}], 0x60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x400000000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:24 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0xffffffff00000000, 0x0) 14:12:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) process_vm_readv(r3, &(0x7f0000000280)=[{&(0x7f0000000080)=""/16, 0x10}, {&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f0000000180)=""/124, 0x7c}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/15, 0xf}], 0x5, &(0x7f0000000340)=[{&(0x7f0000000440)=""/248, 0xf8}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f0000000540)=""/153, 0x99}, {&(0x7f0000000600)=""/86, 0x56}], 0x4, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0000000200000006000000000000000000000000000000000000000000000000"], 0x20) 14:12:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x2, 0x10001, 0x6f0, 0x6, 0x3ff, 0x9d, 0x7, 0x0, 0x5, 0x6, 0x1, 0x401, 0x0, 0x5, 0x9, 0x366d}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:25 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x9, 0x1}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x7, 0x6, 0x80000001}, 0x10) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) 14:12:25 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0xffffffffff600000, 0x0) [ 2558.937373] device nr0 entered promiscuous mode 14:12:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x8, 0xfff, 0x7, 0x1, 0x52f, 0xd5, 0x800, 0xffffffff, 0x100, 0x8001, 0x400, 0x80000000, 0x1, 0x99, 0xd16a, 0x200], 0x5000, 0x40}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x90, 0x400) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000140)="a88b42fa8b6b1589aa85004b5610ae6abac093835f89467e4332bc2dee69e328603e9faa884b39ce06b9e794d9f3e915ddbdd220ac3aaf564083db1bca8f1572597399b6b5be5582f533d94135d386ed663107e0e828a850aa965597f8b8a41eb55648926c42a29ad31720f6b64ea661e0313a12e5aa62c2590a822f5771384c04a11d19fbc2b6606c82f8ccbda8657cc9d29b2f36a715d50df1e40578b17693b466bd4a7b6772930f43bfa747d663cc4fde36008c22ec4af862f024c2fd6b622b23e6fbfa0db152cbc845") 14:12:25 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40, 0x0) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000040)) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000200)={0x5, 0x8ec, &(0x7f0000000140)="6da335c5a187c68e5bcf0ff167b9fbfe57aa79c13ea598e26b93d3ccd5f066d7aeb22776f9d87f7619d6621eb8c73257398883329a322719b8dbfb55a918876f6484447b726a38991dd592e79aa476ce7c3c90ce8431e993c8c6db35d21c448a4a", &(0x7f00000001c0)="b9ef91ec799ed5722dc05e0c655b43d25cba2b", 0x61, 0x13}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000002000000000000000000000000000000000000000000000000000000001623273356bda090d9eed0d39b6e647298684d662a7526e8b0bdb530ad94e9216b13bdf36a19acdcdbad348eac67f3a0dcf2c4c866ce6e138f4952390f4c5a43daca3a8549c95f84114c75"], 0x20) 14:12:25 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x101400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) [ 2559.128956] device nr0 entered promiscuous mode 14:12:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = msgget(0x2, 0xa6) msgctl$IPC_RMID(r3, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) r5 = getpgid(0x0) mq_notify(r4, &(0x7f0000000080)={0x0, 0xe, 0x0, @tid=r5}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = add_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="6c55f86a17eee50a2576bdd92320def9423b064c74aacdb982f44e8045b69d7240bd9061a5349e14429e23c224375f75d8945daf0b66de3cee3dd7ec3266e73dde8c697c020cb97e890af94a79827389093e86e91942bad1faadc8e111e547b20aac65f0642ae015bb1888363e79cafb43ebd51e3d2967f89a0079cee38a8cef0198483f75fff3d43fdcbd9aaefd4f3f8f2d8a7b786610d180651e671dabf1661e135891e3a9115a73e954ec6c2d64bc435f9b881792f02f2efbc0d285", 0xbd, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f0000000200)='}*selinux}system)/trustedGPLproc\x00', &(0x7f0000000240)) 14:12:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80000, 0x0) write$ppp(r3, &(0x7f00000007c0)="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", 0x1000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) sysfs$3(0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = getpgid(0x0) ptrace$cont(0xffffffffffffffff, r4, 0x40490306, 0x6) [ 2559.644398] device nr0 entered promiscuous mode 14:12:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@local, @in=@multicast1}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x80000000) write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace$getenv(0x4201, r2, 0x9, &(0x7f0000000080)) 14:12:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socket$kcm(0x29, 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000cd010000d640c2d997a80308000000000000000000000000000000000000000000"], 0x20) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) [ 2559.890655] device nr0 entered promiscuous mode 14:12:26 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = dup(r0) timer_create(0x7, &(0x7f0000000100)={0x0, 0x24}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f00000001c0)={{}, {r4, r5+30000000}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x3, 0x3, 0x5, 0x3, 0x3f}}) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000000c0)) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = getpid() ptrace(0xffffffffffffffff, r7) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 14:12:28 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x3f00) 14:12:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000007c0)={0x1, 0x0, 0x2080, {0x3000, 0x4000, 0x1}, [], "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", "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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0xfffffffffffffffe, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000ce04cd010000a8030000000000000800000000000000f9e30580dce3bcecff8ec032b7b6b715fcee339f4ba083c2e0cb5d13ef04905196b602007ece84bc3a7a42661490cb5f64820ac4f267100fd3e3e7c77f40eb413104266d415ada08ee6681f607d45a7fd7f0c5c52167ca4b8cdc0f95b3897008000000b604d3010b3f31382ee949cc5f3f9b538fdf9d2bd14a69810f0d6fb3be64fedb485a37b67721b90ed8db0e641394809323626e548e4d79c4e2103ee9497ffe762f2837226de46c93f888ee31e65892b64dc106e807eaa52d02139a286339b4becfc9a7d862479474e50254"], 0x20) pipe(&(0x7f0000000000)) 14:12:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x102, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') fcntl$addseals(r0, 0x409, 0x6) write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) 14:12:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000080)=@v1={0x2, "f9f806b9d7b4ee9981f1"}, 0xb, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:28 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 2561.930647] net_ratelimit: 26 callbacks suppressed [ 2561.930656] protocol 88fb is buggy, dev hsr_slave_0 [ 2561.930662] protocol 88fb is buggy, dev hsr_slave_0 [ 2561.930737] protocol 88fb is buggy, dev hsr_slave_1 [ 2561.935689] protocol 88fb is buggy, dev hsr_slave_1 [ 2561.955742] protocol 88fb is buggy, dev hsr_slave_0 [ 2561.960818] protocol 88fb is buggy, dev hsr_slave_1 14:12:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) ioctl$TIOCEXCL(r1, 0x540c) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=0x0], 0xffffffffffffffcd) 14:12:28 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x1) setsockopt$inet_udp_int(r1, 0x11, 0x6f, &(0x7f0000000040)=0x200000000, 0x4) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) 14:12:28 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x60ff) [ 2562.158469] Unknown ioctl 21516 [ 2562.175878] device nr0 entered promiscuous mode [ 2562.217175] Unknown ioctl 21516 [ 2562.234195] QAT: Invalid ioctl [ 2562.260362] device nr0 entered promiscuous mode [ 2562.277158] QAT: Invalid ioctl 14:12:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = dup(r0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3f, 0x18, 0x0, 0x3, 0x1a, 0x4, "aadf60b4a1513415c745f9a06e2538a008181b0457657d5c4d1d83c37983f6189c3706046ace9a214b454975c1a673f2b12ea37ecd98410e9083d61ac142af5f", "23f2db3acbcc1ca589faa30eb10786a169b2a1b5b32a0be47e61efb7decad1905ba2e62d3bf4f97b7a6d2e546f377cd4f518a26d0a563d166d8358bb1791cc45", "86b9dea36448ed28028429ad71c13143dbd9e87e19c378ac6abe13b60a0c4424", [0x9, 0x5]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) alarm(0x40) finit_module(r2, &(0x7f0000000000)='/dev/kvm\x00', 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:28 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000180)=r1) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000cd010000a80300000000000000000000000000000000000000000000f8fd2b3f7444a07516162fa28538a476baf6b7e729815d01dd70507f5ea36b72c8068675ef7c78f9b78a9f8227710c486daa99fd0d3069eb2d68478391dc71c729699c232746fe73397d12ce5e1c12fb391753"], 0x20) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x1a067484be24b484) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000000c0)="83c0715d8dccdc7fa336830c78d105ad7abd9cd72cb422fbf33507389ae5") 14:12:28 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x1000000) 14:12:29 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x3f000000) [ 2562.570651] protocol 88fb is buggy, dev hsr_slave_0 [ 2562.575780] protocol 88fb is buggy, dev hsr_slave_1 [ 2562.580942] protocol 88fb is buggy, dev hsr_slave_0 [ 2562.586013] protocol 88fb is buggy, dev hsr_slave_1 14:12:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x4, 0x42323151, 0x3, @stepwise={0x5, 0x0, 0x2, 0x6, 0x9, 0x6}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:29 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0xff600000) 14:12:29 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:29 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x60ffffffffff) 14:12:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x3000, 0x850, &(0x7f0000003000/0x3000)=nil) shmat(r2, &(0x7f0000005000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000340)="3087490f53fd23f16744eb7faed25b9e73f441a9ae3a60d1dcb89524744e8fb09e7389b771a64cda19b8431cee2cb5327b64dc36ee97394122d94257108464e503d9fdde72ca684451f19cf91d6ee85a3eed5fbde3b1466fd1b533df1ee7340e3f28ab4d78471b6700991c6d36fb1184e2513e2f3e60f4e9d0ce077e5be1d2d7aa7301cea29004a5caf888daf5d0a135660e7b2604ffc87b4a81e107f84136bfa4efe5ba7908e081bb158b8447f5c80e202cc879e7b9e73c9e7dca96570f45d711d20d32d8818b61245a99b645a0db4eb6e1c881bf56bec4", 0xd8, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x20) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x8, 0x208041) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000440)={{0x0, 0x1, 0x0, 0x1, 0x81}, 0x4, 0x100000001}) 14:12:29 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x100000000000000) 14:12:29 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000240)={0xffffffffffffff9c}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc0\x00', 0x80, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000002c0)={r1, r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r3, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) [ 2563.104754] device nr0 entered promiscuous mode [ 2563.119472] device nr0 entered promiscuous mode 14:12:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x9c2, 0x123902) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x4, 0xffffffffffff0001, 0xffffffffffff4a6d}, {0xbae, 0xffffffffffffffa1, 0x7, 0x1ff}, {0x5, 0x4, 0xffffffff, 0x9}, {0x3, 0xffffffffffffffff, 0x100000000, 0x2}, {0x6, 0x0, 0x8, 0xfff}, {0x2, 0x8, 0x8000, 0x900000000}]}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) fchown(r0, r4, r5) 14:12:29 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x3f00000000000000) 14:12:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x100, 0x0) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap$binder(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xc, 0x10, r3, 0x1) 14:12:30 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x8000000000000000) 14:12:30 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0x2, 0x4000, 0x400, &(0x7f0000ff9000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x114, r4, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xe8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @local, 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x71}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd3}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x13}]}]}, 0x114}}, 0x4000) 14:12:30 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) 14:12:30 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x0, 0x1cd, 0x3a8}}, 0x20) r2 = add_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="0689a7e18e07084269692107c7bb0c6924801e5c91b063cad9b323e18f6455fe6f018ce41e5a1836d2696f87bfa6e940fe9fb6d8818e186027cbfd6aa863597f52348ef17cfc4766de5a78b3a6ab41688cc461daeeb32415c64b3b6ca7a6afb3745c438c005d116da55ab3035395bffb216acd1dfa661db6ba4f2c7934cbff64d790df5fc9ffc1", 0x87, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r2) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 14:12:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x204000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f0137c4c15d5493e9dc0000f20f011b66b855000f00d0660f72f30026335d950f01dfc4e1d164b5450000000fc7a9891f6400c4c1545cdb", 0x38}], 0x1, 0x37, &(0x7f0000000100)=[@cr4={0x1, 0x2000}, @cstype3], 0x2) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:30 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0xffffffff00000000) [ 2563.823971] device nr0 entered promiscuous mode [ 2563.883492] device nr0 entered promiscuous mode 14:12:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x101801) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x7, 0x401}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000100)={r3, 0x0, 0x30, 0xf8b, 0x10001}, &(0x7f0000000140)=0x18) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:30 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0xffffffffff600000) 14:12:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="ba2100ed0f070ffdc3b8dd0f8ec00fc79ff2a60f0056f60f4ff6d9f9baa100b000ee3e0f01cb", 0x26}], 0x1, 0x20, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:30 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:30 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4100, 0x0) write$apparmor_exec(r2, &(0x7f0000000080)={'stack ', '/dev/kvm\x00'}, 0xf) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f00000000c0)={0x100000000, 0x3, 0x5, 0x3}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000180)={0x3, r2, 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0)={0xa13}, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:31 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x18000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 14:12:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8), 0x71, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x20) 14:12:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/ip_mr_vif\x00') r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0000e30100bff62368f1f1c5de0000000000000000000000000000000000003b"], 0x20) 14:12:31 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) getpid() ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bpq0\x00', 0x200}) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0afdef00002afe2c409a5a60738ef4d0201e00efd90000") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:31 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3de6aebe8e1f71455408fa211ed508104f282695bd169a3095000000000000000002000000000000000000000000000000"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = accept(r2, &(0x7f0000000140)=@x25, &(0x7f00000001c0)=0x80) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2028}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r5, 0x204, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffff4cf}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) arch_prctl$ARCH_SET_GS(0x1001, 0x80000001) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6500, 0x101000) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2564.875526] device nr0 entered promiscuous mode [ 2564.899467] device nr0 entered promiscuous mode 14:12:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x40, 0x800) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$NBD_DISCONNECT(r2, 0xab08) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x9, 0x5, 0xfffffffffffffffb, 0x2, 0x8}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e21, @rand_addr=0x8}}, 0xe243, 0x5}, 0x90) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:31 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15070000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2000, 0x0) recvfrom$rxrpc(r3, &(0x7f0000000080)=""/108, 0x6c, 0x10060, &(0x7f0000000100)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x7, @loopback}}, 0x24) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:31 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x1) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f714531c45cb7872417f5f7c1159b6e9a3095"], 0x39) prctl$PR_SET_PTRACER(0x59616d61, r1) ptrace$cont(0x18, r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) time(&(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) ptrace$getregset(0x4204, r2, 0x201, &(0x7f0000000240)={&(0x7f0000000180)=""/164, 0xa4}) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f00000002c0)={0x3, "991b82fbe889b1d3626b3b24ddbbbe86612bf055faa6f9c1b738ace5bf9e2d6f", 0x0, 0xfc, 0x7, 0x8, 0x5}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000280)={0x1, 0x4}) sync() ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 14:12:32 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000020000f7ffffffffffffff000000000000000000000000d0d41516a70eae0d01b9000000000000"], 0x20) 14:12:32 executing program 2: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x3f000000, 0x0) 14:12:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x1, 0x0, 0x0, 0x3e4}) 14:12:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2565.753600] device nr0 entered promiscuous mode 14:12:32 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ptrace$setopts(0x4200, r0, 0x1, 0x10) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="6f93020672b38c1e7be55b017dc221f07df15f132643af6a055daf3e1e7f4d9c04e2806d17e6864ed5f7ce76900d4d8c475cf437c3a311fe7bf5bfc47b5f7a5636a0e35c7b88a829201dc4550217ed67c2fb8a2a4eb7f4bcdc68fdb890825611f6db1a9ac8c895c5d245d8071003f14f9b627bbaf9b1383a4739", 0x7a}], 0x1}, 0x801) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f714554d65cb7872417f5f7e1159b6e9e5df3ebb8622ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x420, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x95d8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40001) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$RTC_UIE_OFF(r3, 0x7004) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x81], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:32 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000180)={{0x8, 0x2, 0x5, 0x530, '\x00', 0x1000}, 0x0, 0x40, 0x9, r0, 0x6, 0x6, 'syz1\x00', &(0x7f0000000080)=['\x00', '/:systemnodev\x00', '\x00', '\x00', '\x00', ']keyringprocmd5sum&)vboxnet0*em1vboxnet1\x00'], 0x3b, [], [0x5, 0x0, 0x67, 0x1]}) tkill(r0, 0xaf) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:32 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000100)="e37afe6a447c26aa945bc14ac2fd68c6c69c5c10455e733b5465e331863a179e44e580fcf0f2b9bbda6b9b0f9e90203e32a3827773271f7e12a26fd906d042dc7c864847ed95002785c8754a72157141b14bbe0ebc928fb522867f83903d3ffe81f916acb44e689d798ae5e9f708fe4d24e75ac77d02a4b4727bd434073c0fde73b4e496825937cfad35547c713cc4bb8c467f2307c6c4faaf32e200bc193ca42761290cfeae9eec827a1dc2fb40b187f45dd4c8eb6cdf5681c5adaba55116e73c5e2ac7d42305edea07f03ba6235154cb4fed27f5dbac11d74fc2", 0xdb}, {&(0x7f0000000200)="592a3fd7528a2c31be36cd34716d9f166f0a1692a1d73ff4fef1c3919268bd6b0a412ab843f00024d0c353fadbeb149ba354a9785a8bd165b059aa32e77be326b87b74463b63a85d8287ed78fec9fa24954935e6009808923134268be97d21e60b991f3aa5af04b7edf6774f0853120be30c8e88ea42f09020b86fa9d1970040fcc1", 0x82}, {&(0x7f00000002c0)="3f67e63381ea2b7778849c3870e4ce95e76fc8f2d84d8f7c3297599e6f3e3063015a789887b3042ec050b17bc96f208f72b57c7c39d1a2022c214b52f6340da5", 0x40}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000440)="967ecd6e6e281ad060220bceeb4f31b1427aa94da8a966a79f3a0f4474e18f638eb4d0a7c48f496686bcdc98cc2cc6c627089167c9a980943d39e37495fea53bd85e607e1c609915827a426af549476c60798bcb889e30fd6e4ea743609bbbc8fd6bebaac69121ba39da9df3c126fe0174a719e0523dffcbce8b3c59d38735abaabbbd713213d202b93286a63705be1015182080ea712b04f8127e539086b5c68f06fa640565de21b4011e46cbb9a340965301db6168b1e7e2e6d8ce9ff20e18d1b32f399f97cabf7878a4fe444556a9b5978bc8e425acf6c52627", 0xdb}], 0x5, 0x5) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"]) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @ioapic={0x6, 0x4, 0xfffffffffffffffb, 0xffffffffffffff01, 0x0, [{0x6, 0x5, 0x9, [], 0x7}, {0x7, 0x5, 0xffffffff, [], 0x6}, {0x2, 0x6, 0x1ff, [], 0x5}, {0x7, 0xffffffff00000001, 0x2, [], 0x41a}, {0x7fff, 0x3, 0x5, [], 0x4}, {0x8, 0x8, 0xffffffff, [], 0x24d}, {0x4, 0x7, 0x0, [], 0x2}, {0xfd, 0x9, 0x0, [], 0x7f}, {0x1f, 0xdb, 0xffffffffffffffff, [], 0x1ff}, {0x7, 0x0, 0x0, [], 0x3}, {0x1, 0x4, 0x8, [], 0x5}, {0x5, 0x4, 0x3ca3, [], 0x2}, {0x2, 0x1, 0x9, [], 0xdc35}, {0x2, 0xfffffffffffffff7, 0x1, [], 0x4}, {0x9, 0xbd, 0xffff, [], 0x4}, {0xffffffffffffffff, 0x8, 0xea, [], 0x81}, {0x0, 0x0, 0x0, [], 0x713f}, {0x9, 0x0, 0x2, [], 0x9}, {0x5, 0xffffffff, 0x0, [], 0x6}, {0x9, 0x4, 0x200, [], 0x8}, {0x1, 0x10000, 0x6, [], 0xffff}, {0x4, 0x80000001, 0xb3a5, [], 0x6d}, {0x8, 0x400, 0x3, [], 0x7ff}, {0x9, 0x8, 0x1, [], 0xfff}]}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000000c0)={0x3, {0x7, 0x8, 0x2, 0xffffffffccff3db3}}) 14:12:32 executing program 1: r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000100)) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x400, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0x4}) unshare(0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:32 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x8000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="6353c0e25569be270d6581b2acf3b16a", 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x5, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd}, 0xc) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x98) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) write$P9_RLINK(r4, &(0x7f0000000080)={0x108, 0x47, 0x2}, 0xfffffffffffffc97) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000340)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\x00\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000180)={0x0, r0}) write$binfmt_aout(r1, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0x3) 14:12:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp\x00') setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000080)=0x5, 0x4) 14:12:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xfffffffffffffffa}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000000c0)={r2, 0x50, "3dbf742bd436b4a4ff0c189fa71dc0f2bf92363c4316bd58fba4c3f9a92abc80fac25cd3266b9ec4807e6b026f62110b9dc2ec4aec0287fd320b4a1996c98355003e2b187c17bdc43e6c3dd7bb5d2f7f"}, &(0x7f0000000140)=0x58) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2566.540423] device nr0 entered promiscuous mode [ 2568.170659] net_ratelimit: 25 callbacks suppressed [ 2568.170668] protocol 88fb is buggy, dev hsr_slave_0 [ 2568.170719] protocol 88fb is buggy, dev hsr_slave_1 [ 2568.175696] protocol 88fb is buggy, dev hsr_slave_1 [ 2568.190784] protocol 88fb is buggy, dev hsr_slave_0 [ 2568.195809] protocol 88fb is buggy, dev hsr_slave_1 14:12:35 executing program 2: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x3f000000, 0x0) 14:12:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/rt_cache\x00') write$P9_RCLUNK(r2, &(0x7f0000000180)={0x7, 0x79, 0x1}, 0x7) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x800, 0x2, 0xbb, 0x7fff, 0xcf71, 0x0, 0x2, 0x1, 0x80000000, 0x40, 0x5, 0x800, 0x100, 0x7fffffff, 0x2, 0xe68], 0x105000, 0x10}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, 0x680}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1) 14:12:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000000)={0x7f, 0x0, 0x7ff}) 14:12:35 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x0, 0x2}}, 0x20) [ 2568.810626] protocol 88fb is buggy, dev hsr_slave_0 [ 2568.815742] protocol 88fb is buggy, dev hsr_slave_1 [ 2568.820893] protocol 88fb is buggy, dev hsr_slave_0 [ 2568.825953] protocol 88fb is buggy, dev hsr_slave_1 [ 2568.831150] protocol 88fb is buggy, dev hsr_slave_0 14:12:35 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) ptrace$cont(0x1f, r0, 0x5, 0x2) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bccbc6f000700050074aebe8e1f7145546087174ecde59e4ee1159b6e0c0ed913b8222ad508104f28a695bd169a370c4346652b496cc77dad47004c00fba7389362a29f9354040000623a9e11ff6e934649eb50d28369d1c150b25ea1f68196570c35169fbb4b132ff918a2d19f03"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x42000) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x8, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:35 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = fcntl$getown(r0, 0x9) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x9) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1900000200000000000000000000006d38f4a577103622c9f078000000000000"], 0x20) 14:12:35 executing program 2: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x3f000000, 0x0) 14:12:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x40, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r4 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x0, 0x2000) r5 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0xe45, 0x100) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x100, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rfkill\x00', 0x34b080, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81020}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x7c, r3, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4804}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x0, 0x680}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 14:12:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="683c7c3a1dbb29937e38e9975972b2cd7664"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='udf\x00', 0x800854, &(0x7f0000000100)='/dev/kvm\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2569.086915] device nr0 entered promiscuous mode 14:12:35 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:35 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sched_getparam(r0, &(0x7f0000000080)) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) fchmod(r1, 0x140) ptrace$cont(0x7, r0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3, 0x10000) 14:12:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) r2 = shmget$private(0x0, 0x1000, 0x54000913, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000080)=""/85) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000100)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x30000, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x8, 0x9}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:35 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) io_setup(0x1, &(0x7f0000000040)=0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000001200)='/dev/vcs#\x00', 0x5, 0x1) r5 = syz_open_dev$vbi(&(0x7f00000013c0)='/dev/vbi#\x00', 0x2, 0x2) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001500)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) io_submit(r2, 0x5, &(0x7f0000001580)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x8, r1, &(0x7f0000000080)="df2901c07cce00ee72d72be7480b183c2b72fab8b083c171d4e09be774788c76e2c6b595f3c3206208ccf774ab35c248c02c2b83ac7b9400c28cd8ad4cd362d2ff4f9f31ff138c055856f7012a79a825a1e64f391c57a70dff56a6e13a7ac70a9128", 0x62, 0xaa2, 0x0, 0x0, r3}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x5, 0x74fd, r1, &(0x7f0000000200)="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", 0x1000, 0x20, 0x0, 0x2, r4}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0xd, 0x81, r1, &(0x7f0000001280)="3347c6bd8b45452ef00ff1909da880314676a8d7f6e647df1da0b036f5", 0x1d, 0x40, 0x0, 0x3, 0xffffffffffffff9c}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x7, 0x3, r1, &(0x7f0000001300)="0ff6497d63078eef49865ebb06bc4d0c0f8547f00c0962638bebf5ec27543d0cad3b500735f33a8df64925a738f9ad0a0679adcb1a4f3f6e85195966a5dc21e48dc9cdf5d2bde265297adf545988a2049be559732791035069c89b41090c9ca85146a4ada90aaf3af3ff13f9ee8f48a13a76b7bccc5a6ede626be0cb89f67c0c0fc3f67c9ea332648877c6c060a50681d8ec2506898df0a532214818dea3c64f49c89cdae66af403eb734f865eef1a79e79c15f82766103c86", 0xb9, 0xda6b, 0x0, 0x0, r5}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x2, 0x9, r1, &(0x7f0000001440)="27aac1202d100475bf8a8164f5df58575b26c692445bd286072eccbb4e46590aaf2fce21633b7001ff465b9ed51373370186156c7290b9daffc431c1dd102412095a0f15f0f07feed7db8a43f3d1a821ffffc68316a86b2910e9b14195af275be93f3e44e3f0cf79069c10475520e5ddecaba424e981ede93a446763b7ac5644715417b395c88f8746d689b8070ef7b611f6ce1e6e13eae7e83f91a18c9c94bd136c40f6b08fd8a83109f4379eafabbc72", 0xb1, 0x0, 0x0, 0x0, r6}]) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:36 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x204882, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'veth1_to_bond\x00', 0x80004009}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$tun(r0, &(0x7f0000000000)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @broadcast, @rand_addr="3d22a664ace34b480402f742ba490dd2", @remote, @loopback}}, 0x34) write$binfmt_aout(r0, &(0x7f00000011c0)={{0x0, 0x7, 0x2, 0x99, 0x1000000000000}}, 0x20) 14:12:36 executing program 4 (fault-call:9 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:36 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x48000) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x81, 0x4, 0x1, 0x0, 0x0, 0x4, 0x40000, 0x8, 0x8, 0x3, 0x1, 0x9, 0xae, 0xffff, 0x5, 0x7f, 0x88, 0x0, 0x3, 0x5, 0x2, 0x3, 0x400, 0x1, 0x4, 0x2, 0xb1, 0x0, 0x1, 0x7, 0x7fff, 0x8001, 0x3, 0x8, 0x2643, 0x20, 0x0, 0xd, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x20010, 0x100, 0x1, 0x7, 0xfffffffffffffffd, 0x6}, r0, 0xffffffffffffffff, r2, 0xb) [ 2570.023817] FAULT_INJECTION: forcing a failure. [ 2570.023817] name failslab, interval 1, probability 0, space 0, times 0 [ 2570.051745] CPU: 0 PID: 15336 Comm: syz-executor.4 Not tainted 5.0.0-rc8+ #88 [ 2570.059044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2570.059053] Call Trace: [ 2570.071002] dump_stack+0x172/0x1f0 [ 2570.074647] should_fail.cold+0xa/0x1b [ 2570.074667] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2570.074683] ? lock_downgrade+0x810/0x810 [ 2570.074702] ? ___might_sleep+0x163/0x280 [ 2570.091970] __should_failslab+0x121/0x190 [ 2570.096257] should_failslab+0x9/0x14 [ 2570.100062] kmem_cache_alloc+0x2b2/0x6f0 [ 2570.104219] ? lock_downgrade+0x810/0x810 [ 2570.108368] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2570.113911] ? check_preemption_disabled+0x48/0x290 [ 2570.118940] mmu_topup_memory_caches+0x97/0x490 [ 2570.123615] ? __lock_is_held+0xb6/0x140 [ 2570.127684] kvm_mmu_load+0x21/0x1300 [ 2570.131497] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 2570.136611] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2570.142160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2570.147712] vcpu_enter_guest+0x3d72/0x6290 [ 2570.152053] ? __mutex_lock+0x3cd/0x1310 [ 2570.156118] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 2570.160254] ? emulator_read_emulated+0x50/0x50 [ 2570.164910] ? lock_acquire+0x16f/0x3f0 [ 2570.168878] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 2570.173899] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2570.178742] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2570.183748] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 2570.187710] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2570.191881] ? mark_held_locks+0x100/0x100 [ 2570.196103] ? proc_fail_nth_write+0x9d/0x1e0 [ 2570.200601] ? proc_cwd_link+0x1d0/0x1d0 [ 2570.204663] ? __f_unlock_pos+0x19/0x20 [ 2570.208621] ? find_held_lock+0x35/0x130 [ 2570.212669] ? __fget+0x340/0x540 [ 2570.216129] ? find_held_lock+0x35/0x130 [ 2570.220186] ? __fget+0x340/0x540 [ 2570.223627] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2570.227763] do_vfs_ioctl+0xd6e/0x1390 [ 2570.231636] ? ioctl_preallocate+0x210/0x210 [ 2570.236032] ? __fget+0x367/0x540 [ 2570.239470] ? iterate_fd+0x360/0x360 [ 2570.243257] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2570.248780] ? fput+0x128/0x1a0 [ 2570.252049] ? security_file_ioctl+0x93/0xc0 [ 2570.256447] ksys_ioctl+0xab/0xd0 [ 2570.259885] __x64_sys_ioctl+0x73/0xb0 [ 2570.263759] do_syscall_64+0x103/0x610 [ 2570.267637] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2570.272817] RIP: 0033:0x457e29 [ 2570.276002] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2570.294906] RSP: 002b:00007f779d6ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2570.302600] RAX: ffffffffffffffda RBX: 00007f779d6ecc90 RCX: 0000000000457e29 [ 2570.309852] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2570.317105] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2570.324359] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f779d6ed6d4 [ 2570.331621] R13: 00000000004c0d61 R14: 00000000004d2bb8 R15: 0000000000000006 14:12:38 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000002c0)='./file0\x00', r1, r2) syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000001280)='/dev/vbi#\x00', 0x3, 0x2) r4 = memfd_create(&(0x7f0000000000)='\xac\x00\x00', 0x4) ftruncate(r4, 0x1000000) sendfile(r3, r4, &(0x7f00000000c0)=0xf10001, 0xeffffdef) close(r3) inotify_add_watch(r3, 0x0, 0x10000008) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x6) syz_open_dev$dri(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, &(0x7f0000000200)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x98, r5, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nlmon0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffffffdd}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x0) 14:12:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) r3 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x800) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000100)=0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080), 0x4) 14:12:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0000000200000000000000000000000000000000000000000900000000000000"], 0x20) 14:12:38 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:38 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) sched_setparam(r0, &(0x7f0000000040)=0x401) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:38 executing program 4 (fault-call:9 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:38 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2014000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd89}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4041}, 0x84) prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3eb987e1b7116f92546bc31b8b8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2572.129518] device nr0 entered promiscuous mode [ 2572.159637] FAULT_INJECTION: forcing a failure. [ 2572.159637] name failslab, interval 1, probability 0, space 0, times 0 [ 2572.182375] CPU: 1 PID: 15365 Comm: syz-executor.4 Not tainted 5.0.0-rc8+ #88 [ 2572.189665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2572.199021] Call Trace: [ 2572.201626] dump_stack+0x172/0x1f0 [ 2572.205266] should_fail.cold+0xa/0x1b [ 2572.209175] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2572.214284] ? lock_downgrade+0x810/0x810 [ 2572.218455] ? ___might_sleep+0x163/0x280 [ 2572.222620] __should_failslab+0x121/0x190 [ 2572.226865] should_failslab+0x9/0x14 [ 2572.230670] kmem_cache_alloc+0x2b2/0x6f0 [ 2572.234821] ? lock_downgrade+0x810/0x810 [ 2572.238974] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2572.244520] ? check_preemption_disabled+0x48/0x290 [ 2572.249558] mmu_topup_memory_caches+0x97/0x490 [ 2572.254234] ? __lock_is_held+0xb6/0x140 [ 2572.258314] kvm_mmu_load+0x21/0x1300 [ 2572.262127] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 2572.267065] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2572.272966] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2572.278545] vcpu_enter_guest+0x3d72/0x6290 [ 2572.282879] ? __mutex_lock+0x3cd/0x1310 [ 2572.286949] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 2572.291121] ? emulator_read_emulated+0x50/0x50 [ 2572.295797] ? lock_acquire+0x16f/0x3f0 [ 2572.299779] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 2572.304813] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2572.309670] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2572.314716] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 2572.318701] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2572.322863] ? mark_held_locks+0x100/0x100 [ 2572.327115] ? proc_fail_nth_write+0x9d/0x1e0 [ 2572.331622] ? proc_cwd_link+0x1d0/0x1d0 [ 2572.335694] ? __f_unlock_pos+0x19/0x20 [ 2572.339678] ? find_held_lock+0x35/0x130 [ 2572.343748] ? __fget+0x340/0x540 [ 2572.347255] ? find_held_lock+0x35/0x130 [ 2572.351330] ? __fget+0x340/0x540 [ 2572.354795] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2572.358942] do_vfs_ioctl+0xd6e/0x1390 [ 2572.362835] ? ioctl_preallocate+0x210/0x210 [ 2572.367240] ? __fget+0x367/0x540 [ 2572.370697] ? iterate_fd+0x360/0x360 [ 2572.374499] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2572.380034] ? fput+0x128/0x1a0 [ 2572.383331] ? security_file_ioctl+0x93/0xc0 [ 2572.387742] ksys_ioctl+0xab/0xd0 [ 2572.391199] __x64_sys_ioctl+0x73/0xb0 [ 2572.395099] do_syscall_64+0x103/0x610 [ 2572.398988] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2572.404649] RIP: 0033:0x457e29 [ 2572.407844] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2572.426763] RSP: 002b:00007f779d6cbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2572.434474] RAX: ffffffffffffffda RBX: 00007f779d6cbc90 RCX: 0000000000457e29 [ 2572.441743] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2572.449011] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2572.456274] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f779d6cc6d4 [ 2572.463550] R13: 00000000004c0d61 R14: 00000000004d2bb8 R15: 0000000000000006 14:12:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) write$P9_RUNLINKAT(r1, &(0x7f0000000100)={0x7, 0x4d, 0x1}, 0x7) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x3, 0x0, 0x239) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000080), 0x4) 14:12:39 executing program 4 (fault-call:9 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2572.784143] FAULT_INJECTION: forcing a failure. [ 2572.784143] name failslab, interval 1, probability 0, space 0, times 0 [ 2572.807403] CPU: 0 PID: 15386 Comm: syz-executor.4 Not tainted 5.0.0-rc8+ #88 [ 2572.814709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2572.824064] Call Trace: [ 2572.826676] dump_stack+0x172/0x1f0 [ 2572.830329] should_fail.cold+0xa/0x1b [ 2572.834229] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2572.839346] ? lock_downgrade+0x810/0x810 [ 2572.843504] ? ___might_sleep+0x163/0x280 [ 2572.847664] __should_failslab+0x121/0x190 [ 2572.851912] should_failslab+0x9/0x14 [ 2572.851928] kmem_cache_alloc+0x2b2/0x6f0 [ 2572.851948] ? lock_downgrade+0x810/0x810 [ 2572.859895] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2572.869547] ? check_preemption_disabled+0x48/0x290 [ 2572.874593] mmu_topup_memory_caches+0x97/0x490 [ 2572.879267] ? __lock_is_held+0xb6/0x140 [ 2572.883345] kvm_mmu_load+0x21/0x1300 [ 2572.887157] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 2572.892116] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2572.897658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2572.903207] vcpu_enter_guest+0x3d72/0x6290 [ 2572.907539] ? __mutex_lock+0x3cd/0x1310 [ 2572.911614] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 2572.915772] ? emulator_read_emulated+0x50/0x50 [ 2572.920450] ? lock_acquire+0x16f/0x3f0 [ 2572.924430] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 2572.929458] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2572.934315] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2572.939356] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 2572.943349] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2572.947502] ? mark_held_locks+0x100/0x100 [ 2572.951740] ? proc_fail_nth_write+0x9d/0x1e0 [ 2572.956244] ? proc_cwd_link+0x1d0/0x1d0 [ 2572.960323] ? __f_unlock_pos+0x19/0x20 [ 2572.964317] ? find_held_lock+0x35/0x130 [ 2572.968382] ? __fget+0x340/0x540 [ 2572.971837] ? find_held_lock+0x35/0x130 [ 2572.975901] ? __fget+0x340/0x540 [ 2572.979366] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2572.983519] do_vfs_ioctl+0xd6e/0x1390 [ 2572.987414] ? ioctl_preallocate+0x210/0x210 [ 2572.991831] ? __fget+0x367/0x540 [ 2572.995294] ? iterate_fd+0x360/0x360 [ 2572.999118] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2573.004664] ? fput+0x128/0x1a0 [ 2573.007960] ? security_file_ioctl+0x93/0xc0 [ 2573.012465] ksys_ioctl+0xab/0xd0 [ 2573.015932] __x64_sys_ioctl+0x73/0xb0 [ 2573.019830] do_syscall_64+0x103/0x610 [ 2573.023728] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2573.028925] RIP: 0033:0x457e29 14:12:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2573.032128] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2573.051033] RSP: 002b:00007f779d6ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2573.051047] RAX: ffffffffffffffda RBX: 00007f779d6ecc90 RCX: 0000000000457e29 [ 2573.051054] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2573.051063] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2573.051071] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f779d6ed6d4 [ 2573.051080] R13: 00000000004c0d61 R14: 00000000004d2bb8 R15: 0000000000000006 14:12:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x1080020, &(0x7f0000000100)='/dev/kvm\x00') ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000000, 0x10000000800002c1, 0x40000001], [0xc1]}) 14:12:39 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x20000000000005, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x42) fcntl$setpipe(r1, 0x407, 0xfffffffffffffffe) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000040)) write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[], 0x0) dup3(r1, r0, 0x80000) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000140)={0x31, 0x2, &(0x7f0000000080)="1e6092f5ddec4055103ed87b050d4024c873b3c6150516ba02371f0de04143cb0d469b58b11de38b7a40d5e86423d8cc61f2850a3d61f8ec52291e1c5b00aec4d2b7f73c299c53db01398939e98da5", {0x800, 0x3, 0x20363159, 0x1, 0x100, 0x9, 0x0, 0x1}}) 14:12:39 executing program 4 (fault-call:9 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:39 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000240)=@hopopts={0x0, 0x9, [], [@pad1, @generic={0x9, 0x36, "be6701c5775409480bc0ee00616de5f5729d1ed5e4c646bef2a75392ad97584cbdf94b043f84f96dde04f837647e05acf468f01adf91"}, @jumbo={0xc2, 0x4, 0x5a}, @pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @pad1]}, 0x58) write$FUSE_DIRENT(r2, &(0x7f0000000080)={0x188, 0x0, 0x6, [{0x1, 0x1000, 0x9, 0x7, '/dev/kvm\x00'}, {0x6, 0xc803, 0x9, 0x5, '/dev/kvm\x00'}, {0x1, 0x3, 0x0, 0x8000}, {0x2, 0x5, 0x42, 0x9, 'ppp0GPLvboxnet1+,)[!&vboxnet0(eth1@.vboxnet0procuserbdev../{ppp1]-'}, {0x5, 0xfffffffffffffff8, 0x9, 0x2, '/dev/kvm\x00'}, {0x0, 0x1, 0x1, 0x1ff, ')'}, {0x3, 0x8, 0x24, 0x2, '}cgroup(vboxnet1self-/trusted$eth0+\x00'}, {0x1, 0xe8b, 0xc, 0x5, 'securityeth1'}]}, 0x188) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) [ 2573.248801] kvm [15463]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 2573.336288] kvm [15463]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 2573.346022] device nr0 entered promiscuous mode [ 2573.419739] FAULT_INJECTION: forcing a failure. [ 2573.419739] name failslab, interval 1, probability 0, space 0, times 0 [ 2573.442909] CPU: 0 PID: 15512 Comm: syz-executor.4 Not tainted 5.0.0-rc8+ #88 [ 2573.450204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2573.459553] Call Trace: [ 2573.459587] dump_stack+0x172/0x1f0 [ 2573.459613] should_fail.cold+0xa/0x1b [ 2573.469688] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2573.474799] ? lock_downgrade+0x810/0x810 [ 2573.474818] ? ___might_sleep+0x163/0x280 [ 2573.474839] __should_failslab+0x121/0x190 [ 2573.487351] should_failslab+0x9/0x14 [ 2573.491162] kmem_cache_alloc+0x2b2/0x6f0 [ 2573.495325] ? lock_downgrade+0x810/0x810 [ 2573.499476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2573.505022] ? check_preemption_disabled+0x48/0x290 [ 2573.510058] mmu_topup_memory_caches+0x97/0x490 [ 2573.514729] ? __lock_is_held+0xb6/0x140 [ 2573.518796] kvm_mmu_load+0x21/0x1300 [ 2573.522606] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 2573.527537] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2573.533075] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2573.538623] vcpu_enter_guest+0x3d72/0x6290 [ 2573.542946] ? __mutex_lock+0x3cd/0x1310 [ 2573.547008] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 2573.551163] ? emulator_read_emulated+0x50/0x50 [ 2573.555832] ? lock_acquire+0x16f/0x3f0 [ 2573.559803] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 2573.564829] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2573.569672] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2573.574698] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 2573.578683] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2573.582853] ? mark_held_locks+0x100/0x100 [ 2573.587087] ? proc_fail_nth_write+0x9d/0x1e0 [ 2573.591588] ? proc_cwd_link+0x1d0/0x1d0 [ 2573.595652] ? __f_unlock_pos+0x19/0x20 [ 2573.599626] ? find_held_lock+0x35/0x130 [ 2573.603686] ? __fget+0x340/0x540 [ 2573.607140] ? find_held_lock+0x35/0x130 [ 2573.611198] ? __fget+0x340/0x540 [ 2573.614658] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2573.618808] do_vfs_ioctl+0xd6e/0x1390 [ 2573.622707] ? ioctl_preallocate+0x210/0x210 [ 2573.627115] ? __fget+0x367/0x540 [ 2573.630578] ? iterate_fd+0x360/0x360 [ 2573.634388] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2573.639923] ? fput+0x128/0x1a0 [ 2573.643215] ? security_file_ioctl+0x93/0xc0 [ 2573.647626] ksys_ioctl+0xab/0xd0 [ 2573.651080] __x64_sys_ioctl+0x73/0xb0 [ 2573.654975] do_syscall_64+0x103/0x610 [ 2573.658868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2573.664054] RIP: 0033:0x457e29 [ 2573.667246] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2573.686145] RSP: 002b:00007f779d6ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2573.693850] RAX: ffffffffffffffda RBX: 00007f779d6ecc90 RCX: 0000000000457e29 [ 2573.701135] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2573.708405] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2573.715671] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f779d6ed6d4 [ 2573.722934] R13: 00000000004c0d61 R14: 00000000004d2bb8 R15: 0000000000000006 14:12:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x400000, 0x0) r4 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x9, 0x400) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f0000000000)) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0x8fab, @loopback}, {0xa, 0x4e21, 0x1f, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, 0x4, [0x0, 0x1, 0x20, 0x200, 0x800, 0x6, 0xc, 0xb5d2]}, 0x5c) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 14:12:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c12a41d88b070") prctl$PR_SVE_GET_VL(0x33, 0x15d2a) connect(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80) r1 = openat$userio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/userio\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) [ 2574.153210] device nr0 entered promiscuous mode [ 2574.272322] misc userio: No port type given on /dev/userio [ 2574.490625] net_ratelimit: 25 callbacks suppressed [ 2574.490633] protocol 88fb is buggy, dev hsr_slave_0 [ 2574.490662] protocol 88fb is buggy, dev hsr_slave_1 [ 2574.495628] protocol 88fb is buggy, dev hsr_slave_1 [ 2574.510755] protocol 88fb is buggy, dev hsr_slave_0 [ 2574.515810] protocol 88fb is buggy, dev hsr_slave_1 [ 2574.579757] misc userio: No port type given on /dev/userio [ 2575.130696] protocol 88fb is buggy, dev hsr_slave_0 [ 2575.135825] protocol 88fb is buggy, dev hsr_slave_1 [ 2575.140948] protocol 88fb is buggy, dev hsr_slave_0 [ 2575.145984] protocol 88fb is buggy, dev hsr_slave_1 [ 2575.151108] protocol 88fb is buggy, dev hsr_slave_0 14:12:41 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) sched_getparam(r0, &(0x7f0000000040)) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:41 executing program 4 (fault-call:9 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) r3 = getpgrp(0xffffffffffffffff) ioctl$KVM_NMI(r2, 0xae9a) ptrace$getregset(0x4204, r3, 0x6, &(0x7f0000000000)={&(0x7f0000000080)=""/84, 0x54}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:41 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:41 executing program 2: r0 = fcntl$getown(0xffffffffffffffff, 0x9) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20020}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c010000", @ANYRES16=r2, @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xc8200, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x48, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x92}, @in={0x2, 0x200, @broadcast}, @in6={0xa, 0x4e22, 0x10001, @rand_addr="00ad6114b0228faaf7e31a21cba83cc2"}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000001c0)={r4, 0x1}, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x51, 0x3e8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x80000001f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={0x0}, 0x0, 0xebd, 0x0, 0x0, 0x0, 0x8000}, r0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000700000000000019078ac2314bbac1414110b02907800000000450000000000000000890000ac2314aaac141400084000000000acd92aa5000000000000e000000200000000e000000100000000000000007f00000100000000ffffffff00000000e000000100000000ac141400"], 0x0) unshare(0x4000000) 14:12:41 executing program 3: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x1da) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000030, 0x0) dup3(r2, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vfio/vfio\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x519, 0x0, 0x0, 0x8) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 14:12:41 executing program 2: r0 = socket$inet6(0xa, 0x400000000080000, 0x3a) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000380), 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc8, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) fcntl$setpipe(r0, 0x407, 0xfffffffffffffffc) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x4, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000200)="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") getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) lsetxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='security.evm\x00', &(0x7f0000000340)=@v2={0x3, 0x2, 0xf, 0x100, 0x13, "5b881dbe21502c7c02db5b835fe91ca5e9b70f"}, 0x1d, 0x2) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x1, 0x0) [ 2575.453356] FAULT_INJECTION: forcing a failure. [ 2575.453356] name failslab, interval 1, probability 0, space 0, times 0 [ 2575.511982] CPU: 0 PID: 15554 Comm: syz-executor.4 Not tainted 5.0.0-rc8+ #88 [ 2575.519313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2575.528759] Call Trace: [ 2575.531367] dump_stack+0x172/0x1f0 [ 2575.535009] should_fail.cold+0xa/0x1b [ 2575.538907] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2575.544018] ? lock_downgrade+0x810/0x810 [ 2575.548268] ? ___might_sleep+0x163/0x280 [ 2575.552440] __should_failslab+0x121/0x190 [ 2575.556722] should_failslab+0x9/0x14 [ 2575.560531] kmem_cache_alloc+0x2b2/0x6f0 [ 2575.564704] ? lock_downgrade+0x810/0x810 [ 2575.568863] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2575.574417] ? check_preemption_disabled+0x48/0x290 [ 2575.579451] mmu_topup_memory_caches+0x97/0x490 [ 2575.584130] ? __lock_is_held+0xb6/0x140 [ 2575.588216] kvm_mmu_load+0x21/0x1300 [ 2575.592030] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 2575.596963] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2575.602510] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2575.608070] vcpu_enter_guest+0x3d72/0x6290 [ 2575.612402] ? __mutex_lock+0x3cd/0x1310 [ 2575.616473] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 2575.620628] ? emulator_read_emulated+0x50/0x50 [ 2575.625312] ? lock_acquire+0x16f/0x3f0 [ 2575.629287] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 2575.634334] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2575.639182] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2575.644219] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 2575.648202] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2575.652355] ? mark_held_locks+0x100/0x100 [ 2575.656596] ? proc_fail_nth_write+0x9d/0x1e0 [ 2575.661138] ? proc_cwd_link+0x1d0/0x1d0 [ 2575.665204] ? __f_unlock_pos+0x19/0x20 [ 2575.669192] ? find_held_lock+0x35/0x130 [ 2575.673254] ? __fget+0x340/0x540 [ 2575.676712] ? find_held_lock+0x35/0x130 [ 2575.680776] ? __fget+0x340/0x540 [ 2575.684242] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2575.688397] do_vfs_ioctl+0xd6e/0x1390 [ 2575.692292] ? ioctl_preallocate+0x210/0x210 [ 2575.696710] ? __fget+0x367/0x540 [ 2575.700172] ? iterate_fd+0x360/0x360 [ 2575.703977] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2575.709515] ? fput+0x128/0x1a0 [ 2575.712818] ? security_file_ioctl+0x93/0xc0 [ 2575.717234] ksys_ioctl+0xab/0xd0 [ 2575.720693] __x64_sys_ioctl+0x73/0xb0 [ 2575.724592] do_syscall_64+0x103/0x610 [ 2575.728490] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2575.733678] RIP: 0033:0x457e29 [ 2575.736876] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 14:12:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:42 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup3(r1, r1, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000240)={0x0, {0x2800000000000000, 0x75, 0x7ff, 0x7f}}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") fsync(r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000180)={r4, 0x77, "1bec2de64c1efa1fd1d21824c5e82b098b646237120c2d0cf5055a373fd7618f08b9cc9a36d401fd3db85a398ff5d9b78f590acba7c871620c919d014048a6e459ebec76e50834cd0145277121915cdbe4c1024fdc406ab3a1c44726c07ab3492fe793c211ff70f2d610a3c037b933559fe9e7c8173d68"}, &(0x7f0000000200)=0x7f) [ 2575.755780] RSP: 002b:00007f779d6ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2575.763488] RAX: ffffffffffffffda RBX: 00007f779d6ecc90 RCX: 0000000000457e29 [ 2575.770760] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2575.778032] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2575.785312] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f779d6ed6d4 [ 2575.792589] R13: 00000000004c0d61 R14: 00000000004d2bb8 R15: 0000000000000006 14:12:42 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x90) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000004}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @multicast2}}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x4008000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000300)=0x7, 0x2) 14:12:42 executing program 0: chdir(&(0x7f0000000080)='./file0\x00') clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074ae108e1f7145542c5cb7872417f5f7e1359b6e9e5df3ebb8222ad508303a890376478a950b95e12f19f1c02ec497e091000023496c"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'ip_vti0\x00', 0x3}) [ 2575.997833] sctp: [Deprecated]: syz-executor.2 (pid 15592) Use of int in maxseg socket option. [ 2575.997833] Use struct sctp_assoc_value instead 14:12:42 executing program 3: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x1da) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000030, 0x0) dup3(r2, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vfio/vfio\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x519, 0x0, 0x0, 0x8) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 14:12:42 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x140, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x4, @local, 0x8}, {0xa, 0x4e20, 0x1, @mcast2, 0x3}, r2, 0x1}}, 0x48) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x39) ptrace$cont(0x1f, r1, 0x0, 0x800) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x18, r1, 0xffff, 0x0) 14:12:42 executing program 4 (fault-call:9 fault-nth:5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2576.183408] sctp: [Deprecated]: syz-executor.2 (pid 15592) Use of int in maxseg socket option. [ 2576.183408] Use struct sctp_assoc_value instead [ 2576.202429] QAT: Invalid ioctl 14:12:42 executing program 0: r0 = getpgid(0xffffffffffffffff) ptrace$setregs(0xf, r0, 0x3, &(0x7f0000000180)="f84988b9c80a964541437868c1f54e366327ef2ebdbafb53d17f7ddedb6fa69be23594e23fb2f125f3556b3d42e1acf19900b31617939dd1c781ae65df693c6458bd971a15e8819fd18f515190eaae90ec53034917757ec2f5ff654cf2c798da477590269ec51b56ebb92d243696e9846ed456fbfc38e7371a930a49b1151a60a4d66e61be2586017dad54435705682eefebbb9dc1cb1b42df4c9eeb67dbe0d6604e1499d0d60607cd0e5e755c3923423e4a53e05e27e863301b30b2f3e31d2f63198c") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 2576.288490] FAULT_INJECTION: forcing a failure. [ 2576.288490] name failslab, interval 1, probability 0, space 0, times 0 [ 2576.334807] CPU: 1 PID: 15609 Comm: syz-executor.4 Not tainted 5.0.0-rc8+ #88 [ 2576.342116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2576.351469] Call Trace: [ 2576.354070] dump_stack+0x172/0x1f0 [ 2576.357726] should_fail.cold+0xa/0x1b [ 2576.361632] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2576.366747] ? lock_downgrade+0x810/0x810 [ 2576.370910] ? ___might_sleep+0x163/0x280 [ 2576.375085] __should_failslab+0x121/0x190 [ 2576.379340] should_failslab+0x9/0x14 [ 2576.383148] kmem_cache_alloc+0x2b2/0x6f0 [ 2576.387314] ? lock_downgrade+0x810/0x810 [ 2576.391477] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2576.397021] ? check_preemption_disabled+0x48/0x290 [ 2576.397046] mmu_topup_memory_caches+0x97/0x490 [ 2576.397059] ? __lock_is_held+0xb6/0x140 [ 2576.397084] kvm_mmu_load+0x21/0x1300 [ 2576.397102] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 2576.406786] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2576.406804] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2576.406826] vcpu_enter_guest+0x3d72/0x6290 [ 2576.406843] ? __mutex_lock+0x3cd/0x1310 [ 2576.406864] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 2576.443160] ? emulator_read_emulated+0x50/0x50 [ 2576.447867] ? lock_acquire+0x16f/0x3f0 [ 2576.451842] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 2576.456893] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2576.461743] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2576.466770] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 2576.470749] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2576.474902] ? mark_held_locks+0x100/0x100 [ 2576.479137] ? proc_fail_nth_write+0x9d/0x1e0 [ 2576.483634] ? proc_cwd_link+0x1d0/0x1d0 [ 2576.487693] ? __f_unlock_pos+0x19/0x20 [ 2576.491665] ? find_held_lock+0x35/0x130 [ 2576.495725] ? __fget+0x340/0x540 [ 2576.499177] ? find_held_lock+0x35/0x130 [ 2576.503241] ? __fget+0x340/0x540 [ 2576.506704] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2576.510855] do_vfs_ioctl+0xd6e/0x1390 [ 2576.514748] ? ioctl_preallocate+0x210/0x210 [ 2576.519169] ? __fget+0x367/0x540 [ 2576.522627] ? iterate_fd+0x360/0x360 [ 2576.526428] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2576.531963] ? fput+0x128/0x1a0 [ 2576.535248] ? security_file_ioctl+0x93/0xc0 [ 2576.539663] ksys_ioctl+0xab/0xd0 [ 2576.543123] __x64_sys_ioctl+0x73/0xb0 [ 2576.547017] do_syscall_64+0x103/0x610 [ 2576.550907] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2576.556101] RIP: 0033:0x457e29 [ 2576.559296] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2576.578210] RSP: 002b:00007f779d6ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 14:12:43 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:43 executing program 2: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x1da) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000030, 0x0) dup3(r2, r1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vfio/vfio\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x519, 0x0, 0x0, 0x8) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 2576.585917] RAX: ffffffffffffffda RBX: 00007f779d6ecc90 RCX: 0000000000457e29 [ 2576.593186] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2576.600450] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2576.607716] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f779d6ed6d4 [ 2576.614983] R13: 00000000004c0d61 R14: 00000000004d2bb8 R15: 0000000000000006 14:12:43 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x80002, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x100000) tkill(r0, 0x2f) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x16, 0x8000) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x25, @empty, 0x1}, r3}}, 0x30) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:43 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14200, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000000c0)={0x0, @reserved}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x101, 0x400000) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff96, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x32) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x3, 0x400040, 0x4) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x301000, 0x0) ioctl$TIOCSCTTY(r3, 0x540e, 0x1) 14:12:43 executing program 4 (fault-call:9 fault-nth:6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:43 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x1, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x0, 0x7, 0x7, 0x5}, {0xdb5, 0x7fffffff, 0x4, 0x3}]}) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 14:12:43 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x30662, 0x88) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = getpgrp(0x0) ptrace$poke(0x5, r2, &(0x7f0000000040), 0x3f) [ 2577.021107] FAULT_INJECTION: forcing a failure. [ 2577.021107] name failslab, interval 1, probability 0, space 0, times 0 [ 2577.041232] CPU: 0 PID: 15718 Comm: syz-executor.4 Not tainted 5.0.0-rc8+ #88 [ 2577.048533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2577.057892] Call Trace: [ 2577.060506] dump_stack+0x172/0x1f0 [ 2577.064157] should_fail.cold+0xa/0x1b [ 2577.068064] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2577.073178] ? lock_downgrade+0x810/0x810 [ 2577.077345] ? ___might_sleep+0x163/0x280 [ 2577.081508] __should_failslab+0x121/0x190 [ 2577.085753] should_failslab+0x9/0x14 [ 2577.089557] kmem_cache_alloc+0x2b2/0x6f0 [ 2577.093716] ? lock_downgrade+0x810/0x810 [ 2577.097869] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2577.103412] ? check_preemption_disabled+0x48/0x290 [ 2577.108441] mmu_topup_memory_caches+0x97/0x490 [ 2577.113111] ? __lock_is_held+0xb6/0x140 [ 2577.117182] kvm_mmu_load+0x21/0x1300 [ 2577.120988] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 2577.126008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2577.131552] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2577.137111] vcpu_enter_guest+0x3d72/0x6290 [ 2577.141440] ? __mutex_lock+0x3cd/0x1310 [ 2577.145511] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 2577.149680] ? emulator_read_emulated+0x50/0x50 [ 2577.154363] ? lock_acquire+0x16f/0x3f0 [ 2577.158346] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 2577.163373] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2577.168222] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2577.173253] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 2577.177240] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2577.181396] ? mark_held_locks+0x100/0x100 [ 2577.185638] ? proc_fail_nth_write+0x9d/0x1e0 [ 2577.190140] ? proc_cwd_link+0x1d0/0x1d0 [ 2577.194209] ? __f_unlock_pos+0x19/0x20 [ 2577.198190] ? find_held_lock+0x35/0x130 [ 2577.202254] ? __fget+0x340/0x540 [ 2577.205740] ? find_held_lock+0x35/0x130 [ 2577.209827] ? __fget+0x340/0x540 [ 2577.213307] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2577.217471] do_vfs_ioctl+0xd6e/0x1390 [ 2577.221375] ? ioctl_preallocate+0x210/0x210 [ 2577.225788] ? __fget+0x367/0x540 [ 2577.229255] ? iterate_fd+0x360/0x360 [ 2577.233065] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2577.238614] ? fput+0x128/0x1a0 [ 2577.241911] ? security_file_ioctl+0x93/0xc0 [ 2577.246334] ksys_ioctl+0xab/0xd0 [ 2577.249803] __x64_sys_ioctl+0x73/0xb0 [ 2577.253700] do_syscall_64+0x103/0x610 [ 2577.257602] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2577.262796] RIP: 0033:0x457e29 [ 2577.265992] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2577.285121] RSP: 002b:00007f779d6cbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2577.292835] RAX: ffffffffffffffda RBX: 00007f779d6cbc90 RCX: 0000000000457e29 [ 2577.300101] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2577.307376] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2577.314650] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f779d6cc6d4 14:12:43 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000003c0)={0x8000, 0x10, 0x8000}, 0x3c3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f00000000c0)=0x47, 0xdf) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64MMAP\x00', &(0x7f0000000040)='cgroup+\x00', 0x8, 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000680)=ANY=[], &(0x7f0000000380)='\x00', 0x11d, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000440)) syz_extract_tcp_res$synack(&(0x7f00000004c0)={0x41424344, 0x41424344}, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x4e22, @empty=0x300}, {0x2, 0x4e24, @remote}, {0x2, 0x4, @empty=0xfffffffe}, 0xfd, 0x4000000000, 0x80000000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) prctl$PR_GET_SECUREBITS(0x1b) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace(0xffffffffffffffff, 0x0) r8 = syz_open_procfs(r7, 0xfffffffffffffffe) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000740)=@req3={0x101, 0xfffffffffffffffa, 0x0, 0x0, 0x8000, 0x6, 0x5}, 0x103bb) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000700)='./file0\x00') ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @multicast1}}) sendmsg$key(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYPTR=&(0x7f00000008c0)=ANY=[@ANYPTR=&(0x7f00000007c0)=ANY=[@ANYBLOB="c841ab168855073dbd641dc751217750481ea3dc876bbe66091fcd2065099fd22bc4104c97e3de8f0729d92606ce0732a735da184464ad2dfa2901000000000000005dd28e705c94b220dca9c2a9acc1f3a6e9dd7ae3bee9bbecfda8e38fc0d5061a4be01dfb87da15482a1e6690dd3d83fff340030f8eac1266f7be4e3f340df8b5a45fb498c34a4651cc5d51c966e165d41d270937202f7891027cb180b7b7a87e80e2a0e42ae46f530444f9c19b5c2f5215669943af4d6bfbd727f38025dbf37ada1d592a6c54e7ecc40ee947", @ANYRES32=r6]]], 0x8}}, 0x0) fcntl$setsig(r3, 0xa, 0x35) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x0, 0x70, 0x401, 0x45b, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x0, 0x0, 0x0, 0xffffffff, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3d6, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000540)={0x4, 0x200000000000, 0x1}, 0xc) tee(r9, r3, 0x6, 0x6) fcntl$setown(r5, 0x8, r7) [ 2577.321926] R13: 00000000004c0d61 R14: 00000000004d2bb8 R15: 0000000000000006 [ 2577.351909] binder_alloc: binder_alloc_mmap_handler: 15725 20001000-20004000 already mapped failed -16 14:12:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x101002, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) 14:12:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0xf0ffffffffffff, 0x4a}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x200000) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000000c0)={{0x2, @rand_addr=0x8000, 0x4e23, 0x4, 'lblc\x00', 0x0, 0x1f, 0x3c}, {@local, 0x4e20, 0x2000, 0x7f, 0x1000, 0x5}}, 0x44) 14:12:44 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:44 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @reserved}) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:44 executing program 3: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x1010, r1, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="00fb1f0200dd8c062ee72501b55cd98feec231ebbf54734ba20db13b408ad2065ebc0f38cbc5ee888c556b1bdae3b2bb0bfa7bbcece480b6af88de4a36954e56fa33ea4fe4f2ac3eff174eedbf1f264076cae834fad767c22f0c9d0512fe3778eedb3565293f4166037c1c1df5244bbf34631cbe90677eaf6c34824af5ff66cd4ed68d42cf3a6935aae400000000000000000000"], 0x1f, 0x2) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000000c0)=0xabd, &(0x7f0000000140)=0x4) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3) 14:12:44 executing program 4 (fault-call:9 fault-nth:7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2577.693488] audit: type=1804 audit(1551449564.150:977): pid=15853 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/341/file0/bus" dev="ramfs" ino=484329 res=1 14:12:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200100, 0x0) accept4$inet6(r3, 0x0, &(0x7f0000000080), 0x80800) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:44 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() iopl(0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff00070005007492f83ca6f6e6d74b1b1eaebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x4, 0x20001) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2577.773287] audit: type=1804 audit(1551449564.170:978): pid=15861 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/341/file0/file0/bus" dev="ramfs" ino=484339 res=1 14:12:44 executing program 3: r0 = shmget$private(0x0, 0x7000, 0x80, &(0x7f0000ff6000/0x7000)=nil) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x7, 0x1ff, 0x2, 0x401, 0x0, 0x1f, 0x9, 0x6, 0x6fdd, 0x3ff, 0x6, 0x80}) shmctl$SHM_LOCK(r0, 0xb) r2 = socket$xdp(0x2c, 0x3, 0x0) bind(r2, &(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="c26042bf03b4"}, 0x80) 14:12:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x68, r1, 0xc0d, 0x0, 0x0, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x60, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r2 = dup2(r0, r0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) [ 2577.821357] FAULT_INJECTION: forcing a failure. [ 2577.821357] name failslab, interval 1, probability 0, space 0, times 0 [ 2577.916389] CPU: 0 PID: 15865 Comm: syz-executor.4 Not tainted 5.0.0-rc8+ #88 [ 2577.923704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2577.933062] Call Trace: [ 2577.935677] dump_stack+0x172/0x1f0 [ 2577.939344] should_fail.cold+0xa/0x1b [ 2577.943247] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2577.948361] ? lock_downgrade+0x810/0x810 [ 2577.952519] ? ___might_sleep+0x163/0x280 [ 2577.956689] __should_failslab+0x121/0x190 [ 2577.960940] should_failslab+0x9/0x14 14:12:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0x1, 0x2) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000380)=0x9) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x1f7) listen(r1, 0x100000001) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@rand_addr="8e6b561605011c5c8f22bcfd50b12a4c", 0x4e23, 0x80000001, 0x4e20, 0x9, 0xa, 0x20, 0xa0, 0x0, 0x0, r4}, {0x3, 0x8, 0x800, 0x2, 0x1, 0x400, 0x0, 0x8000000000000000}, {0x5, 0x0, 0x7f, 0x7fffffff}, 0x6, 0x6e6bb5, 0x0, 0x1, 0x1, 0x3}, {{@in=@local, 0x4d2, 0x7e}, 0xa, @in=@rand_addr=0xfff, 0x3505, 0x0, 0x0, 0xffffffffffffffff, 0x7f, 0x40, 0xde}}, 0xe8) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)={0x0, r3+30000000}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x1, 0x40, 0x8d}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000540)={r5, 0x100000000}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000005c0)={r6, 0x7e, "17a60b022611dce2c24aceab56a75514e8ccf5763d5aec3aad7fab121086c2eee90ab0976b57e9697bcc6736fd2ecd2221730e6e9f76ac32e8725b3b69da43fa7205f97034d2a006e801039933c26ed5df71d4d8caf6e4a98e135dca6fda81154026ede3f7f724c704e21d7a8e5e6297543aca77184192b64ff8040b28b1"}, &(0x7f0000000680)=0x86) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8000, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000500)=0x3) [ 2577.964753] kmem_cache_alloc+0x2b2/0x6f0 [ 2577.968907] ? lock_downgrade+0x810/0x810 [ 2577.973070] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2577.978647] ? check_preemption_disabled+0x48/0x290 [ 2577.983682] mmu_topup_memory_caches+0x97/0x490 [ 2577.988360] ? __lock_is_held+0xb6/0x140 [ 2577.992437] kvm_mmu_load+0x21/0x1300 [ 2577.996251] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 2578.001192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2578.006744] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2578.012319] vcpu_enter_guest+0x3d72/0x6290 [ 2578.016656] ? __mutex_lock+0x3cd/0x1310 [ 2578.020734] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 2578.024901] ? emulator_read_emulated+0x50/0x50 [ 2578.029584] ? lock_acquire+0x16f/0x3f0 [ 2578.033566] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 2578.038610] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2578.043462] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2578.048497] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 2578.052489] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2578.056648] ? mark_held_locks+0x100/0x100 [ 2578.060898] ? proc_fail_nth_write+0x9d/0x1e0 [ 2578.065404] ? proc_cwd_link+0x1d0/0x1d0 [ 2578.069476] ? __f_unlock_pos+0x19/0x20 [ 2578.073459] ? find_held_lock+0x35/0x130 [ 2578.077527] ? __fget+0x340/0x540 [ 2578.080988] ? find_held_lock+0x35/0x130 [ 2578.085053] ? __fget+0x340/0x540 [ 2578.088520] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2578.092684] do_vfs_ioctl+0xd6e/0x1390 [ 2578.096590] ? ioctl_preallocate+0x210/0x210 [ 2578.101010] ? __fget+0x367/0x540 [ 2578.104472] ? iterate_fd+0x360/0x360 [ 2578.108279] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2578.113847] ? fput+0x128/0x1a0 [ 2578.117142] ? security_file_ioctl+0x93/0xc0 [ 2578.121560] ksys_ioctl+0xab/0xd0 [ 2578.125030] __x64_sys_ioctl+0x73/0xb0 [ 2578.128929] do_syscall_64+0x103/0x610 [ 2578.132828] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2578.138036] RIP: 0033:0x457e29 [ 2578.141243] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2578.160158] RSP: 002b:00007f779d6cbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2578.167870] RAX: ffffffffffffffda RBX: 00007f779d6cbc90 RCX: 0000000000457e29 [ 2578.175145] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2578.182421] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2578.189694] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f779d6cc6d4 [ 2578.196966] R13: 00000000004c0d61 R14: 00000000004d2bb8 R15: 0000000000000006 14:12:44 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) waitid(0x1, r0, 0x0, 0x80000001, &(0x7f0000000040)) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket(0x9, 0xa, 0x2) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}}}, &(0x7f00000002c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000740)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000840)={@multicast2, @local, 0x0}, &(0x7f0000000880)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f00000009c0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000a00)={0x0, @multicast2, @broadcast}, &(0x7f0000000a40)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b80)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000006080)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000060c0)={'yam0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000006140)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000006240)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000006340)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000006440)={'vlan0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000006480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000064c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f00000065c0)={0x11, 0x0, 0x0}, &(0x7f0000006600)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000006700)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000006800)=0xe8) accept(0xffffffffffffff9c, &(0x7f0000006840)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000068c0)=0x80) getpeername$packet(0xffffffffffffff9c, &(0x7f0000006a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006a80)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000006ac0)={0x0, @broadcast, @remote}, &(0x7f0000006b00)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000006c80)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000006cc0)={@initdev, 0x0}, &(0x7f0000006d00)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000006d40)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000006d80)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000006e80)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000007780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x490000}, 0xc, &(0x7f0000007740)={&(0x7f0000006ec0)={0x86c, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8e3b}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x1, 0x5, 0x4, 0x4}, {0x7f, 0xc6, 0xff000000, 0x5}, {0x1000, 0x4, 0x1, 0x1}, {0x4, 0x5, 0x0, 0xffff}, {0x2, 0x7f, 0x5}, {0x9ed, 0x0, 0x3}]}}}]}}, {{0x8, 0x1, r8}, {0x13c, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x64}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x13c, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x50000000000}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x89}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x174, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x30000000}}, {0x8, 0x6, r17}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x0, 0x3, 0xa, 0x3e4}, {0x1, 0x7, 0x1, 0x4}, {0x5, 0x200, 0x8, 0xfff7}, {0xd86, 0x315, 0x10000, 0x1f}, {0x9, 0x9f39, 0x8, 0x8}, {0xfffffffffffffffb, 0x7, 0x9, 0x7fffffff}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r18}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r19}, {0x160, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x20b7a003}}, {0x8, 0x6, r20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xe3}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r21}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r23}}}]}}]}, 0x86c}, 0x1, 0x0, 0x0, 0x50}, 0x800) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xffffffffffffff2c) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r24 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r24, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:44 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x4004556b, &(0x7f0000000080)) 14:12:44 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='veth1\x00') fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) r1 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x3, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xcc, r2, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xb8, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2d}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff356f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x50}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ea}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x50, &(0x7f0000000040), &(0x7f0000000140)=0x1c) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x24}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e24, 0x1, @remote, 0x1}}, 0x818d, 0x8000, 0x10, 0x200, 0xfffffffffffffffc}, &(0x7f0000000300)=0x98) flistxattr(r0, &(0x7f0000000180)=""/42, 0x2a) 14:12:44 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = add_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="20f017ffd5ff877060d88e426cef6e821467c8ec2adb780ed636f322ab973aff303ab0c8e3421568b0850448cf4d52fa53b3523bc42443427b845cd8b1783cd39df00b645167c218b1d528", 0x4b, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, r2, r3) unshare(0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$void(r0, 0x5450) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r1, 0x115, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000180)={0xffffffffffff8001, 0x1, 0xe2a0}) 14:12:45 executing program 4 (fault-call:9 fault-nth:8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:45 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xff6, 0x100) write$eventfd(r0, &(0x7f0000000080), 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000240)) r3 = openat$cgroup_int(r1, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x200001) 14:12:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0x1, 0x2) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000380)=0x9) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x25, &(0x7f00000003c0)=0xb5e, 0x1f7) listen(r1, 0x100000001) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@rand_addr="8e6b561605011c5c8f22bcfd50b12a4c", 0x4e23, 0x80000001, 0x4e20, 0x9, 0xa, 0x20, 0xa0, 0x0, 0x0, r4}, {0x3, 0x8, 0x800, 0x2, 0x1, 0x400, 0x0, 0x8000000000000000}, {0x5, 0x0, 0x7f, 0x7fffffff}, 0x6, 0x6e6bb5, 0x0, 0x1, 0x1, 0x3}, {{@in=@local, 0x4d2, 0x7e}, 0xa, @in=@rand_addr=0xfff, 0x3505, 0x0, 0x0, 0xffffffffffffffff, 0x7f, 0x40, 0xde}}, 0xe8) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)={0x0, r3+30000000}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x1, 0x40, 0x8d}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000540)={r5, 0x100000000}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000005c0)={r6, 0x7e, "17a60b022611dce2c24aceab56a75514e8ccf5763d5aec3aad7fab121086c2eee90ab0976b57e9697bcc6736fd2ecd2221730e6e9f76ac32e8725b3b69da43fa7205f97034d2a006e801039933c26ed5df71d4d8caf6e4a98e135dca6fda81154026ede3f7f724c704e21d7a8e5e6297543aca77184192b64ff8040b28b1"}, &(0x7f0000000680)=0x86) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8000, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000500)=0x3) 14:12:45 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x6) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) dup3(r0, r1, 0x0) getgroups(0xffffffffffffffc4, 0x0) lstat(0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) setgroups(0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) [ 2578.820123] FAULT_INJECTION: forcing a failure. [ 2578.820123] name failslab, interval 1, probability 0, space 0, times 0 [ 2578.866136] CPU: 0 PID: 16123 Comm: syz-executor.4 Not tainted 5.0.0-rc8+ #88 [ 2578.873449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2578.882805] Call Trace: [ 2578.885409] dump_stack+0x172/0x1f0 [ 2578.889046] should_fail.cold+0xa/0x1b [ 2578.892947] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2578.898060] ? lock_downgrade+0x810/0x810 [ 2578.902219] ? ___might_sleep+0x163/0x280 [ 2578.906379] __should_failslab+0x121/0x190 [ 2578.910627] should_failslab+0x9/0x14 [ 2578.914439] kmem_cache_alloc+0x2b2/0x6f0 [ 2578.918598] ? lock_downgrade+0x810/0x810 [ 2578.922757] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2578.928299] ? check_preemption_disabled+0x48/0x290 [ 2578.933349] mmu_topup_memory_caches+0x97/0x490 [ 2578.938022] ? __lock_is_held+0xb6/0x140 [ 2578.942096] kvm_mmu_load+0x21/0x1300 [ 2578.945907] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 2578.950847] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2578.956394] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2578.961944] vcpu_enter_guest+0x3d72/0x6290 [ 2578.966270] ? __mutex_lock+0x3cd/0x1310 [ 2578.970347] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 2578.974514] ? emulator_read_emulated+0x50/0x50 [ 2578.979190] ? lock_acquire+0x16f/0x3f0 [ 2578.983174] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 2578.988203] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2578.993053] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2578.998086] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 2579.002070] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2579.006224] ? mark_held_locks+0x100/0x100 [ 2579.010465] ? proc_fail_nth_write+0x9d/0x1e0 [ 2579.014974] ? proc_cwd_link+0x1d0/0x1d0 [ 2579.019042] ? __f_unlock_pos+0x19/0x20 [ 2579.023020] ? find_held_lock+0x35/0x130 [ 2579.027084] ? __fget+0x340/0x540 [ 2579.030547] ? find_held_lock+0x35/0x130 [ 2579.034626] ? __fget+0x340/0x540 [ 2579.038089] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2579.042249] do_vfs_ioctl+0xd6e/0x1390 [ 2579.046230] ? ioctl_preallocate+0x210/0x210 [ 2579.050647] ? __fget+0x367/0x540 [ 2579.054115] ? iterate_fd+0x360/0x360 [ 2579.057929] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2579.063472] ? fput+0x128/0x1a0 [ 2579.066764] ? security_file_ioctl+0x93/0xc0 [ 2579.071192] ksys_ioctl+0xab/0xd0 [ 2579.074654] __x64_sys_ioctl+0x73/0xb0 [ 2579.078557] do_syscall_64+0x103/0x610 [ 2579.082467] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2579.087662] RIP: 0033:0x457e29 [ 2579.090861] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2579.109762] RSP: 002b:00007f779d6ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2579.117473] RAX: ffffffffffffffda RBX: 00007f779d6ecc90 RCX: 0000000000457e29 [ 2579.124743] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2579.132014] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2579.139283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f779d6ed6d4 [ 2579.146563] R13: 00000000004c0d61 R14: 00000000004d2bb8 R15: 0000000000000006 14:12:45 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x400000, 0x0) sendmsg$key(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x18}}, 0x10) mount(&(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x801, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380), 0xc, 0x0, 0x1, 0x0, 0x0, 0x84}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./file0\x00') getpgrp(0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300)=0x7fff, 0x4) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) execve(0x0, &(0x7f0000000440), &(0x7f0000000700)=[&(0x7f0000000480)='\x00']) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000580)=ANY=[@ANYBLOB="0000ac854cfe00c354a5014bc97430d6718a8802090000000000"], 0x1) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000000), 0x2) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'lo\x00\x00\x00\x00\x00\x7f\xff\xff\xe0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00`\x00\x00 \x00', 0x101}) socket$key(0xf, 0x3, 0x2) 14:12:45 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$CAPI_REGISTER(0xffffffffffffffff, 0x400c4301, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000580)) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f00000001c0)='cpuset\x00\xb1W\x98s\xd0c#\xdac\xa0 \t\x00\xba\xfd\x99\x10\xc3\n=\xcbP\x9c\xa8B\x9fx\x04\xefLS _\xf3\xc7x\x00\x96\b!\xe4H\xb1\x85\x1b\x95', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x3, 0xea, [], 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000440)=""/234}, &(0x7f0000000380)=0x78) r2 = add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000180)="63d8191fbe", 0x5, 0xffffffffffffffff) r3 = add_key(0x0, 0x0, 0x0, 0x0, r2) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000540)={0xa20000, 0x2, 0x923, [], 0x0}) keyctl$link(0x8, 0x0, r3) fcntl$setlease(r1, 0x400, 0x3) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x16, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) [ 2579.599508] device lo entered promiscuous mode [ 2579.691963] device lo left promiscuous mode [ 2579.850765] device lo entered promiscuous mode [ 2580.730650] net_ratelimit: 24 callbacks suppressed [ 2580.730658] protocol 88fb is buggy, dev hsr_slave_0 [ 2580.730687] protocol 88fb is buggy, dev hsr_slave_1 [ 2580.735660] protocol 88fb is buggy, dev hsr_slave_1 [ 2580.750779] protocol 88fb is buggy, dev hsr_slave_0 [ 2580.755805] protocol 88fb is buggy, dev hsr_slave_1 14:12:47 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x280, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') r3 = accept(0xffffffffffffff9c, &(0x7f0000000200)=@alg, &(0x7f0000000280)=0x80) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x40000, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff}) r6 = openat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x80) r7 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x3, 0x60000) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff9}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0xfffffffffffffffc, 0x800000000000) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7050000009e95bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x290000, 0x0) mkdirat(r8, &(0x7f0000000080)='./file0\x00', 0x132) getpid() getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, 0x0, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r9, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:47 executing program 3: bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000a8d000/0x1000)=nil, 0x1000, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$capi20_data(r0, &(0x7f0000000080)={{0x10, 0x7, 0x0, 0x83, 0x100000000, 0x7}, 0x36, "6c498ed91b341affabb5b8a2a87446f8dc3f55723ed885339da324f1ace4ec60901179ec29d8822d1d910bcaf4ea6f141c0e8a252502"}, 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) msgget(0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) fremovexattr(r1, &(0x7f0000000000)=@random={'system.', 'memory.high\x00'}) writev(r3, &(0x7f0000000700), 0x1000000000000059) 14:12:47 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1507000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:47 executing program 4 (fault-call:9 fault-nth:9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffff, 0x301000) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x7fffffff) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:47 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000200)="96", 0x1, 0x3fff, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000840), 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000007082b384a9fb5ca566cf74b3000000000000"], 0x14}}, 0x0) [ 2581.370664] protocol 88fb is buggy, dev hsr_slave_0 [ 2581.375920] protocol 88fb is buggy, dev hsr_slave_1 [ 2581.381061] protocol 88fb is buggy, dev hsr_slave_0 [ 2581.386143] protocol 88fb is buggy, dev hsr_slave_1 [ 2581.391279] protocol 88fb is buggy, dev hsr_slave_0 [ 2581.437773] FAULT_INJECTION: forcing a failure. [ 2581.437773] name failslab, interval 1, probability 0, space 0, times 0 [ 2581.487415] CPU: 1 PID: 16163 Comm: syz-executor.4 Not tainted 5.0.0-rc8+ #88 [ 2581.494736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2581.504094] Call Trace: [ 2581.504123] dump_stack+0x172/0x1f0 [ 2581.504147] should_fail.cold+0xa/0x1b [ 2581.504170] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2581.504191] ? lock_downgrade+0x810/0x810 [ 2581.504216] ? ___might_sleep+0x163/0x280 [ 2581.527682] __should_failslab+0x121/0x190 [ 2581.531929] should_failslab+0x9/0x14 [ 2581.535735] kmem_cache_alloc+0x2b2/0x6f0 [ 2581.535752] ? lock_downgrade+0x810/0x810 [ 2581.535768] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2581.535786] ? check_preemption_disabled+0x48/0x290 [ 2581.554638] mmu_topup_memory_caches+0x97/0x490 [ 2581.559320] ? __lock_is_held+0xb6/0x140 [ 2581.563395] kvm_mmu_load+0x21/0x1300 [ 2581.567211] ? kvm_apic_accept_pic_intr+0xef/0x1a0 [ 2581.572147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2581.577690] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2581.583241] vcpu_enter_guest+0x3d72/0x6290 [ 2581.587571] ? __mutex_lock+0x3cd/0x1310 [ 2581.591636] ? kvm_vcpu_ioctl+0x181/0xfa0 [ 2581.595795] ? emulator_read_emulated+0x50/0x50 [ 2581.600466] ? lock_acquire+0x16f/0x3f0 [ 2581.604441] ? kvm_arch_vcpu_ioctl_run+0x240/0x16e0 [ 2581.609463] kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2581.614311] ? kvm_arch_vcpu_ioctl_run+0x425/0x16e0 [ 2581.619344] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 2581.623329] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2581.627482] ? mark_held_locks+0x100/0x100 [ 2581.631716] ? proc_fail_nth_write+0x9d/0x1e0 [ 2581.636213] ? proc_cwd_link+0x1d0/0x1d0 [ 2581.640278] ? __f_unlock_pos+0x19/0x20 [ 2581.644256] ? find_held_lock+0x35/0x130 [ 2581.648322] ? __fget+0x340/0x540 [ 2581.651867] ? find_held_lock+0x35/0x130 [ 2581.655928] ? __fget+0x340/0x540 [ 2581.659393] ? kvm_vcpu_block+0xcd0/0xcd0 [ 2581.663541] do_vfs_ioctl+0xd6e/0x1390 [ 2581.667432] ? ioctl_preallocate+0x210/0x210 [ 2581.671841] ? __fget+0x367/0x540 [ 2581.675293] ? iterate_fd+0x360/0x360 [ 2581.679104] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2581.684644] ? fput+0x128/0x1a0 [ 2581.687928] ? security_file_ioctl+0x93/0xc0 [ 2581.692344] ksys_ioctl+0xab/0xd0 [ 2581.695802] __x64_sys_ioctl+0x73/0xb0 [ 2581.699707] do_syscall_64+0x103/0x610 [ 2581.703597] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2581.708781] RIP: 0033:0x457e29 [ 2581.711972] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2581.730871] RSP: 002b:00007f779d6ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 14:12:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = dup3(r4, r1, 0x0) r6 = dup2(r1, r3) ioctl$KVM_NMI(r4, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)="fb", 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x8a, 0x80000001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xfff, 0x100, 0x2, 0x1, 0x10001}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000300)={r7, 0x9, 0x5, 0x1, 0x1, 0x2, 0x10000, 0x3ff, {r8, @in={{0x2, 0x4e22, @remote}}, 0x2, 0x1, 0xfffffffffffffff8, 0x5, 0x5}}, &(0x7f0000000200)=0xb0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 2581.738575] RAX: ffffffffffffffda RBX: 00007f779d6ecc90 RCX: 0000000000457e29 [ 2581.745844] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2581.753111] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2581.760378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f779d6ed6d4 [ 2581.767646] R13: 00000000004c0d61 R14: 00000000004d2bb8 R15: 0000000000000006 [ 2581.906674] *** Guest State *** 14:12:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2581.927667] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 2581.984010] CR4: actual=0x0000000000002060, shadow=0x0000000000000020, gh_mask=ffffffffffffe871 [ 2582.027060] CR3 = 0x0000000000002000 [ 2582.047824] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 2582.076272] PDPTR2 = 0x0000080000008000 PDPTR3 = 0x0000000000000000 [ 2582.114258] RSP = 0x0000000000000f80 RIP = 0x0000000000000001 [ 2582.144220] RFLAGS=0x00000202 DR7 = 0x0000000000000400 14:12:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x20000, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2582.180716] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 2582.196026] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 2582.241194] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 2582.272732] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 14:12:48 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2582.294408] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 2582.314023] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 2582.353195] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 2582.388049] GDTR: limit=0x000007ff, base=0x0000000000001000 14:12:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2582.429085] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 2582.482091] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 2582.513701] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 2582.567694] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 2582.595687] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2582.634091] Interruptibility = 00000001 ActivityState = 00000000 [ 2582.672129] *** Host State *** [ 2582.713070] RIP = 0xffffffff811b36f0 RSP = 0xffff8880594778b8 [ 2582.757958] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2582.784388] FSBase=00007f2440e7e700 GSBase=ffff8880ae900000 TRBase=fffffe0000033000 [ 2582.819038] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 2582.860942] CR0=0000000080050033 CR3=000000005f702000 CR4=00000000001426e0 [ 2582.898454] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87201360 [ 2582.918962] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2582.925708] *** Control State *** [ 2582.929289] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 2582.940275] EntryControls=0000d1ff ExitControls=002fefff [ 2582.946128] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2582.953885] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 2582.963120] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 2582.969803] reason=80000021 qualification=0000000000000003 [ 2582.976254] IDTVectoring: info=00000000 errcode=00000000 [ 2582.981829] TSC Offset = 0xfffffa97035ea674 [ 2582.986162] EPT pointer = 0x000000009ffe701e [ 2583.452116] device bridge_slave_1 left promiscuous mode [ 2583.457836] bridge0: port 2(bridge_slave_1) entered disabled state [ 2583.556592] device bridge_slave_0 left promiscuous mode [ 2583.567496] bridge0: port 1(bridge_slave_0) entered disabled state [ 2583.832387] device hsr_slave_1 left promiscuous mode [ 2583.905691] device hsr_slave_0 left promiscuous mode [ 2583.953811] team0 (unregistering): Port device team_slave_1 removed [ 2583.965467] team0 (unregistering): Port device team_slave_0 removed [ 2583.976130] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 2584.027017] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 2584.116764] bond0 (unregistering): Released all slaves [ 2584.921047] IPVS: ftp: loaded support on port[0] = 21 [ 2585.049414] chnl_net:caif_netlink_parms(): no params data found [ 2585.115581] bridge0: port 1(bridge_slave_0) entered blocking state [ 2585.124025] bridge0: port 1(bridge_slave_0) entered disabled state [ 2585.135414] device bridge_slave_0 entered promiscuous mode [ 2585.144643] bridge0: port 2(bridge_slave_1) entered blocking state [ 2585.155242] bridge0: port 2(bridge_slave_1) entered disabled state [ 2585.164634] device bridge_slave_1 entered promiscuous mode [ 2585.188434] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 2585.198839] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2585.218983] team0: Port device team_slave_0 added [ 2585.227287] team0: Port device team_slave_1 added [ 2585.282921] device hsr_slave_0 entered promiscuous mode [ 2585.320947] device hsr_slave_1 entered promiscuous mode [ 2585.413761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2585.427244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2585.436862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2585.446896] 8021q: adding VLAN 0 to HW filter on device team0 [ 2585.456443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2585.464936] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2585.473217] bridge0: port 1(bridge_slave_0) entered blocking state [ 2585.479569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2585.500955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2585.508102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2585.516512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2585.524700] bridge0: port 2(bridge_slave_1) entered blocking state [ 2585.531098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2585.539141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2585.547347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2585.555339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2585.563925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2585.571721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2585.579337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2585.588889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2585.596232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2585.603857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2585.617524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2585.634563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2585.643617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2585.655597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 14:12:52 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e4d5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000180)={{0x3f, 0x4}, 'port1\x00', 0x6, 0x1000, 0x9, 0x2, 0x40, 0x4000000000000, 0xfff, 0x0, 0x6, 0x9}) 14:12:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x2, 0x0) 14:12:52 executing program 3: r0 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080), 0x10) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x0, 0x2, 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000001400)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/167, 0xa7}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/92, 0x5c}, {&(0x7f0000001200)=""/234, 0xea}, {&(0x7f0000000040)=""/10, 0xa}, {&(0x7f0000001300)=""/19, 0x13}, {&(0x7f0000001340)=""/17, 0x11}], 0x7}, 0x4000010) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 14:12:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x200000) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r2, 0x10f, 0x84, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:52 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:52 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0xa, 0x0, 0x4) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f0000000000)=""/213, 0xd5}, &(0x7f0000000100), 0x48}, 0x20) [ 2585.685258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2585.750670] net_ratelimit: 23 callbacks suppressed [ 2585.750678] protocol 88fb is buggy, dev hsr_slave_0 [ 2585.760779] protocol 88fb is buggy, dev hsr_slave_1 14:12:52 executing program 2: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) truncate(&(0x7f00000000c0)='./bus\x00', 0x1000) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x40000) socket$inet(0x2, 0x0, 0x0) [ 2585.870641] protocol 88fb is buggy, dev hsr_slave_0 [ 2585.875730] protocol 88fb is buggy, dev hsr_slave_1 [ 2585.980663] protocol 88fb is buggy, dev hsr_slave_0 [ 2585.985800] protocol 88fb is buggy, dev hsr_slave_1 14:12:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$tipc(0x1e, 0x7, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x4) 14:12:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x5421, 0x0) 14:12:52 executing program 2: [ 2586.100681] protocol 88fb is buggy, dev hsr_slave_0 [ 2586.105783] protocol 88fb is buggy, dev hsr_slave_1 14:12:52 executing program 2: 14:12:52 executing program 2: [ 2586.970680] protocol 88fb is buggy, dev hsr_slave_0 [ 2586.970713] protocol 88fb is buggy, dev hsr_slave_1 14:12:55 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff661170c8aba768000700050074aebe8e1f7145542c5cb7872417f5f7b8222ad508104f282695bd169a309500"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000040)={0x0, 0x2c, 0x1, @tid=r0}, &(0x7f0000000080)) 14:12:55 executing program 3: 14:12:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x5450, 0x0) 14:12:55 executing program 2: 14:12:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="ba9b1b34be3110ae4417bfd80a2f74692be84690381a4d1ca12e7c9192b76947dd21dcd60a81d8bb932745faaf2b5fceaa9205f6c3febc1c6f2c9b18ca20053868b5036099e17ced0ef97f40c5a2e824ef1ca3e9ee2bdb1172c5fefc4cf1e0acd5d241804ea282fbf038e6e403e1e672d3ac2759987abf3451226b6c50cd01a628a2a0b5c5dbc1b0d4653b7f74c215e866e070e83111ad3d04ba8e3e0d93", 0x9e, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0x8001) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) setsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000000)=0x800, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:55 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:55 executing program 3: 14:12:55 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x3234564e}}) 14:12:55 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:55 executing program 3: 14:12:55 executing program 2: 14:12:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x299, 0xfffffffffffffffd, 0x0, 0xfffffffffffffec9) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x8000200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:12:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x5451, 0x0) 14:12:55 executing program 3: 14:12:55 executing program 2: 14:12:55 executing program 3: 14:12:55 executing program 2: 14:12:55 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:55 executing program 3: 14:12:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) r4 = getuid() r5 = getuid() r6 = getuid() fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x5}, [{0x2, 0x6, r3}, {0x2, 0x0, r4}, {0x2, 0x5, r5}, {0x2, 0x2, r6}, {0x2, 0x4, r7}], {0x4, 0x1}, [{0x8, 0x1, r8}, {0x8, 0x0, r9}, {0x8, 0x1, r10}, {0x8, 0x0, r11}, {0x8, 0x3, r12}, {0x8, 0x2, r13}, {0x8, 0x0, r14}, {0x8, 0x3, r15}], {0x10, 0x1}, {0x20, 0x4}}, 0x8c, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2591.130666] net_ratelimit: 21 callbacks suppressed [ 2591.130674] protocol 88fb is buggy, dev hsr_slave_0 [ 2591.130703] protocol 88fb is buggy, dev hsr_slave_1 [ 2591.135718] protocol 88fb is buggy, dev hsr_slave_1 [ 2591.770662] protocol 88fb is buggy, dev hsr_slave_0 [ 2591.775795] protocol 88fb is buggy, dev hsr_slave_1 [ 2591.780915] protocol 88fb is buggy, dev hsr_slave_0 [ 2591.785951] protocol 88fb is buggy, dev hsr_slave_1 [ 2591.791072] protocol 88fb is buggy, dev hsr_slave_0 [ 2591.796126] protocol 88fb is buggy, dev hsr_slave_1 14:12:58 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = add_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="1a7b9759c127cc312e7bd41bebf033bc71fb5135e85d07e770b03e7d26f044fb12678a39badac92f1976ef9cd658feff7b", 0x31, 0xffffffffffffffff) keyctl$update(0x2, r1, &(0x7f0000000180)="41729c1c4fc4e895e25c95a810bdcb743edd03288a2f9344235b4c5ec9b5392856a27333d45c73e0a606d039ce6bfd9feecd0a85e468252177b97688f0eac5d0d85a", 0x42) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x5452, 0x0) 14:12:58 executing program 2: 14:12:58 executing program 3: 14:12:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget(0x1, 0x8000, 0x0, &(0x7f0000ff8000/0x8000)=nil) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10000, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000080)={0x2, 0x3a34}, 0x2) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5003) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:12:58 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:58 executing program 3: 14:12:58 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000180), 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() inotify_init1(0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) tkill(r0, 0x1000000000016) 14:12:58 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() clone(0x3000000a0160100, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x11) wait4(r1, 0x0, 0x1000000000000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x20002, 0x0) r2 = dup2(r0, r0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@hopopts={0x3f, 0x0, [], [@generic={0x2}]}, 0x10) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000001c0)) wait4(r1, 0x0, 0xa100000f, &(0x7f0000000100)) 14:12:58 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:58 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x7d10, 0x48000) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x10001, 0x10001, 0x1, 0x9, 0x0, 0xffff, 0x4000, 0x0, 0x1492b433, 0x7, 0x100000000, 0x101, 0x401, 0x96, 0xb, 0x20, 0x800, 0x5, 0x6, 0x1, 0x40, 0x8, 0x100000001, 0x7, 0x0, 0x1000, 0x6, 0x800, 0x101, 0x5, 0x7, 0xc06927, 0x400, 0x6, 0x7fffffff, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0x5}, 0x8040, 0xae, 0x0, 0x5, 0x9, 0x1, 0x7}, r0, 0xc, r1, 0xb) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="052f0100000040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095e023cef47abae396303e891d87c04927d1bd2c82dcae81cfb9cae0d99447c84f0b2974919fb0a4b740b1e164445abbdf2c7372c0a4c2e9f15d5105cece736eb6c889b0cdd380da42f06eb4d8f4650f9f64ca2cd6f0b5610811bc634b16b97673019f92734eaafafe9feb71ee38171d5944b8f9cd47"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080)=0x6, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:12:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x5460, 0x0) 14:12:58 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000240)="bfa54683f7e3e59d3f7fa748efcfbe11", 0x10) [ 2592.330665] protocol 88fb is buggy, dev hsr_slave_0 14:12:58 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$SIOCGETLINKNAME(r1, 0x89e0, &(0x7f0000000180)={0x2, 0x2}) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYPTR64, @ANYRESDEC=r1], 0x24) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200), &(0x7f0000000240)=0x4) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f0000000080)={0x9, 0x20, 0x7}) 14:12:58 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001780)='/dev/cachefiles\x00', 0x222443, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000018c0)={&(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001800)=[0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x6, 0x8}) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="052fc73cb00040ef3d63ec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8000000000000000095bd169a30952509bfa490b0b25ea3f7518d7be597826e8b2158"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x26000, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x10040, 0x0) socketpair(0x19, 0x0, 0x30000000, &(0x7f0000000180)) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) sendmsg$unix(r2, &(0x7f0000001740)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000280)="5faaf81f270b4628b59fc7565576d6b91ad168758319754a29ae00d7852dba373d67f63292c587a1c1af540d1665ff3f67c31445126e005ffdac677823e506a8b5a494366c80395c7d5453a3c4693e0aeca8c7456f56db2d41b2", 0x5a}, {&(0x7f0000000300)="fc0a5c0848cfd06f5ff75c2c2443d7e86205db0b4467657d77797d0c021eae236fcb1c7bece5315de19e22c1a8e69768744710a8bc30c13eed0afc2e14d1130c2f99011db99c40de91300a9abb3489770f38a6fa511202d0a7766a93c53c32c4a517f70e99c709f03d1e17d1396b5956f2488f98b7baee2da70b6c8e19c302c34eb76e02c5b96c513dc8eb984d2d51f521b4e6450f5de54ad16ed9e81d7c7a64", 0xa0}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="36a1f3128fcf438628973ec57d139e47c0dc9ad357059a3a2a2513bcf60ac987cc47c3724eb44881d2804144f65810f44024d4", 0x33}, {&(0x7f0000001400)="3a34224344881aa8cbe12a4a0025c3a7e05602c957cd5f067b59b80c22f8c321d79097f28b1395f919c6037bdc6a6cce00c8364600bb37211680726ff7399ddf9f26eb694e3af273e6ef1ce5255a99f45c90de2b1d9e93c38e6f7a924185572251e7b027c00e5ba3fd57235f07108b7bc4b3f91c44ca0cd6653466e6e5496630302fa683747e9fd5a7741af013e6f9e63ec8ba44a33c3857fcc2b32d839202b6572b564173017f380182ac", 0xab}, {&(0x7f00000014c0)="f5359f9cafe61a7aad5f755869e13d50bb16dc1f95361790481561aea9c258a518450863f09f11272e58ae2a05730d7f2f", 0x31}, {&(0x7f0000001500)="e5ff5706f7641dfce00134833c30058e95fba098f7f560c95161047ba288d1c4af36692e1ff0f9886500dca0093d60ad12b6e74e617ca2019efd001d1656285a326145f1847975febbea9b4c88ddbdf866bef2f7c190806c526d578dee01c3f05dc431ee08d78ef0fa23c3ab291781a19ea82dab3e9873ae773c35b99b715a901429fab4e276c6a1ca0d79b3cc173ab707fe57fdb1c7079738785664b4fcdace2ae36f939a7fd73894b97bb1f2e2f1276fc7d438c6fa7ef094", 0xb9}, {&(0x7f00000015c0)="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", 0xfc}], 0x8, 0x0, 0x0, 0x81}, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB="852a627300000000b1"], @ANYPTR=&(0x7f0000000240)=ANY=[]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000280)=[@increfs_done], 0x0, 0x0, 0x0}) [ 2592.605383] binder: 16428:16429 unknown command 536872576 [ 2592.631930] binder: 16428:16429 ioctl c0306201 200001c0 returned -22 [ 2592.656813] binder: 16428:16429 BC_INCREFS_DONE u0000000000000000 no match [ 2592.684697] binder: 16428:16429 unknown command 536872576 [ 2592.697582] binder: 16428:16434 BC_INCREFS_DONE u0000000000000000 no match [ 2592.704986] binder: 16428:16429 ioctl c0306201 200001c0 returned -22 14:12:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x40049409, 0x0) 14:12:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) socketpair$unix(0x1, 0x1000000000003, 0x0, &(0x7f00000001c0)) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000240)={0x0, 0x0, {}, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x103000, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x2, 0x0) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x80, 0x0) syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0x2, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480)='/dev/zero\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x2) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) add_key(0x0, 0x0, &(0x7f0000000400)="aa803199a0e537df8894c81eaaeafa1f06ea0caa17fa2866f84b08278099ddb8572d6681dc3f66df6bbf6e3efc61cb57c6b6eb14bee8d7082d7b427e09db9c4233934aa0a6a780f736395f7d1417ac9b", 0x50, 0xfffffffffffffffa) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={'crct10dif\x00'}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14:12:59 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x11, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0xfffffffffffffde5) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x66, 0x4) 14:12:59 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:12:59 executing program 3: r0 = epoll_create1(0x0) r1 = dup2(r0, r0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000)=0x2f, 0x8) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4005d52}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x0, 0xee6}) 14:12:59 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x800018, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:12:59 executing program 3: setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet(0xffffffffffffff9c, &(0x7f00000005c0), &(0x7f0000000600)=0x10) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'ipddp0\x00', {0x2, 0x4e20, @multicast1}}) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x1f, 0x101, 0x3ff, 0x1e, 0x18, 0xffffffffffffffff, 0x51a}, 0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getown(r1, 0x9) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1c0, 0x2) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000080)={0xffffffffffff29e0, 0x7}) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40500) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) pwritev(r2, &(0x7f0000000480)=[{&(0x7f0000000200)="aeab4b22aaabb68ff0", 0x9}], 0x1, 0x0) unshare(0x40000000) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x11) ioctl$NBD_CLEAR_QUE(r4, 0xab05) syz_open_dev$loop(0x0, 0x100000001, 0x0) ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f0000000100)=""/245) listen(r4, 0x6) r5 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r5, 0x80044323, 0x0) 14:12:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00') fstat(r1, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x608401) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYPTR=&(0x7f0000000540)=ANY=[@ANYBLOB="aec06bc7eaa1398116a783018ff0c658a04cba33c9fc1bbeafbdd91d77e9e1754810d757fa4c72666d2d104d78e228c945e057fbf8e78932f4f4ed75f05966e0a28ebd752934ccbbe45e444f62e98eb408a7d1ec0e66e880975fdc560b74f105ae919233feff1a1c08b617587aac04", @ANYRESDEC=r0]], 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00\x0e\x00'}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00\x00\x00\x02', {0x2, 0x0, @local}}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'nr0\x00', {0x2, 0x0, @multicast1}}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x208240, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x1, 0x12) pkey_alloc(0x0, 0xffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r6 = msgget$private(0x0, 0x104) msgctl$IPC_STAT(r6, 0x2, &(0x7f00000003c0)=""/10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) close(r7) socket(0x19, 0x80802, 0x7) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') preadv(r9, &(0x7f0000000480), 0x10000000000001ed, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r9, 0x808c563d, &(0x7f0000000600)) 14:12:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x4004ae8b, 0x0) 14:12:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2593.396003] IPVS: ftp: loaded support on port[0] = 21 14:12:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x4004ae99, 0x0) 14:13:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x240000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000240)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) fcntl$getflags(r1, 0x3) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x1c3003, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000001c0)={0xd6a, 0x4b564fff, &(0x7f0000000140)="f863ef86059ca3c2f2ac9a63943180c03c5e5afca455554c66d50051bfa3a170bb3c2b54eac95041e674eea27fd492f4ba77a76769976d2c557ad43234997743be4af81ef9bbe05a27e81dbeb60566c1b0c04a92f3a63e08070925791a6bf254fa8c9b", &(0x7f0000000000)="d1d2f5d9e74f107b691ae4971487aa5770b27009a1e311f53a57a5249c4f776145bfcac85f2bafba2aa1f4f48ba96d62e72645", 0x63, 0x33}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="7261777f0000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x48) 14:13:00 executing program 2: openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000019c0)=""/4096, 0x1000}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./\xba\x8a\xf2\xbe\xe9cg\xdc\v\xe5`\x84~\x83@\x15r\xe4\x05\xe0\xc8\xe6\x98a\x84\x1b\xa5\x1f\x94\xeb\xd1CU\x9aH\xed:\xa9\xe1\xa2\xfft\x93T3#\xe0\x06\xf0\x9d\x05SU\vy\xdb5\x11\x95\x96\xec?\x10q\xb0\xa5\xc3\x00[\xb7\t\xf28Ro\xfc\xe2;R\xba\xd3]]\xdf\xd9B\x9a3Bo\xa8g\x1b\x87\xfd\xbfn\xe2@\xfb\xf6{\xd2', 0x200002, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000140)=@buf={0xa3, &(0x7f0000000080)="d6d1285e2f16f034bc31f55b48f002d4d4de8929e83ff1e04eb6a62055d712c946df782182bde4788b723460d41a268d1f5aba0631e0ba4eeec722c00c9d088f5ec2ba20f30cc18934b8daa910008e9fd93a4a36e577fdd016ba76250a1b2995477013d41df329fe677d007fbb73f9c28a8944b72e808d2f8739b1776a325a477658bd1df8fa35518e1998083a4473c62587eaf042405c7bdc684fb1e094bcfcbf890c"}) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) open$dir(&(0x7f0000000400)='./file0\x00', 0x100000006c400, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004b00)={0x0, 0x0}, &(0x7f0000cab000)=0x16c) setresuid(r5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x388, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x41, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000440)={0x0, 0x0, 0x8, {0x0, 0x1c9c380}, 0x80, 0x100}) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x9) r7 = socket(0xa, 0x3, 0x8) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{0x3, 0x80000, 0x5, 0xfffffffffffffffd}, {0x7fefadfb, 0x8, 0x10000, 0x9}, {0x9, 0x20, 0x100000001, 0x80}, {0xffffffffffffff01, 0x984c, 0xfffffffffffffffd, 0xc96}, {0xffffffff, 0x3, 0x0, 0x5a}, {0x3f, 0x112000, 0xfffffffffffffff8, 0xc0}, {0xe60, 0x5, 0x100, 0x1}, {0xa7a, 0x2, 0xffffffffffffff81, 0x4}, {0x3, 0x7, 0x4, 0x7}]}, 0x10) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000140)={'nat\x00'}, &(0x7f00000001c0)=0x54) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={'bridge0\x004\x01\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89a1, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000003c0), &(0x7f0000004780)) syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') ptrace$getsig(0x4202, r4, 0x40ffff, &(0x7f0000004c00)) getpgid(r4) setxattr$security_ima(&(0x7f0000004b40)='./file0\x00', &(0x7f0000004b80)='security.ima\x00', &(0x7f0000005100)=ANY=[@ANYBLOB="02d92c76daf59225e29f4f21f740da06ffbbaa5458c998e202ec89c622d41331e09970647da1040fd7a0d594f689898980c4e6e9a4b84ea300a63de5704163f6d820e3db7b769e651f42eaf651fece40140f66f0349cf1d8d2c08b32d7ba5bb82d0f6aebc49377f1ce65918ffab8d9948a038caedbb49631a1b21922d884542385afaa31e6d870a5f65818ad530ffaf85732ffb69281ac4d89e1a29a4cacd30b5bd1202bf4ec206de32fbae8056157f02daf23967c5ecdd2f6f4c8a33b2d000000"], 0x1, 0x2) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000004e00)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000200)={{0xffffffffffffffff, 0x3, 0x8000, 0x10003, 0x80000000}}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2001, 0x1) 14:13:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x4020940d, 0x0) 14:13:00 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 2593.835948] bridge0: port 2(bridge_slave_1) entered disabled state [ 2593.844486] bridge0: port 1(bridge_slave_0) entered disabled state [ 2593.929504] IPVS: ftp: loaded support on port[0] = 21 14:13:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)={0xffffffffffffffff, 0x0, @pic={0x60bb, 0x9, 0x5, 0x4, 0xfff, 0x3, 0x7fff, 0xc9ac, 0x9, 0xfffffffffffffff7, 0x43fe, 0x853, 0x3, 0xffffffff, 0xfffffffffffffffc, 0x65}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:13:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x4048ae9b, 0x0) [ 2594.861439] device bridge_slave_1 left promiscuous mode [ 2594.867779] bridge0: port 2(bridge_slave_1) entered disabled state [ 2594.911749] device bridge_slave_0 left promiscuous mode [ 2594.917212] bridge0: port 1(bridge_slave_0) entered disabled state 14:13:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x4090ae82, 0x0) [ 2596.490666] net_ratelimit: 23 callbacks suppressed [ 2596.490675] protocol 88fb is buggy, dev hsr_slave_0 [ 2596.500730] protocol 88fb is buggy, dev hsr_slave_1 14:13:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000004ac0)={0x0, 0x0, 0x2080}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x420000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1000, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}, 0x36d}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x3e0, 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) finit_module(r2, &(0x7f0000000280)='/dev/mixer\x00', 0x3) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) write$FUSE_OPEN(r2, &(0x7f0000000000)={0x20, 0x0, 0x7, {0x0, 0x2}}, 0x20) 14:13:03 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bee1f7145542c5cb7872417f5f7d4debbe115796e9e5df3ebbc222ad54f282695bd169a3895da126bb95ad78f05caead011754c929e63ff000000000000000000000000000000291840a130cff16f640cb7115f5acb3192c4f60a179cf995784e88d6fabe9f5d7bd4305c8b6849398e1a929c0e919c8ad37d7737e07969a2d1c5f6a522d54618a87e43a2fb6e6b371c311233a684be69405f205b61d70b72ce6e4bd64ccae551e8d99277825ecbcbebd6d32143e9979d9bf64693e3312786ac1d620d381e11e613ad49fa2b84e4427f9ae93f49da3ff121d10df65ed1330d"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:03 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfd95, 0x4, 0x0, 0x0) shmget(0x1, 0x1000, 0xc, &(0x7f0000fff000/0x1000)=nil) r2 = shmget(0x1, 0x4000, 0x54000808, &(0x7f0000007000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x2000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) socketpair(0x0, 0x2, 0x1f, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="7e7ffe356be51707ea987b40967b887ea870ea6b189c68773cfe89ebe6dd0688a5866113c2a60c8e755b2b62e948bdbbc9f75e588f2b5f181beb58b365566c27b34eb1677e93cda9ca890c33c22fc69da8855a9517238dac0a51a6915e47970ee84a594d4309314f7b3c45d5eaa4ced06eec35179a74eed3a61ff2ba783b3cddbc925c2480e6c8d2ad058d27bdac0e4d62bd5731c7006567cf3c05b54e17afc173685b0ca1def2839afcc0711ccb8029ad810a8da9b3cf3c59b73053beb594c2", 0xc0}], 0x1, &(0x7f0000000180)="38a5006ddff8e47779b0c4a1449d23c0e6b247edf85a1e2ca96c661260150cb06f49ccf7db9f0586f20f1c52d7657404a0ca3700ab439bd8c0049f10468e969d6462acdb8b44c1fdccf1e0fbfa8153271da8d65a961bff3b6fb9e62bf355a69f0e5b5ce146cc63ffd5559822cd623d1411eb767e1094704b8cb109ff4650c3f519ce", 0x82, 0x4040040}, 0xc840) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0xff, 0x200000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f00000002c0)={0x3, 0x2, 0x0, 0x0, 0xdc}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000440)="4d343dbc2dcf03be65df50a24c720bdb1a01b986d3e78dd00ea826ab497f36e50667ce5d7f78de6545fe9e745776031f120d1c89e528d368dcb097c7a500a8af90a184e61643fbfcd448bcbfba969660f31bfb8e846e5a7b00f34050f6fdac7016ff385c9523", 0x66, 0xfffffffffffffff8) keyctl$describe(0x6, r6, &(0x7f00000004c0)=""/144, 0x90) 14:13:03 executing program 3: write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="420000aa77a44300de6c6252bb74f04dc4aef000020000000000002100787d99818e79ea129c29fc6b361b9f9ecaff79000000002d3a6d318d356f56696e75788100000030b926766d6e657431009690b3f4ead9fde09c5e"], 0x42) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000280)='-:^)eth1#em1:selinux#eth0\xb9&vmnet1') add_key(&(0x7f00000004c0)='rxrpc_s\x00', &(0x7f00000000c0), &(0x7f0000000440)="0659ff9eb323fd81a8966e8bf1f80ece9c7c8a851e20477f1774175eae6064740539e22baa7f09eaf9553681c9d7fb2fb84db092eb6fe478fd408442dd0752ef438770857dfacfcdf89de5ed355d9b58eef41c48c8d105ceb97f052ab87f0c079957e8fba75c8d", 0x67, r0) fsetxattr(r1, &(0x7f00000002c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000300)='nodevself\x00', 0xa, 0x2) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) 14:13:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x4138ae84, 0x0) 14:13:03 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x3, &(0x7f00000002c0)={&(0x7f0000000280)=""/62, 0x3e}) ptrace$setopts(0x24205, r0, 0x0, 0x5) tkill(r0, 0x2f) r1 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x7fff, 0x841c0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001340)={r1, 0x10, &(0x7f0000001300)={&(0x7f0000000300)=""/4096, 0x1000, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001380)=r2, 0x4) dup2(r3, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000180)="d11cc8220750b5c0ee2ba87729c07f3a5240df842922823159dacb1be116df5ed5fad3e4a29152336574ceada9ac8982d32cd8c86ce563629d956637e0263d8cb13279bb880c868d5e96c3ebf65a0fe508478c17c2de6e5fc14912b7c9c93a8d807eb61789b506bd49d8bf54d93904d34936a830b8c1400c46a910256f6408a08f7ea5cbd6fb8494668452a5f814eab961e2732163beb89cc4ad94a2") ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f00000000c0)={0x6, 0x1, 0x26}) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000040)=0x1000) ptrace$cont(0x7, r0, 0x0, 0x487) 14:13:03 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x404600, 0x40) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040)=0x6, 0x4) write$P9_RSTAT(r0, &(0x7f0000000080)={0x60, 0x7d, 0x1, {0x0, 0x59, 0x3, 0xe3, {0x10, 0x3, 0x7}, 0x1a000000, 0x80000000, 0x101, 0x80, 0x0, '', 0xb, 'vboxnet0em1', 0x1b, 'usertrustedposix_acl_access'}}, 0x60) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x10, &(0x7f0000c7df60)={0x7ff, @in6}, &(0x7f000064b000)=0xa0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2}, &(0x7f0000000200)=0x10) 14:13:03 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80, 0x101) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x1, 0x1, 0x4000000000002, 0x0, 0x0, 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f00000000c0)='syzkaller1\x00'}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:03 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4140, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000180)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r0, r1, 0x0, 0x9, &(0x7f0000000080)='ppp0ppp0\x00', r2}, 0x30) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x41a0ae8d, 0x0) 14:13:03 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffe}, 0x0, 0x8) close(r0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@multicast1, @in6}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ba3dd855d8f9f7004288620b0165db955245ac1970c9aee85af85e5c61fd46aabd2598a4cde023223c961ce1082407adc7229247d2049dec09adce65f8047c6fed2b4e2a9c7ec3b48fad7261e4ae6f6da3fbd03a71a643d88ad05607f795880e8d42", 0x62) write$nbd(r1, &(0x7f0000000240), 0x10) socket$bt_cmtp(0x1f, 0x3, 0x5) fchmodat(r0, &(0x7f0000000000)='./file0\x00', 0x1) [ 2597.370728] protocol 88fb is buggy, dev hsr_slave_0 [ 2597.375919] protocol 88fb is buggy, dev hsr_slave_1 [ 2597.381248] protocol 88fb is buggy, dev hsr_slave_0 [ 2597.386927] protocol 88fb is buggy, dev hsr_slave_1 [ 2598.010631] protocol 88fb is buggy, dev hsr_slave_0 [ 2598.015743] protocol 88fb is buggy, dev hsr_slave_1 [ 2598.020877] protocol 88fb is buggy, dev hsr_slave_0 [ 2598.025935] protocol 88fb is buggy, dev hsr_slave_1 14:13:04 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000cc0)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="48e1d0d2c5efd9dfbe1bfb1d477037dd28244f699c01", 0x16}], 0x1}, 0x2}, {{&(0x7f0000000740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, 0x0}, 0x53a}], 0x2, 0x1) getrandom(&(0x7f0000000c00)=""/126, 0x7e, 0x0) r2 = gettid() r3 = memfd_create(0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x20601, 0x0) readlink(0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x0, 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000380)='security.ima\x00', 0x0, 0x0, 0x2) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$getownex(r5, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) kcmp(r2, r2, 0x0, r6, r4) ioctl$KIOCSOUND(r4, 0x4b2f, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000009c0)}}, 0x18) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@local}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000000000c000500000000007000f8ffffffffffffff02000000000000005043893485abbbab7b8dd07e7a9dc214181cb56e5793ea5fcdc5e42c2030a9ec1d21e095a8df52b3f3bb9f85f6268427de735ffdba750f65ea2ec22e61a0833b70bc6aa85b4f893a31eebb2475bc78c0011da408805d68a0bd975f2c6561cf8d011529286fec73df9659c75b14c9d81cd8586f78a164d9eb6979e3661e43fd4b64e09a8e49dd50d16bddd05d98fbdbadcb66"]) request_key(0x0, &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='!-\x00', 0xffffffffffffffff) accept(r0, &(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000100)={0x8002, 0x0, 0x1f, 0x4, 0x10001, 0x6}) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f00000005c0)=""/143) request_key(&(0x7f0000000980)='user\x00', &(0x7f0000000c00)={'syz', 0x1}, &(0x7f0000000c40)='\x00', 0xfffffffffffffffc) close(r4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000000)=0xe8) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000040)=@can={0x1d, r7}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)="d36abf44d0cdd67d4dc93ef4a80dbab6059ec4e55cea965d2765fb1165a766f459ad67782c2eb4807c403ce656c06bb6435bbbe9cc9f8b49", 0x38}], 0x1}, 0x40000) 14:13:04 executing program 0: r0 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@nl, &(0x7f0000000180)=0x80) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000200)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 14:13:04 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x8004ae98, 0x0) 14:13:04 executing program 3: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000140)=0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000100)=0x7, 0x61a450bf31dfdfb6) accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x80800) sendto$inet6(r0, &(0x7f00007a8fff), 0x3a7, 0x20000000, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 14:13:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:13:04 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000040)=0x2, 0x4, 0x2, 0x0, 0x0, 0xfffffffffffffffc) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:04 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) clock_nanosleep(0x4, 0x1, &(0x7f0000000040), &(0x7f0000000080)) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2598.213297] Unrecognized hibernate image header format! [ 2598.227681] PM: Image mismatch: architecture specific data [ 2598.311869] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:13:04 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x101, 0x9, 0xfffffffffffffffa, 0x6}}) prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)={0x3, 0x0, [{0x4, 0x88, &(0x7f0000000180)=""/136}, {0x15000, 0x35, &(0x7f00000000c0)=""/53}, {0xd000, 0xd6, &(0x7f0000000240)=""/214}]}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050073aebe8e1f7145542c5cb702000000000000006e9e5df3ebb8222a7c13ae9b5cd201942e663e7e7dd508104f282695bd169a308a"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) inotify_init() getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:04 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x400007) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x84000, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x70a000) 14:13:05 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ioctl$int_out(r1, 0x5460, &(0x7f0000000040)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:05 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000180)={0x2, 0x0, 'client1\x00', 0x0, "7ff025166cd01fa5", "cd9f9fae346cdafa720f5afcc059ce1870caf21ab7db1f93b136e36967da7a0f", 0x8, 0x8}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:05 executing program 2: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000180)={0x2, 0x0, 'client1\x00', 0x0, "7ff025166cd01fa5", "cd9f9fae346cdafa720f5afcc059ce1870caf21ab7db1f93b136e36967da7a0f", 0x8, 0x8}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:05 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x2, 0xa}}, 0x20) [ 2598.766389] binder: 16684 RLIMIT_NICE not set [ 2598.786350] binder: 16679:16685 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2598.798601] binder: 16685 RLIMIT_NICE not set 14:13:05 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x715}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x8090ae81, 0x0) 14:13:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) semget(0x3, 0x1, 0x240) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = dup(r1) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000000)=0xff) unshare(0x3) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:13:05 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x7, 0x8000}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x400}, &(0x7f00000001c0)=0x8) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:05 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) r1 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) ioctl(r0, 0xffffffffffffffb7, &(0x7f00000000c0)="4472adc1f5f5430391c09fe169c7fb361ff712ce31caa9547b2d9d0bf26d0ecbf4af7083d35c841669a22effb9a2b7307c9951d56095e78426c082cbfe6eefc882d0b34b8712f564ef96f0c950b600000000000000000000") 14:13:05 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000010}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x39) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:05 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x3, 0xe2, "8dbc56608d1c6c59a36fd9c60c73128544e9651d02b4a8a9b2c3e414a9f1d706bf277d975724ed8349d04a387d23b4574afb8e95f4c0d833b555664cdb522d6ac3f78fc20000d53009e206d8bda344f8b7ee3c7a95a848bad04ac25303dd47e7084edd5bcc0477c2c4283b077e018a7cf2528685d5cdc06be2a6a2c937b3d6bda5a10571d2a5bb81a4d4d8cba11e3c7dfe2d6bb2db949e978a49b359664d24e4cdf9f645378e09bc7614ec8d4c2e7da59bf95f5278cd572beaac0d57e48172068dd5057f9eb26d9f10833cc1ee7be9b63baab4377f8f904847704f0efe0aaa723718"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000140)) ioctl$TUNSETPERSIST(r0, 0x801054db, 0x0) 14:13:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x8138ae83, 0x0) 14:13:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000080)={0x2, "6fe5ae0fb48e63e99010386e848d3c11671977f03fadb96722cd5fc150f2c1c1", 0x3, 0xffffffff, 0x7ff, 0x0, 0xe}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40800, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000140)={0x7, 0x6d, 0x2}, 0x7) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000007c0)=@nat={'nat\x00', 0x1b, 0x5, 0x4a0, 0x240, 0xd0, 0x240, 0x338, 0x240, 0x408, 0x408, 0x408, 0x408, 0x408, 0x5, &(0x7f0000000180), {[{{@ip={@empty, @multicast1, 0x0, 0xffffffff, 'gre0\x00', 'netdevsim0\x00', {0xff}, {}, 0xa, 0x3, 0x24}, 0x0, 0x98, 0xd0}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x5, @dev={0xac, 0x14, 0x14, 0x10}, @multicast2, @gre_key=0x7, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x138, 0x170, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x3, 0x1, 0x1, 0x1}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x10000, 0xe, 0x2, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xea2, 0x20, 0x58}}}, {{@ip={@broadcast, @broadcast, 0xffffff00, 0xffffffff, 'syz_tun\x00', 'veth1_to_bond\x00', {}, {}, 0xa9, 0x1, 0x8}, 0x0, 0x98, 0xd0}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @port=0x4e24, @gre_key=0x6}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x200, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:05 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = inotify_init1(0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000000040)="4625880c15d3eadcbee97c2f3a161be598d5d864175eb87bbff80c6c209b84850f3dd9205920600154ee76f7e4e92c4d6a15dc59ceb36052cdd728e3a188dca983e79b733882f50c22c5b73a9de668126850642263d1856211fadcf3e022ae0c6f3ebdb925b2ef40b1beab7583a088318beb9cf6cb4fefb89112c9f6fe8fec545f8debe928f1c9accbcd14cea7", 0x8d, r1}, 0x68) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x2f, r0, 0x0, 0x2) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2601.530660] net_ratelimit: 16 callbacks suppressed [ 2601.530668] protocol 88fb is buggy, dev hsr_slave_0 [ 2601.530698] protocol 88fb is buggy, dev hsr_slave_1 [ 2601.535701] protocol 88fb is buggy, dev hsr_slave_1 14:13:08 executing program 2: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000180)={0x2, 0x0, 'client1\x00', 0x0, "7ff025166cd01fa5", "cd9f9fae346cdafa720f5afcc059ce1870caf21ab7db1f93b136e36967da7a0f", 0x8, 0x8}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:08 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x400) r2 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0xffff, 0x4) listen(r0, 0x10000000000b) listen(r2, 0x0) listen(r2, 0xb11) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)) 14:13:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0x81a0ae8c, 0x0) 14:13:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timerfd_create(0xb, 0x80800) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:13:08 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:08 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000080000000000ffffff7f000000000000000000000000000000feffffff010000001100000016000000000000000000106cf4aa4ac99e8d000000006c6f0000000000000000000000000001000000000000000000000000100000fa0000000000000000000000f98a59bb3b3eea24000000000005000000aaaaaaaaaa0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) syslog(0xf, 0x0, 0x0) 14:13:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) 14:13:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x14, 0x40) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x400002, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0x10000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000006000/0x18000)=nil, 0x0, 0xff39, 0x8, 0x0, 0xfffffe7d) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) unshare(0x10000400) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000080)={0x0, 0x0, @ioapic}) shmget$private(0x0, 0x3000, 0x40, &(0x7f000000a000/0x3000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x1000, 0x8000000000) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x297ef) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES64=r0], 0xfed3) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000)=0x80000001) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xfffffffffffff298, 0x10000) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000180)={@initdev, 0x0}, &(0x7f0000000240)=0x14) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000280)={'raw\x00'}, &(0x7f00000001c0)=0x54) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={@dev={0xfe, 0x80, [], 0x22}, 0x31, r2}) [ 2602.170638] protocol 88fb is buggy, dev hsr_slave_0 [ 2602.175770] protocol 88fb is buggy, dev hsr_slave_1 [ 2602.180893] protocol 88fb is buggy, dev hsr_slave_0 [ 2602.185952] protocol 88fb is buggy, dev hsr_slave_1 [ 2602.186032] protocol 88fb is buggy, dev hsr_slave_0 [ 2602.196057] protocol 88fb is buggy, dev hsr_slave_1 14:13:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xc0045878, 0x0) 14:13:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:13:08 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8366dd508104f282695bd1e9a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) mq_unlink(&(0x7f0000000040)='\x00') getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x200000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000240)={{0x3, 0x7, 0x401, 0x7, 'syz1\x00', 0x1}, 0x6, 0x100, 0x79c0, r0, 0x9, 0x1000, 'syz0\x00', &(0x7f0000000180)=['/dev/loop-control\x00', '/dev/loop-control\x00', '/dev/loop-control\x00', '/dev/loop-control\x00', 'keyring\x00', '/dev/loop-control\x00', 'eth0vmnet0lo\x00', '\x00', '/dev/loop-control\x00'], 0x82, [], [0x1f, 0x800, 0x5, 0x8000]}) ptrace$cont(0x7, r0, 0x0, 0x9) [ 2602.730703] protocol 88fb is buggy, dev hsr_slave_0 14:13:11 executing program 2: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000180)={0x2, 0x0, 'client1\x00', 0x0, "7ff025166cd01fa5", "cd9f9fae346cdafa720f5afcc059ce1870caf21ab7db1f93b136e36967da7a0f", 0x8, 0x8}) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xc0189436, 0x0) 14:13:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) r2 = accept(0xffffffffffffff9c, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000100)=0x80) sendmsg$rds(r2, &(0x7f0000002cc0)={&(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f00000001c0)=""/255, 0xff}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f0000000340)=""/34, 0x22}], 0x4, &(0x7f0000002b40)=[@rdma_args={0x48, 0x114, 0x1, {{0x6, 0x4}, {&(0x7f00000007c0)=""/4096, 0x1000}, &(0x7f0000002900)=[{&(0x7f0000000480)=""/25, 0x19}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/202, 0xca}, {&(0x7f00000017c0)=""/102, 0x66}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/188, 0xbc}], 0x6, 0x20, 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x10001, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0x100, 0x2}}, @fadd={0x58, 0x114, 0x6, {{0xfffffffffffffe00, 0x20}, &(0x7f0000000680)=0x74, &(0x7f0000002980)=0xe1, 0x4000000000, 0x7f, 0x2bbc0, 0x9, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000029c0)=""/178, 0xb2}, &(0x7f0000002a80), 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x21b, 0xffffffffffff2ce8}, &(0x7f0000002ac0)=0x5, &(0x7f0000002b00)=0xfffffffffffffffc, 0x3, 0x5, 0x7, 0x8, 0x2, 0x193}}], 0x158, 0x10}, 0x24000005) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) 14:13:11 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1507}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:11 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000180)={0x28}, 0x28) r1 = syz_open_dev$adsp(&(0x7f0000000380)='/dev/adsp#\x00', 0x1, 0x2) ioctl(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000240)={{0x3f, 0x80000000}, 'port1\x00', 0x10, 0x20000, 0x8, 0xfe7, 0x7fff, 0x7, 0x0, 0x0, 0x7, 0x200}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:13:11 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000500)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x4, 0x10}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0xff, 0x30}, 0xc) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x10000}) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000040)={0x1f, 0x2000000013}) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000080)={0xc, "735dc92c49cdc02be6d6e6d3"}) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000180)={0x2, 0x7}) 14:13:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xc018ae85, 0x0) 14:13:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x3, 0x0, @pic={0x10001, 0x7, 0x2, 0x5, 0xe1e2, 0x8, 0x3ff, 0xfffffffffffffffa, 0x6, 0x0, 0x8001, 0x1, 0x2, 0x0, 0x0, 0x9}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) write$FUSE_GETXATTR(r2, &(0x7f0000000000)={0x18, 0x0, 0x4, {0x5}}, 0x18) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$TCXONC(r3, 0x540a, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:13:11 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$usb(0x0, 0x20, 0x20000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000180)={0x0, {r1, r2+10000000}, 0x0, 0xff}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0), 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000500)=""/217) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) lsetxattr(0x0, 0x0, &(0x7f0000000100)='/dev/dri/card#\x00', 0xf, 0x1) bind$can_raw(r3, &(0x7f0000000140), 0x10) setsockopt(r3, 0x65, 0x1, &(0x7f0000000700)="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", 0x250) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/214, 0x484) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x45d, 0x4}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=0x7ff) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x400000, 0x0) close(r3) getdents64(0xffffffffffffffff, 0x0, 0x0) 14:13:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xc020660b, 0x0) 14:13:11 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$usb(0x0, 0x20, 0x20000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000180)={0x0, {r1, r2+10000000}, 0x0, 0xff}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0), 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000500)=""/217) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) lsetxattr(0x0, 0x0, &(0x7f0000000100)='/dev/dri/card#\x00', 0xf, 0x1) bind$can_raw(r3, &(0x7f0000000140), 0x10) setsockopt(r3, 0x65, 0x1, &(0x7f0000000700)="3b3561ac00814a4548c78d250bdd795fd74ffc69a3565b45f64e53148f3f1ba2f9ef4cd9bc9accca5a9e66aa66083c540e1c390ef3733d2d4aa8d18ac54b2a11459a84cd69778e626bf2180598cf27123f9e627bf4e0467e04f91dd4c9824be1fec0ce58dd168688e6c45a2d8381f4c9a4dfa0fdbb9c9f9e0ffe482aabc46830685fd52c4413cd4d9929999530dec36e01bfcd34099fbe33339b575ff07af0ec8c1a3c4470c103362070b6230923b6a576f83bd964cdafeaeec9e341d82f90054773b4bb1886feeab2b03ec217b9c7e1caba03da6c718f16cbf30431abe8bb25295fb02cdf4fe3a04f89cf9cc5152d48d92b3f8c9e53beb90474488822da8c6ff25760c06fa435f9d0854024945f872c2d61c78c2db8a5d40e8acbd8c00e008aa50d36c09ac673fb47850a7bf8c3394a2e8112c10c10b5c9a7ee6d364ca52a1e1422e433bb020f2e74eb600033d1af7f5e2bd98ba21417e6daa73284c958ac353dc9add51e9b3ce7558cd3f47417d148444ac3a4012a393f87f3edfe83a68f9c5c80fa3e3605150e199f0443b908f11934f96745dcdf9079b275908bdfa7f470c6583c2f17d00f865afa83a0161d65624de63dfa09e359e1eb0000000100000000b8726651fba34a330eb4d117571008a9634576a1d3e245355788c524a072e1dd361370769a3250291fbb1c0015bbe190d93320e4cf2bfe640f9082a4a33524291403c723ff866b37e651eb32b16803511b5e4ca7afa48ff5dba1559deb21413bee6d818b648d60e299d9ef9e39846d771f4eb6e2fbefac6290fc2cbb1af648451675a870b77b956db74420005e9393", 0x250) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/214, 0x484) r4 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x45d, 0x4}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000000c0)=0x7ff) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x400000, 0x0) close(r3) getdents64(0xffffffffffffffff, 0x0, 0x0) 14:13:12 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x100, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000001c0)) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000180)={0xa00000, 0xffffffffffffff00, 0x2, [], &(0x7f00000000c0)={0x980911, 0xfffffffffffffff9, [], @p_u16=&(0x7f0000000080)=0x8}}) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x2) 14:13:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x7, 0x9}, 0x8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f0000000140)=0x9) ioctl$KVM_RUN(r3, 0xae80, 0x0) signalfd(r0, &(0x7f0000000000)={0x100000000}, 0x8) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$dspn(0x0, 0x0, 0x4001) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000008c0)="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", 0x50e) getsockopt$sock_buf(r4, 0x1, 0x0, 0x0, &(0x7f0000000100)) pipe(0x0) 14:13:12 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:12 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000180)={0x28}, 0x28) r1 = syz_open_dev$adsp(&(0x7f0000000380)='/dev/adsp#\x00', 0x1, 0x2) ioctl(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/btrfs-control\x00', 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000240)={{0x3f, 0x80000000}, 'port1\x00', 0x10, 0x20000, 0x8, 0xfe7, 0x7fff, 0x7, 0x0, 0x0, 0x7, 0x200}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 14:13:12 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x8, 0x0, @tid=r0}, &(0x7f0000000100)) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe1c322d861c614cf824d5e40f42ac6c7a8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f02007368f8953095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000001c0)={[], 0xd7b, 0x6, 0x2, 0xfffffffffffffffe, 0xfff, r0}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x100000000001) 14:13:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x3) 14:13:12 executing program 2: capset(&(0x7f0000000080)={0x400019980330}, &(0x7f0000000200)) r0 = semget$private(0x0, 0x4, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x20002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000300)={0x4, {{0xa, 0x4e22, 0x6d2, @mcast2, 0x1000}}}, 0x88) semop(r0, &(0x7f0000000040)=[{}], 0x1) 14:13:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:13:12 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x8100, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000180)) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000240)={0x28, 0x4, [0xff6]}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0x6}, @sack_perm, @mss={0x2, 0x800}], 0x3) ptrace$setopts(0x4206, r0, 0x8000000000, 0x2) tkill(r0, 0x2f) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f00000001c0)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x10001, 0x1) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:12 executing program 2: mount(&(0x7f0000000180)=@sg0='/dev/sg0\x00', &(0x7f0000000080)='.', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) futex(&(0x7f0000000040)=0x1, 0x81, 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100)=0x1, 0x0) 14:13:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x4) 14:13:12 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 2606.129498] UBIFS error (pid: 16907): cannot open "/dev/sg0", error -22 [ 2606.135841] UBIFS error (pid: 16907): cannot open "/dev/sg0", error -22 14:13:12 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000140)={0x2, 0x1, 0x7, 0x1, 0x65f4a7}) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000000c0)='rxrpc\x00\xbc\x8e@>\x1d\xbe\x89\x02\xe5S\xe0l\xbb\xe3JT>xo\xd1\xdf\xdf\x1b?\x94H\ty\xcc\xf6\xdc{v\x98Kb\xce\xb4\x87\x80\xdaC\xd4', 0x0, &(0x7f0000000080)="01000000de830000000000000007f8f301002d455d5bdd3c", 0xfffffdba, r1) 14:13:12 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40000, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000180)={{0x2, 0x4, 0x400, 0x1, '\x00', 0x7fff}, 0x0, [0x1, 0x4, 0x1, 0xffffffff, 0x7, 0x8000, 0xb1a0, 0xff, 0x29, 0x4, 0x80000000, 0xb6, 0x9, 0x6, 0xdf, 0xe69, 0x80, 0xfff, 0x4, 0x7ff, 0x4, 0x8d, 0xfffffffffffffe01, 0x8000, 0x7f800000, 0x3, 0x7f, 0x839, 0x8, 0x3, 0x91f4, 0x10000, 0x7fffffff, 0xffffffffffffff19, 0xfffffffffffffffb, 0x1, 0x7, 0x4, 0x8a3, 0x7, 0x1f, 0x8, 0xfffffffffffffffd, 0x57af, 0x8, 0x401, 0x3, 0x7, 0x3, 0x20, 0x7, 0x7, 0x93a, 0x1ff, 0x800, 0x1, 0x0, 0x6, 0x3, 0x3, 0x100000001, 0x3000, 0x1, 0x8, 0x5, 0x8, 0x3f, 0x0, 0x8, 0xffffffffffffff01, 0x8001, 0x8001, 0xf3, 0x7fffffff, 0x3, 0x2, 0x7, 0x9, 0x793, 0x7fff, 0x400, 0x5, 0x8, 0x9, 0xfffffffffffffffb, 0x1, 0x2, 0xf343, 0x5, 0x1db, 0x80000000, 0x5618, 0x1, 0x1, 0x1, 0xf859, 0x80000001, 0x10000, 0xfffffffffffffff8, 0x2, 0x7, 0x7, 0x7fff, 0x2, 0x7, 0x1, 0xe00000000000000, 0x9, 0x3, 0x8, 0x8, 0x8, 0x3f, 0x3, 0x2, 0x5, 0x8c, 0xc2, 0x7, 0x6, 0x401, 0xfffffffffffff58f, 0x569, 0x80000001, 0x1, 0x9, 0x74, 0x8], {r2, r3+10000000}}) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:12 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ae208104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x5) 14:13:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000240)={'ipvs\x00'}, &(0x7f0000000280)=0x1e) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) getsockname$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast1}}, 0x269) sendmmsg(r0, &(0x7f00000092c0), 0x1dd, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r4 = add_key(&(0x7f0000000300)='trusted\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, r3, 0x8000, r4) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000004c0)) sendmmsg(r2, &(0x7f0000007fc0), 0x40000000000002f, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='uid_map\x00') setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000680)=@req={0x0, 0x0, 0x5, 0x4}, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0xfffffffffffffffd, @broadcast}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000040) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) fcntl$setown(r1, 0x8, 0x0) r6 = creat(0x0, 0x6) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000100)='threaded\x00', 0x245) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x9, @remote, 0x6}, 0x1c) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) 14:13:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400400, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r3, 0xf03, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xd1b}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7b7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:13 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a30958fbf903012b76815551ef6370b03a518b79d107b0c79c5c702188f941c91907cbc40dc231edf6ed8f4de96305ab7fc173f093e1be283397314645264e853440100000000000000b70c75a267c424c53ca819d0715f4350f36ada1daffd4fc7000000007796eca19d7fe30bfe2cef00b04ee15a06e9ac000b591a9974bab27f86a588a70e0540f8cb17e5354e2581c3a930bbf61aa19108ffb589435f09cb494e50bab04eca775c21cdfc2c5240acd75acd10"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006e40)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)=""/113, 0x71}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x2, &(0x7f0000000340)=""/141, 0x8d}, 0x1}, {{&(0x7f0000000400)=@caif=@dgm, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/249, 0xf9}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/3, 0x3}, {&(0x7f0000001600)=""/233, 0xe9}, {&(0x7f0000001700)=""/49, 0x31}], 0x4, &(0x7f0000001780)=""/161, 0xa1}, 0x7ff}, {{&(0x7f0000001840)=@isdn, 0x80, &(0x7f0000001a80)=[{&(0x7f00000018c0)=""/105, 0x69}, {&(0x7f0000001940)=""/22, 0x16}, {&(0x7f0000001980)=""/178, 0xb2}, {&(0x7f0000001a40)=""/26, 0x1a}], 0x4}, 0x3}, {{&(0x7f0000001ac0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001b40)=""/98, 0x62}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/111, 0x6f}, {&(0x7f0000002c40)=""/14, 0xe}], 0x4, &(0x7f0000002cc0)=""/215, 0xd7}, 0x5}, {{&(0x7f0000002dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002e40)=""/177, 0xb1}, {&(0x7f0000002f00)=""/83, 0x53}], 0x2, &(0x7f0000002fc0)=""/148, 0x94}, 0x3}, {{&(0x7f0000003080)=@ax25={{}, [@remote, @netrom, @remote, @remote, @remote, @null, @netrom, @default]}, 0x80, &(0x7f0000005500)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/163, 0xa3}, {&(0x7f00000041c0)=""/75, 0x4b}, {&(0x7f0000004240)=""/58, 0x3a}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000005280)=""/145, 0x91}, {&(0x7f0000005340)=""/61, 0x3d}, {&(0x7f0000005380)=""/52, 0x34}, {&(0x7f00000053c0)=""/86, 0x56}, {&(0x7f0000005440)=""/181, 0xb5}], 0xa, &(0x7f00000055c0)=""/42, 0x2a}, 0x1}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005600)=""/132, 0x84}, {&(0x7f00000056c0)=""/54, 0x36}], 0x2, &(0x7f0000005740)=""/117, 0x75}, 0x8}, {{&(0x7f00000057c0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000005940)=[{&(0x7f0000005840)=""/233, 0xe9}], 0x1, &(0x7f0000005980)=""/102, 0x66}, 0x81}, {{0x0, 0x0, &(0x7f0000006d00)=[{&(0x7f0000005a00)=""/72, 0x48}, {&(0x7f0000005a80)=""/44, 0x2c}, {&(0x7f0000005ac0)=""/86, 0x56}, {&(0x7f0000005b40)=""/4096, 0x1000}, {&(0x7f0000006b40)=""/130, 0x82}, {&(0x7f0000006c00)=""/67, 0x43}, {&(0x7f0000006c80)=""/77, 0x4d}], 0x7, &(0x7f0000006d80)=""/171, 0xab}, 0x2}], 0xa, 0x2002, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000007200)={&(0x7f00000070c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000071c0)={&(0x7f0000007140)={0x7c, r2, 0x120, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffffffff8000}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x4) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000100)={r3, 0x0, 0x7ff, 0x6, 0x7f69}) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:13 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x41c41e4d5cbd5d75, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}]}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0)=0x4000, 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)=0xaa, 0x4) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000240)=@get={0x1, &(0x7f0000000140)=""/244, 0x5}) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x20}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x8, 0x9ff8, 0x80000001, 0x0]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000003c0)={r0, 0x1, 0x0, 0x1000000003000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0x80000001, 0x55, 0x1, 'queue0\x00'}) write$FUSE_BMAP(r0, &(0x7f00000004c0)={0x18, 0xffffffffffffffda, 0x2, {0x10000}}, 0x18) ioctl$CAPI_INSTALLED(r0, 0x80024322) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000500)=0x7, 0x4) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40002800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r2, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4c001) io_setup(0xfffffffffffffff8, &(0x7f0000000680)=0x0) io_cancel(r3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5, 0x3f, r0, &(0x7f00000006c0)="935176af5f6c6ac132a8e52cd9eb2fc786088b50a957fae8bd96551f5e9ac1598c052a8b99dbee5022a69ba419971b95b9e78627593a480c28d5d0eceef35f96972270b397feabb40ca800242495a12335d85d8bfb71ddbf0fb8b0c68e5a6bcc51160d2a45ee0d1535f7baedc2c7d10a6b1d1ed8bc9968", 0x77, 0x5, 0x0, 0x2, r0}, &(0x7f0000000780)) sendmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f00000007c0)=@caif, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000840)="14e54d21e05b239b1095ee5390090a9b938400d3bd58b2f7ee554654a955b3b95e5c6174d557696d64626df0c7574519670c2a7154097ad9c8dca3a09777587fec6931b95b55a5e925621a9c9b8b24eb9e94a388c5dfd824e5ad68121c197dbd9fe9d5c1f8253b7030eba55a981102c3788fc583066472d01e276d3877f3933e2ca27829becab78da2bb99934a09af9a8531a452e34e7bd486ffb5ad3579e5891c026c2d2088cb5a2ee9611ddefcef83d61c50fb92c45e803a729f83", 0xbc}, {&(0x7f0000000900)="b048c60f445fa72b5c13f9f2b0c3c857b16cb3561b34e208e09ce2d5f944d5b81d81dc540b43e2e45a4d8bc31ec8ea346aff325276b4ddfeaa97884c30442559d95a6c8e745e2d77974e8855f73efea1c29232f38fb359dc04b2537dfb9bb354530dc45ce1631c72b8580b5a8546f29ceced4bce6a8926004a8d3c144d406768af121dfa43b580cc134864fe64f4cb4982b8e693028ba223", 0x98}, {&(0x7f00000009c0)="daba649dab744fdbacd170d847d07201dfc150f68e455be475d127a07df07593d71371c041225e21a95eebf567fa72d66dba09871d8475d25ca226638547c2f8fada409d0b4b4ca2e3499d6cf28c80f2cda317ac398f875c2133aad18c599a30d157", 0x62}, {&(0x7f0000000a40)="922d97ceab4514a30df7cec4163250be03717b6ef47038935a", 0x19}, {&(0x7f0000000a80)='~\x00', 0x2}], 0x5}, 0x5}], 0x1, 0x4000001) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000bc0)={0x0, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f0000000b80)='}{\x00', 0x0}, 0x30) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000c00)=r4, 0x4) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000c40)=""/130) r6 = add_key(&(0x7f0000000d00)='blacklist\x00', &(0x7f0000000d40)={'syz', 0x1}, &(0x7f0000000d80)="17ce25e344c2c329795e038b0438561916db2aceedcfbf895c822fc8681a6f7ce20e5c7377ab1037b3eccc875d680508745dae3e33e88eb56bc36e393ef950af6a2922d03625b855881704b0eda1bd594a28900de152e2849e6bb6d9a82e8993fe6765ce2fd715760532610609eea78bb7f7cb4caaa9dc9496666488a9dfef2aa9297690d739e905eabc9469d8785d1d1a59e641bd45408b6a69ee569221f21ad40fb8e4c13565063b0ac58eeba5eaa52dbf28c53615bd2d4d87b008", 0xbc, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f0000000e40)='queue0\x00', &(0x7f0000000e80)) write$ppp(r0, &(0x7f0000000ec0)="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", 0x1000) lstat(&(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00)) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000001f80)=0xffea, 0x4) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000001fc0)={0x18, 0x0, {0x2, @random="55a65b86827b", 'veth1\x00'}}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000002000)={0x0, 0xd4, "c91d3fa5ac4a5914c476f74f49260cc21b74ff9cdb9c25210c64d8d481fa9e89459b4e45d6d152beeee4e0212a6de8e21c25dab2b1d52e67896a46a17390b5332f2c5f00ae9b454c099012d5f5a41c7aad31084a807ef032ac25b3b25185eed477f5627c56f1093544d258082788ae3dbcbad24b5050e0bd43cf5b81d0797b5c54ac0900181c07f7c24795955e1b60607c95752f3b6048d520b573f63dae735c60d712877683714ace385ce8d5e5f45d117796410073cc2c479f4f3b7d0751e3df43db25336804f57181918965b9decef4372694"}, &(0x7f0000002100)=0xdc) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000002140)=@assoc_value={r7, 0x5}, 0x8) lsetxattr$trusted_overlay_redirect(&(0x7f0000002180)='./file0\x00', &(0x7f00000021c0)='trusted.overlay.redirect\x00', &(0x7f0000002200)='./file0\x00', 0x8, 0x1) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000002240)) 14:13:13 executing program 3: r0 = socket$inet(0x2, 0x2000000080002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00'}) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1000, 0x200000) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x1, 0x190, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a80], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000025ae82ff62831bf0000000000000000000000000000000000000000000000000000000feffffff01000000110000000000000081006263737630000000000800000000000073697430000002000000ffff00000000626f6e6430000000000000000000000076657468300000000000000000000000ffffffffffff0000000000000000001e00000000000000000000d0000000d000000000010000766c616e00000000000000000000000000000000000000000000000000000000080000000000000001d1000000000100766c616e000000000000000000000000000000000000000000000000000000000800000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000001000000ffffffff0000000074a80e3f5d85ca3856ce22b58082125383b720671ed0b7b56d65c99dc7f918dab5629548c8c56d32bbca54415e78df63e1c4877b8a9a905dea1bf90c2c0cb1b9d5b283dcc2d8a00b80197fcd926cb0e91d0bbe7682e0fdd794bca1fe735db71ea6ffbeaaf98e972e2e7bd88491130c2021a4d85123e16b0b8f9a352f809759cdac20f4626c2653c21aaaef4b48f4c029b40aa719a7187c59b13fa14ac3c2b8fee2ec2a34c6d5a4e22412d787550d3dcc6b56d1567b00ca012234384eba880dee50644198ca090fb004cda80f690c59939f12091200511450398df3"]}, 0x2d7) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001800)=ANY=[@ANYBLOB="050000000000000000000100000000005e00000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000002400000000000000010000000000000", @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000e4b3eda5166152f600469a0000000000afe69f7af2088dcc0fa056d70898fdb7d092e9d463d1450867af824b14895b78b1531253ee30d92686c1951f9620ec840d91a7723db68adac568829180cb334815c5c0f5a311cf465f39a2414efed6b5721cee3609d2ef91b7f1791142b88bcf7a1579272c59bfc7d611d3f1938e21d934c1cbead7b660835ef0bbbdb5b4090c6da2fc9b5084", @ANYPTR=&(0x7f0000000340)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000500100000000007200000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000015c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000017c0)={&(0x7f0000000500), 0xc, &(0x7f0000001780)={&(0x7f0000001600)={0x144, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x94}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffe00}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcfe7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA={0x30, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4041}, 0x800) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 14:13:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @multicast2, r2}, 0xc) syz_emit_ethernet(0x5c, &(0x7f0000359fd5)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 14:13:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x6) [ 2606.885451] kernel msg: ebtables bug: please report to author: Wrong len argument [ 2606.893271] net_ratelimit: 22 callbacks suppressed [ 2606.893286] protocol 88fb is buggy, dev hsr_slave_0 [ 2606.893353] protocol 88fb is buggy, dev hsr_slave_1 [ 2607.045771] kernel msg: ebtables bug: please report to author: Wrong len argument 14:13:13 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x88102, 0x0) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x9}, 0xb) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getgid() write$FUSE_CREATE_OPEN(r1, &(0x7f0000000140)={0xa0, 0xffffffffffffffff, 0x5, {{0x4, 0x2, 0x3, 0x0, 0x4, 0x3, {0x4, 0xd5, 0xb3, 0x0, 0x0, 0x0, 0x40, 0x5, 0x4, 0x10001, 0xa, r2, r3, 0x401}}, {0x0, 0x5}}}, 0xa0) getsockname(r0, 0x0, 0xfffffffffffffffd) 14:13:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x7) 14:13:13 executing program 3: socketpair$unix(0x1, 0x4000000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000140)=0x161, 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4010ae42, &(0x7f0000bf7000)={0x0, 0x0, 0x70a000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r4, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x5, {0x0, 0x0, 0x7}}) 14:13:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x8) 14:13:14 executing program 2: clone(0x8000000009000002, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x0, 0x0, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) rt_sigtimedwait(0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c9c380}, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={{0x8, 0x3, 0x3, 0x100000000, 0x7, 0xff}, 0x10000}) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000080)={&(0x7f0000000040)=""/61, 0xffffff78}) 14:13:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0xc) [ 2607.770671] protocol 88fb is buggy, dev hsr_slave_0 [ 2607.770704] protocol 88fb is buggy, dev hsr_slave_1 [ 2607.775825] protocol 88fb is buggy, dev hsr_slave_1 14:13:14 executing program 3: r0 = semget$private(0x0, 0x8, 0x0) semop(r0, &(0x7f0000000000)=[{0x0, 0x8001}], 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) semop(r0, &(0x7f0000000240)=[{0x0, 0x7fff, 0x1000}], 0x1) [ 2608.410673] protocol 88fb is buggy, dev hsr_slave_0 [ 2608.415802] protocol 88fb is buggy, dev hsr_slave_1 [ 2608.420927] protocol 88fb is buggy, dev hsr_slave_0 [ 2608.425961] protocol 88fb is buggy, dev hsr_slave_1 [ 2608.431070] protocol 88fb is buggy, dev hsr_slave_0 14:13:16 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e2afaffffffffffffff169a309500000000007faa4bd99ef0ab16b5cd977733fb4c288ba7d5aaaabb7dae7cd652525a8fb6853d58391a8c8cfa5349ce124be38e4434"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x101000, 0x0) lseek(r0, 0x0, 0x0) bind$netlink(r3, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfe, 0x80000040}, 0xc) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KDENABIO(r4, 0x4b36) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x0, &(0x7f00000000c0)={{r5, r6/1000+10000}}, &(0x7f0000000100)) 14:13:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0xd) 14:13:16 executing program 2: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x4, {{0x2, 0x4e22, @loopback}}}, 0x88) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x200000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r4, r3) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00004aaffc)=0x2, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prctl$PR_SET_NAME(0xf, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet(0x10, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg(r5, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000000c0)=']', 0x1, 0x8000, 0x0, 0x0) close(r1) 14:13:16 executing program 3: socket$kcm(0x10, 0x100000000002, 0x4) 14:13:16 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000180), &(0x7f0000000140)=0x4) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000000)="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", 0xfc) [ 2609.691009] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:13:16 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000003080)={{0xa, 0x4e24, 0x1, @remote, 0x3e88}, {0xa, 0x4e23, 0xb27, @mcast2, 0x7f}, 0x7f, [0x8, 0x1000, 0x9, 0x1, 0x359, 0x7, 0x3, 0x4d]}, 0x5c) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = accept(0xffffffffffffff9c, &(0x7f0000000180)=@sco, &(0x7f0000000200)=0x80) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x47a5, @dev={0xfe, 0x80, [], 0x16}, 0x100000000}, 0x1c) getsockopt(r1, 0x3, 0x5, &(0x7f0000000280)=""/168, &(0x7f00000000c0)=0xa8) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb000402129f1409251faa000050074aebe8e1f7145540500000000000000e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x4000000000007, r0, 0x1000, 0x0) tkill(r0, 0x19) 14:13:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00') fstat(r1, 0x0) stat(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, 0x0, r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4, 0x608401) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="aec06b3c86744bbcc3c7eaa1398116a78301aff0c658a04cba33c9fc1bbeafbdd91d77e9e1750810d757fa4c72666d2d104d78e228c945e057fbf8e78922f4f4ed75f05966e0a28ebd752934ccbbe45e444f62e98eb408a7d1ec0e66e880975fdc560b74f105ae91921a1c08b617587aac04", @ANYRESDEC=r0]], 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00\x0e\x00'}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00\x00\x00\x02', {0x2, 0x0, @local={0xac, 0x74}}}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'nr0\x00', {0x2, 0x0, @multicast1}}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x208240, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x1, 0x12) pkey_alloc(0x0, 0xffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x371, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r4) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000003c0)=""/10) getsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000100)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 14:13:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0xf) 14:13:16 executing program 2: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x4, {{0x2, 0x4e22, @loopback}}}, 0x88) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x200000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r4, r3) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00004aaffc)=0x2, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prctl$PR_SET_NAME(0xf, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet(0x10, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg(r5, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000000c0)=']', 0x1, 0x8000, 0x0, 0x0) close(r1) 14:13:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000000)={0x120, 0x9, 0x7, 0x201}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x200) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000580)) 14:13:16 executing program 2: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x4, {{0x2, 0x4e22, @loopback}}}, 0x88) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x200000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) dup2(r4, r3) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00004aaffc)=0x2, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prctl$PR_SET_NAME(0xf, 0x0) syz_genetlink_get_family_id$tipc2(0x0) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet(0x10, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg(r5, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000000c0)=']', 0x1, 0x8000, 0x0, 0x0) close(r1) 14:13:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x11) 14:13:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x0, 0x0, 0x7, 0x6, 0x8, 0x1, 0x7fffffff, 0x8, 0x1, 0x23ab, 0x28f8, 0x0, 0x3}, {0x80000000, 0x55b, 0x4, 0x3, 0x4, 0x40, 0x3, 0x80, 0xfff, 0x8, 0xce, 0x7, 0x5}, {0xfff, 0x100, 0x9, 0x10000, 0x10001, 0xffffffffffffff00, 0x100000001, 0x700000000, 0x0, 0x7, 0x6, 0x9, 0xfffffffffffffff8}], 0x4}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:13:16 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:16 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x410202, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x19) 14:13:17 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x3f, 0x4) setsockopt$sock_int(r0, 0x1, 0x200000010, &(0x7f0000000080)=0x5, 0x4) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000000000), 0x40000000000037f, 0x0) recvmsg(r1, &(0x7f0000000640)={&(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}, 0x0) 14:13:17 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x40800, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000600)='/dev/amidi#\x00', 0x9, 0x22080) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000006c0)=[@text16={0x10, &(0x7f0000000640)="7a0336f009a10010ea0080840067660f3adfa68698000083f20f0f9000009a3e0fdc52dd66b9e80b000066b80300000066ba000000000f300fc75a55b807000f00d8670f01d1", 0x46}], 0x1, 0x20, &(0x7f0000000700)=[@dstype3={0x7, 0x6}, @cr0={0x0, 0x40000021}], 0x2) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="052fc73cb0860e331c75c30040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad50810d8d29ecebd169a30950bab782db17f5051009b9522f097727694407b1284bd2d9bfd94d68ab39b57df3deea75a5e963f8766d855b16fd922a6bd8d3df86056f35a2ea87f32dc05127cadd53dbc76da773e2d54fe603826ed79b397d6036a44eeadfa741652adf3743a70d6f7c1e937ab56a35106187c8022caaa83088009fc4d39714e3ab675caa593f51339b4b576c45eb22b72e993021663558dda2f4d6bb4421e8dc667b7ea85355df545a6ae979838da3266d53f4d1c"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x300, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000080)={0x8000003, 0x1, 0x2}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = shmget$private(0x0, 0x3000, 0x14, &(0x7f0000ffd000/0x3000)=nil) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000480)={{0x101, r6, r7, r8, r9, 0x1c0, 0x80000000}, 0xd03b, 0x9e, 0x9969, 0x80, r0, r0, 0x60}) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x4000) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000000000000020000800602f49529558f7dbafaca66110706c030c44ad033bf0b279db28bfb50e829664c95f276a6482804c604206989b8766a61caa425238413529bbf53c4f4842c4cd8c2a3580d37efb5a3d3190f092c4e1eae688b72617f7b4fd9c7abf4fccd1df5ffcac1bd23a1f53add2511cb3b07bfc7616fd5638e76d2eeb4411fa9a7943e11b9948f3fcf546dc5ffd19124145a510c2e42d31f7df9ba87e34575c2ef127f6aede298a261fa5a742e1f8dc9223aada102092977134fdd45b0a16a9ae334829a929e"], &(0x7f00000000c0)=0xe) unshare(0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:13:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="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", 0xfc, 0xfffffffffffffffc) keyctl$link(0x8, r4, r5) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f00000000c0)) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000100)={@loopback}) r6 = fcntl$dupfd(r2, 0x406, r0) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f0000000000)={0x1, {0x0, 0x80000001, 0x5, 0x6}, {0x8, 0x5, 0x0, 0xb82f}, {0x3f, 0x101}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000180)="2e26660f71e0a9640fae553e0f017001650f01cabaf80c66b8f38e558466efbafc0cec0f20e06635400000000f22e066b98e0900000f32f80f08f618", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14:13:17 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="052fc780b00040ef3d6b8b7573257102000000000000009e5df3ebb8224f282695bd166f3095d6425bfe3100000037d50000000000000000000000000000000000000000"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x300) 14:13:17 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x46809db0, 0x80) ioctl$TIOCNOTTY(r0, 0x5422) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fcntl$getown(r1, 0x9) process_vm_readv(r3, &(0x7f0000000300)=[{&(0x7f0000000100)=""/218, 0xda}, {&(0x7f0000000200)=""/27, 0x1b}, {&(0x7f0000000240)=""/145, 0x91}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000500)=""/157, 0x9d}], 0x5, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/183, 0xb7}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x2, 0x0) write$FUSE_STATFS(r0, &(0x7f00000017c0)={0x60, 0x0, 0x2, {{0x9, 0x8, 0x1, 0x401, 0x7, 0x2, 0x5, 0x7fffffff}}}, 0x60) shmat(0x0, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) unshare(0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = semget$private(0x0, 0x1, 0x100) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000001840)={{&(0x7f0000017000/0x1000)=nil, 0x1000}, 0x1}) semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f0000000080)=""/68) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 14:13:17 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x3e8) 14:13:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000080)=0x3, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x10000000003, &(0x7f0000000040)="f0000003", 0x4) 14:13:17 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'ipddp0\x00', 0x8000}) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 14:13:17 executing program 1: select(0x40, &(0x7f0000000000)={0x7ff, 0x2, 0x3, 0x7fff, 0x6, 0x9, 0x6, 0x1}, &(0x7f0000000040)={0xee, 0x7, 0x5, 0x32, 0x1, 0x1, 0x4, 0x7511}, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x860f, 0x7ff, 0x12d, 0x1, 0x80000000}, &(0x7f00000000c0)={0x0, 0x2710}) r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x87, 0x48000) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f00000002c0)={0xa0, 0xfffffffffffffff5, 0x5, {{0x3, 0x0, 0x5, 0x3, 0x6, 0x80, {0x4, 0x7, 0x4, 0x6, 0x0, 0xe, 0xfffffffffffffff7, 0xffffffffffff0000, 0x8, 0xfffffffffffff800, 0x302, r1, r2, 0x7, 0x5}}, {0x0, 0x1}}}, 0xa0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x1) setxattr$security_capability(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.capability\x00', &(0x7f0000000480)=@v1={0x1000000, [{0x8000, 0x7}]}, 0xc, 0x0) recvmsg(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000004c0)=""/12, 0xc}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2}, 0x40) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000001580)={{0x0, @name="fc41c76cd7118b89cd7233878ff5bf3c0c5b512ab53d736f38ba6309b928e6fc"}, 0x8, 0x6, 0x1}) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vfio/vfio\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001600)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000001680)={0xf, 0x8, 0xfa00, {r4, 0xd}}, 0x10) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000016c0)=0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001700)=0x0) setpgid(r5, r6) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000001740)) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001780)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000017c0)={@loopback, @ipv4={[], [], @broadcast}, @mcast2, 0x6, 0xc0000000, 0x100, 0x0, 0xe9d, 0x800000, r7}) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000001840)=""/145) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001900)='/dev/snapshot\x00', 0x2000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001940)='/dev/kvm\x00', 0x200, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000001980)={'mangle\x00'}, &(0x7f0000001a00)=0x54) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f0000001a40)) mq_timedsend(r0, &(0x7f0000001a80)="230651e526bb84048811a7fe3576c7b9a99c1bd65bebdfb3f2fc3e5d899e92795944f231058ad8dca3b653c6a88199396f98314f868e9f6fa11a1eb2fd6c8ad02b071ca4242f3e750676c22e40c4a1fdddf7a30d3a79ba18dc9e574fa0f53fc501c4cb8acd948a9b97b59959b5c82d95f943b1c4d53483eac3a9417e999cf756388c86a5e4b0579a839cfdeb6a920211a7616d9ba39784096f5419e307d107139ab9b2b14f6a5bb97c860af395b1db4126", 0xb1, 0x32, 0x0) getsockopt$netlink(r8, 0x10e, 0x2, &(0x7f0000001b40)=""/193, &(0x7f0000001c40)=0xc1) ftruncate(r8, 0x3f) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000001c80)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x7}}}, &(0x7f0000001d40)=0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000001d80)={r9, 0x10000}, &(0x7f0000001dc0)=0x8) ioctl$int_out(r0, 0x5462, &(0x7f0000001e00)) 14:13:17 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0585605, &(0x7f0000000080)={0x0, 0x1}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x34d, 0x80) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0xfffffffffffffffe, 0xfffff000}) 14:13:17 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, &(0x7f0000000340)='\x1a\xa86\x8a\x9b\xf8]\xc5\x06c\x9a\x11e!\xad?\x9ate\xe9\xf2c\xceZ%\x9a\x00\xcb\bY\x8f\x9e\xcb\x9a \xe0\x7f^\x03c\xd8\x8f\t\xe9\xe0\xea\fY6\n\xda\xfe\x86l\xcc\r<\xfc\xf11\x15\x9d:)O{\xbf\xea\xe1\xc68*$?\xb5}9\x02\xf3E\xb8)bX\x88c\xe5:TE\x9b\xfe\xb7\x00\x00\x00\x00\x00\x00\x00\x00\x82\x00\x00\x00\x00\x00l\x00W\xe6XT\\l\xd6J\xf2\x12\xc4\x9e\xd4\xbe8<\v\x868%l0\xa1%\xb3\x1b,g\x8d\xfa\x8dq&\xc4\xc0\x81\x9a\x91\x9e\xe3\xe6\xa6\xd8\xb80\xe4NW=\x10\x8d\xcc\xcbU\x1dg\xd9\xc5\xb1\x94\x95\x10\xe3\xe8\xa8\xbfW\x00\x16\x90o=\x80`\xe2\xd1\xb2\xac\x92\x95F\xc0\xb5$\xe3\x1f7T\xe7\xd6A\x8b\x11Qx\xa0\xa4\xa2_h\xcc\xe0\nXpo\x9f=\xa4\xff\xaf\xb4\x02P\xaa\r46X\x8b\xfb\xc7/\x8b\xa5\x06\x11\xc9\x0fl') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000014c0)=0x1f, 0x4) 14:13:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x500) 14:13:17 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchmod(r0, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000340)={0x6c07, 0x0, 0x3ff, 0x0, 0x4}) futex(&(0x7f0000000080)=0x2, 0xf, 0x4, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000440)={0xe, 0x2, 0x8, 0x4, 0x29, "80db2a00a793d3427c2161dff69cbfb48b66d892233b1483cbe8a3423133ef4161d8e602e3cfca32b2"}, 0x35) accept$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000300)={@multicast1, @loopback, r3}, 0xc) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xd) unshare(0x40000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x1, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r4, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000004c0)=0x4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2a404, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='/c\x00\x00 -memory /rdma +pids '], 0x19) getdents64(r6, &(0x7f00000000c0)=""/11, 0xeb) [ 2611.534169] ecryptfs_parse_options: eCryptfs: unrecognized option [¨6Š›ø]Åcše!­?šteéòcÎZ%š] [ 2611.611377] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2611.613752] ecryptfs_parse_options: eCryptfs: unrecognized option [¨6Š›ø]Åcše!­?šteéòcÎZ%š] [ 2611.690543] Error parsing options; rc = [-22] [ 2611.726784] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 2611.770919] Error parsing options; rc = [-22] [ 2611.801569] IPVS: ftp: loaded support on port[0] = 21 [ 2611.930666] net_ratelimit: 15 callbacks suppressed [ 2611.930675] protocol 88fb is buggy, dev hsr_slave_0 [ 2611.931089] protocol 88fb is buggy, dev hsr_slave_0 [ 2611.935812] protocol 88fb is buggy, dev hsr_slave_1 [ 2611.940963] protocol 88fb is buggy, dev hsr_slave_1 [ 2612.190069] IPVS: ftp: loaded support on port[0] = 21 [ 2612.570675] protocol 88fb is buggy, dev hsr_slave_0 [ 2612.575754] protocol 88fb is buggy, dev hsr_slave_1 [ 2612.580867] protocol 88fb is buggy, dev hsr_slave_0 [ 2612.585900] protocol 88fb is buggy, dev hsr_slave_1 [ 2612.591027] protocol 88fb is buggy, dev hsr_slave_0 [ 2612.596079] protocol 88fb is buggy, dev hsr_slave_1 14:13:20 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x200, 0x1) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000080)) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e115222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 14:13:20 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @multicast1}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000880)='bbr\x00', 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x1000000}, 0x0) 14:13:20 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0xfffffffffffffffd, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) get_mempolicy(0xfffffffffffffffd, 0x0, 0x0, &(0x7f0000fed000/0x13000)=nil, 0x2) syz_open_dev$evdev(&(0x7f0000000580)='/dev/input/event#\x00', 0x7, 0x8800) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000180)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000640)='/dev/rfkill\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000680)={0x0, 0x10001, 0x8001, 0xffffffffffffffff}, &(0x7f00000006c0)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000780)={r3, 0x58, &(0x7f0000000700)=[@in6={0xa, 0x4e23, 0x1000, @mcast2, 0xffffffff}, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e20, 0x38, @mcast1, 0xeb09}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}]}, &(0x7f00000007c0)=0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8}, &(0x7f0000000080)=0x10) r6 = dup3(r4, r4, 0x80000) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={r5, @in={{0x2, 0x4e23, @remote}}, 0x9, 0xf4b, 0x7, 0xfffffffffffffffc, 0x80}, &(0x7f0000000480)=0x98) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000005c0)={0x3c}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000004c0)={r7, @in6={{0xa, 0x4e20, 0x9, @ipv4={[], [], @multicast1}, 0xffff}}, 0x200, 0x2, 0x2df, 0xffff, 0x10}, 0x98) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r6, &(0x7f0000000280)="170d47807c32d92573685f4b", &(0x7f00000002c0)="6e8b48012e439cad72df22568a4dc6a245ef13f80aa9eb44a1f00a13ec591f724150eb8329d1f881b69ae953a5274d54f9c239fc8dd6e7e669b90eac0ff17c751216f433eb6f5e34b4c22c9572136298edc11f7b9e3e75afb5181cd1ada63c05c74a7d528e393f0492d64fc4b6e6b9b857e716752dfd944c8be504a129eab4b18fcc6541898cdf5fa4e0a7ec9e66d279508f6084c8067297eb208ce46dfb8a4a0441e6e52da2468cd092c400cc2c4a4e75d97f0ab03f8f1e02", 0x2}, 0x20) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r5, 0x8, 0x6, 0xc1}, 0x14) 14:13:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x600) 14:13:20 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:20 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x4000000) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x210000, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0xff, @rand_addr="2e25edc6ff8f44d05ff68afb85a865bc", 0x6}, @in6={0xa, 0x4e23, 0xff, @ipv4={[], [], @local}, 0x100000000}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, @in6={0xa, 0x4e22, 0x2, @ipv4={[], [], @local}, 0x4400}], 0x74) 14:13:20 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xf) writev(r0, &(0x7f0000000540)=[{&(0x7f00000000c0)="e0ec867245ae41d89710ba240887ca123238bbc683f6f9b8dfccd5a8badefe57266f30019a2e36f238c5ca7eb922a3b5ce4cfc94fe0036463cb4f350689c5dae09a90e678059dc8be8b76ef6d12ab4a8a4ffb59cd5f996e60bb29f0e9a3e088d046681cbaa8dd8d1f7098d791dcd746662a88362a4200479e93dac76679440b254e3d801d9373d516e", 0x89}, {&(0x7f0000000180)="bfefc5062fb8292d169ad21ac36a71728709ad5f5e2c6dee73aff04f47b79cdc38c6f7996fae040f645d6c90434370ce3d3311f29d4d20b511a4702f035e221bacb0ead1d4f921641869905a6ba81b05a39f9da8c8fbc89041c5baf7d221f3e3a2fbb31f2e867f7406e7ef64bc9f0acae3836664df73528eedf20fcd4fae632699ca2ed842756c1e8bf5c0e5c9f5d0c8cdb0db5f6b72f04132cc8c5c7c36740a7a7cbbf4d1af91420bae25758e9814c7a8c246d077b45dd11d26c44abc59ff280fc0", 0xc2}, {&(0x7f00000005c0)="9f4b075492476bacd3505d8f93d65ec3fbe19277dadbf731e34177f04d40487f91fa39406f85dafa78e4b779c56047a8dec9e5419abcc32e74a384098ad054361fcb7c430b6a2c93cfb32fc5a2be9039e1ca78827e0ce8c27ccc23f4", 0x5c}, {&(0x7f0000000300)="898f535fc9593c66dbaf2d08e203850798c7e2cff9fb3fd835a6104c5b3e378a6ee5abd1e8707d9a9c84f785e8ed7919f7c1bf21f35d3af050f6a4a1ae095cc05c5d53b5e37166b1155dd361b5d280021d9ff00718d98fb36614dc4df6d100c730e7b9", 0x63}, {&(0x7f0000000380)="3f5a804b6a2a4d0ddadf993b1e6a6f52f7d391b9f2b69f140b9f3ea8164f35af568c06b63e40469d25bea5d03c3b65bdc15229f2b1", 0x35}, {&(0x7f00000003c0)="a1c5e9184e61a3e5ac11fdc4f0a3a1c14a59ade21190b6956ade7c67f759e459a509977ec2648870b0bbc4078cfb56efa467b8b09395677762bea0c4f79ed91c7a2f93a573c8e578e0f97822c40b216739d9fd44864cd51f9653e301c68559794b638fef7ea0711965189b618a6662fcfc2eca0a5afeeca22a346f68284bd55669e8af1c2a86effd752815e11d78e19cf18b6d47e6850825c1ec75e546b774aef4a8d220efd6bcc577fe5ac1682cab5c68baedc94bc665d3c1ae69b2390c28ac6befb121af55658469d3f7d7e2198007c39d14509ccb2f656543b9a26716da38deaed8bba036d4ffac637cadbf", 0xed}, {&(0x7f00000004c0)="bcd39a06385715f0a629adfa9ae03cf9bd54442544432354217df234bd958fc85281383ba73b53b2b2fbc060ea8a6dd09a8dce19019d85767b34d44c", 0x3c}, {&(0x7f0000000500)="c0b9117b87c0f43015cc", 0xa}], 0x8) 14:13:20 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6gre0\x00'}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x480}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={r3, 0xc75, 0x2, [0x4b43fe9e, 0x0]}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept4$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x0) accept4$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14, 0x80800) r6 = gettid() getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000440)={@local, 0x0}, &(0x7f0000000480)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x261, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_delroute={0xbc, 0x19, 0x100, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x5, 0xff, 0x7, 0xff, 0x7, 0x800}, [@RTA_IIF={0x8, 0x1, r4}, @RTA_OIF={0x8, 0x4, r5}, @RTA_EXPIRES={0x8, 0x17, 0xfffffffffffffff7}, @RTA_ENCAP={0x6c, 0x16, @nested={0x68, 0x42, [@typed={0x4, 0x71}, @generic="8484f32732689c397a0f6efffbcb20c8ff4113f9fbcb5d2dd6bb61a313ce449511e0512e2aeebbc696f8aab1b8aee9cd51fa5b5fdae766", @typed={0x8, 0x58, @fd=r2}, @typed={0x8, 0x8f, @ipv4=@rand_addr=0x3}, @typed={0x8, 0x2, @u32=0xfffffffeffffffff}, @typed={0x8, 0x52, @pid=r6}, @typed={0x8, 0xa, @fd=r1}]}}, @RTA_ENCAP={0x10, 0x16, @typed={0xc, 0x32, @u64=0xbea}}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x8, 0xff, r7}}]}, 0xbc}, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x1000) 14:13:20 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x17, 0x0, 0xfffffffffffffe0b) 14:13:20 executing program 2: timer_create(0x7, &(0x7f0000002000)={0x0, 0x38, 0x2, @thr={&(0x7f0000000000)="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", &(0x7f0000001000)="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"}}, &(0x7f0000002040)=0x0) timer_settime(r0, 0x1, &(0x7f0000002080)={{}, {0x0, 0x989680}}, &(0x7f00000020c0)) r1 = fcntl$dupfd(0xffffffffffffff9c, 0xbbae97de47b253e1, 0xffffffffffffffff) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000002100)=0x4, &(0x7f0000002140)=0x2) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000002180)=""/162, &(0x7f0000002240)=0xa2) sendto$inet6(r1, &(0x7f0000002280)="07e5904a127daedbbba67f412a6a3dc9a921a89d4c8fcd12ea7bda0d4c0166780b31403e232dcc73f5afb697f7326798d63f7a9784f1a28f69e72247225ee85593ca719aae820e04bd130eae4c0a66d1666382ddd50cfd76ac8b7f9892a46a47deca8260659c0feda36f29b0ab661070d345eea42dffbb1e71863431", 0x7c, 0x4011, &(0x7f0000002300)={0xa, 0x4e22, 0x43, @local, 0x5}, 0x1c) getsockname$tipc(r1, &(0x7f0000002340)=@name, &(0x7f0000002380)=0x10) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000023c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f00000024c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002500)={'ip6gre0\x00', r2}) open_by_handle_at(r1, &(0x7f0000002540)={0xd6, 0x7731, "c158e4314323d3aead260d2349ca11a4135db2172ac393db5de12d5f55900a8923f9a92d0917db5f29e2b0f4633e3f0be4d1479e2a03925df41c160fb095f1cad8f2847c5c57f022162f5f5d1caa27bb47341a4a5616dcae1957b3767a68daf01acb162ef33d6466748a7a4fce51b0e6abdf6d0f2c8270993f84d08a635353898de5f85fc067cd093a1ac26dcc84a94d6f1c9dae513534a0f68d95dd755420c7388b1a2728a1c0d7fbfa67e0b6513ebed24c58a1c6bbf2f0d1db9b6eded9ed30310a565c01b1aa711c81dec2ce62"}, 0x10000) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000002640)=0x1, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000026c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000002ac0)={&(0x7f0000002680), 0xc, &(0x7f0000002a80)={&(0x7f0000002700)={0x364, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x109}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20d}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_LINK={0x110, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7eaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x83}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x833}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffc}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50000000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd4f}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x68, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @ipv4={[], [], @broadcast}, 0x5}}}}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) r4 = socket$inet(0x2, 0x6, 0x9) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x60, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000002dc0)={&(0x7f0000002c40), 0xc, &(0x7f0000002d80)={&(0x7f0000002c80)={0xdc, r3, 0x600, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf91d}]}]}, @TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xed4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x4040) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000002e00)=""/4096, &(0x7f0000003e00)=0x1000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000003e40)={0x0, 0x0, 0x100}, &(0x7f0000003e80)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000003ec0)={r5, 0x42, "4ad55d88714ce2012d4c8343c2ad9e3c5757b83c2d469364d3a6927a1ee56cc94890f18b49ffc15fc9984863fa2174e6ebac217c92265b264cd02a1729153ea61f52"}, &(0x7f0000003f40)=0x4a) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0xffffffffffff8000) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000003f80)={&(0x7f0000ffe000/0x2000)=nil, 0x2, 0x1, 0x22, &(0x7f0000ffd000/0x3000)=nil, 0x5}) connect$can_bcm(r1, &(0x7f0000003fc0), 0x10) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000004000)=0xf000) sendto$inet6(r1, &(0x7f0000004040)="4965373e904accf1fa446f4013260554e903567bcc3a473c97c8d8cf12b01286f64286228379212ebf4b96283a3740c912dc7fa0dd7120d8bc3a8833d0e2733568cb5efa38743558595252167d30ce1296da09989cea8a62f03a98ce6eedc9a31c8abdfecd141b0ac963ed128c77c70bd7f968ebf09222ba9e873a387185651159b30bedb80db9b5ce1d7c0af045ea5ca450238b5b277c314bccf6221a4b51f8050a505a2646ab30e46fcb45b748e8302ae9349d629a3582e31326a275070d50099296a014680cb84b40a6", 0xcb, 0x4000010, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000004140)={0x7fffffff, 0x0, 0x400000000000000, 0x0, 0x19, 0x3, 0x6, 0x20, 0x3, 0x75dd, 0x7, 0x3ff}) sendto$packet(r1, &(0x7f0000004180)="324c8c8935da6d8a2c1220757d50067fe61f1b491fc7c682484c3619710405430d7d16e7100f95f6adff935d4594dc1e6d7ee74485fef238ce5650a397042c6bae3d50a1198c87265ac2b3f4b31b01c1c8486d65a96a4ae2d756ca76a93f5216299e7977dd9ac3e4badda94800728acc1a8c17", 0x73, 0x1, &(0x7f0000004200)={0x11, 0xfc, r2, 0x1, 0x3, 0x6, @dev={[], 0x1a}}, 0x14) syz_open_dev$ndb(&(0x7f0000004240)='/dev/nbd#\x00', 0x0, 0x800) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000004280)=0x400, 0x4) fchdir(r4) 14:13:20 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0xff, 0x0, 0xff, 0x6dc, 0x0, 0xe0bc, 0x1}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x2, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @rand_addr="2fc99dea0dda6ff061495edec150733a"}, 0x1c) 14:13:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x700) 14:13:23 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a30951aa51b8f5c72f90e5d74"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x40000) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:23 executing program 3: socket$inet(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = syz_open_dev$audion(&(0x7f00000004c0)='/dev/audio#\x00', 0x9, 0x400000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hwrng\x00', 0x20001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000001680)={0x0, @in={{0x2, 0x0, @broadcast}}}, 0x84) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000000040)=@nl=@unspec={0x1100000004000000, 0x1100, 0xaa, 0x80fe}, 0x80, &(0x7f0000000280)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a300000000020000000a000000000000ffffff8400000000000000c00195c1e2d4", 0x36}], 0x1}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) request_key(&(0x7f0000000140)='cifs.idmap\x00', &(0x7f0000000380)={'syz', 0x0}, 0x0, 0xfffffffffffffff9) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000000)) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="24000000170a07031dfffd946fa2830020200a00090a018eba89ffb2e84600001d85680c", 0x24}], 0x1, 0x0, 0x489}, 0x0) 14:13:23 executing program 2: r0 = getpid() ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) capset(&(0x7f00000003c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007440), 0x0, 0x0, &(0x7f0000007640)) kcmp$KCMP_EPOLL_TFD(0x0, r0, 0x7, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) socket$isdn(0x22, 0x3, 0x0) r3 = epoll_create1(0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x100, 0x12, 0x9, 0x7, "887d8fb210f946fa1a785fa03d23bfd41ba662d85dc80c3ae7b23f4783c96154"}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) r4 = gettid() write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, 0x0) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x111, 0xf}}, 0x20) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="04032cbd7000fbdbdf250100000000000000024100f40faa04ba00000c001369623a"], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x20004090) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, 0x0, 0x0) close(r3) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x0, 0x8}}, 0x28) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f00000002c0)) syz_genetlink_get_family_id$ipvs(0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:13:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0xc00) 14:13:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0xcc) shutdown(r0, 0x1) 14:13:23 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:23 executing program 1: r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000100)={{0x5550000000, 0x80000001, 0x9, 0x1ff, 0xbca9, 0x6}, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) getitimer(0x2, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) getpid() syz_open_procfs(0x0, 0x0) fchmod(0xffffffffffffffff, 0xffffffffffffffff) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000180)={[], 0x0, 0x40}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, 0x0) 14:13:23 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) r1 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x2, 0x0) dup2(r0, r1) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r2, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0\x00', 0x8, 0x2) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x800, 0x0) ioctl$TIOCSCTTY(r4, 0x540e, 0xfc1) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000000c0)) r5 = dup3(r3, r3, 0x80000) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000000040)={0x0, 0x2, 0xfffffffffffffbff, 0x1, 0xffffffffffffffb0}) ptrace$cont(0x7, r2, 0x0, 0x0) 14:13:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0xd00) 14:13:23 executing program 3: mkdir(&(0x7f0000001540)='./file0\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) ptrace$peekuser(0x3, r0, 0x20) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) chroot(&(0x7f000009a000)='./file0\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x8f21}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r2, 0x101, 0x7}, 0x8) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x31, 0x12) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r3, 0x8030560a, &(0x7f0000000140)={0x42, 0x10, &(0x7f0000000340)="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", {0x8, 0x765, 0x0, 0x6ff8e0331df3671b, 0x4, 0xda, 0x7, 0x1}}) 14:13:23 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad5081003000000bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2617.290657] net_ratelimit: 24 callbacks suppressed [ 2617.290666] protocol 88fb is buggy, dev hsr_slave_0 [ 2617.300792] protocol 88fb is buggy, dev hsr_slave_1 14:13:23 executing program 2: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000200)={0x6}, 0x2) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f00000002c0)) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f00000001c0)) r0 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0xe000, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x7fff) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) 14:13:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80800) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x4e21, 0x8000000000000000, @dev}, 0xffffffffffffffff, 0xffffffffffffffff}}, 0x48) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000003c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) r4 = dup2(r3, r1) ioctl$ASHMEM_GET_PROT_MASK(r4, 0x7706, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) connect$pptp(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) 14:13:23 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000880)=""/254, &(0x7f0000000100)=0xfe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000280)='/dev/usbmon#\x00', 0xffffffffffffffff}, 0x30) r2 = signalfd4(0xffffffffffffff9c, &(0x7f0000000300)={0xff}, 0x8, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000440)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0200002e00100729bd7000ffdbdf251d00000008001000", @ANYRES32=r1, @ANYBLOB="6e81b46fd7e5d29b24ec5461044049d97aa04967d9d98725df75750b01b75dbcf212250fabcfda6f464056f87e72c14e47ee0300f20c002f00000000000000000084014b0038e4e99d3ede3860b756cf4bd9042634c63711974d995f17571ac75708e6d5d786c1a975a763d17f5a20afae0d8cef08006000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="000011bc12ab188011380e9428eb465929dc7a22601d703c2b36afdf05e67d5a621f74f513496bfbd6acd51efb05ed6c2e4d5ac64ebe5725409f7e0000"], 0x21c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x3, 0x28) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x39) ptrace$cont(0x18, r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r4, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r4, 0x0, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7, 0x400) rt_tgsigqueueinfo(r4, r4, 0x1a, &(0x7f0000000180)={0x27, 0x9301, 0x2b2a0000000000}) ioctl$KVM_ENABLE_CAP(r6, 0x4068aea3, &(0x7f0000000080)={0x74, 0x0, [0x3, 0x9, 0x9, 0xffffffffffffffe1]}) 14:13:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0xf00) 14:13:24 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400040, 0x0) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f00000000c0)={0x7, 0x96}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000940)='/dev/uhid\x00', 0x802, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) fcntl$setflags(r2, 0x2, 0x1) add_key(&(0x7f0000000040)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) write$UHID_CREATE2(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x120) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000980)="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", 0xee4}], 0x1) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) 14:13:24 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x28500, 0x0) write$P9_RREAD(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a309506a6a724cfec"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:24 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={r0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)}}, 0x20) r1 = open(0x0, 0x0, 0x82) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000940)=ANY=[]) write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x9, @mcast1, 0x4}}}, 0x88) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000b80)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000bc0)={'netdevsim0\x00', r3}) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x8100, 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000740)={r6, 0x7d3c, 0xa, [0x9, 0x101, 0x7, 0x2, 0x1, 0x9, 0x9, 0x9, 0x4000000080000, 0x0]}, 0x0) 14:13:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x8, 0x8000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000740)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='fuseblk\x00', 0x0, &(0x7f0000000800)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x1}}], [{@seclabel='seclabel'}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/binder#\x00'}}, {@pcr={'pcr', 0x3d, 0x2d}}, {@audit='audit'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@seclabel='seclabel'}]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x40, 0x0) name_to_handle_at(r6, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x58, 0x8000, "b0a0d25046acd4bea77ccc5d971d3922eececd51b63b4fb191c8325db43536759c9e2551300d4239f6236004bb2b087bfea2cce895442021230752b89f5f80bca7256df007af2a2f95e85660ff4d6e2f"}, 0x0, 0x400) ioctl$TCXONC(r6, 0x540a, 0x8) sendmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002ff0)={&(0x7f000000afb8)=ANY=[@ANYBLOB="fc0000200100000000000000000000008e15adfcfc04aba1"], 0x1}}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='trusted.overlay.upper\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x103, 0x2) r7 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000006200)={0x18, 0xf, 0x0, {{0xbf8ad77afb07bb1d, 0x2, 0x8}, 0x1000}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1, 0x9) unshare(0x40000000) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x1ec4, 0xffe, &(0x7f0000000040)}) lseek(r7, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000500)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000540)={0x0, 0x80000, r6}) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000280)='system_u:object_r:utempter_exec_t:s0\x00', 0x25) fchown(0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) getrandom(&(0x7f00000001c0)=""/129, 0x81, 0x2) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000240)={0x0, 0xffffffffffffffad, &(0x7f0000000980)={&(0x7f00000003c0)={0x2c, r1, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}]}]}, 0x2c}}, 0x0) 14:13:24 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x1100) 14:13:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008080) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0x7, 0x0, 0x70a000, 0x0, 0x0, 0x0, 0x2}}) 14:13:24 executing program 0: clone(0x10000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000003c0)={0xc7, 0x7, 0x6, 0xb3, &(0x7f00000001c0)=""/179, 0x6a, &(0x7f0000000280)=""/106, 0xb6, &(0x7f0000000300)=""/182}) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700000000000000407145542c5cb7870917f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0xfffffffffffff001, 0x8000, 0x2, 0x6, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x2, 0x2, 0x7, 0x100000000, 0xfffffffffffffff8, 0x1e8d, 0x800000003f, r4}, 0x20) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:24 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x20200, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, 0x0) r1 = gettid() tkill(r1, 0x3a) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_getres(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xd8f, 0x80000) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x26) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) name_to_handle_at(r3, &(0x7f0000000040)='.\x00', &(0x7f0000000480)=ANY=[@ANYRES16], 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r2) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000340)) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="0402968686769ad2236842c6873f8cd0fe2b3be32608cb032843db43dbe865070c401d1f8463ab1edc0cd158f172c5de54d956028bd5a3a16ecb2b30"], 0x1, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000240), 0x4) uselib(&(0x7f0000000000)='./file0\x00') request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) chroot(&(0x7f0000000300)='./file0\x00') ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000380)) syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000380), 0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x7ff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000680)="5109279a953a00f2c862a234f43192838ba16fbd94607baeff02cf4fb2c05b45ec98d8e259487d821fb26bbde26f7e0a94364a71e5f5f8606235d71f713ad76145ded40c6c5191ee84917157ceb5c6d13c741027d40a60230714dd99cc55205168", 0x0, 0x0, 0x0) [ 2618.171348] protocol 88fb is buggy, dev hsr_slave_0 [ 2618.171492] protocol 88fb is buggy, dev hsr_slave_0 [ 2618.177016] protocol 88fb is buggy, dev hsr_slave_1 [ 2618.181850] protocol 88fb is buggy, dev hsr_slave_1 14:13:24 executing program 0: clone(0x20010000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x1, 0x0, 0x1, 0x0, 0x0, 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x14) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x7fffffff, 0x8000}]}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300000900000000000000000000000200090008000000e5000000000000fb030006000000000002000000e0000001000000000000000002000100000000008000000200000180d8d338191237fb9b17efba9a2d23f1a4d10b59ddc3defdce3e"], 0x48}}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)=0x7, 0x4) [ 2618.262492] print_req_error: I/O error, dev loop0, sector 520 flags 80700 14:13:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x1900) [ 2618.353426] IPVS: ftp: loaded support on port[0] = 21 14:13:24 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) capset(&(0x7f0000000480)={0x19980330, r0}, &(0x7f00000004c0)={0x1000, 0x8, 0x4, 0x2, 0x782, 0x1}) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x1) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417d5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x7ccc2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x98, r3, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x4c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004080}, 0x20040000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cachefiles\x00', 0x400, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa0040}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={r0}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)}}, 0x20) r1 = open(0x0, 0x0, 0x82) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000001c0)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000940)=ANY=[]) write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x9, @mcast1, 0x4}}}, 0x88) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000b80)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000bc0)={'netdevsim0\x00', r3}) r4 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) r5 = memfd_create(&(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x8100, 0x0) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000740)={r6, 0x7d3c, 0xa, [0x9, 0x101, 0x7, 0x2, 0x1, 0x9, 0x9, 0x9, 0x4000000080000, 0x0]}, 0x0) 14:13:25 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67686f75ef2b3c82a4", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000340)={0x46, 0x6, 0x0, {0x400000000001, 0x0, 0x1d, 0x0, '/selinux0avc/\x83ache_threshoLd\x00'}}, 0x46) [ 2618.732865] IPVS: ftp: loaded support on port[0] = 21 14:13:25 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="24000000140007041dfffd946f610500020081001f00000604000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1, 0x0, 0xfffffffffffffede}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) [ 2618.810661] protocol 88fb is buggy, dev hsr_slave_0 [ 2618.815750] protocol 88fb is buggy, dev hsr_slave_1 [ 2618.820895] protocol 88fb is buggy, dev hsr_slave_0 [ 2618.821736] print_req_error: I/O error, dev loop0, sector 520 flags 80700 [ 2618.825959] protocol 88fb is buggy, dev hsr_slave_1 14:13:25 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15070000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:25 executing program 2: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_buf(r0, 0x0, 0x31, &(0x7f0000000080)="cd39435df00302571d5636edb472e7b3a4afd0129b22c66cbf58e10def7e21d2d4159da84b6b2587227b901b09c6f8ad1a3d6f8c2ee0d3c091ee10e6797740540de73942a2084ea233b7946e7807722d4bdb41ee4fd6b0408fc74e681675fd7ca9723c7930264ed0f0a4f7cfac26274b61106174b1083afefb2cfd875658f003d94a280bbf686d94c73c1368feff4f915b3d581d", 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xd0c}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x8, 0x5, 0x1000, 0xfffffffffffff800]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040), 0x3) 14:13:25 executing program 0: clone(0x8001100001, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x12) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) timer_create(0x7, &(0x7f0000000040)={0x0, 0x22, 0x0, @tid=r0}, &(0x7f0000000080)) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x3f00) 14:13:25 executing program 2: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20}, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x200, 0x52, 0x100000000, 0x90, 0x8, 0x3, 0x3f, 0x1000, 0x10a, 0x40, 0x3a5, 0x17, 0x5, 0x38, 0x1, 0x4, 0x5, 0x6}, [{0x2, 0x7fff, 0x1, 0xfff, 0xf54d, 0xfffffffffffffff9, 0x3, 0xff}, {0x7, 0x0, 0xb6, 0xffffffffffffffff, 0x200, 0x8, 0x80000000, 0x1}], "f65a59de53dce077512e21e47e31f69bba2220441feb8ec26d50f71ba1a675a22bbab3b7f073bcf0bafbf2a694d5978ddb5b5b6af2969f5613b4e061d98b3d66163ddbc9c02009f2e48841f7f6f15c", [[], [], [], [], [], [], [], [], []]}, 0x9ff) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000d80)={0x8001003, 0x1, 0x1}) r1 = syz_open_dev$swradio(&(0x7f0000000cc0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000d40)={0x0, 0x6, 0xff, &(0x7f0000000d00)=0xad}) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f00000000c0)={0x5, "981dc0af2504571003b17f077907038c564b52b3a750b03226ca7aaa7b67559a", 0x1, 0x1}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/capi/capi20\x00', 0x2000, 0x0) ptrace$getregs(0xc, r2, 0x7, &(0x7f00000001c0)=""/188) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r3, 0xffffffffffffffb9, &(0x7f0000000080)) 14:13:25 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) geteuid() openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) r4 = getpgrp(0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x803011fc00000000) inotify_init1(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x7fff) 14:13:25 executing program 3: r0 = open(&(0x7f0000000040)='./file0\x00', 0x800000000080040, 0x0) fcntl$setlease(r0, 0x400, 0x0) ftruncate(r0, 0x9) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 14:13:25 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:25 executing program 3: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000951000/0x3000)=nil, 0x3000, 0x9) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) readahead(r0, 0xff, 0x5) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x1, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000006b163de4b00000000"], 0x8, 0x0) msgrcv(r1, &(0x7f0000000040)={0x0, ""/4}, 0xc, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000140)=0x8) msgget$private(0x0, 0x22a) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x1f, 0x64f}, 0x2c) r4 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x400000) r5 = getuid() ioctl$KDGETLED(r4, 0x4b31, 0x0) getgroups(0x4, &(0x7f00000002c0)=[0xee01, 0xffffffffffffffff, 0x0, 0x0]) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000680)={[0x0, 0x1f, 0x5e214c7e, 0x1ff, 0x0, 0x8, 0x5, 0x0, 0x7fffffff, 0x8, 0x14, 0x56ef, 0x6, 0x5, 0x10000, 0x7], 0x3000, 0x200}) ioctl$KVM_NMI(r4, 0xae9a) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r7, 0x201, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x8}}}, 0x24}}, 0x80) setxattr$security_ima(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.ima\x00', &(0x7f0000000480)=@md5={0x1, "80d0032ffbf3c298a79cf17f1f4ec95e"}, 0x11, 0x0) write$FUSE_ENTRY(r4, &(0x7f0000000300)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x851, 0x7, 0x0, {0x0, 0x800, 0x4, 0x8000, 0x8, 0x8, 0x0, 0x1000, 0x4, 0x800, 0x7f, r5, r6, 0x8, 0x6283cb1d}}}, 0x90) msgrcv(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000099d9f078b3c4"], 0x1, 0x2, 0x1000) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) pause() 14:13:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x4000) 14:13:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x280000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000200000000010000003000000ffffffffff7f0000964c0cac54146e7f0800000009000000"]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000400)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10003}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="fc6798d324e1"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x101, 0x9, 0x8, 0x8, 0x4}, &(0x7f0000000100)=0x98) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, &(0x7f0000000440)={0x100000001, 0x14, [0x6, 0x3, 0xfffffffffffff000, 0x1ff, 0x101]}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000300)={r5, 0x7a, "a003459924055c56db34276e0c4a2f630b812cb67435bf307c45f5b7e2de6a60aebb4ef8033f3a52b7570d8c2df9da0d050452c0d7ecd0eb4c98af3707f427779c0199574e16a7722646e1c2ef3f8978a29abd60129903e58c99d85fa894b60e13640a4cf73833215fb7a617606015f2ec5ec88a412b0b431ee7"}, &(0x7f0000000240)=0x82) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14:13:25 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r1, 0x7, 0x1, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2619.420373] Started in network mode [ 2619.442206] Own node identity 8, cluster identity 4711 [ 2619.486597] 32-bit node address hash set to 8 14:13:26 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:26 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x4000) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0xe803) 14:13:26 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000140)={@mcast2, 0x0}, &(0x7f0000000180)=0x14) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000200)=0x7) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000040)={0x0, 0x0, "4a72600dba784ad62c3e2f49f6fe67ab5953921652dfac95"}) munlockall() ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000100)={0x0, 0x0, 0x7fff, [], &(0x7f00000000c0)=0x101}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @local}, 0x10) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xfffffffffffffffb, 0x400000) 14:13:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) geteuid() openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) r4 = getpgrp(0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r4) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) splice(r3, 0x0, r2, 0x0, 0x1000000000000003, 0x803011fc00000000) inotify_init1(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) sendto$packet(r3, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x7fff) 14:13:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x400, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000180)=0xe5d) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x58, 0x1) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x10) socketpair$unix(0x1, 0x40000000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="01003a1e2410"}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) 14:13:26 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:26 executing program 3: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000951000/0x3000)=nil, 0x3000, 0x9) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) readahead(r0, 0xff, 0x5) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x1, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000006b163de4b00000000"], 0x8, 0x0) msgrcv(r1, &(0x7f0000000040)={0x0, ""/4}, 0xc, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000140)=0x8) msgget$private(0x0, 0x22a) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x1f, 0x64f}, 0x2c) r4 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x400000) r5 = getuid() ioctl$KDGETLED(r4, 0x4b31, 0x0) getgroups(0x4, &(0x7f00000002c0)=[0xee01, 0xffffffffffffffff, 0x0, 0x0]) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000680)={[0x0, 0x1f, 0x5e214c7e, 0x1ff, 0x0, 0x8, 0x5, 0x0, 0x7fffffff, 0x8, 0x14, 0x56ef, 0x6, 0x5, 0x10000, 0x7], 0x3000, 0x200}) ioctl$KVM_NMI(r4, 0xae9a) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r7, 0x201, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x8}}}, 0x24}}, 0x80) setxattr$security_ima(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.ima\x00', &(0x7f0000000480)=@md5={0x1, "80d0032ffbf3c298a79cf17f1f4ec95e"}, 0x11, 0x0) write$FUSE_ENTRY(r4, &(0x7f0000000300)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x851, 0x7, 0x0, {0x0, 0x800, 0x4, 0x8000, 0x8, 0x8, 0x0, 0x1000, 0x4, 0x800, 0x7f, r5, r6, 0x8, 0x6283cb1d}}}, 0x90) msgrcv(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000099d9f078b3c4"], 0x1, 0x2, 0x1000) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) pause() 14:13:26 executing program 2: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000951000/0x3000)=nil, 0x3000, 0x9) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) readahead(r0, 0xff, 0x5) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x1, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000180)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) msgsnd(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000006b163de4b00000000"], 0x8, 0x0) msgrcv(r1, &(0x7f0000000040)={0x0, ""/4}, 0xc, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000140)=0x8) msgget$private(0x0, 0x22a) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)={0x1f, 0x64f}, 0x2c) r4 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x1, 0x400000) r5 = getuid() ioctl$KDGETLED(r4, 0x4b31, 0x0) getgroups(0x4, &(0x7f00000002c0)=[0xee01, 0xffffffffffffffff, 0x0, 0x0]) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000680)={[0x0, 0x1f, 0x5e214c7e, 0x1ff, 0x0, 0x8, 0x5, 0x0, 0x7fffffff, 0x8, 0x14, 0x56ef, 0x6, 0x5, 0x10000, 0x7], 0x3000, 0x200}) ioctl$KVM_NMI(r4, 0xae9a) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r7, 0x201, 0x0, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x8}}}, 0x24}}, 0x80) setxattr$security_ima(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.ima\x00', &(0x7f0000000480)=@md5={0x1, "80d0032ffbf3c298a79cf17f1f4ec95e"}, 0x11, 0x0) write$FUSE_ENTRY(r4, &(0x7f0000000300)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x851, 0x7, 0x0, {0x0, 0x800, 0x4, 0x8000, 0x8, 0x8, 0x0, 0x1000, 0x4, 0x800, 0x7f, r5, r6, 0x8, 0x6283cb1d}}}, 0x90) msgrcv(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000099d9f078b3c4"], 0x1, 0x2, 0x1000) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) pause() 14:13:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x20000) 14:13:26 executing program 2: socketpair$unix(0x1, 0x4000000008, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x22fa33c6) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) write$P9_RWSTAT(r2, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) r3 = socket$inet6(0xa, 0x2, 0x9) r4 = dup3(r1, r3, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000100)={r5, 0x10}) sendmmsg(r3, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) [ 2620.618144] QAT: Invalid ioctl 14:13:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x30000) [ 2620.724420] QAT: Invalid ioctl 14:13:27 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000140)=0x1) read(r0, &(0x7f0000ec6000)=""/50, 0x5f) ustat(0x2, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 14:13:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x400000000000003, 0x0, 0x3, 0x2}, 0x10}}, 0x0) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) 14:13:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x40000) 14:13:27 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x101}, 0x59d) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000), 0x2) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_proto_private(r1, 0x89e0, &(0x7f0000000180)="4a1b92332a55a403bba69e9a527886ad54b67a4c8308f0fa4e02700e252d86aa1e9b33d9b559631e6d76bf94ebf75ef4f993200fb4ad4dceee814ca5065e24e3e17787973f5fa370d4d0f89c25f605ae400861a1c81ab6648e877f5208c7b0d0b5335bb7227aa4d2e6efc7b44985e11e130063e715a9a2e48296c0ef017221b2bfca25bef35b8c553a3ae5a9ad39f878ec6c1b9dc0c8b3db91a8442c1ed403fdc2f11395fbae8f3492315a") ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000240)=""/173) 14:13:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ab553fec", 0x1d4) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x2) ioctl$KVM_NMI(r1, 0xae9a) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000240)={0x884}) prctl$PR_SVE_GET_VL(0x33, 0xa48c) [ 2621.277413] misc userio: Invalid payload size [ 2621.319512] misc userio: No port type given on /dev/userio [ 2621.343250] misc userio: The device must be registered before sending interrupts [ 2621.376588] misc userio: Invalid payload size [ 2621.396964] misc userio: No port type given on /dev/userio [ 2621.416172] misc userio: The device must be registered before sending interrupts [ 2622.330686] net_ratelimit: 16 callbacks suppressed [ 2622.330694] protocol 88fb is buggy, dev hsr_slave_0 [ 2622.330722] protocol 88fb is buggy, dev hsr_slave_1 [ 2622.335702] protocol 88fb is buggy, dev hsr_slave_1 [ 2622.970649] protocol 88fb is buggy, dev hsr_slave_0 [ 2622.975752] protocol 88fb is buggy, dev hsr_slave_1 [ 2622.980881] protocol 88fb is buggy, dev hsr_slave_0 [ 2622.985920] protocol 88fb is buggy, dev hsr_slave_1 [ 2622.991036] protocol 88fb is buggy, dev hsr_slave_0 [ 2622.996076] protocol 88fb is buggy, dev hsr_slave_1 14:13:29 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x200002000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffb, r0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@ipv4={[], [], @loopback}, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ffffffff2d020000000000e556b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000"], 0x0}, 0x48) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000400)=r5) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$input_event(r0, &(0x7f00000002c0)={{0x77359400}, 0x14, 0x9, 0x8001}, 0x18) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x40000000001e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0xffffffffffffffdb) r6 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[], 0x0) r7 = dup3(r2, r6, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000300)={'ip6tnl0\x00', 0x3}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x66, 0xfff, 0x8000000001}, 0x2c) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000280)='{', 0x1}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r8, 0x8008ae9d, &(0x7f0000000440)=""/169) sendmmsg(r10, &(0x7f0000000180), 0x400000000000117, 0x0) 14:13:29 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x21) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 14:13:29 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x800, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, 0x0, 0x4000005) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='hybla\x00', 0x6) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(&(0x7f00000004c0)) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') prctl$PR_GET_SECCOMP(0x15) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) dup3(r2, r1, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0xe805, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 14:13:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x60000) 14:13:29 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x15, &(0x7f0000000280), 0x706) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x82000) setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000040)=0x2, 0x4) 14:13:29 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 2623.365267] bridge0: port 3(gretap0) entered blocking state [ 2623.424546] bridge0: port 3(gretap0) entered disabled state [ 2623.449889] device gretap0 entered promiscuous mode 14:13:29 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f00000000c0)='./file0\x00', r0}, 0x10) chroot(&(0x7f0000baf000)='./file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x4) [ 2623.495792] bridge0: port 3(gretap0) entered blocking state [ 2623.501679] bridge0: port 3(gretap0) entered forwarding state [ 2623.530684] protocol 88fb is buggy, dev hsr_slave_0 14:13:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0xc0000) 14:13:30 executing program 2: r0 = socket$inet(0x2, 0x80005, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0xfffffffffffffffc}, 0x8) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000400)=0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x80000) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000380)={0x1000003f, 0x8000, 0x17}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x0, 0x101}, 0xffffffa8) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)=0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000200)=0x20, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r4 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x8, 0x200000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000280)={r1, r4}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4) 14:13:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0xefb, 0xffffffffffffffff) ioctl(r0, 0xffffffffffffdfbe, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b0020000", @ANYRES16=r2, @ANYBLOB="00042abd7000ffdbbfade199fd3fb5e541c88e6355df250d0000000c00090008000100060000008c01010044000400200001000a004e2000000002fe8000000000000000000000000000aa08000000200002000a004e2300000fbafe8000000000000000000000000000bb0300000008000300ff0f0000380004001400010002004e21e00000020000000000000000200002000a004e220000008000000000000000000000000000000001010100002c00020008000300000000000800040081000000080001000e00000008000300090000000800030004000000100001006574683a7663616e300000004c0002000800010018000000080003007f0000000800030000080000080002000000000008000200020000000800030008000000080004000100000008000200ff07000008000100080000001000010069623a73797a5f74756e0000380004001400010002004e21ac1e00010000000000000000200002000a004e2000000009000000000000000000000000000000010101000008000300080000002c0004001400010002004e20ac1414bb00000000000000001400020002004e24e000000100000000000000004c0001000800030020000000080003000100000038000400200001000a004e21000003fffe8000000000000000000000000000bb681600001400020002004e24ac141428000000000000000048000500080001006962000008000100756470003400020008000200400000000800030003000000080001000b000000080004000200000008000300060000000800010001000100100007000c0003000400000000000000300004002c000700080004006c2b0000080002001f000000080004000008000008000400000000800800010001000000300007000800010008000000080002003f00000008000200ffff000008000200080000000c0003000900000000000000"], 0x2b0}, 0x1, 0x0, 0x0, 0x1}, 0x0) fcntl$addseals(r0, 0x409, 0x8) 14:13:30 executing program 1: r0 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) set_mempolicy(0x0, 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000000200)=""/15) write$P9_RLERROR(r0, &(0x7f0000000440)={0xa, 0x7, 0x1, {0x1, '-'}}, 0xa) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @remote}}, 0xffffffffffffff7f, 0x9, 0x5, 0xf644, 0x10000}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x800}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000700)=ANY=[@ANYBLOB="0100070002000000070000000300000000003d08c0b4bcfd2cf91c45ed791c9b5389ea5cdf5fd6265d4deacd8a56c0a4be4e9f0ea115475a9601118dc1049b8eac658a327e90715763417b9af796cfc16320345cdee86c9cd6460a044ff565ff9d2044194275dcdd2172ec25c42ba348"], 0x0) r2 = openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0}) write$sndseq(0xffffffffffffffff, &(0x7f0000000600)=[{0x10001, 0x8, 0x25, 0x5, @time={r3}, {0x0, 0x7}, {0xffffffffffffffff, 0x300000000}, @time=@tick=0xa9}], 0x30) r4 = socket(0x11, 0x802, 0x0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x1b, &(0x7f0000000480), &(0x7f0000000500)=0x4) r5 = socket(0x0, 0x0, 0x1) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r5, 0x40086409, &(0x7f00000003c0)={r6}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00', 0xffffffffffbfdffc}) write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000240)={'team0\x00\x00\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000140)=@get={0x1, &(0x7f0000000100)=""/4, 0x1}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0), 0x8) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 14:13:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0x9, 0x30}, &(0x7f0000000180)=0xc) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) tee(r0, r0, 0x0, 0x0) socket(0x4000000000013, 0x801, 0x1) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240)="3dff5f786bf1948ea3b879c3d4b59d1343d2061229eac76ddb6a7aa18f3dbefb3060b8de88d5558f09e0af1911c6a3cfb34c0d5e1da34e411d58263b2cf8f1a4a3620b2ffaca9ccc12007d7bad3e03fa919cc0df318da3c7d55b91f3", 0x5c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00'}) renameat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') ustat(0x0, &(0x7f0000000100)) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'team0\x00\x04\xff\xff\xff\xc0`\x03\x00\x00\xff', 0x4bfd}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[]}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x2100) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}}) sendmmsg(0xffffffffffffffff, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000d40)}, 0x80000000}], 0x1, 0x10) 14:13:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0xfee00) [ 2624.013450] device team0 entered promiscuous mode [ 2624.023248] device team_slave_0 entered promiscuous mode [ 2624.044840] device team_slave_1 entered promiscuous mode 14:13:31 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x27beb49f, 0x80400) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000300)={0x612a04e, 0x900000}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x3, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x8) sendmmsg(r3, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x0, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff0007000500742ebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000340)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000180)={{0x9, 0x6, 0x6, 0x1, 'syz0\x00', 0x10000}, 0x0, 0x400, 0x100000001, r0, 0x3, 0x7f, 'syz0\x00', &(0x7f0000000040)=['\x00', 'GPLmd5sum%mime_type@-\x00', 'vmnet1GPLvboxnet0-keyring]}nodev%GPL(X\x00'], 0x3e, [], [0x5, 0x7, 0x3, 0x80000001]}) 14:13:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x80ffff) 14:13:31 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:31 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x161840, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x5, 0x2, [0x5, 0x29a]}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000280)={r2, 0x8}, 0x8) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="03cbff000085004594000000000000005f3cf1ecd06add0e71d88f448bdfa72ec0fdad0074e38aec2d75b3d0afcf2f0a97c997c5cf687c26a667759c415ccc0324c25ba7043c43099e3d94915cd865fdc2d3ce287b860358ee04284bbd4170d77b138c2e1fddb3448ec63c4ffedf08e982f22d0af20d5744d67ee96f218af1c383b07b133ea735b31a01b87724e5accfc4f286457a1c7ea101e3630b8d74c7219c75a404325c8534692362131ef21d1e57a28f594e75af0cd9511c51634ba81b54980195472cf954e35ae6a4086125fcdb7c29a3418fb07c8cb44ad4017800000000000000000000"], 0x10}}, 0x0) [ 2625.179135] 8021q: adding VLAN 0 to HW filter on device team0 [ 2625.185707] device team0 entered promiscuous mode [ 2625.193887] device team_slave_0 entered promiscuous mode [ 2625.199427] device team_slave_1 entered promiscuous mode [ 2625.205985] 8021q: adding VLAN 0 to HW filter on device team0 14:13:31 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='environ\x00') exit(0x10000000003fb) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x6, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000240)=0x0) timer_delete(r1) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') 14:13:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0xee0f00) 14:13:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x1000000) [ 2625.734512] 8021q: adding VLAN 0 to HW filter on device team0 [ 2625.778539] device team0 left promiscuous mode [ 2625.786165] device team_slave_0 left promiscuous mode [ 2625.794918] device team_slave_1 left promiscuous mode 14:13:32 executing program 1: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="230000001a000705e4050c00e69be20180a0d6f5c00fea0c73dd4a33a0a2aa0a223bdc", 0x23}], 0x1}, 0x0) 14:13:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x2000000) 14:13:32 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', 'syz'}, 0x30, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa9) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000040)=0x1) socket$can_raw(0x1d, 0x3, 0x1) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'.yz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 14:13:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x3000000) 14:13:32 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 2626.174515] device team0 entered promiscuous mode [ 2626.187903] device team_slave_0 entered promiscuous mode [ 2626.206140] device team_slave_1 entered promiscuous mode [ 2626.217559] 8021q: adding VLAN 0 to HW filter on device team0 [ 2627.690699] net_ratelimit: 23 callbacks suppressed [ 2627.690705] protocol 88fb is buggy, dev hsr_slave_0 [ 2627.700740] protocol 88fb is buggy, dev hsr_slave_1 14:13:34 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xa000, 0x0) ioctl$TIOCEXCL(r2, 0x540c) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:34 executing program 2: mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x100) write$P9_RREAD(r0, &(0x7f00000000c0)={0xe4, 0x75, 0x1, {0xd9, "4c271564e6bc88ac302f29198473dffd82045914428a8120e1b1da927e7a8bcacb51a0d9a3075e5db9e43b49f1931311502f961a5badb2836061c84301629bbbd0997d21ac18fcd51f554df40a9bce1995897f9a0c969dd9de99cf605ae4d9de16e0e55869737e249e35d47796cec3be5647ba9c6bf518af9c55273ef2a89c3535f625555a0bcfa6960af3773443887e8927d60381c5daa1f67d90668ed7c3b5275db8d4dcdc3c1c0eafe09ea78a57e025c68b0fb5835b041a92d97b4ccbd37f8d600308e1d83109c0408563c7701d3297ac09d2dbb8787e63"}}, 0xe4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 14:13:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xfe4d, 0x0, 0x0, 0x2}}, 0xfffffffffffffe16) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x224b, 0x6000) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) 14:13:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x4000000) 14:13:34 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpeername(r0, &(0x7f0000000280)=@nfc, &(0x7f0000000140)=0x80) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000040)='security\x00') 14:13:34 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:34 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145632c5cb7872417f5f7e1159b6e9e5df3ebb8228f21bb5f0000000000950000000bb1eb8bc2705d3d0cf0480c0bf3ee7f1113ef49992daeecb133beef132701197a7ac2b9d7e4ee9edd27d89d6e101c8e5ff6414cfbf065f42c817b748c994ca185b691e51e6ceb340f76b1ac75ece3406e578155"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x9, 0x200000000200000) write$P9_RCREATE(r1, &(0x7f00000001c0)={0x18, 0x73, 0x1, {{0xc2, 0x1, 0x4}, 0x7f}}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000088912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x401, 0x0) sendmsg$can_raw(r3, &(0x7f0000000380)={&(0x7f0000000100), 0x10, &(0x7f0000000280)={&(0x7f0000000200)=@canfd={{0x1, 0x345800, 0x2, 0xa8}, 0x11, 0x2, 0x0, 0x0, "bb09dff08348930295e0e97fa7a5386d3f326d5f7ad9d0316407eca00be4a8a3a6fdf2a2ea22ea90e3d3428af2d14bbb3d5b7b6a25fb20c435d94694eda0953d"}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffff}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) write$binfmt_elf64(r1, 0x0, 0x1d) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000001c0), 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40242}, 0xc, 0x0}, 0x814) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000280)) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, 0x0) 14:13:34 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x3d, "cf8dd8e6b509ffacfad3051a6511faa81706e3ce88906903b43121b59a9ffdcda9c2409dd11a329c8ab25ef2915573153050323bc86359749b555dd8da"}, &(0x7f0000000180)=0x45) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000001c0)={r3, 0xf3, "2dd69839a706e7d7bdfa407e8284075b3aef16155ee200effcbcf8b8012417f840685843ad87fb4a1ba51f31fa7a05b1ba98dfccf91f9857e9a34bfdfd3bb48bf56b40325423dac58ca1ed80cc34a2bf5f059ef60de995f2c2a198b2110698eeffd50e3b852aff8b9d9b0f9181f2ccf4b6dab145fc56fbc809e7fe22a751a0fe61910eec9331bcdbaf185aa36f9e8fb52b50c3ab53c05136a585de5b78825284739ceb78265ae38d5e1753e3d85848112cbae0441bd2b19fce86ae40f7be3500e094b99867770fc29cd1911050f460211b67eac43ba8e459cbffd2fb445a5f1d88a3653f8071b3ff0a02af71d9f33b89378b19"}, &(0x7f00000002c0)=0xfb) 14:13:34 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)='y\x00', 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x4}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0xfffffffffffffffd, 0x8, 0x20e, 0x3, 0x1, 0x6, 0x200, 0xfffffffffffffffc, r2}, 0x20) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x101000, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x200, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) 14:13:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x5000000) [ 2628.570634] protocol 88fb is buggy, dev hsr_slave_0 [ 2628.575732] protocol 88fb is buggy, dev hsr_slave_1 [ 2628.580653] protocol 88fb is buggy, dev hsr_slave_0 [ 2628.585885] protocol 88fb is buggy, dev hsr_slave_1 14:13:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000000100)=""/211, 0xfe4d, 0x0, 0x0, 0x2}}, 0xfffffffffffffe16) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x224b, 0x6000) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) 14:13:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @local, [{[], {0x8100, 0x1f, 0x2, 0x2}}], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x3a, 0xf0ffff, @ipv4={[0x2, 0x2, 0x543, 0x0, 0x60], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x401, 0x7, 0x7f, 0x0, 0x6}, 0x14) 14:13:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x7000000) 14:13:35 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000006000)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000340)}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000005c0)=""/246) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)={0x2d, 0x4, 0x0, {0x4, 0x400, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) ioctl$EVIOCGREP(r0, 0x40107446, &(0x7f0000001000)=""/174) 14:13:35 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000006c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x2, 0x0}) r1 = syz_open_dev$midi(&(0x7f0000000540)='/dev/midi#\x00', 0x0, 0x220000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000780)='vmnet1{ecurity@systemem1:\x00\xb2\xf5rG\x1f\v\xdb$s\x9d\xabXm\t\x94\xf6\xc3,\xde\xe7\xd4\xd3\xb6M\xac\xf1J\x19\xc1\xea\xa5\xe4\x99|r\xe0\x85\x9e\x8c<\x93\xd64\x96&\xb3\xf4 xGH\xc1Sm\xdftP\x05DaR\x11\x05\xc2\xbf\xb4e^\x8c\x16\xdb\xeeI\xb4F\n'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000480), 0x4) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ppoll(0x0, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000001340), 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x0, 0x30}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={r3, 0x3}, &(0x7f0000000740)=0x8) umount2(&(0x7f0000000140)='./file0\x00', 0x0) setrlimit(0x2, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f7640") r5 = userfaultfd(0x80000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r4, 0x1}, &(0x7f0000000380)=0x8) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="f4fb5926e0eeb838e48e5a63edd1c816eae9e0e9b093079778982182bf6173b3ced475254a3febade67b3c8e0d83c28ac7c6a78894ad6dcb591fe1e31a47c57bb2bff0dbaf"]}) close(r6) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x7f, 0x2000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0xffff, @mcast2, 0x1000}}, 0x6, 0xffffffffffffffe0, 0x5, 0x8, 0x7}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={r7, 0xdcf, 0xf1a, 0xfffffffffffffff9}, 0xc) close(r5) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x40080) 14:13:35 executing program 1: socket$inet(0x2, 0x3, 0x3f) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) [ 2629.210636] protocol 88fb is buggy, dev hsr_slave_0 [ 2629.215732] protocol 88fb is buggy, dev hsr_slave_1 [ 2629.220864] protocol 88fb is buggy, dev hsr_slave_0 [ 2629.225924] protocol 88fb is buggy, dev hsr_slave_1 14:13:35 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x8000000) 14:13:35 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3888, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in=@local, @in=@loopback, 0x4e23, 0x2, 0x4e23, 0x0, 0x2, 0x80, 0x0, 0x8f, r3, r4}, {0x10001, 0x7, 0x7fff, 0x6, 0xffffffff, 0x800, 0x20, 0xb4}, {0x0, 0x2, 0x8, 0x9d}, 0x4, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in6=@empty, 0x4d3}, 0x2, @in6=@rand_addr="06d6ef6e6de2caf7615086bd68f46001", 0x3505, 0x3, 0x0, 0x7, 0x1, 0x7, 0x3fffffff800}}, 0xe8) pwrite64(r2, &(0x7f0000000280)="2f6e8785531badfbf7d7275172e0dd23583bbcfe446c8401b273a76f04ee0b877c0dab85ed8a6484ebfda2422eb7a3517ecc965deaebf1066ca5b911c3685a2c35d41e43ff53fb5be385dba4dbca5d7d65d14aad922d9da418e3a40a0a6f3c5f918978ba119bf95e085ebe34e1c5d34e3de1926a42672a1bcf7844bb50cec6193b329f41243eb0ee921a07287d3fe5b05e63a72d26663826d94941bef6f782e7463b1ca593", 0xa5, 0x0) mq_open(&(0x7f0000000000)='.[\x00', 0x0, 0x0, 0x0) 14:13:38 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200080, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x20, 0x631dc0d5}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x21) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:38 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x480000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000200)={{0x2, 0x0, 0x7, 0x609adcd5, 'syz0\x00', 0x7}, 0x1, 0xf, 0x0, r1, 0x4, 0x4, 'syz1\x00', &(0x7f00000000c0)=['/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '{system\\\x00'], 0x42, [], [0x789, 0x1000, 0x6, 0x2]}) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x100000001, 0x2000000000101000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc4c85513, &(0x7f0000000000)={0xb}) 14:13:38 executing program 2: r0 = socket$kcm(0x2, 0x2, 0x0) close(r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x40382, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000200)={0x0, 0xecd, 0x8000, 0x5, 0x6fb, 0x4, 0xffffffff, 0x200, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000002c0)={r2, 0x100000001}, 0x8) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = dup3(r0, r0, 0x80000) write$UHID_INPUT2(r4, &(0x7f0000000100)={0xc, 0x92, "cc85eb4f22b39010c8727c2ef3c2c71675d13453e82af8fd8f8f44add980209507f2095822e9d94a80f17507c8932ddf0c51182138f72203d3aa3b9b9bcca0168ea285df3ec9f5c30147ba864a376d88f546189ef75fc408437843416b9c8f14ea0026339f94435b2ede2c5fad4c6615bf6f9c6801daa619ba0c3c7a327a76c5a4737da4e601e067c3a9ec3a84a236a1b5aa"}, 0xfffffffffffffd48) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000280), 0x4) sendmsg(r3, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000580)=[{&(0x7f00000000c0)="a0", 0x1}], 0x1}, 0x0) close(r0) 14:13:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0xc000000) 14:13:38 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 14:13:38 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xd9) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)={0x81}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8924, &(0x7f0000000040)={'bond0\x00', r1}) 14:13:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000014f88)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x80) ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000240)={0x1, 0x0, {0x5, 0x8a, 0x0, 0x3}}) r3 = dup3(r0, r1, 0x0) ioctl$KDDELIO(r3, 0x4b35, 0x1) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000040)={0x2, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x2, [{{0x2, 0x4e21, @empty}}, {{0x2, 0x4e23, @empty}}]}, 0x190) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) 14:13:38 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$dspn(0x0, 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100), 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) connect$l2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x1000000) 14:13:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0xd000000) 14:13:38 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='autofs\x00', 0x0, 0x0) 14:13:38 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x4, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r1, &(0x7f00000002c0)=""/169, 0xa9) r3 = dup2(r2, r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={r4, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) [ 2632.015737] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2632.024178] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2632.039299] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2632.050233] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2632.057412] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2632.064637] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2632.103921] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2632.165751] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2632.209860] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2632.243574] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2632.250397] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2632.311385] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz1 14:13:38 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:38 executing program 2: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setpriority(0x0, 0x0, 0xfffd) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f00000005c0)={'IDLETIMER\x00'}, &(0x7f0000000600)=0x1e) r1 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) write$P9_RXATTRWALK(r0, &(0x7f0000000380)={0xf, 0x1f, 0x1}, 0xfffffe0b) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000540)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x1) r2 = add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x6c26c5e5ebdc2c61) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)) setxattr$security_capability(0x0, 0x0, &(0x7f0000000500)=@v3={0x3000000, [{}, {0x0, 0x2}]}, 0x18, 0x2) readlink(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=""/16, 0x10) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[0x0, &(0x7f0000000440)='security.capability!'], &(0x7f0000000ac0)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x7f, 0x1, 0x0, 0xd, 0x0, 0x1, 0x3831, 0x5, 0x7ff, 0x91f, 0x602, 0x8, 0xfffffffffffffffe, 0x400, 0x9, 0x10001, 0x6, 0x6, 0x14f5, 0xa092, 0x1, 0x1, 0xff, 0x62, 0x4, 0x5, 0xf8, 0x9, 0x7ff, 0x1, 0x6, 0x1ff, 0x7, 0x5, 0x0, 0x13a, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x100, 0x1ff, 0x6cad4c73, 0xf, 0xffffffffffff67b5, 0x91, 0x100}, r3, 0x1, r1, 0x2) setpriority(0x1, 0x0, 0x80) keyctl$assume_authority(0x10, r2) 14:13:38 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0xf000000) 14:13:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x11000000) 14:13:39 executing program 3: r0 = epoll_create1(0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f00000000c0)) getuid() epoll_create1(0x0) close(r0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) 14:13:39 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x80, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x800000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) process_vm_readv(r0, &(0x7f0000001900)=[{&(0x7f0000000440)=""/147, 0x93}, {&(0x7f0000000500)=""/127, 0x7f}, {&(0x7f0000000580)=""/218, 0xda}, {&(0x7f0000000680)=""/241, 0xf1}, {&(0x7f0000000780)=""/65, 0x41}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/111, 0x6f}, {&(0x7f0000001880)=""/77, 0x4d}], 0x8, &(0x7f0000001c80)=[{&(0x7f0000001980)=""/237, 0xed}, {&(0x7f0000001a80)=""/24, 0x18}, {&(0x7f0000001ac0)=""/66, 0x42}, {&(0x7f0000001b40)=""/44, 0x2c}, {&(0x7f0000001b80)=""/206, 0xce}], 0x5, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40000, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000300)=0x8) mount(&(0x7f0000000000), &(0x7f0000000140)='.', 0x0, 0x23080, 0x0) getpeername$tipc(r1, &(0x7f0000000380)=@id, &(0x7f00000003c0)=0x10) socketpair$unix(0x1, 0x4000000000001, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(&(0x7f0000000080), &(0x7f0000187ff8)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="09571c66d48761d2d50523e98e5115"], &(0x7f0000000340)='./file0\x00', 0x0, 0x5010, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f00000022c0)=""/4096, 0x1000}], 0x1, 0x0) 14:13:39 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) wait4(r0, 0x0, 0x81000001, &(0x7f0000000040)) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2632.730635] net_ratelimit: 16 callbacks suppressed [ 2632.730642] protocol 88fb is buggy, dev hsr_slave_0 [ 2632.730666] protocol 88fb is buggy, dev hsr_slave_1 [ 2632.735688] protocol 88fb is buggy, dev hsr_slave_1 [ 2632.783721] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2632.818046] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 14:13:39 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) read$eventfd(0xffffffffffffffff, &(0x7f0000001ac0), 0xfffffffffffffd3a) keyctl$chown(0x4, r2, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') modify_ldt$read(0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/87, 0x57}, {&(0x7f00000016c0)=""/208, 0xd0}], 0x7, &(0x7f0000001880)=""/128, 0x80, 0xa0}, 0xb18adc9706b39d51) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40a01, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) keyctl$setperm(0x5, r2, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dsp\x00', 0x101000, 0x0) fstat(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x0, r5) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x100000001) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000800), 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000e00)=ANY=[@ANYBLOB="1b0b21e200000080000000007a8c5fd29c07e21e333f3bb55cfbef9c8a25193cb0b9b7c39c12ae91637d8b5d2ff6921f2c1413a3ce08f4f69ac175826de7c7221d003e65ae0670232b333ea3c15cb264a3eca70bb4f2c06af3430c9cf886284c9f851c861ac40cf3955e4ee463de3508072d5d834b7646c56648000000ca5cbbe5ce7afae1fb5032afc4691072a12022b7898e86c3ce1d958624d814825835fe71938502d9f2a53a990c88d155bbb0495d57e38ea791066e0200000100000000660ee49897bb04b702e0db8afba713df5e96a0ceddde65ab4e4c318582f79ffda34b8a4bdfa8cd25d323754bd450c5c27686200bfe446c9dd62e9a6e1f000000008543eefa51a1c70f51fbbfb1479da17912f7f9b5274cf13a4beaa395faa681322e745993aa9f1c92d82c4922269dc826a41b7b6850763703a6bf3a04cb378323a2b299e94b873c74a3ba4a62523fc29fc0ed8ab38462aaa550a71da2561aa2655331147017f84ff760d9e9e4242ee06a0ddbdf091191a7cb01f686335b410bd251f0ae62442f50082802d0efe053d8f335db79022419fc70d8e5e13c20c85a91b074f44100d36687efb0fbdac19d4c3e2d83652d530b54d86fecc768768178fdedac464225dbee85ca9c299181ac0c18308aa68c95446d4cffeee398ae32d3072fefa0323670d7b72aea39146cb43f702250fda3e9d1810595cffa542913073a0bc7f378636cbbdd267d14d53b9a837d4a003c3838d91d6679c3fcf439988f9d83312defdeaaaa285866b3b1aea3becbcc58c7bcec6a7e60e1cafda398801f0363a0da0d2f8a07cde20dfbb70b37", @ANYRES32], 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000600)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x0, 0x0}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000005c0)=0x40, 0x4) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x400001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000a40)=0xffffffffffffffc4) mount(&(0x7f00000008c0)=ANY=[@ANYRESDEC=r1, @ANYPTR=&(0x7f0000000880)=ANY=[@ANYPTR], @ANYRESDEC, @ANYRES32=r6, @ANYPTR64, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRES32=r3], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:13:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/bnep\x00') fsetxattr$security_ima(r0, &(0x7f0000000180)='security.ima\x00', &(0x7f0000000a00)=ANY=[], 0x0, 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x4003, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000340)=0xbdb, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f00000002c0)=')\x00', 0x4) sendfile(r2, r3, &(0x7f00000037c0), 0xfffffdeb) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000004c0)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x1, &(0x7f0000000480), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x0, &(0x7f0000000180), 0x0) clone(0x0, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000280)) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000240)={0xa, 0xa, 0x0, 0x425}, 0xa) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000380)=""/189) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0) getpgid(0xffffffffffffffff) getpid() syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') userfaultfd(0x800) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10040002}, 0xc, &(0x7f0000000800)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) fcntl$setownex(r1, 0xf, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4206, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r7, 0x1000008914, &(0x7f0000000080)="0500000000000000ee0f70") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x1e5) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r8, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0xa, 0x0, @local={0xac, 0x214}}, 0xffd6, &(0x7f0000000640), 0x98, &(0x7f0000000180)=[{0x20, 0x84, 0x8}], 0x20}, 0x60) 14:13:39 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000040), 0x0, 0x2, 0x0, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x101000, 0x0) write$FUSE_OPEN(r1, &(0x7f00000000c0)={0x20, 0x0, 0x3, {0x0, 0x6}}, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x8) write$P9_RWRITE(r1, &(0x7f0000000140)={0xb, 0x77, 0x2}, 0xb) [ 2632.857296] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2632.894253] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2632.929300] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2632.953001] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2632.976661] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2632.991410] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2633.000019] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2633.014996] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2633.024916] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 2633.047339] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz1 14:13:39 executing program 1: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x4, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r1, &(0x7f00000002c0)=""/169, 0xa9) r3 = dup2(r2, r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={r4, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 14:13:39 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc700000000fb00f7e15df3ebb8222ad508f0c7905b9512169a30950000000000000000f04900000000"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000180)={{0x2, 0x1, 0x7f, 0x0, 0xfff}, 0x1, 0xffffffff, 'id1\x00', 'timer1\x00', 0x0, 0x8e, 0x4, 0x3, 0x80000000}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) futex(&(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000280), 0x1) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:39 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) read$eventfd(0xffffffffffffffff, &(0x7f0000001ac0), 0xfffffffffffffd3a) keyctl$chown(0x4, r2, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') modify_ldt$read(0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/87, 0x57}, {&(0x7f00000016c0)=""/208, 0xd0}], 0x7, &(0x7f0000001880)=""/128, 0x80, 0xa0}, 0xb18adc9706b39d51) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40a01, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) keyctl$setperm(0x5, r2, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dsp\x00', 0x101000, 0x0) fstat(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x0, r5) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x100000001) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000800), 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES32], 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000600)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x0, 0x0}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000005c0)=0x40, 0x4) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x400001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000a40)=0xffffffffffffffc4) mount(&(0x7f00000008c0)=ANY=[@ANYRESDEC=r1, @ANYPTR=&(0x7f0000000880)=ANY=[@ANYPTR], @ANYRESDEC, @ANYRES32=r6, @ANYPTR64, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRES32=r3], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 2633.370678] protocol 88fb is buggy, dev hsr_slave_0 [ 2633.375801] protocol 88fb is buggy, dev hsr_slave_1 [ 2633.380951] protocol 88fb is buggy, dev hsr_slave_0 [ 2633.386024] protocol 88fb is buggy, dev hsr_slave_1 [ 2633.391190] protocol 88fb is buggy, dev hsr_slave_0 [ 2633.396262] protocol 88fb is buggy, dev hsr_slave_1 14:13:39 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1507000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x19000000) 14:13:39 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x40200, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r2, @in={{0x2, 0x4e24, @multicast2}}, 0x5f56, 0x6, 0x3, 0x9, 0x10}, 0x98) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) linkat(r3, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./file0\x00', 0x400) [ 2633.592051] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 2633.615724] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 2633.643727] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 2633.663557] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 14:13:40 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$setregs(0xffffffffffffffff, r0, 0x28, &(0x7f0000000040)="dcc298c06621be36ed314b35d810720638a580b9f163ab8d82e80df66b43a18aa77b22eb50c12e330365270a") ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2633.705915] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 2633.753516] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 2633.787184] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 14:13:40 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() fanotify_init(0x20, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2633.820921] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 2633.862308] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 2633.881970] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 2633.888824] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 2633.909218] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz1 [ 2633.930653] protocol 88fb is buggy, dev hsr_slave_0 14:13:40 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:40 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) fchmodat(0xffffffffffffffff, &(0x7f0000000b40)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) read$eventfd(0xffffffffffffffff, &(0x7f0000001ac0), 0xfffffffffffffd3a) keyctl$chown(0x4, r2, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') modify_ldt$read(0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/71, 0x47}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000015c0)=""/90, 0x5a}, {&(0x7f0000001640)=""/87, 0x57}, {&(0x7f00000016c0)=""/208, 0xd0}], 0x7, &(0x7f0000001880)=""/128, 0x80, 0xa0}, 0xb18adc9706b39d51) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40a01, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000040), 0x4) keyctl$setperm(0x5, r2, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940)='/dev/dsp\x00', 0x101000, 0x0) fstat(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x0, r5) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x100000001) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000800), 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000e00)=ANY=[@ANYBLOB="1b0b21e200000080000000007a8c5fd29c07e21e333f3bb55cfbef9c8a25193cb0b9b7c39c12ae91637d8b5d2ff6921f2c1413a3ce08f4f69ac175826de7c7221d003e65ae0670232b333ea3c15cb264a3eca70bb4f2c06af3430c9cf886284c9f851c861ac40cf3955e4ee463de3508072d5d834b7646c56648000000ca5cbbe5ce7afae1fb5032afc4691072a12022b7898e86c3ce1d958624d814825835fe71938502d9f2a53a990c88d155bbb0495d57e38ea791066e0200000100000000660ee49897bb04b702e0db8afba713df5e96a0ceddde65ab4e4c318582f79ffda34b8a4bdfa8cd25d323754bd450c5c27686200bfe446c9dd62e9a6e1f000000008543eefa51a1c70f51fbbfb1479da17912f7f9b5274cf13a4beaa395faa681322e745993aa9f1c92d82c4922269dc826a41b7b6850763703a6bf3a04cb378323a2b299e94b873c74a3ba4a62523fc29fc0ed8ab38462aaa550a71da2561aa2655331147017f84ff760d9e9e4242ee06a0ddbdf091191a7cb01f686335b410bd251f0ae62442f50082802d0efe053d8f335db79022419fc70d8e5e13c20c85a91b074f44100d36687efb0fbdac19d4c3e2d83652d530b54d86fecc768768178fdedac464225dbee85ca9c299181ac0c18308aa68c95446d4cffeee398ae32d3072fefa0323670d7b72aea39146cb43f702250fda3e9d1810595cffa542913073a0bc7f378636cbbdd267d14d53b9a837d4a003c3838d91d6679c3fcf439988f9d83312defdeaaaa285866b3b1aea3becbcc58c7bcec6a7e60e1cafda398801f0363a0da0d2f8a07cde20dfbb70b37", @ANYRES32], 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000600)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x0, 0x0}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000005c0)=0x40, 0x4) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x400001, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000a40)=0xffffffffffffffc4) mount(&(0x7f00000008c0)=ANY=[@ANYRESDEC=r1, @ANYPTR=&(0x7f0000000880)=ANY=[@ANYPTR], @ANYRESDEC, @ANYRES32=r6, @ANYPTR64, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRES32=r3], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 14:13:40 executing program 2: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000044000)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x4, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_CREATE(r1, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) read(r1, &(0x7f00000002c0)=""/169, 0xa9) r3 = dup2(r2, r1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x0, &(0x7f0000000100)="8d29aea2fb", 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000240)={r4, 0x4, 0x10000}, &(0x7f0000000280)=0x8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) 14:13:40 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x8001004, 0x3, 0x1}) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2634.153175] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2634.159891] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2634.200797] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2634.228212] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2634.255169] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2634.285746] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2634.344558] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2634.400752] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2634.407475] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2634.438812] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2634.450617] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 2634.461760] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz1 14:13:41 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x400, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@get={0x100, 0x13, 0xb38, 0x70bd29, 0x25dfdbfd, {{'morus1280-generic\x00'}, [], [], 0x2000}, [{0x8, 0x1, 0xa04}, {0x8, 0x1, 0x4}, {0x8, 0x1, 0x40}, {0x8, 0x1, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x7439) 14:13:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x3f000000) 14:13:41 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:41 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYBLOB="e8e23d6bb75b1fb904dafdf949d7a55e91705e67c04b71d07f1d3525c38f6f6e90dbc0167aa6053b15b20a010d71b80769c52ac4ae5008a4cb368b582854efc8d0b5d8e05a0bb893e037a19b015425e778f4d4e03ffb4c2950caa6dad42c5b2d1268e06d0e28d941c14829f48ee3ae65abdabe13ab16faddba33548833ae997e99f30493a250cb"], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYPTR64, @ANYRESDEC=r0, @ANYPTR64, @ANYRES32=r0, @ANYRES16=r0, @ANYPTR]], @ANYRESDEC=r0, @ANYRES64=r0, @ANYRESHEX=0x0], 0x36) socket$inet(0x2, 0x3, 0x7f) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff038}, {0x80000006}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x7e) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) 14:13:41 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/53) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xf, r0, 0xffffffffffffffff, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:41 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x20208000005, 0x5, @value}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f00000009c0)=ANY=[@ANYBLOB]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0)='/dev/usbmon#\x00', 0x7, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001380)=ANY=[], 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_cancel(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0x6, r2, &(0x7f0000000240)="1d6110938ad14eb7274b7c31788b7605dc033edb0625a031c5d6ba413692f4458654a8849f0dbf8c8af660d12b745295b188d57820483e8500e54be33023f674585699482504de870bf5969b7432bfac240c12", 0x53, 0x6, 0x0, 0x3, r2}, &(0x7f00000002c0)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r7, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x400000b4, 0x0, 0x40000084], [0x187]}) 14:13:41 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6400000000000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:41 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x1, 0x13cb722895773fe, 0x3, 0x0, 0x0, 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="6eaa92c7bfe831173d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = fcntl$dupfd(r1, 0x406, r1) write$P9_RCLUNK(r2, &(0x7f0000000040)={0x7, 0x79, 0x1}, 0x7) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x40000000) 14:13:41 executing program 0: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x20000, 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000001c0)) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x7ff}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000002c0)={r2, 0x720, 0x10}, &(0x7f0000000300)=0xc) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="052cd4e6700040ef3d6bec5dff00070045542c5cb7872417f5f7e1159b6e9e5df3ebb8222ab23ef653d508104f0e22764b83315745282695bd0000000000000000"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='com.apple.system.Security\x00', &(0x7f00000000c0)=')user\x00', 0x6, 0x2) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:41 executing program 2: socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8a00, 0x80) setxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='security.evm\x00', &(0x7f0000000480)=@ng={0x4, 0x12, "b96a8d7fdcee8d667b583faea6"}, 0xf, 0x1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000180)={0x0, 0xfffffffffffffffc}, &(0x7f0000000380)=0x1b6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="6fc611f52dfbde05681a000000000211dbb103ed86f6323a23000009000000060000000600060000000000ff00000000000000400000000000ff7f000000000000ae9500000000"]}) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0x1}, 0x8) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='security.ima\x00', &(0x7f00000001c0)=@sha1={0x1, "37c7edfdea867374403107bea777ef62820a3d58"}, 0x15, 0x5) r3 = socket$netlink(0x10, 0x3, 0xe) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000240)={0x3, 0x7, 0x10001, 0x0, 0x0, [], [], [], 0x8, 0x3}) ioctl$sock_ifreq(r3, 0x8000000000008994, &(0x7f0000000040)={'bond0\x00\x00Z\x00', @ifru_ivalue=0x1ff}) 14:13:41 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) listen(r0, 0x4) prctl$PR_SET_KEEPCAPS(0x8, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, 0x0, &(0x7f0000000080)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) prctl$PR_SET_NAME(0xf, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x5) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x98) 14:13:41 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008913, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0xe8030000) 14:13:41 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000002}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008800}, 0x20004000) r4 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0xffffffff) 14:13:42 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chroot(&(0x7f0000000400)='./file0\x00') mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000100)='./file0\x00', 0x2) umount2(&(0x7f0000000040)='./file0\x00', 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:42 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) write(r1, &(0x7f0000000380)="dcca14f7a54fb45b4a57409fcd50595066603ae8244cf5f13426eb0a222e60556fa578cc233e4a1818ec2d9dd2859c143977d9f02d7f11d154b2654e7a3fbf2286866f2ed58a90932fe7fab8b41c576c9ed84c59d0408ca7b15ad3577fa6d75a57adb836b86dccc1ccc8ab9aa052a62978395b90b8e1", 0xffffff0e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updsa={0x104, 0x1a, 0x205, 0x0, 0x0, {{@in6=@mcast1, @in=@loopback}, {@in=@remote, 0x5000000, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@dev}]}, 0x104}}, 0x0) [ 2635.611714] mip6: mip6_destopt_init_state: spi is not 0: 5 [ 2635.654467] mip6: mip6_destopt_init_state: spi is not 0: 5 14:13:42 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0xffff8000) 14:13:42 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x1, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x80}) getrlimit(0xd, &(0x7f00000000c0)) close(r0) r1 = dup2(r0, r0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x6}, 0x10) 14:13:42 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x10}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r2, 0x7, 0x8, 0xff, 0x38, 0x2}, &(0x7f00000001c0)=0x14) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:42 executing program 1: alarm(0x20200000007) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x602042, 0xa) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f00000000c0)=0xa000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2635.785978] BUG: spinlock bad magic on CPU#1, syz-executor.2/18168 [ 2635.792354] lock: 0xffff8880ae92cd2d, .magic: 00000000, .owner: /-1, .owner_cpu: 0 [ 2635.800683] CPU: 1 PID: 18168 Comm: syz-executor.2 Not tainted 5.0.0-rc8+ #88 [ 2635.807961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2635.817327] Call Trace: [ 2635.819932] dump_stack+0x172/0x1f0 [ 2635.823572] spin_dump.cold+0x81/0xe6 [ 2635.827384] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2635.832933] do_raw_spin_lock+0x231/0x2e0 [ 2635.837086] ? rwlock_bug.part.0+0x90/0x90 [ 2635.841341] ? lock_acquire+0x16f/0x3f0 [ 2635.845350] ? flush_workqueue_prep_pwqs+0x1c5/0x590 [ 2635.850475] _raw_spin_lock_irq+0x68/0x80 [ 2635.854633] ? flush_workqueue_prep_pwqs+0x1c5/0x590 [ 2635.859745] flush_workqueue_prep_pwqs+0x1c5/0x590 [ 2635.864680] flush_workqueue+0x54b/0x14c0 [ 2635.868837] ? lock_downgrade+0x810/0x810 [ 2635.872995] ? pwq_unbound_release_workfn+0x2e0/0x2e0 [ 2635.878195] ? wait_for_completion+0x440/0x440 [ 2635.882870] capi20_release+0x1e7/0x290 [ 2635.886848] ? capi20_release+0x1e7/0x290 [ 2635.890999] ? capincci_free+0x3d0/0x3d0 [ 2635.895058] capi_release+0x1cd/0x230 [ 2635.898856] __fput+0x2df/0x8d0 [ 2635.902150] ____fput+0x16/0x20 [ 2635.905422] task_work_run+0x14a/0x1c0 [ 2635.909309] exit_to_usermode_loop+0x273/0x2c0 [ 2635.913899] do_syscall_64+0x52d/0x610 [ 2635.917788] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2635.922973] RIP: 0033:0x457e29 [ 2635.926163] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2635.945058] RSP: 002b:00007f2440e7dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2635.952766] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000457e29 [ 2635.960030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2635.967293] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2635.974565] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2440e7e6d4 14:13:42 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x2, 0x13) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2635.981830] R13: 00000000004f4d52 R14: 00000000004ce8f8 R15: 00000000ffffffff [ 2635.999720] kobject: 'loop0' (0000000006336e0b): kobject_uevent_env [ 2636.010335] kobject: 'loop0' (0000000006336e0b): fill_kobj_path: path = '/devices/virtual/block/loop0' 14:13:42 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0504c73cb00040ef3d6bec5dff00070005dd74aebe8e1ffcbb63b4a4b34db817f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095858fde054f83fe157cab188907ae27740909411cebca1a6075eef376453a89b54933657431ebceeb921865c6653a1bb1ec807cc78c8784497821bce07f64e3ac3631091e17d9e5e09cac7e050ad23fe3b225e04cce74261bfc219fb18771b0a98634c5f83762433160ef582e469f606a20929d"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xb0, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e24, 0x8, @ipv4={[], [], @rand_addr=0xfd}, 0x1}, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xcb}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, 0x656b, 0x7}, 0x90) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) getpeername$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) recvmsg(r2, &(0x7f0000000600)={&(0x7f0000000440)=@can={0x1d, 0x0}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000000500)=""/151, 0x97}], 0x2}, 0x2000) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@mpls_getroute={0x4c, 0x1a, 0x800, 0x70bd29, 0x25dfdbfd, {0x1c, 0x14, 0x0, 0x8, 0x0, 0x0, 0xff, 0x1, 0x2000}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_OIF={0x8, 0x4, r5}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0xfffffffffffffffd}, @RTA_DST={0x18, 0x1, [{0xfffffffffffffdb9, 0x7, 0x8, 0x4d}, {0x6, 0x6, 0x1, 0x189}, {0x7ff, 0x0, 0x2fc0, 0x100}, {0x3, 0x8b, 0x398, 0x1}, {0xff, 0x7ff, 0x80000001, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ptrace$cont(0x1000000007, r0, 0x1, 0x0) [ 2636.033825] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2636.054839] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2636.078360] kobject: 'loop0' (0000000006336e0b): kobject_uevent_env 14:13:42 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x1, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000080)={0x0, 0x0, 0x80}) getrlimit(0xd, &(0x7f00000000c0)) close(r0) r1 = dup2(r0, r0) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x6}, 0x10) [ 2636.101909] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2636.109617] kobject: 'loop0' (0000000006336e0b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2636.133052] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' 14:13:42 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) write(r1, &(0x7f0000000380)="dcca14f7a54fb45b4a57409fcd50595066603ae8244cf5f13426eb0a222e60556fa578cc233e4a1818ec2d9dd2859c143977d9f02d7f11d154b2654e7a3fbf2286866f2ed58a90932fe7fab8b41c576c9ed84c59d0408ca7b15ad3577fa6d75a57adb836b86dccc1ccc8ab9aa052a62978395b90b8e1", 0xffffff0e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 2636.153682] kobject: 'loop2' (00000000cd9c1962): kobject_uevent_env [ 2636.183808] kobject: 'loop2' (00000000cd9c1962): fill_kobj_path: path = '/devices/virtual/block/loop2' 14:13:42 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3f, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)={0x5, 0x0, [{0x6, 0x3, 0x0, 0x0, @irqchip={0x1f, 0x401}}, {0x61e, 0x7, 0x0, 0x0, @adapter={0x4, 0x8, 0x4, 0xfffffffffffffff7, 0xfb6d}}, {0x8, 0x1, 0x0, 0x0, @msi={0xbe43, 0x7, 0x80000001}}, {0x7, 0x3, 0x0, 0x0, @sint={0x7, 0xffffffffffffffe1}}, {0x100000000, 0x1, 0x0, 0x0, @msi={0x8cc, 0xffffffffffffffff, 0xc927}}]}) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040370ee4ef3d6bec5dff000000000074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508cf4f898b2b00e8"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000280)={0x6, 0x2, 0x4, 0x1, {r2, r3/1000+30000}, {0x7, 0x8, 0x4, 0x5, 0x0, 0x4, "4bf36391"}, 0x9, 0x2, @offset=0x4, 0x4}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 14:13:42 executing program 2: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0504c73cb00040ef3d6bec5dff00070005dd74aebe8e1ffcbb63b4a4b34db817f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095858fde054f83fe157cab188907ae27740909411cebca1a6075eef376453a89b54933657431ebceeb921865c6653a1bb1ec807cc78c8784497821bce07f64e3ac3631091e17d9e5e09cac7e050ad23fe3b225e04cce74261bfc219fb18771b0a98634c5f83762433160ef582e469f606a20929d"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xb0, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e24, 0x8, @ipv4={[], [], @rand_addr=0xfd}, 0x1}, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xcb}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, 0x656b, 0x7}, 0x90) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) getpeername$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) recvmsg(r2, &(0x7f0000000600)={&(0x7f0000000440)=@can={0x1d, 0x0}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000000500)=""/151, 0x97}], 0x2}, 0x2000) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@mpls_getroute={0x4c, 0x1a, 0x800, 0x70bd29, 0x25dfdbfd, {0x1c, 0x14, 0x0, 0x8, 0x0, 0x0, 0xff, 0x1, 0x2000}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_OIF={0x8, 0x4, r5}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0xfffffffffffffffd}, @RTA_DST={0x18, 0x1, [{0xfffffffffffffdb9, 0x7, 0x8, 0x4d}, {0x6, 0x6, 0x1, 0x189}, {0x7ff, 0x0, 0x2fc0, 0x100}, {0x3, 0x8b, 0x398, 0x1}, {0xff, 0x7ff, 0x80000001, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ptrace$cont(0x1000000007, r0, 0x1, 0x0) [ 2636.204155] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2636.214133] kobject: 'loop3' (00000000f8ccfb34): kobject_uevent_env [ 2636.222392] kobject: 'loop3' (00000000f8ccfb34): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2636.232283] kobject: 'loop0' (0000000006336e0b): kobject_uevent_env [ 2636.234443] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' 14:13:42 executing program 1: alarm(0x20200000007) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x602042, 0xa) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f00000000c0)=0xa000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2636.262440] kobject: 'loop0' (0000000006336e0b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2636.302366] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env 14:13:42 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(0xffffffffffffffff, r0) ioctl$FICLONE(r1, 0x40049409, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000300)=[@mss={0x2, 0x80}, @sack_perm, @mss={0x2, 0x15}, @window={0x3, 0x9, 0x8}, @window={0x3, 0x9, 0x200}], 0x2000000000000164) r2 = socket$inet6_udp(0xa, 0x2, 0x0) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x1ffffff, 0x0, 0xfffffffffffffefb) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) getpgrp(0x0) capget(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000200)) sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xfff}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r4, 0x9, 0x0, 0x20, 0xfffffffffffffffa}, &(0x7f0000000140)=0x18) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r1, 0x0, 0x664636cc15e70a6b) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r6+30000000}, 0x0) 14:13:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x8000000000) 14:13:42 executing program 2: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0504c73cb00040ef3d6bec5dff00070005dd74aebe8e1ffcbb63b4a4b34db817f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095858fde054f83fe157cab188907ae27740909411cebca1a6075eef376453a89b54933657431ebceeb921865c6653a1bb1ec807cc78c8784497821bce07f64e3ac3631091e17d9e5e09cac7e050ad23fe3b225e04cce74261bfc219fb18771b0a98634c5f83762433160ef582e469f606a20929d"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xb0, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e24, 0x8, @ipv4={[], [], @rand_addr=0xfd}, 0x1}, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xcb}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, 0x656b, 0x7}, 0x90) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) getpeername$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) recvmsg(r2, &(0x7f0000000600)={&(0x7f0000000440)=@can={0x1d, 0x0}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000000500)=""/151, 0x97}], 0x2}, 0x2000) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@mpls_getroute={0x4c, 0x1a, 0x800, 0x70bd29, 0x25dfdbfd, {0x1c, 0x14, 0x0, 0x8, 0x0, 0x0, 0xff, 0x1, 0x2000}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_OIF={0x8, 0x4, r5}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0xfffffffffffffffd}, @RTA_DST={0x18, 0x1, [{0xfffffffffffffdb9, 0x7, 0x8, 0x4d}, {0x6, 0x6, 0x1, 0x189}, {0x7ff, 0x0, 0x2fc0, 0x100}, {0x3, 0x8b, 0x398, 0x1}, {0xff, 0x7ff, 0x80000001, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ptrace$cont(0x1000000007, r0, 0x1, 0x0) 14:13:42 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700783b4463a5c1a67c050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb83be3d508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = semget(0x2, 0x7, 0x240) semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f0000000180)=""/188) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) [ 2636.318626] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2636.343642] kobject: 'loop5' (00000000522745e2): kobject_uevent_env 14:13:42 executing program 1: alarm(0x20200000007) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x602042, 0xa) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f00000000c0)=0xa000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2636.370771] kobject: 'loop5' (00000000522745e2): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2636.382980] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2636.405807] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' 14:13:42 executing program 1: alarm(0x20200000007) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x602042, 0xa) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f00000000c0)=0xa000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) 14:13:42 executing program 2: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0504c73cb00040ef3d6bec5dff00070005dd74aebe8e1ffcbb63b4a4b34db817f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095858fde054f83fe157cab188907ae27740909411cebca1a6075eef376453a89b54933657431ebceeb921865c6653a1bb1ec807cc78c8784497821bce07f64e3ac3631091e17d9e5e09cac7e050ad23fe3b225e04cce74261bfc219fb18771b0a98634c5f83762433160ef582e469f606a20929d"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xb0, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e24, 0x8, @ipv4={[], [], @rand_addr=0xfd}, 0x1}, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xcb}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, 0x656b, 0x7}, 0x90) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) getpeername$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) recvmsg(r2, &(0x7f0000000600)={&(0x7f0000000440)=@can={0x1d, 0x0}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000000500)=""/151, 0x97}], 0x2}, 0x2000) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@mpls_getroute={0x4c, 0x1a, 0x800, 0x70bd29, 0x25dfdbfd, {0x1c, 0x14, 0x0, 0x8, 0x0, 0x0, 0xff, 0x1, 0x2000}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_OIF={0x8, 0x4, r5}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0xfffffffffffffffd}, @RTA_DST={0x18, 0x1, [{0xfffffffffffffdb9, 0x7, 0x8, 0x4d}, {0x6, 0x6, 0x1, 0x189}, {0x7ff, 0x0, 0x2fc0, 0x100}, {0x3, 0x8b, 0x398, 0x1}, {0xff, 0x7ff, 0x80000001, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ptrace$cont(0x1000000007, r0, 0x1, 0x0) 14:13:42 executing program 1: alarm(0x20200000007) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) open(&(0x7f0000000000)='./file0\x00', 0x602042, 0xa) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2636.426232] kobject: 'loop4' (00000000a4ac2be3): kobject_uevent_env [ 2636.457794] kobject: 'loop4' (00000000a4ac2be3): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2636.459873] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2636.519908] kobject: 'loop2' (00000000cd9c1962): kobject_uevent_env [ 2636.523635] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2636.543763] kobject: 'loop2' (00000000cd9c1962): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2636.562786] kobject: 'loop0' (0000000006336e0b): kobject_uevent_env [ 2636.575308] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2636.600657] kobject: 'loop0' (0000000006336e0b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2636.600799] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2636.610469] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env [ 2636.645480] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2636.646559] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2636.652661] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2636.670277] kobject: 'loop2' (00000000cd9c1962): kobject_uevent_env [ 2636.677500] kobject: 'loop2' (00000000cd9c1962): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2636.687457] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env [ 2636.694023] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2636.704957] kobject: 'loop0' (0000000006336e0b): kobject_uevent_env [ 2636.711763] kobject: 'loop0' (0000000006336e0b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2636.721987] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env [ 2636.728429] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2636.738285] kobject: 'loop4' (00000000a4ac2be3): kobject_uevent_env [ 2636.744750] kobject: 'loop4' (00000000a4ac2be3): fill_kobj_path: path = '/devices/virtual/block/loop4' 14:13:43 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) rt_tgsigqueueinfo(r0, r0, 0x40, &(0x7f0000000080)={0xe, 0x4, 0xe}) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="052fc73cb00040ef3d6bec5dff000700050074aebe8e1f7145542c5cb7872417f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0x4}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@ipv4={[], [], @initdev}, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) 14:13:43 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) write(r1, &(0x7f0000000380)="dcca14f7a54fb45b4a57409fcd50595066603ae8244cf5f13426eb0a222e60556fa578cc233e4a1818ec2d9dd2859c143977d9f02d7f11d154b2654e7a3fbf2286866f2ed58a90932fe7fab8b41c576c9ed84c59d0408ca7b15ad3577fa6d75a57adb836b86dccc1ccc8ab9aa052a62978395b90b8e1", 0xffffff0e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:43 executing program 1: alarm(0x20200000007) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) 14:13:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x7f779d6ed700) [ 2636.963712] kobject: 'loop3' (00000000f8ccfb34): kobject_uevent_env [ 2636.970177] kobject: 'loop3' (00000000f8ccfb34): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2636.986045] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2636.988019] kobject: 'loop0' (0000000006336e0b): kobject_uevent_env [ 2636.998901] kobject: 'loop0' (0000000006336e0b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2636.999038] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2637.052247] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env [ 2637.058713] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2637.058938] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2637.070052] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2637.074616] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2637.087529] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2637.139422] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2637.149897] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2637.174300] kobject: 'loop4' (00000000a4ac2be3): kobject_uevent_env 14:13:43 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000240)={'raw\x00', 0xdb, "170a0ddda12621440f82f9c92d6280a7765c8a084de48129b74421ec932b8bf1e8205d57fea82822aa8381307427189e0ae4d34b9c3af65e0333e0f1ed5f37da8bf7a399b6a6dd9a81eeda86aa8a2df1f135ebb2ccc0616394289eef9da9a5b07d6ccf5247f8b52671115eaa6fe60c7d9dddcc25bbf76ba4d5ea732aba2b417ec0af20976b76f6dce1c6682b93df3da1fef8caf611f722c37f53e671922a704fc3f7bd1ddd76d18ea346e0efdb404ec0e4e0d52cbbc99b266db0bbb94ed92f8cc127226db423f7e32ae7cec937ef84dec0745ddff481f5003eaee3"}, &(0x7f0000000040)=0xff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6a5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x8000000000) 14:13:43 executing program 1: alarm(0x20200000007) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) 14:13:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x1000000000000) [ 2637.184215] kobject: 'loop4' (00000000a4ac2be3): fill_kobj_path: path = '/devices/virtual/block/loop4' 14:13:43 executing program 1: alarm(0x20200000007) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2637.212437] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2637.219283] kobject: 'loop5' (00000000522745e2): kobject_uevent_env [ 2637.228471] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2637.235003] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2637.240337] kobject: 'loop5' (00000000522745e2): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2637.246723] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2637.291762] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env [ 2637.302745] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2637.328765] kobject: 'kvm' (00000000400fec10): kobject_uevent_env 14:13:43 executing program 1: alarm(0x20200000007) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2637.343864] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2637.360636] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2637.369832] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2637.392273] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2637.398570] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2637.433493] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2637.437721] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env [ 2637.455052] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2637.464880] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2637.489275] kobject: 'loop0' (0000000006336e0b): kobject_uevent_env [ 2637.507729] kobject: 'loop0' (0000000006336e0b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2637.522438] kobject: 'loop4' (00000000a4ac2be3): kobject_uevent_env [ 2637.528878] kobject: 'loop4' (00000000a4ac2be3): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2637.577997] kobject: 'loop3' (00000000f8ccfb34): kobject_uevent_env [ 2637.584689] kobject: 'loop3' (00000000f8ccfb34): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2638.090613] net_ratelimit: 23 callbacks suppressed [ 2638.090618] protocol 88fb is buggy, dev hsr_slave_0 [ 2638.100676] protocol 88fb is buggy, dev hsr_slave_1 [ 2638.175674] kobject: 'loop5' (00000000522745e2): kobject_uevent_env [ 2638.182216] kobject: 'loop5' (00000000522745e2): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2638.970632] protocol 88fb is buggy, dev hsr_slave_0 [ 2638.970638] protocol 88fb is buggy, dev hsr_slave_0 [ 2638.970678] protocol 88fb is buggy, dev hsr_slave_1 [ 2638.975726] protocol 88fb is buggy, dev hsr_slave_1 14:13:45 executing program 2: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0504c73cb00040ef3d6bec5dff00070005dd74aebe8e1ffcbb63b4a4b34db817f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095858fde054f83fe157cab188907ae27740909411cebca1a6075eef376453a89b54933657431ebceeb921865c6653a1bb1ec807cc78c8784497821bce07f64e3ac3631091e17d9e5e09cac7e050ad23fe3b225e04cce74261bfc219fb18771b0a98634c5f83762433160ef582e469f606a20929d"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xb0, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e24, 0x8, @ipv4={[], [], @rand_addr=0xfd}, 0x1}, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xcb}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, 0x656b, 0x7}, 0x90) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) getpeername$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) recvmsg(r2, &(0x7f0000000600)={&(0x7f0000000440)=@can={0x1d, 0x0}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000000500)=""/151, 0x97}], 0x2}, 0x2000) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@mpls_getroute={0x4c, 0x1a, 0x800, 0x70bd29, 0x25dfdbfd, {0x1c, 0x14, 0x0, 0x8, 0x0, 0x0, 0xff, 0x1, 0x2000}, [@RTA_OIF={0x8, 0x4, r4}, @RTA_OIF={0x8, 0x4, r5}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0xfffffffffffffffd}, @RTA_DST={0x18, 0x1, [{0xfffffffffffffdb9, 0x7, 0x8, 0x4d}, {0x6, 0x6, 0x1, 0x189}, {0x7ff, 0x0, 0x2fc0, 0x100}, {0x3, 0x8b, 0x398, 0x1}, {0xff, 0x7ff, 0x80000001, 0x5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14:13:45 executing program 1: alarm(0x20200000007) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) 14:13:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x8000000000) 14:13:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x2000000000000) 14:13:45 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) write(r1, &(0x7f0000000380)="dcca14f7a54fb45b4a57409fcd50595066603ae8244cf5f13426eb0a222e60556fa578cc233e4a1818ec2d9dd2859c143977d9f02d7f11d154b2654e7a3fbf2286866f2ed58a90932fe7fab8b41c576c9ed84c59d0408ca7b15ad3577fa6d75a57adb836b86dccc1ccc8ab9aa052a62978395b90b8e1", 0xffffff0e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:45 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$BLKFLSBUF(r2, 0x1261, &(0x7f0000000240)=0x8) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x9, 0x5, [0x8, 0x7, 0x9, 0x200, 0x7]}, &(0x7f0000000080)=0x12) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={r4, 0x5}, 0x8) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 2639.519904] kobject: 'loop2' (00000000cd9c1962): kobject_uevent_env [ 2639.542148] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2639.543371] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2639.548419] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2639.551558] kobject: 'loop2' (00000000cd9c1962): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2639.581539] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' 14:13:46 executing program 1: alarm(0x20200000007) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) 14:13:46 executing program 2: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0504c73cb00040ef3d6bec5dff00070005dd74aebe8e1ffcbb63b4a4b34db817f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095858fde054f83fe157cab188907ae27740909411cebca1a6075eef376453a89b54933657431ebceeb921865c6653a1bb1ec807cc78c8784497821bce07f64e3ac3631091e17d9e5e09cac7e050ad23fe3b225e04cce74261bfc219fb18771b0a98634c5f83762433160ef582e469f606a20929d"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xb0, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e24, 0x8, @ipv4={[], [], @rand_addr=0xfd}, 0x1}, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xcb}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, 0x656b, 0x7}, 0x90) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) getpeername$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) recvmsg(r2, &(0x7f0000000600)={&(0x7f0000000440)=@can, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/64, 0x40}, {&(0x7f0000000500)=""/151, 0x97}], 0x2}, 0x2000) [ 2639.610610] protocol 88fb is buggy, dev hsr_slave_0 [ 2639.615672] protocol 88fb is buggy, dev hsr_slave_1 [ 2639.620768] protocol 88fb is buggy, dev hsr_slave_0 [ 2639.625417] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env [ 2639.625828] protocol 88fb is buggy, dev hsr_slave_1 [ 2639.637317] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' 14:13:46 executing program 1: alarm(0x20200000007) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2639.665417] kobject: 'loop2' (00000000cd9c1962): kobject_uevent_env [ 2639.682336] kobject: 'loop2' (00000000cd9c1962): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2639.700121] kobject: 'kvm' (00000000400fec10): kobject_uevent_env 14:13:46 executing program 1: alarm(0x20200000007) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2639.728018] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2639.738632] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2639.743282] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2639.760026] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env [ 2639.763421] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' 14:13:46 executing program 2: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0504c73cb00040ef3d6bec5dff00070005dd74aebe8e1ffcbb63b4a4b34db817f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095858fde054f83fe157cab188907ae27740909411cebca1a6075eef376453a89b54933657431ebceeb921865c6653a1bb1ec807cc78c8784497821bce07f64e3ac3631091e17d9e5e09cac7e050ad23fe3b225e04cce74261bfc219fb18771b0a98634c5f83762433160ef582e469f606a20929d"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xb0, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e24, 0x8, @ipv4={[], [], @rand_addr=0xfd}, 0x1}, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xcb}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, 0x656b, 0x7}, 0x90) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) getpeername$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) [ 2639.778086] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2639.793041] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' 14:13:46 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2639.821349] kobject: 'loop2' (00000000cd9c1962): kobject_uevent_env [ 2639.835270] kobject: 'loop2' (00000000cd9c1962): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2639.854591] kobject: 'kvm' (00000000400fec10): kobject_uevent_env 14:13:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x8000000000) [ 2639.872873] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2639.912787] kobject: 'loop0' (0000000006336e0b): kobject_uevent_env 14:13:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x3000000000000) 14:13:46 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2639.927857] kobject: 'loop0' (0000000006336e0b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2639.955551] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2639.968691] kobject: 'loop4' (00000000a4ac2be3): kobject_uevent_env 14:13:46 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) write(r0, &(0x7f0000000380)="dcca14f7a54fb45b4a57409fcd50595066603ae8244cf5f13426eb0a222e60556fa578cc233e4a1818ec2d9dd2859c143977d9f02d7f11d154b2654e7a3fbf2286866f2ed58a90932fe7fab8b41c576c9ed84c59d0408ca7b15ad3577fa6d75a57adb836b86dccc1ccc8ab9aa052a62978395b90b8e1", 0xffffff0e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 14:13:46 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2639.982151] kobject: 'loop4' (00000000a4ac2be3): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2639.993240] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2639.995982] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2639.999502] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2640.014333] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env [ 2640.033811] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2640.067346] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2640.078201] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2640.080370] kobject: 'loop3' (00000000f8ccfb34): kobject_uevent_env [ 2640.086289] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2640.092526] kobject: 'loop3' (00000000f8ccfb34): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2640.100619] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2640.112502] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env 14:13:46 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r3, 0x3c, 0x0, @in={0x2, 0x4e21, @broadcast}}}, 0x90) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:46 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2640.128439] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2640.131052] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2640.154205] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2640.174088] kobject: 'loop5' (00000000522745e2): kobject_uevent_env 14:13:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) 14:13:46 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2640.194225] kobject: 'loop5' (00000000522745e2): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2640.206142] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2640.226091] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2640.228024] kobject: 'loop0' (0000000006336e0b): kobject_uevent_env 14:13:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x4000000000000) [ 2640.254281] kobject: 'loop0' (0000000006336e0b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2640.269929] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2640.290488] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2640.303612] kobject: 'loop4' (00000000a4ac2be3): kobject_uevent_env [ 2640.312352] kobject: 'loop4' (00000000a4ac2be3): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2640.328834] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env [ 2640.329968] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2640.336929] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2640.365624] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2640.373523] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2640.380023] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2640.421055] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2640.434946] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2640.442240] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2640.443682] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2640.486664] kobject: 'loop0' (0000000006336e0b): kobject_uevent_env [ 2640.494967] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2640.504073] kobject: 'loop0' (0000000006336e0b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2640.513906] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2640.542680] kobject: 'loop4' (00000000a4ac2be3): kobject_uevent_env [ 2640.549169] kobject: 'loop4' (00000000a4ac2be3): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2640.867759] kobject: 'loop3' (00000000f8ccfb34): kobject_uevent_env [ 2640.874705] kobject: 'loop3' (00000000f8ccfb34): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 2641.072346] kobject: 'loop5' (00000000522745e2): kobject_uevent_env [ 2641.078817] kobject: 'loop5' (00000000522745e2): fill_kobj_path: path = '/devices/virtual/block/loop5' 14:13:49 executing program 2: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0504c73cb00040ef3d6bec5dff00070005dd74aebe8e1ffcbb63b4a4b34db817f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095858fde054f83fe157cab188907ae27740909411cebca1a6075eef376453a89b54933657431ebceeb921865c6653a1bb1ec807cc78c8784497821bce07f64e3ac3631091e17d9e5e09cac7e050ad23fe3b225e04cce74261bfc219fb18771b0a98634c5f83762433160ef582e469f606a20929d"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xb0, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e24, 0x8, @ipv4={[], [], @rand_addr=0xfd}, 0x1}, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xcb}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, 0x656b, 0x7}, 0x90) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) 14:13:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) 14:13:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 14:13:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x6000000000000) 14:13:49 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) write(r0, &(0x7f0000000380)="dcca14f7a54fb45b4a57409fcd50595066603ae8244cf5f13426eb0a222e60556fa578cc233e4a1818ec2d9dd2859c143977d9f02d7f11d154b2654e7a3fbf2286866f2ed58a90932fe7fab8b41c576c9ed84c59d0408ca7b15ad3577fa6d75a57adb836b86dccc1ccc8ab9aa052a62978395b90b8e1", 0xffffff0e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 14:13:49 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'system.', '/dev/sequencer2\x00'}, &(0x7f0000000240)=""/179, 0xb3) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pause() [ 2642.828317] kobject: 'loop2' (00000000cd9c1962): kobject_uevent_env [ 2642.849001] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2642.855568] kobject: 'loop2' (00000000cd9c1962): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2642.856875] kobject: 'kvm' (00000000400fec10): kobject_uevent_env 14:13:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2642.866681] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2642.877906] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2642.890676] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env [ 2642.910882] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' 14:13:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2642.931876] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2642.947955] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2642.956611] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' 14:13:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) 14:13:49 executing program 2: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0504c73cb00040ef3d6bec5dff00070005dd74aebe8e1ffcbb63b4a4b34db817f5f7e1159b6e9e5df3ebb8222ad508104f282695bd169a3095858fde054f83fe157cab188907ae27740909411cebca1a6075eef376453a89b54933657431ebceeb921865c6653a1bb1ec807cc78c8784497821bce07f64e3ac3631091e17d9e5e09cac7e050ad23fe3b225e04cce74261bfc219fb18771b0a98634c5f83762433160ef582e469f606a20929d"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xb0, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e24, 0x8, @ipv4={[], [], @rand_addr=0xfd}, 0x1}, @in6={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xcb}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x100000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3f}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e22, 0x800, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, 0x656b, 0x7}, 0x90) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") [ 2642.974561] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2642.999748] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env [ 2643.008906] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2643.025413] kobject: 'kvm' (00000000400fec10): kobject_uevent_env 14:13:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 2643.034631] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2643.041101] kobject: 'loop2' (00000000cd9c1962): kobject_uevent_env [ 2643.066882] kobject: 'loop2' (00000000cd9c1962): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2643.073221] kobject: 'kvm' (00000000400fec10): kobject_uevent_env 14:13:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2643.093042] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2643.119360] kobject: 'loop0' (0000000006336e0b): kobject_uevent_env [ 2643.121395] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2643.132124] net_ratelimit: 16 callbacks suppressed [ 2643.132131] protocol 88fb is buggy, dev hsr_slave_0 14:13:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2643.132172] protocol 88fb is buggy, dev hsr_slave_1 [ 2643.133682] kobject: 'loop0' (0000000006336e0b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2643.142267] protocol 88fb is buggy, dev hsr_slave_0 [ 2643.142314] protocol 88fb is buggy, dev hsr_slave_1 [ 2643.146602] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' 14:13:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0xc000000000000) [ 2643.195179] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env [ 2643.207211] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2643.209616] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2643.221369] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' 14:13:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2643.242558] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2643.251855] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2643.266147] kobject: 'loop4' (00000000a4ac2be3): kobject_uevent_env [ 2643.277518] kobject: 'loop4' (00000000a4ac2be3): fill_kobj_path: path = '/devices/virtual/block/loop4' 14:13:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) [ 2643.310501] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env [ 2643.325813] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2643.334224] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2643.347506] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env [ 2643.354819] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2643.358567] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2643.371162] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2643.375341] kobject: 'loop0' (0000000006336e0b): kobject_uevent_env [ 2643.387189] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2643.388939] kobject: 'loop0' (0000000006336e0b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2643.414141] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2643.423277] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2643.472698] kobject: 'loop4' (00000000a4ac2be3): kobject_uevent_env [ 2643.479178] kobject: 'loop4' (00000000a4ac2be3): fill_kobj_path: path = '/devices/virtual/block/loop4' 14:13:50 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) write(r0, &(0x7f0000000380)="dcca14f7a54fb45b4a57409fcd50595066603ae8244cf5f13426eb0a222e60556fa578cc233e4a1818ec2d9dd2859c143977d9f02d7f11d154b2654e7a3fbf2286866f2ed58a90932fe7fab8b41c576c9ed84c59d0408ca7b15ad3577fa6d75a57adb836b86dccc1ccc8ab9aa052a62978395b90b8e1", 0xffffff0e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) [ 2643.680288] kobject: 'loop3' (00000000f8ccfb34): kobject_uevent_env [ 2643.687588] kobject: 'loop3' (00000000f8ccfb34): fill_kobj_path: path = '/devices/virtual/block/loop3' 14:13:50 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1000, 0x200) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000240)={0x0, 0x1, 0x8, [], &(0x7f0000000180)={0x990a6c, 0xfffffffffffff76e, [], @p_u16=&(0x7f0000000080)=0xfd}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x101000) semctl$GETPID(0x0, 0x0, 0xb, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) syz_open_dev$midi(0x0, 0xff0, 0x400000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 14:13:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 14:13:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffc3) 14:13:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f000000b000/0x4000)=nil) shmat(r2, &(0x7f000000d000/0x4000)=nil, 0x5000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000006c0)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r3, 0xae80, 0x80ffff00000000) [ 2643.770614] protocol 88fb is buggy, dev hsr_slave_0 [ 2643.774203] kobject: 'loop5' (00000000522745e2): kobject_uevent_env [ 2643.775682] protocol 88fb is buggy, dev hsr_slave_1 [ 2643.782419] kobject: 'loop5' (00000000522745e2): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2643.787183] protocol 88fb is buggy, dev hsr_slave_0 [ 2643.801711] protocol 88fb is buggy, dev hsr_slave_1 [ 2643.806886] protocol 88fb is buggy, dev hsr_slave_0 [ 2643.811955] protocol 88fb is buggy, dev hsr_slave_1 [ 2643.823857] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2643.830129] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2643.841098] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2643.847495] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2643.857356] kobject: 'loop1' (00000000dacfac08): kobject_uevent_env [ 2643.867703] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2643.876386] kobject: 'loop1' (00000000dacfac08): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2643.876893] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2643.934895] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2643.941964] kobject: 'loop0' (0000000006336e0b): kobject_uevent_env [ 2643.949337] kobject: 'loop0' (0000000006336e0b): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2643.951293] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2643.985287] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2643.992383] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2644.034383] kobject: 'kvm' (00000000400fec10): kobject_uevent_env [ 2644.040688] kobject: 'kvm' (00000000400fec10): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2644.062669] kobject: 'loop4' (00000000a4ac2be3): kobject_uevent_env [ 2644.069182] kobject: 'loop4' (00000000a4ac2be3): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 2644.188368] kobject: 'loop5' (00000000522745e2): kobject_uevent_env [ 2644.194939] kobject: 'loop5' (00000000522745e2): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 2644.497701] kobject: 'loop3' (00000000f8ccfb34): kobject_uevent_env [ 2644.504164] kobject: 'loop3' (00000000f8ccfb34): fill_kobj_path: path = '/devices/virtual/block/loop3'