Warning: Permanently added '10.128.1.51' (ECDSA) to the list of known hosts.
2020/02/09 15:18:20 fuzzer started
2020/02/09 15:18:22 dialing manager at 10.128.0.26:42475
2020/02/09 15:18:22 syscalls: 2943
2020/02/09 15:18:22 code coverage: enabled
2020/02/09 15:18:22 comparison tracing: enabled
2020/02/09 15:18:22 extra coverage: enabled
2020/02/09 15:18:22 setuid sandbox: enabled
2020/02/09 15:18:22 namespace sandbox: enabled
2020/02/09 15:18:22 Android sandbox: /sys/fs/selinux/policy does not exist
2020/02/09 15:18:22 fault injection: enabled
2020/02/09 15:18:22 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/02/09 15:18:22 net packet injection: enabled
2020/02/09 15:18:22 net device setup: enabled
2020/02/09 15:18:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/02/09 15:18:22 devlink PCI setup: PCI device 0000:00:10.0 is not available
15:21:22 executing program 0:
syz_mount_image$nfs4(&(0x7f0000000000)='nfs4\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x5, &(0x7f00000004c0)=[{&(0x7f0000000080)="19c5c70e9a7c6b5b3cc7a2f43925b6691c77526634a72a899b129724960e57e7978651467e087b141b79606907d779a8f9df8f372cfa43183ffbd8cbc0b2d316639094cf82342e223120b5c701fb7125b27c3277a7b69233f9ddf4e5e2962d671fd66d564966b0253c26daf9c5927f063e894038482eb8880351235cac9c6eb36c2c5e0d007acf16426212e7201effdb48ae5b36c0ff5ac4b2c451b7ee73d5965fde9bc7f91551a66159f0d706a99559b479c29fe927c83630ef2e51832404d6fe848f2968e6a2bc", 0xc8, 0x5}, {&(0x7f0000000180)="781c620b7c4f96b85571ef09a99791ef980791d94e3f32dd4e6fb9376ccc534cb85b3a4a187a82250fd60c9988b519f5225384c4f1611fbf23b02dc378c5cd3dd5e4cde0c990975ad0b68a56a48ac1f3a1a6a077e45b169ccb40f8fa725c16c8190b53cb134548d073a445089d21f89c0b50bb2ab4048d51def60658117144ccd5bd526b1aeb7859f7e51dc824504665dc00bf9266710a6c4c7e74ec3eb30c6e134f09bb6e9ee348575732ebc787d91d84f75d58a9150985f36bf2cd3d4efaab354c57e2dd784fe59c021b22b322089ce5e5dc6f2683205b", 0xd8, 0x800}, {&(0x7f0000000280)="5ef0213a2b46931f4494c09321b870f3546f80af7896b65467aa107eac7d0c5bc315ada6c2c06ff663276dbe2842e144bee7e68b274fde52fa290744bba04e38eab0712d40f9cfbbb4e5f2a53abc220486ff700f45f857dc6b0a496bf4c3630f09b775c6e9d4fdc84921861095b3f51aacbaf532cb47238f67378ed859b0075c1b95a6383f87fbcff13765c1f85a", 0x8e, 0x80000001}, {&(0x7f0000000340)="fe2a9f2dc5983d9484ca15333b4ddde6d90e2bca62f5860ce59b8461059756d495be8811024907b082545325c70d9b93085f1599834c0af4059aa150397619f863d1b89bf29f00821763869485a45821c5ef43be8eef21100fc5e0266412a77216bdb8e323af942e4f61175416dd16545522d510d60118548f65cc476aa0db6bcf461e8e8526a1bfaf7d95a7c8de311ebaa58a07bc1a1a3178872123ae2091d7b158750f8ddc271e2af31a1ea78a8113", 0xb0, 0x7ff}, {&(0x7f0000000400)="1786786b4391a03015a4bdf84ecf16d67d489e5a370d2e87cc995ccc8ff89a619399e1dead8c90119ba20091f96e2c117cb83745c8839c957e71e1266948480eeef5e3e56b1cd66b8928a4321544121205d6dbd0164f67860bc427e2de8d60e7098f07955b0c019607d2a39030325bf0b37c4ef29df1278b20152d9cc33da85623cb3781ddaa66d4005a88f5991524005965b49681478d9ca8d956bdea3c0cd2d38d3b9913f63717cc47542fd2", 0xad, 0x274e9360}], 0x2000008, &(0x7f0000000540)='\x00')
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
fcntl$setlease(r0, 0x400, 0x2)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000640)=<r1=>0x0)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000680)={0x1f, 0x8, 0x4, 0x1000, 0xfffffffc, {0x0, 0x7530}, {0x1, 0x8, 0x1, 0x7f, 0x3f, 0x3f, "5e80706d"}, 0x101, 0x1, @userptr=0x10001, 0x1, 0x0, <r2=>r0})
perf_event_open(&(0x7f00000005c0)={0x4, 0x70, 0xff, 0x6, 0x0, 0x6, 0x0, 0x5, 0x80022, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000580), 0xc}, 0x20084, 0x1, 0x9, 0x5, 0xfff, 0x4, 0x46ea}, r1, 0x7, r2, 0x2)
pipe2(&(0x7f0000000700)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4000)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780)='batadv\x00')
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, r5, 0x301, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0xc000)
ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f00000008c0)=0xce1d)
ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000900)={0x4})
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000940)={0x80000001, 0xffffff80, 0x3, 0x0, 0x1, [0x4e45, 0xfff, 0xed5, 0xfc000000], [0x7fffffff, 0x3, 0x10000, 0xfffffffa], [0x0, 0x401, 0x2, 0x7fffffff], [0x0, 0x9, 0xfffffffffffffff7, 0x2]})
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/self/net/pfkey\x00', 0x400800, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000a00)={0x4, [[0x7dd, 0x5fed, 0x5, 0x0, 0x8, 0x0, 0x8, 0x10000], [0x1, 0x1bfd, 0x7, 0x0, 0x1000, 0xc6e2, 0x8, 0x3], [0x3, 0xfac8, 0x7fff, 0x100, 0x3ff, 0x20, 0x10000]], [], [{0x3, 0x2, 0x1, 0x1, 0x0, 0x1}, {0xf4d4, 0x4dd, 0x0, 0x1, 0x1}, {0xa2, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x714bd762, 0x3be6, 0x1, 0x0, 0x1}, {0x31}, {0x0, 0x7fff, 0x0, 0x1, 0x1, 0x1}, {0x10001, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x2, 0xfffffff9, 0x1, 0x1, 0x0, 0x1}, {0x0, 0x800, 0x0, 0x0, 0x1}, {0xfffffffe, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x3, 0x8001, 0x0, 0x1}], [], 0xb9})
r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000c80)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000cc0)={{0x0, 0x1, 0x3, 0x0, 0x60000000}})
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000d00), &(0x7f0000000d40)=0x4)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000d80)={0x2, 0xa, 0x4, 0x400000, 0x100, {0x0, 0x7530}, {0x5, 0x2, 0x20, 0x7, 0x40, 0xdb, "7cfe67cf"}, 0x7, 0x3, @offset=0x3, 0x9, 0x0, <r8=>0xffffffffffffffff})
ioctl$DRM_IOCTL_CONTROL(r8, 0x40086414, &(0x7f0000000e00)={0x2, 0x7fffffff})
r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dri/renderD128\x00', 0x200c02, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r9, 0xc01464a6, &(0x7f0000000e80)={0xedea})
r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/sequencer\x00', 0x9b300, 0x0)
ioctl$BLKBSZSET(r10, 0x40081271, &(0x7f0000000f00)=0x3)
r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000f40)='/proc/self/net/pfkey\x00', 0x29a700, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002000)={r11, &(0x7f0000000f80)="3007374371fb029025642ed908cc646dd5ca35c6ffaf935e6d112766f8c1461a79fc96cf451c35415a331ead0015cf364677658e145f4c2193b0f8b7c39ba83088b58df456dd3d9a0d5c2285c9cdc483a5f1245c0e664d9ae1", &(0x7f0000001000)=""/4096}, 0x20)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000002040)={0x20000000, 0x30, 0x13})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'vxcan1\x00', <r12=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000002180)={0x13, 0x400, 0xffff, 0x3, 0xa7, r6, 0xffff5999, [], r12, r2, 0x5, 0x2}, 0x3c)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)

15:21:22 executing program 1:
ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/4096)
r0 = syz_open_dev$audion(&(0x7f0000001000)='/dev/audio#\x00', 0x100, 0x2)
r1 = getegid()
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001080)={r0, 0x28, &(0x7f0000001040)}, 0x10)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/nvram\x00', 0x101000, 0x0)
ioctl$KDSETMODE(r2, 0x4b3a, 0x0)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001100)='/dev/dlm-monitor\x00', 0x80, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000001140), &(0x7f0000001180)=0x4)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/hwrng\x00', 0x131802, 0x0)
ioctl$VT_OPENQRY(r4, 0x5600, &(0x7f0000001200))
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0xd000)
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001280)='/dev/nvme-fabrics\x00', 0x200, 0x0)
write$vhci(r6, &(0x7f00000012c0)=@HCI_ACLDATA_PKT={0x2, "9943269da4d84251dcd33ba1812dd0bbff0969446b272292be0e297e7523b8634eb34e18ced5a4f41a36e4f3102be30311282987a7f9c3df62d742732743dee41ab6567566a582be689247eb6176691d"}, 0x51)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer2\x00', 0x400400, 0x0)
r8 = accept4$packet(r6, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000013c0)=0x14, 0x80000)
ioctl$LOOP_SET_FD(r7, 0x4c00, r8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001440)={<r9=>0xffffffffffffffff, r6, 0x0, 0xb, &(0x7f0000001400)='/dev/nvram\x00'}, 0x30)
rt_sigqueueinfo(r9, 0x2d, &(0x7f0000001480)={0x24, 0x840, 0xb8d5})
r10 = syz_open_dev$mouse(&(0x7f0000001500)='/dev/input/mouse#\x00', 0x0, 0x3c5040)
r11 = openat(r4, &(0x7f0000001540)='./file0\x00', 0x26001, 0x20)
write$9p(r11, 0xfffffffffffffffe, 0x0)
setxattr(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)=@random={'osx.', '/dev/vcsa\x00'}, &(0x7f0000001600)='/dev/vcsa\x00', 0xa, 0x1)
write$FUSE_STATFS(r10, &(0x7f0000001640)={0x60, 0x0, 0x2, {{0xa42, 0x3, 0x3, 0xa4, 0x8, 0x81, 0x1, 0x6}}}, 0x60)
r12 = openat$nvram(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/nvram\x00', 0x180080, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r12, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x721fbb294f05ed2}]}, 0x30}}, 0x8801)
r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001800)='/dev/dlm_plock\x00', 0x40800, 0x0)
sendmsg$OSF_MSG_ADD(r13, &(0x7f0000002240)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002200)={&(0x7f0000001880)={0x964, 0x0, 0x5, 0x401, 0x0, 0x0, {0x5}, [{{0x254, 0x1, {{0x1, 0x1}, 0x3f, 0x7, 0x2, 0x3, 0x1d, 'syz0\x00', "56e68454aaa0b4ff45032a6c76704227a3c1b7e0204555565f709f06864baedb", "9d5e788a7555cdfc763a322aaa9fa9f000d9cca9357c3f8cfd31d7ee209deb4f", [{0x81, 0x0, {0x2, 0x3}}, {0x6, 0x8, {0x2, 0xa}}, {0x81, 0xa4f1, {0x2, 0xffff}}, {0xfff7, 0x7, {0x3, 0x3}}, {0x542d, 0xffff, {0x1}}, {0x7, 0xe37d, {0x0, 0x7fffffff}}, {0x7, 0x6, {0x1, 0xffffff63}}, {0x7, 0x0, {0x1, 0x896e}}, {0x8000, 0x8, {0x3, 0x7}}, {0x5, 0x101, {0x8754744aeb99e393, 0x6}}, {0x0, 0x41, {0x0, 0x800}}, {0x7, 0xfff9, {0x1, 0xefa0}}, {0x1000, 0x7, {0x1, 0x51f7}}, {0x1, 0x1, {0x0, 0x7f}}, {0x8000, 0x3ff, {0x3, 0x200}}, {0x9, 0x7, {0x2, 0xff}}, {0xfff, 0x8, {0x2, 0x5}}, {0x6, 0x100, {0x3, 0xbf9}}, {0x4, 0x3, {0x1, 0x10001}}, {0xa0, 0x3, {0x14ec6f8eaada1572}}, {0x8c, 0xffff, {0x2, 0x2}}, {0xffff, 0x1, {0x1, 0x6}}, {0x5, 0x2, {0x1, 0x7fffffff}}, {0x9, 0x7, {0x1, 0x6}}, {0x2bb0, 0x3, {0x1, 0x2}}, {0x13da, 0x293, {0x3, 0x7}}, {0x4, 0x1, {0x3, 0x8}}, {0x2, 0x0, {0x0, 0x158}}, {0x5, 0x4, {0x0, 0x200}}, {0xe9c, 0xfffe, {0x0, 0x1}}, {0x7, 0x1, {0x0, 0x8001}}, {0xf801, 0x3f, {0x2, 0x1c11c871}}, {0x3, 0x0, {0x0, 0x1}}, {0x5094, 0x5, {0x2, 0x1ff}}, {0xd0b, 0x1, {0x0, 0x4}}, {0x401, 0x200, {0x0, 0x9}}, {0x372, 0x1, {0x1, 0x20}}, {0x6, 0x8, {0x0, 0x7fffffff}}, {0xf3f2, 0x3, {0x2, 0xfffffeff}}, {0xb9, 0x0, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x8000}, 0x3f, 0x0, 0x3ff, 0x6, 0x1d, 'syz0\x00', "1da7f5dc7381ace921035c45e9ac3a024e0e5f000c03dd4ca1c2dd74d36a6d8e", "df320a4b549fa44ae090951219a12b645843e8b9b47a37ccb46d0767cfc1a2fc", [{0x5, 0x1000, {0x1}}, {0x4000, 0x200, {0x2, 0x3}}, {0xef, 0x1ff, {0x3, 0x41000}}, {0x800, 0x3, {0x0, 0x401}}, {0x210, 0x4, {0x0, 0x2}}, {0x400, 0x7ff, {0x1, 0x2b}}, {0x1ff, 0x2e0, {0x1, 0x2}}, {0x7fff, 0xa1, {0x1, 0xaa0}}, {0x100, 0x9, {0x1, 0x86}}, {0x1, 0x7, {0x0, 0xfffffffb}}, {0x3660, 0x4e2b, {0x3, 0xffffffff}}, {0x1, 0x101, {0x1, 0x8}}, {0x6, 0x4, {0x3, 0x4}}, {0x0, 0x6c, {0x0, 0x1}}, {0x4, 0x7, {0x2, 0x400}}, {0x8, 0x7, {0x0, 0x71066c73}}, {0x2, 0x20, {0x1, 0xff}}, {0x1, 0x8, {0x1, 0x4}}, {0x1a, 0xfff8, {0x3, 0x7}}, {0x7, 0x4, {0x3, 0x6}}, {0x0, 0x42f, {0x2, 0x4}}, {0x8, 0x0, {0x3, 0x94000000}}, {0xf0e2, 0x4, {0x3, 0x40}}, {0x200, 0x7, {0x3, 0x4}}, {0x5, 0x3, {0x3, 0xfff}}, {0x8000, 0x8001, {0x1, 0x5557}}, {0x3, 0x5, {0x0, 0x7ff}}, {0x0, 0x100, {0x2, 0xfffffffe}}, {0x6, 0x508, {0x0, 0x10001}}, {0xad, 0x4, {0x3, 0x1}}, {0x0, 0x1, {0x3, 0xb2b9}}, {0x1, 0x4, {0x2, 0x4}}, {0x200, 0x9, {0x3, 0x1}}, {0x1, 0x5, {0x2, 0x7}}, {0x2, 0x7, {0x1, 0x7ff}}, {0x3, 0x1, {0x3, 0x8}}, {0x81, 0x2, {0x1, 0x7}}, {0x9, 0x4, {0x0, 0x4}}, {0x800, 0x2, {0x1, 0x400}}, {0x8, 0xe96a, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x39, 0x6, 0x6, 0x0, 0x2, 'syz0\x00', "a6019d13232aa525394eb31c4441d858aa81e0b7119d64256fd3504305831a2f", "16c78b3424c52c64a530bcf3b682bd029ddd936da09372972aca1686164bca9d", [{0x7730, 0x9, {0x2, 0x10001}}, {0x1f, 0xf800, {0x0, 0xffff0001}}, {0xef, 0x800, {0x0, 0x8}}, {0x7, 0x4, {0x3, 0x7}}, {0x2, 0x7, {0x0, 0x100}}, {0x4, 0x9, {0x3, 0x7}}, {0xfff8, 0x857, {0x1, 0xfffffff8}}, {0x8, 0x1, {0x1, 0x8000}}, {0x6, 0x0, {0x3, 0x1}}, {0x1, 0x8, {0x1, 0x535}}, {0x3f, 0x6, {0x3, 0x82}}, {0x8, 0x4, {0x2, 0x4}}, {0x7d7, 0xfffd, {0x2, 0x3}}, {0x2, 0x6, {0x3, 0x5}}, {0x9, 0x6c58, {0x0, 0x1}}, {0x9, 0x8000, {0x2, 0x7ff}}, {0x100, 0xf0, {0x1, 0x20}}, {0x3, 0x1, {0x2, 0xffffffff}}, {0x2, 0x9, {0x2, 0x200}}, {0x6, 0x7ff, {0x2, 0x2a}}, {0x2, 0x3385, {0x2}}, {0x800, 0x2, {0x3, 0x6}}, {0x3ff, 0x6, {0x0, 0x4}}, {0x1, 0x4, {0x2, 0xcc6}}, {0x3f, 0x4000, {0x3, 0xfff}}, {0x6, 0x4, {0x2, 0x5}}, {0xfff, 0x7f, {0x1}}, {0x6, 0x20, {0x1, 0x7}}, {0x276, 0x1, {0x3, 0x1}}, {0x30cd, 0x7b, {0x3, 0x4}}, {0x3, 0x2, {0x3, 0x3}}, {0x9, 0x81, {0x0, 0x5}}, {0x40, 0x4, {0x2, 0x7}}, {0x1, 0x5, {0x3, 0x4}}, {0x620, 0x3, {0x0, 0x8}}, {0x100, 0x1, {0x0, 0xffffe886}}, {0xdd3, 0x4, {0x1, 0x4}}, {0x486, 0x17, {0x3, 0x5}}, {0x2000, 0x4, {0x3, 0x3}}, {0x401, 0x101, {0x3, 0xffffff81}}]}}}, {{0x254, 0x1, {{0x2, 0x30}, 0xd0, 0x7f, 0x7, 0x6, 0x28, 'syz0\x00', "6ac76d1f8780d8823c35e68c699cd18ac2fdd6b5f0d7d219fc232a461de7e71e", "1a2180b5b5d8a48e8afc13aaae1687ad29bcee18e90dcc35ba49bb1fcb1d28e9", [{0x8001, 0x0, {0x1, 0x9}}, {0x0, 0x8001, {0x2, 0x26d}}, {0x7fff, 0x4, {0x2, 0x6}}, {0x1ff, 0x101, {0x1, 0x8001}}, {0x73, 0x8000, {0x3, 0xff}}, {0x0, 0x8001, {0x3, 0xfffffffb}}, {0x70, 0x3, {0x2, 0x8}}, {0xfff, 0x8001, {0x0, 0x6}}, {0x1, 0x3ff, {0x1, 0xdf}}, {0x0, 0x4, {0x3, 0x8}}, {0x0, 0x8000, {0x1, 0x5}}, {0x1, 0x0, {0x0, 0x7fffffff}}, {0xd39, 0x6, {0x0, 0xfffff1d4}}, {0x471a, 0x0, {0x0, 0x2}}, {0xb61e, 0x2, {0x2, 0x4}}, {0x0, 0xfff, {0x1, 0x3f}}, {0x4, 0x80, {0x0, 0x80000001}}, {0x1, 0x7f, {0x2, 0x7}}, {0x6, 0xf44c, {0x2, 0x5}}, {0xfffb, 0x1000, {0x2, 0x8}}, {0x9, 0x2, {0x0, 0xffffffff}}, {0x2, 0x1, {0x1, 0x95a6}}, {0x6fd3, 0x1, {0x0, 0x7}}, {0x45, 0xfff, {0x0, 0x3}}, {0x2, 0x1ff, {0x0, 0x1}}, {0x2, 0x7, {0x0, 0x4}}, {0x0, 0x1, {0x2, 0x4}}, {0x0, 0x789e, {0x3, 0x401}}, {0x101, 0xd5, {0x1, 0x3f}}, {0x7, 0x5, {0x3, 0x3}}, {0xfffb, 0x6, {0x3, 0x1000}}, {0x1, 0xdb, {0x3, 0x101}}, {0x8000, 0xf84, {0x2, 0x1000}}, {0x4, 0x3, {0x1, 0xf278}}, {0x80, 0x5, {0x3, 0x8}}, {0x1617, 0x3, {0x0, 0x8}}, {0x1ff, 0x9f38, {0x3}}, {0xffff, 0x7f, {0x2, 0x91}}, {0x6a3f, 0x100, {0x2, 0x3}}, {0x1, 0x3, {0x3, 0x9}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4040810}, 0x4000000)
r14 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002340)='/dev/ubi_ctrl\x00', 0x8040, 0x0)
setsockopt$inet_mtu(r14, 0x0, 0xa, &(0x7f0000002380)=0x1, 0x4)

syzkaller login: [  282.949513][ T9775] IPVS: ftp: loaded support on port[0] = 21
[  283.092986][ T9775] chnl_net:caif_netlink_parms(): no params data found
15:21:23 executing program 2:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x64}, 0x1, 0x0, 0x0, 0x48080}, 0xc040)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/snmp6\x00')
ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000200)={0x3})
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x10080, 0x0)
ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000280)={0x100, 0x5, 0xff, 0x400})
r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x68102, 0x0)
fcntl$dupfd(r4, 0x0, r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x202142, 0x2)
ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000380)=[0x40, 0x3f])
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000003c0))
r7 = syz_open_dev$video4linux(&(0x7f0000000400)='/dev/v4l-subdev#\x00', 0x6, 0x2000)
lseek(r7, 0x20, 0x3)
r8 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000440)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000480)={0x0, @bt={0x1, 0x6, 0x0, 0x0, 0x0, 0x4d80, 0xfff, 0x6, 0x1, 0x8, 0x0, 0x54, 0x0, 0x5, 0x17, 0x30, {0xfff, 0x7f}, 0x22, 0x5}})
syz_open_dev$sndseq(&(0x7f0000000540)='/dev/snd/seq\x00', 0x0, 0xc0)
r9 = socket$inet_dccp(0x2, 0x6, 0x0)
r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r10, 0x4008af60, &(0x7f00000005c0)={@hyper})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000600)={0x0, 'erspan0\x00', {0x2}, 0x1ff})
r11 = syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0x1, 0x606600)
fchmod(r11, 0x48)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0)
r12 = accept4$x25(0xffffffffffffffff, &(0x7f0000000680)={0x9, @remote}, &(0x7f00000006c0)=0x12, 0x800)
getsockopt$sock_buf(r12, 0x1, 0x25, &(0x7f0000000700)=""/50, &(0x7f0000000740)=0x32)
write$P9_RLCREATE(r6, &(0x7f0000000780)={0x18, 0xf, 0x2, {{0x8, 0x2, 0x7}, 0x10000}}, 0x18)
r13 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$VIDIOC_G_PARM(r13, 0xc0cc5615, &(0x7f0000000800)={0x1, @capture={0x1000, 0x1, {0x7f, 0xbb5}, 0x1}})

[  283.237554][ T9778] IPVS: ftp: loaded support on port[0] = 21
[  283.257747][ T9775] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.272629][ T9775] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.280645][ T9775] device bridge_slave_0 entered promiscuous mode
[  283.333688][ T9775] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.340794][ T9775] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.364649][ T9775] device bridge_slave_1 entered promiscuous mode
[  283.445027][ T9775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.466795][ T9775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  283.486344][ T9782] IPVS: ftp: loaded support on port[0] = 21
[  283.531306][ T9775] team0: Port device team_slave_0 added
[  283.559829][ T9775] team0: Port device team_slave_1 added
[  283.589773][ T9778] chnl_net:caif_netlink_parms(): no params data found
[  283.615843][ T9775] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.632960][ T9775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.672867][ T9775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
15:21:23 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8001, 0x4c)
r1 = accept4(r0, &(0x7f0000000040)=@x25, &(0x7f00000000c0)=0x80, 0x80000)
bind$rxrpc(r1, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x81, @local, 0x3}}, 0x24)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000140)={{0x0, 0x1, 0x6, 0x1, 0x4}, 0x7ff, 0x1, 0x4})
ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0x0)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_connect={0x10000})
r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0)
pipe(&(0x7f0000000280)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000200)='vboxnet0*eth1\xbf/cpuset\x00', &(0x7f0000000240)='./file0\x00', r3)
ioctl$SIOCRSACCEPT(r2, 0x89e3)
recvmsg$can_j1939(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/174, 0xae}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/122, 0x7a}, {&(0x7f0000000500)=""/231, 0xe7}], 0x4}, 0x20)
r5 = syz_open_dev$audion(&(0x7f0000000680)='/dev/audio#\x00', 0x8, 0xc40)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000006c0)=@usbdevfs_connect={0x80000001})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000700)={0x1, 0x0, {<r6=>0xffffffffffffffff}, {}, 0x8, 0x3ff})
waitid(0x0, r6, 0x0, 0x8, 0x0)
r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000740)='/dev/qat_adf_ctl\x00', 0x101cc2, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r7, 0xc06c4124, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000800)={<r8=>0x0, @in6={{0xa, 0x4e23, 0xdc, @remote, 0x1}}}, &(0x7f00000008c0)=0x84)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000900)={r8, 0x9}, &(0x7f0000000940)=0x8)
r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000980)='/dev/bsg\x00', 0x800, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r9, 0x111, 0x2, 0x1, 0x4)
recvfrom$rxrpc(r5, &(0x7f00000009c0)=""/192, 0xc0, 0x0, 0x0, 0x0)
ioctl$SIOCX25GFACILITIES(r5, 0x89e2, &(0x7f0000000a80))
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/vmallocinfo\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_BUFS(r10, 0xc0206416, &(0x7f0000000b00)={0x56eb, 0x7, 0x8001, 0x364c, 0x0, 0x7})
r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
ioctl$IMGETVERSION(r11, 0x80044942, &(0x7f0000000c80))
getsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000cc0)=""/132, &(0x7f0000000d80)=0x84)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r12, 0x0, 0x487, &(0x7f0000000dc0), &(0x7f0000000e00)=0x30)

[  283.712263][ T9775] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.719393][ T9775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.748276][ T9775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  283.809479][ T9778] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.843577][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.862766][ T9778] device bridge_slave_0 entered promiscuous mode
[  283.906754][ T9778] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.914993][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.933282][ T9778] device bridge_slave_1 entered promiscuous mode
15:21:23 executing program 4:
r0 = socket(0x1, 0x6, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0x2d}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48000}, 0x4004)
r1 = socket$caif_stream(0x25, 0x1, 0x4)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000140)=""/220, &(0x7f0000000240)=0xdc)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000280)={0x9, 0x0, 0x3, 0x40, 0x1000}, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000002c0), &(0x7f0000000340)=0x68)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004c40)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000004d40)=0xe8)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000004d80)={'bridge0\x00', r4})
clock_adjtime(0x0, &(0x7f0000004dc0)={0x7, 0x7, 0xfffffffffffffffa, 0x9, 0x3, 0x4, 0x3, 0x7e, 0x4, 0xa8b, 0x8, 0x66b0, 0x100000001, 0x749, 0x101, 0x10000, 0xffffffffffffff0e, 0x4, 0xad, 0x0, 0x100000001, 0x3, 0x6, 0xc04, 0x8b, 0x18c})
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000004ec0)='/dev/nvram\x00', 0x5c3623, 0x0)
fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000004f00))
r6 = syz_open_dev$audion(&(0x7f0000004f40)='/dev/audio#\x00', 0x3f, 0xcad11883e2815260)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000005000)=[@text32={0x20, &(0x7f0000004f80)="b8010000000f01c19a060000003d010fc76b920f01df0f38079ca400200000b9800000c00f3235010000000f300f20e035000400000f22e0c7442400eae90000c744240200500000c7442406000000000f011c242e0f01c4ea5a6000003f00", 0x5f}], 0x1, 0x32, &(0x7f0000005040), 0x0)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000005080)='/dev/null\x00', 0x101800, 0x0)
connect$inet6(r7, &(0x7f00000050c0)={0xa, 0x4e21, 0x1ff, @mcast2, 0x4}, 0x1c)
r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000005100)='/dev/dlm-control\x00', 0x20000, 0x0)
recvfrom$l2tp6(r8, &(0x7f0000005140)=""/239, 0xef, 0x10120, &(0x7f0000005240)={0xa, 0x0, 0x0, @mcast2}, 0x20)
r9 = socket$inet(0x2, 0x5, 0x4)
getsockopt$IPT_SO_GET_ENTRIES(r9, 0x0, 0x41, &(0x7f0000005280)={'raw\x00', 0x4c, "9b0d9fb793c48495f6f8137dfe4a8a86a973a7bf50231619b25d671f08b9972af2780cdf323dd89cf2a629f313fa4da417016df177640bc02082234506c4c71f9cb02fd76b70f9bbda58a772"}, &(0x7f0000005300)=0x70)
r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000005340)='/dev/audio\x00', 0x20080, 0x0)
signalfd(r10, &(0x7f0000005380)={[0x2]}, 0x8)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000005400)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r8, &(0x7f0000005500)={&(0x7f00000053c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000054c0)={&(0x7f0000005440)={0x68, r11, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x8001, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x44050}, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000005580)={0x1, &(0x7f0000005540)=[{0x8000, 0x1, 0x9, 0x4}]}, 0x10)
r13 = syz_open_dev$vcsu(&(0x7f00000055c0)='/dev/vcsu#\x00', 0x8000, 0x800)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r13, 0xc0884113, &(0x7f0000005600)={0x1, 0x6, 0x10001, 0x100, 0x5, 0x1f, 0x4, 0x8, 0x80, 0x5, 0xff, 0x5})

[  284.015809][ T9775] device hsr_slave_0 entered promiscuous mode
[  284.082831][ T9775] device hsr_slave_1 entered promiscuous mode
[  284.280692][ T9787] IPVS: ftp: loaded support on port[0] = 21
[  284.291014][ T9778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  284.308950][ T9782] chnl_net:caif_netlink_parms(): no params data found
15:21:24 executing program 5:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x1, 0x0)
ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000000c0)={0x2, "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"})
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x7912e7669592b1c2, 0x0)
getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000003c0)={<r3=>0x0, 0x5, 0x1}, &(0x7f0000000400)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000440)={0x0, 0x201, 0x7, 0x7, r3}, &(0x7f0000000480)=0x10)
r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f00000004c0))
ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000500))
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540)={<r5=>0x0, 0x3}, &(0x7f0000000580)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000005c0)={r5, 0x8001, 0x43d}, 0x8)
r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm-monitor\x00', 0x300, 0x0)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080814}, 0x4)
r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000780)={<r9=>0x0, 0x6, 0x7fff, 0xfff7, 0xfffb, 0x9, 0xf4, 0x2eb, {<r10=>0x0, @in6={{0xa, 0x4e24, 0x7, @mcast2, 0x8}}, 0x80000001, 0xffffff7f, 0x5, 0xffff, 0x2}}, &(0x7f0000000840)=0xb0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000880)={r9, 0x7fff, 0x3}, 0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000008c0)={r10, 0x2, 0x8001, 0x10000, 0xc3, 0x5d6}, &(0x7f0000000900)=0x14)
r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x80083, 0x0)
r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000980), 0xc)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={r11, r12, 0x18, 0x1}, 0x10)
ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000a00))
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000a40))
ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000a80)=""/30)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r13, 0xa00, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x40}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x6}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x2d}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x34}}, 0x4040890)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000c00)={0x4, 0x4, 0x4, 0x1000, 0x10000, {0x0, 0x7530}, {0x2, 0x0, 0xac, 0x7, 0x6, 0xa7, "2ae1fa2b"}, 0x3, 0x4, @userptr, 0x4, 0x0, <r14=>0xffffffffffffffff})
ioctl$UI_DEV_CREATE(r14, 0x5501)

[  284.373192][ T9778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.389071][ T9790] IPVS: ftp: loaded support on port[0] = 21
[  284.519394][ T9778] team0: Port device team_slave_0 added
[  284.532637][ T9778] team0: Port device team_slave_1 added
[  284.570178][ T9782] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.585670][ T9782] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.594469][ T9782] device bridge_slave_0 entered promiscuous mode
[  284.608714][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_0
[  284.617337][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.644422][ T9778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  284.674531][ T9782] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.681626][ T9782] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.690796][ T9782] device bridge_slave_1 entered promiscuous mode
[  284.700370][ T9778] batman_adv: batadv0: Adding interface: batadv_slave_1
[  284.707810][ T9778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.734462][ T9778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  284.777252][ T9794] IPVS: ftp: loaded support on port[0] = 21
[  284.790209][ T9787] chnl_net:caif_netlink_parms(): no params data found
[  284.816037][ T9782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  284.829425][ T9782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.873906][ T9782] team0: Port device team_slave_0 added
[  284.935719][ T9778] device hsr_slave_0 entered promiscuous mode
[  285.002730][ T9778] device hsr_slave_1 entered promiscuous mode
[  285.082541][ T9778] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  285.090353][ T9778] Cannot create hsr debugfs directory
[  285.112921][ T9782] team0: Port device team_slave_1 added
[  285.152092][ T9782] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.159168][ T9782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.186747][ T9782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  285.222114][ T9775] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  285.289450][ T9782] batman_adv: batadv0: Adding interface: batadv_slave_1
[  285.296740][ T9782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  285.323892][ T9782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  285.368565][ T9775] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  285.423495][ T9775] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  285.484335][ T9787] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.491443][ T9787] bridge0: port 1(bridge_slave_0) entered disabled state
[  285.500331][ T9787] device bridge_slave_0 entered promiscuous mode
[  285.530465][ T9775] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  285.574559][ T9787] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.581771][ T9787] bridge0: port 2(bridge_slave_1) entered disabled state
[  285.590581][ T9787] device bridge_slave_1 entered promiscuous mode
[  285.645526][ T9782] device hsr_slave_0 entered promiscuous mode
[  285.694038][ T9782] device hsr_slave_1 entered promiscuous mode
[  285.742542][ T9782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  285.750272][ T9782] Cannot create hsr debugfs directory
[  285.839707][ T9787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  285.877363][ T9787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  285.922250][ T9790] chnl_net:caif_netlink_parms(): no params data found
[  285.991672][ T9778] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  286.044851][ T9794] chnl_net:caif_netlink_parms(): no params data found
[  286.073907][ T9787] team0: Port device team_slave_0 added
[  286.086501][ T9778] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  286.168553][ T9787] team0: Port device team_slave_1 added
[  286.180260][ T9778] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  286.259418][ T9794] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.266697][ T9794] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.274572][ T9794] device bridge_slave_0 entered promiscuous mode
[  286.290038][ T9794] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.297925][ T9794] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.308908][ T9794] device bridge_slave_1 entered promiscuous mode
[  286.316697][ T9778] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  286.405960][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  286.413224][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.439545][ T9787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  286.477604][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  286.485611][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  286.511700][ T9787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  286.553160][ T9790] bridge0: port 1(bridge_slave_0) entered blocking state
[  286.560304][ T9790] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.568992][ T9790] device bridge_slave_0 entered promiscuous mode
[  286.577953][ T9790] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.585282][ T9790] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.593597][ T9790] device bridge_slave_1 entered promiscuous mode
[  286.608665][ T9794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.679572][ T9787] device hsr_slave_0 entered promiscuous mode
[  286.732856][ T9787] device hsr_slave_1 entered promiscuous mode
[  286.773005][ T9787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  286.780592][ T9787] Cannot create hsr debugfs directory
[  286.818737][ T9794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.859346][ T9775] 8021q: adding VLAN 0 to HW filter on device bond0
[  286.869764][ T9790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  286.900522][ T9782] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  286.949719][ T9790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  286.975710][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  286.984542][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  286.994458][ T9794] team0: Port device team_slave_0 added
[  287.001064][ T9782] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  287.057257][ T9782] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  287.135568][ T9775] 8021q: adding VLAN 0 to HW filter on device team0
[  287.155268][ T9794] team0: Port device team_slave_1 added
[  287.164497][ T9790] team0: Port device team_slave_0 added
[  287.175102][ T9790] team0: Port device team_slave_1 added
[  287.185581][ T9782] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  287.237365][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  287.248485][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  287.257370][ T2738] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.264624][ T2738] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.276079][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  287.314127][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  287.328011][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  287.337357][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.344583][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.372245][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  287.381514][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  287.391618][ T9794] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.398806][ T9794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.427128][ T9794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.439149][ T9790] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.447095][ T9790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.474301][ T9790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.493008][ T9790] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.500082][ T9790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.530267][ T9790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.609861][ T9790] device hsr_slave_0 entered promiscuous mode
[  287.652785][ T9790] device hsr_slave_1 entered promiscuous mode
[  287.692516][ T9790] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  287.700117][ T9790] Cannot create hsr debugfs directory
[  287.706615][ T9794] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.714009][ T9794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.742460][ T9794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.793810][ T9775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  287.808376][ T9775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  287.828246][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  287.837029][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  287.845657][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  287.854999][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  287.863505][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  287.871883][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  287.880855][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  287.889320][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  287.897938][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  287.906009][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  287.985935][ T9794] device hsr_slave_0 entered promiscuous mode
[  288.022906][ T9794] device hsr_slave_1 entered promiscuous mode
[  288.052484][ T9794] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  288.060065][ T9794] Cannot create hsr debugfs directory
[  288.135259][ T9778] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.191692][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  288.199432][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  288.237914][ T9778] 8021q: adding VLAN 0 to HW filter on device team0
[  288.260171][ T9787] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  288.337234][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  288.345516][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  288.371189][ T9775] 8021q: adding VLAN 0 to HW filter on device batadv0
[  288.401553][ T9787] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  288.443868][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  288.453049][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  288.461400][ T2920] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.468575][ T2920] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.476882][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  288.487736][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  288.496719][ T2920] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.503824][ T2920] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.533927][ T9782] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.553077][ T9787] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  288.596158][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  288.607059][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  288.623220][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  288.647867][ T9782] 8021q: adding VLAN 0 to HW filter on device team0
[  288.655585][ T9787] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  288.756078][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  288.765054][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  288.774724][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  288.783500][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  288.791838][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  288.801272][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  288.810436][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  288.840963][ T9790] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  288.875562][ T9790] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  288.949423][ T9790] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  289.005008][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  289.014073][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  289.022511][ T2743] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.029565][ T2743] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.038052][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  289.047034][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  289.056030][ T2743] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.063601][ T2743] bridge0: port 2(bridge_slave_1) entered forwarding state
[  289.071310][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  289.080460][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  289.089015][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  289.107892][ T9778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  289.120188][ T9778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  289.145502][ T9790] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  289.184040][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  289.191880][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  289.202779][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  289.211294][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  289.220218][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  289.228735][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  289.238838][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  289.247234][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  289.256445][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  289.266521][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  289.283286][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  289.291497][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  289.325982][ T9775] device veth0_vlan entered promiscuous mode
[  289.342095][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  289.350652][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  289.359199][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  289.366840][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  289.374820][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  289.383678][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  289.392506][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  289.400783][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  289.409227][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  289.417608][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  289.440314][ T9778] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.487871][ T9782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  289.507705][ T9775] device veth1_vlan entered promiscuous mode
[  289.520352][ T9794] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  289.560235][ T9794] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  289.620122][ T9794] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  289.687926][ T9794] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  289.783447][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  289.796305][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  289.805520][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  289.814622][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  289.823364][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  289.830852][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  289.838934][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  289.848008][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  289.858181][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  289.866744][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  289.887491][ T9775] device veth0_macvtap entered promiscuous mode
[  289.900663][ T9775] device veth1_macvtap entered promiscuous mode
[  289.919712][ T9787] 8021q: adding VLAN 0 to HW filter on device bond0
[  289.945273][ T9782] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.956366][ T9778] device veth0_vlan entered promiscuous mode
[  289.982599][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  289.990578][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  289.998969][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  290.007294][ T2920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  290.026561][ T9778] device veth1_vlan entered promiscuous mode
[  290.040937][ T9787] 8021q: adding VLAN 0 to HW filter on device team0
[  290.056724][ T9790] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.068204][ T9775] batman_adv: batadv0: Interface activated: batadv_slave_0
[  290.095958][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  290.107764][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  290.117159][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  290.126109][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  290.136843][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  290.146376][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  290.155743][ T2739] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.162847][ T2739] bridge0: port 1(bridge_slave_0) entered forwarding state
[  290.174950][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  290.197386][ T9775] batman_adv: batadv0: Interface activated: batadv_slave_1
[  290.227827][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  290.240652][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  290.251148][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  290.260575][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  290.269289][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.276387][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state
[  290.285061][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  290.294684][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  290.303461][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  290.312101][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  290.320072][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  290.340879][ T9794] 8021q: adding VLAN 0 to HW filter on device bond0
[  290.366610][ T9790] 8021q: adding VLAN 0 to HW filter on device team0
[  290.381859][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  290.392102][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  290.401598][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  290.410434][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  290.419821][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  290.428607][ T2738] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.435711][ T2738] bridge0: port 1(bridge_slave_0) entered forwarding state
[  290.449158][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  290.457776][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  290.466680][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  290.476473][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  290.524417][ T9782] device veth0_vlan entered promiscuous mode
[  290.557061][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  290.565945][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  290.575196][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  290.584108][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  290.592920][ T2743] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.600013][ T2743] bridge0: port 2(bridge_slave_1) entered forwarding state
[  290.608026][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  290.617854][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  290.625738][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  290.634742][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  290.643372][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  290.651612][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  290.660275][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  290.669075][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  290.677913][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  290.688095][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  290.696198][ T2743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  290.708269][ T9794] 8021q: adding VLAN 0 to HW filter on device team0
[  290.716866][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  290.738129][ T9778] device veth0_macvtap entered promiscuous mode
[  290.754548][ T9782] device veth1_vlan entered promiscuous mode
[  290.814683][ T9778] device veth1_macvtap entered promiscuous mode
[  290.833570][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  290.841823][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  290.850740][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  290.859788][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  290.868585][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  290.877806][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  290.886951][ T2739] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.894072][ T2739] bridge0: port 1(bridge_slave_0) entered forwarding state
[  290.902145][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  290.952054][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  290.973124][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  290.994186][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  291.017354][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  291.036607][ T9806] NFS: mount program didn't pass remote address
[  291.036958][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  291.051777][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.060133][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state
[  291.068547][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  291.083874][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  291.092265][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  291.099980][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  291.146192][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  291.165779][ T9806] NFS: mount program didn't pass remote address
[  291.174291][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.189291][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.202252][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  291.223264][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  291.232065][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
15:21:30 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=@delsa={0x3c, 0x11, 0x9, 0x0, 0x0, {@in6=@local}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}, 0x8}, 0x0)

[  291.252050][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  291.263889][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  291.275081][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  291.284079][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  291.293194][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  291.302088][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  291.334973][ T9790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  291.375787][ T9782] device veth0_macvtap entered promiscuous mode
[  291.380653][ T9782] device veth1_macvtap entered promiscuous mode
[  291.397149][ T9787] 8021q: adding VLAN 0 to HW filter on device batadv0
[  291.409895][ T9778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  291.423451][ T9778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.435923][ T9778] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.466409][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  291.475595][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  291.488630][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  291.497116][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  291.506100][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  291.517301][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  291.526146][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  291.534889][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  291.544135][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  291.553421][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  291.561694][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  291.570193][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  291.578821][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  291.587290][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  291.595113][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  291.602858][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  291.610917][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  291.643135][ T9790] 8021q: adding VLAN 0 to HW filter on device batadv0
[  291.653810][ T9794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  291.678557][ T9782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
15:21:31 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=@delsa={0x3c, 0x11, 0x9, 0x0, 0x0, {@in6=@local}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}, 0x8}, 0x0)

[  291.690913][ T9782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.707913][ T9782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  291.721425][ T9782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.754958][ T9782] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.791445][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
15:21:31 executing program 0:
perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x10e182)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
getpid()
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4)
sendfile(r0, r1, 0x0, 0x20000102000007)

[  291.814090][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  291.850101][ T9782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  291.872866][ T9782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.883249][ T9782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  291.894464][ T9782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.906371][ T9782] batman_adv: batadv0: Interface activated: batadv_slave_1
15:21:31 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5500e967f108100e9503e4b4090008000c0006e1ffff2e0015000410000000000000000000000000004000"/57, 0x39}], 0x1}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090417feb1ae7aa77cf40000ff3f0200000000000000000010", 0x1f}], 0x1)
sendmmsg$alg(r0, &(0x7f0000000140), 0x6b7, 0x0)

[  291.970451][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  291.989522][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  292.003180][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  292.011926][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  292.082326][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  292.097465][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  292.118858][ T9794] 8021q: adding VLAN 0 to HW filter on device batadv0
[  292.193882][ T9834] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'.
[  292.221387][ T9787] device veth0_vlan entered promiscuous mode
[  292.281564][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  292.296565][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  292.365467][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  292.375190][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  292.395898][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
15:21:32 executing program 1:
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x10e182)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
getpid()
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)

[  292.409611][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  292.436013][ T9787] device veth1_vlan entered promiscuous mode
[  292.461570][ T9790] device veth0_vlan entered promiscuous mode
[  292.531050][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  292.545157][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
15:21:32 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5500e967f108100e9503e4b4090008000c0006e1ffff2e0015000410000000000000000000000000004000"/57, 0x39}], 0x1}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090417feb1ae7aa77cf40000ff3f020000000000000000001014190004", 0x23}], 0x1)
sendmmsg$alg(r0, &(0x7f0000000140), 0x6b7, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

[  292.573816][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  292.586133][    C0] hrtimer: interrupt took 35063 ns
[  292.611070][ T9790] device veth1_vlan entered promiscuous mode
[  292.666952][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  292.675788][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  292.688586][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  292.698308][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
15:21:32 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="5500e967f108100e9503e4b4090008000c0006e1ffff2e0015000410000000000000000000000000004000"/57, 0x39}], 0x1}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090417feb1ae7aa774f407", 0x11}], 0x1)
sendmmsg$alg(r0, &(0x7f0000000140), 0x6b7, 0x0)

[  292.871798][ T9787] device veth0_macvtap entered promiscuous mode
[  292.903083][ T9859] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  292.930681][ T9794] device veth0_vlan entered promiscuous mode
[  292.970028][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  292.984599][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  293.002085][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
15:21:32 executing program 1:
sched_setattr(0x0, 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
readv(r0, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1)

[  293.029902][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  293.052087][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  293.061109][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  293.070154][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  293.101096][ T9790] device veth0_macvtap entered promiscuous mode
15:21:32 executing program 0:

[  293.142023][ T9787] device veth1_macvtap entered promiscuous mode
[  293.165114][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  293.178318][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  293.200978][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  293.213731][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  293.233445][ T9794] device veth1_vlan entered promiscuous mode
[  293.244190][ T9790] device veth1_macvtap entered promiscuous mode
[  293.308215][ T9790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  293.320162][ T9790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.331096][ T9790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  293.348679][ T9790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.376415][ T9790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  293.394652][ T9790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.410694][ T9790] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.441858][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  293.459076][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  293.470631][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  293.487318][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  293.499116][ T2739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  293.519013][ T9790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  293.541680][ T9790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.558967][ T9790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  293.570584][ T9790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.587600][ T9790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  293.600937][ T9790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.615993][ T9790] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.625816][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  293.638242][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.649226][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  293.661054][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.671931][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  293.686060][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.697689][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  293.709123][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.720920][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_0
[  293.733047][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  293.742096][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  293.751249][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  293.761645][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  293.794869][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  293.807003][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.818131][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  293.828969][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.840448][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  293.851914][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.862325][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  293.873752][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  293.885793][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_1
[  293.895608][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  293.905944][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  293.914626][    T0] NOHZ: local_softirq_pending 08
[  293.915025][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  293.929289][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  293.943765][ T9794] device veth0_macvtap entered promiscuous mode
[  294.019602][ T9794] device veth1_macvtap entered promiscuous mode
[  294.214979][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  294.236154][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.252454][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  294.263944][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.263985][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  294.263991][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.264009][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  294.264014][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.264028][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  294.264034][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.266056][ T9794] batman_adv: batadv0: Interface activated: batadv_slave_0
[  294.350226][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  294.360786][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  294.369455][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  294.378431][ T2738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  294.396411][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  294.429329][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.448904][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  294.482030][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.493043][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  294.504095][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.514808][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
15:21:34 executing program 3:

[  294.525586][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.536837][ T9794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  294.548886][ T9794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  294.561773][ T9794] batman_adv: batadv0: Interface activated: batadv_slave_1
[  294.603812][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  294.614792][ T2952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
15:21:34 executing program 4:

15:21:34 executing program 5:

15:21:34 executing program 1:

15:21:34 executing program 0:

15:21:34 executing program 2:

15:21:34 executing program 3:

15:21:34 executing program 4:

15:21:34 executing program 4:

15:21:34 executing program 0:

15:21:34 executing program 3:

15:21:34 executing program 1:

15:21:34 executing program 2:

15:21:34 executing program 5:

15:21:35 executing program 0:

15:21:35 executing program 1:

15:21:35 executing program 3:

15:21:35 executing program 2:
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000105020000fd2e000000400000000018000100140001"], 0x1}}, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='#\x00\x00\x002\x00', 0x6, 0x0, 0x0, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='E', 0x10a73, 0x8b0, 0x0, 0x4b6ae4f95a5de35b)

15:21:35 executing program 4:

15:21:35 executing program 5:

15:21:35 executing program 0:

15:21:35 executing program 1:

15:21:35 executing program 3:

15:21:35 executing program 5:

15:21:35 executing program 4:

[  295.627391][ T9939] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'.
15:21:35 executing program 0:

[  295.712610][ T9939] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  295.769893][ T9939] tc_dump_action: action bad kind
15:21:35 executing program 1:

15:21:35 executing program 5:

15:21:35 executing program 3:

15:21:35 executing program 4:

15:21:35 executing program 2:

15:21:35 executing program 0:

15:21:35 executing program 1:

15:21:35 executing program 4:

15:21:35 executing program 3:

15:21:35 executing program 2:

15:21:35 executing program 5:

15:21:36 executing program 0:

15:21:36 executing program 1:

15:21:36 executing program 3:

15:21:36 executing program 2:

15:21:36 executing program 4:

15:21:36 executing program 5:

15:21:36 executing program 0:

15:21:36 executing program 1:

15:21:36 executing program 5:

15:21:36 executing program 3:

15:21:36 executing program 4:

15:21:36 executing program 2:

15:21:36 executing program 0:

15:21:36 executing program 1:

15:21:36 executing program 4:

15:21:36 executing program 5:

15:21:36 executing program 3:

15:21:36 executing program 2:

15:21:36 executing program 1:

15:21:36 executing program 3:

15:21:36 executing program 5:

15:21:36 executing program 4:

15:21:36 executing program 0:

15:21:36 executing program 2:

15:21:37 executing program 5:

15:21:37 executing program 0:

15:21:37 executing program 3:

15:21:37 executing program 1:

15:21:37 executing program 4:

15:21:37 executing program 5:

15:21:37 executing program 2:

15:21:37 executing program 3:

15:21:37 executing program 1:

15:21:37 executing program 0:

15:21:37 executing program 2:

15:21:37 executing program 3:

15:21:37 executing program 0:

15:21:37 executing program 4:

15:21:37 executing program 5:

15:21:37 executing program 1:

15:21:37 executing program 2:

15:21:37 executing program 1:

15:21:37 executing program 4:

15:21:37 executing program 3:

15:21:37 executing program 5:

15:21:37 executing program 0:

15:21:37 executing program 2:

15:21:38 executing program 5:

15:21:38 executing program 3:

15:21:38 executing program 0:

15:21:38 executing program 4:

15:21:38 executing program 1:

15:21:38 executing program 2:

15:21:38 executing program 3:

15:21:38 executing program 5:

15:21:38 executing program 0:

15:21:38 executing program 4:

15:21:38 executing program 2:

15:21:38 executing program 1:

15:21:38 executing program 5:

15:21:38 executing program 0:

15:21:38 executing program 3:

15:21:38 executing program 4:

15:21:38 executing program 2:

15:21:38 executing program 1:

15:21:38 executing program 5:

15:21:38 executing program 0:

15:21:38 executing program 3:

15:21:38 executing program 4:

15:21:38 executing program 2:

15:21:38 executing program 1:

15:21:39 executing program 5:

15:21:39 executing program 3:

15:21:39 executing program 0:

15:21:39 executing program 4:

15:21:39 executing program 1:

15:21:39 executing program 2:

15:21:39 executing program 5:

15:21:39 executing program 3:

15:21:39 executing program 4:

15:21:39 executing program 0:

15:21:39 executing program 1:

15:21:39 executing program 2:

15:21:39 executing program 5:

15:21:39 executing program 4:

15:21:39 executing program 0:

15:21:39 executing program 3:

15:21:39 executing program 1:

15:21:39 executing program 2:

15:21:39 executing program 5:

15:21:39 executing program 4:

15:21:39 executing program 0:

15:21:39 executing program 1:

15:21:39 executing program 2:

15:21:39 executing program 3:

15:21:39 executing program 5:

15:21:40 executing program 0:

15:21:40 executing program 4:

15:21:40 executing program 1:

15:21:40 executing program 2:

15:21:40 executing program 3:

15:21:40 executing program 5:

15:21:40 executing program 4:

15:21:40 executing program 0:

15:21:40 executing program 1:

15:21:40 executing program 2:

15:21:40 executing program 5:

15:21:40 executing program 3:

15:21:40 executing program 0:

15:21:40 executing program 4:

15:21:40 executing program 1:

15:21:40 executing program 2:

15:21:40 executing program 5:

15:21:40 executing program 3:

15:21:40 executing program 4:

15:21:40 executing program 0:

15:21:40 executing program 1:

15:21:40 executing program 2:

15:21:41 executing program 5:

15:21:41 executing program 3:

15:21:41 executing program 4:

15:21:41 executing program 0:

15:21:41 executing program 1:

15:21:41 executing program 2:

15:21:41 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x24, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0)

15:21:41 executing program 4:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setpriority(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x10e182)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
r2 = getpid()
sched_setscheduler(r2, 0x5, 0x0)
shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
creat(0x0, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r0, r1, 0x0, 0x20000102000007)

15:21:41 executing program 1:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='oom_score_adj\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x6)

15:21:41 executing program 5:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000100)=0xc)
setpriority(0x1, r0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x10e182)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
setresuid(0x0, 0x0, 0x0)
geteuid()
r3 = syz_open_procfs(0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
ioctl$TIOCNXCL(r3, 0x540d)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
getpid()
shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r2, 0x0, 0x20000102000007)

15:21:41 executing program 2:
prlimit64(0x0, 0x0, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x3, 0x7)
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x0, &(0x7f00000006c0))
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
symlink(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00')
rt_sigpending(&(0x7f00000003c0), 0x8)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r5 = inotify_init1(0x0)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000100)={0x0, <r6=>0x0})
process_vm_readv(r6, &(0x7f0000000380)=[{&(0x7f0000000480)=""/48, 0x30}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0)
prlimit64(r6, 0xf, &(0x7f0000000340)={0x1000000000000ff, 0x200000000000085}, &(0x7f0000001c80))
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x10)

15:21:41 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r1 = socket(0x0, 0x0, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r2 = dup2(r1, 0xffffffffffffffff)
bind$alg(r2, 0x0, 0x0)
r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r3)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x6a, 0x1, 0x8000}, 0x4)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r5, 0x0)

15:21:41 executing program 3:
r0 = socket$inet6(0xa, 0x6, 0x0)
listen(r0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)

15:21:41 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x13}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

15:21:41 executing program 4:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x30002019})

15:21:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000380)={0x7b, 0x0, [0x0, 0x0, 0xc001001b]})

15:21:41 executing program 1:
socket$inet6(0xa, 0x2, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

15:21:42 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
accept$netrom(r1, 0x0, 0x0)

[  302.295940][T10260] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
15:21:42 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})

15:21:42 executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802)
ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x40085511, 0x0)

15:21:42 executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5)
ftruncate(r1, 0x1000000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

15:21:42 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071")
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

15:21:42 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4)

[  302.898562][T10295] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
15:21:42 executing program 0:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xaa, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001200ff8e000000000000005e070000001800a1110000000000000002000000"], 0x2c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

15:21:42 executing program 5:
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000)
semop(0x0, &(0x7f0000000040)=[{0x0, 0xffffffff}], 0x1)
semop(0x0, &(0x7f0000000080)=[{0x3, 0x9, 0x800}, {0x3}, {0x2, 0x7, 0x1800}, {0x0, 0x1, 0x800}, {0x4, 0x401, 0x800}, {0x2, 0x4, 0x1000}, {0x1, 0x1000, 0x1000}, {0x3, 0x6, 0x1000}], 0x8)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000002c0)=[0x7ff])

15:21:42 executing program 2:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
socket$pptp(0x18, 0x1, 0x2)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
r1 = syz_open_dev$radio(0x0, 0x0, 0x2)
ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0)
ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040))
ioctl(0xffffffffffffffff, 0x7, &(0x7f00000002c0)="e7464bef9514a6200a0b45deb7d85f526658721b97ce3c04568d72cfc60ddc63024072fa883de6800631baad68c79b02d03a8480d4e1adda74f8b37d587c3a5a68217384c109456578861c20ceb0e8a4c8c6145f034ff27c59f849d654e71dfc97c7f873d88c6d35d4565b5c")
getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, &(0x7f00000004c0))
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$mouse(0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000000004cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:21:42 executing program 5:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/50, 0x32}}], 0x1, 0x20, 0x0)
pipe(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
io_submit(0x0, 0x0, &(0x7f00000006c0))
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
symlink(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00')
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r5 = inotify_init1(0x0)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000100)={0x0, <r6=>0x0})
process_vm_readv(r6, &(0x7f0000000380)=[{&(0x7f0000000480)=""/48, 0x30}], 0x1, &(0x7f0000002540)=[{0x0}], 0x1, 0x0)
prlimit64(r6, 0xf, &(0x7f0000000340)={0x1000000000000ff, 0x200000000000085}, &(0x7f0000001c80))
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x10)

15:21:43 executing program 1:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0)

[  303.351651][T10318] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  303.382682][T10318] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
15:21:43 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0)

15:21:43 executing program 4:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f0000000500)=ANY=[], @ANYRES16, @ANYPTR=&(0x7f0000000640)=ANY=[@ANYRES16, @ANYRES16], @ANYBLOB="5847f5d53891451aff83f23b6b3964a4d3e0ffffffffffffffce5cc188d8f29077ac47a5ff9d9fe72928b14a1ea619fbaec46900"/65], 0xfffffedd)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
splice(r0, 0x0, r4, 0x0, 0x1ffffd, 0x0)

15:21:43 executing program 5:
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000040)=ANY=[@ANYBLOB="03"])

15:21:43 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000000004cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:21:43 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000180)="c5f055d7b97c2943bb00a462bf52", 0xe}], 0x1}}, {{&(0x7f00000018c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000180)="c5f055d7b97c2943bb00a462bf52", 0xe}], 0x1}}, {{&(0x7f00000018c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x6a, 0x1, 0x8000}, 0x4)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), 0x0)

15:21:43 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x7}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00')
getdents(0xffffffffffffffff, 0x0, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, 0x0)
socket$inet6(0xa, 0x0, 0x0)
msync(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
sched_setaffinity(0x0, 0x0, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
close(r0)

15:21:43 executing program 5:
r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1b1)
renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00')
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x40)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc000000100001080200000000000000ff01000000000000000000000000000000000fff0000000000000000000000bb0000001eab9f7e6747ec8d49286097e9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000003c000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000800000000000000000000000000b4eabffed945f214a7870dc4a79944cd51b699cf95aa495a9721456995240d30ecaad7a7b29f9dbec096ca1009dd409d8566fa82f0b52cf83c110ce25362f633d6643612203cb147e412c872b89cb04324a7b81061414461d834b7c72f0479fe522f18ad34b58d2d4d440266a1b31faea5d536685b2491d1187c440bec2e0839ba9dad1e4cea385c8f35eed8c0f7b7dd43979fea08ca51665461784f035b15f92b923614715ee615aa2b85aec49433d571af45853ae2f107d45c9443d38a5f3c73c6a5452dc294f8a856490ae20a0d10c82e8e08f0194e160bf792270d9000e604978b5cdc17504a3f4530c065995a08379200"/422], 0xfc}}, 0x0)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x3c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newsa={0xfc, 0x10, 0x801, 0x0, 0x0, {{@in6=@mcast1, @in=@broadcast}, {@in, 0x0, 0x3c}, @in6=@dev, {}, {}, {}, 0x2, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xfc}}, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = getpid()
exit_group(0x0)
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0x0, 0xffffffffffffffff, 0x0)

15:21:43 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendmmsg(r0, &(0x7f0000006d00), 0x800000000000237, 0x1ffffffe)

[  303.973417][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
15:21:43 executing program 5:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$BLKFLSBUF(r0, 0x1261, 0x0)

[  304.221365][T10352] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF
[  304.231385][T10352] FAT-fs (loop1): Filesystem has been set read-only
15:21:44 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0xc, 0x8001})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:21:44 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendmmsg(r0, &(0x7f0000006d00), 0x800000000000237, 0x1ffffffe)

15:21:44 executing program 3:
r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r0, &(0x7f00000000c0)='i', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000000))

15:21:44 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000180)="c5f055d7b97c2943bb00a462bf52", 0xe}], 0x1}}, {{&(0x7f00000018c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000180)="c5f055d7b97c2943bb00a462bf52", 0xe}], 0x1}}, {{&(0x7f00000018c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x6a, 0x1, 0x8000}, 0x4)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), 0x0)

[  304.521598][T10380] kvm: pic: non byte read
15:21:44 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x800, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4)
write$binfmt_misc(r0, &(0x7f00000059c0)=ANY=[@ANYBLOB], 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet6(r1, 0x0, 0xfe32, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socketpair(0x0, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
shutdown(0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0xfffffffffffffe17)
sendto$inet6(r1, &(0x7f0000003400)="88", 0x1, 0x20000041, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000005380)=[{{&(0x7f0000004b40), 0x80, &(0x7f0000004fc0)=[{0x0}, {&(0x7f0000004e40)=""/81, 0x51}, {&(0x7f0000004ec0)=""/126, 0x7e}, {&(0x7f0000004f40)=""/82, 0x52}], 0x4}}, {{&(0x7f0000005080)=@l2, 0x80, &(0x7f0000005340)=[{&(0x7f0000000500)=""/156, 0x9c}, {&(0x7f00000051c0)=""/186, 0xba}, {&(0x7f0000005280)=""/175, 0xaf}], 0x3}, 0x1000}], 0x2, 0x4101, &(0x7f0000005640))

15:21:44 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x801, 0x0, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, {@in6=@rand_addr="0f9ac2bc3319b0aa0ac3b320dc71ae52"}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0)

15:21:44 executing program 3:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setpriority(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x10e182)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r0, r1, 0x0, 0x20000102000007)

[  304.744813][T10398] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
15:21:44 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_UNALIGN(0x6, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
getsockname(0xffffffffffffffff, 0x0, 0x0)
getcwd(0x0, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0)
tkill(0x0, 0x9)
r1 = getpid()
sched_setattr(r1, 0x0, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f00000002c0)=[0x0, 0xfff, 0x1, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0)
getpgrp(0xffffffffffffffff)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x20002, 0x0)
r3 = syz_open_procfs(r0, &(0x7f0000000340)='net/rt_cache\x00')
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x2, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x101}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c844}, 0x480d0)
sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000404}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x20, 0x300, 0x70bd25, 0x25dfdbfc, {0x1a}, [@typed={0x8, 0x21, 0x0, 0x0, @u32=0x9}, @generic="e2ca6fc4d0ba9e4162f488934d6804eae19f08e3664a64641289b25d9ab264a3117c5cdcf7f65604ec30f9740bcd3518fb4eed134cfe0f6f943cf5e0d1231d2b41", @typed={0xc, 0x13, 0x0, 0x0, @u64=0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000014}, 0x90)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xbf)
bind$inet(r4, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000000c0)=0xffffffffffffffff, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000700)={0xfffffffffffffffd, 0x40000007fff, 0x7ffffffe}, 0x14)
shutdown(r4, 0x2)
shutdown(0xffffffffffffffff, 0x2)

15:21:44 executing program 5:
r0 = socket(0x40000000015, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10)
accept4(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
r2 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x5)
ftruncate(r2, 0x1000000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
sendfile(r1, r2, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

15:21:44 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x2ee6bc40dbce6995})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'nr0\x00', 0x400})

15:21:44 executing program 0:
syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000002640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=ANY=[@ANYBLOB='errors=continue,nls=i'])

15:21:44 executing program 3:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setpriority(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x10e182)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r0, r1, 0x0, 0x20000102000007)

15:21:45 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0xffffffffffffff19}], 0x1, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x100, 0x840000003, 0x0, 0x0, 0x0, 0x8], 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15:21:45 executing program 3:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000000900)="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", 0x1000}], 0x1, 0x0)

15:21:45 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000000004cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:21:45 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000180)="c5f055d7b97c2943bb00a462bf52", 0xe}], 0x1}}, {{&(0x7f00000018c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000180)="c5f055d7b97c2943bb00a462bf52", 0xe}], 0x1}}, {{&(0x7f00000018c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x6a, 0x1, 0x8000}, 0x4)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), 0x0)

15:21:45 executing program 5:
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x10000)
r0 = semget$private(0x0, 0x20000000102, 0x0)
semop(r0, &(0x7f0000000040)=[{0x0, 0xffffffff}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000002c0)=[0x7ff])

15:21:45 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x10600)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000043fe0000070600000ee60000bf050000000000001f650000000000006507000002000000270700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000001c0a79e8169d3c2792432a4fa650c512aee994a56462712cb064ecd5615f3196e3359aceb768637e60bd5d2e4b5992de991371274fdff6e79fc722e25659a7c85615c1b88bc894123cfe2314e887efecdcb7381ef4932cb0dcebea6d90e9c1677fbefd35893d883a2c559b7a34db461b1974af360eace66cec40d92706d0bbcc5bf6fec345ae9606c3c1a348f9b395592c1018e5e4b41b13000c94df1f2db24c67d4c7ba9ec035883e2791c4e9dff3e8bfc7d1746091b1820102b1905a1561d8e64e27019095601e3a3412086dee84efd375f0645f3301f55d3b9efdfbed9b430bcf0418e100bdff1c8bcfbdc229874bc3d2418bab997c8bef9aa55841caa572ddff9220c67c9e17bee524c3dc747455763ecb0a7c2cd12bc34b0fc0271124cfb5279195f7062351fef77c71294b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
connect$inet6(r0, 0x0, 0x0)

15:21:45 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/23, 0x17}, {&(0x7f00000006c0)=""/113, 0x71}, {&(0x7f0000000740)=""/148, 0x94}, {0x0}, {&(0x7f0000000980)=""/153, 0x99}, {&(0x7f0000000a40)=""/162, 0xa2}, {&(0x7f0000000b00)=""/137, 0x89}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001bc0)=""/50, 0x32}}], 0x1, 0x20, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
io_submit(0x0, 0x0, &(0x7f00000006c0))
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r4)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
rt_sigpending(&(0x7f00000003c0), 0x8)
r6 = inotify_init1(0x0)
fcntl$setown(r6, 0x8, 0xffffffffffffffff)
fcntl$getownex(r6, 0x10, &(0x7f0000000100)={0x0, <r7=>0x0})
process_vm_readv(r7, &(0x7f0000000380)=[{&(0x7f0000000480)=""/48, 0x30}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0)
prlimit64(r7, 0xf, &(0x7f0000000340)={0x1000000000000ff, 0x200000000000085}, &(0x7f0000001c80))
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x10)

15:21:45 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
recvfrom$packet(r0, &(0x7f00000000c0)=""/179, 0xb3, 0x0, 0x0, 0x0)

15:21:46 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup3(r3, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

15:21:46 executing program 3:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setpriority(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x10e182)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
getpid()
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r0, r1, 0x0, 0x20000102000007)

15:21:46 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4)

15:21:46 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000000480), 0x0)

15:21:46 executing program 5:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e3e509b00000000005b"], 0xa)

15:21:46 executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/23, 0x17}, {&(0x7f00000006c0)=""/113, 0x71}, {&(0x7f0000000740)=""/148, 0x94}, {0x0}, {&(0x7f0000000980)=""/153, 0x99}, {&(0x7f0000000a40)=""/162, 0xa2}, {&(0x7f0000000b00)=""/137, 0x89}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x8, &(0x7f0000001bc0)=""/50, 0x32}}], 0x1, 0x20, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r4)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
symlink(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00')
rt_sigpending(&(0x7f00000003c0), 0x8)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r6 = inotify_init1(0x0)
fcntl$getownex(r6, 0x10, &(0x7f0000000100)={0x0, <r7=>0x0})
process_vm_readv(r7, &(0x7f0000000380)=[{&(0x7f0000000480)=""/48, 0x30}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0)
prlimit64(r7, 0xf, &(0x7f0000000340)={0x1000000000000ff}, &(0x7f0000001c80))
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x10)

15:21:46 executing program 4:
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x10e182)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
creat(0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r0, r1, 0x0, 0x20000102000007)

15:21:47 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000180)="c5f055d7b97c2943bb00a462bf52", 0xe}], 0x1}}, {{&(0x7f00000018c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000180)="c5f055d7b97c2943bb00a462bf52", 0xe}], 0x1}}, {{&(0x7f00000018c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r1)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x6a, 0x1, 0x8000}, 0x4)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), 0x0)

15:21:47 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x10600)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0x0)
r0 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
connect$inet6(r0, 0x0, 0x0)

15:21:47 executing program 3:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setpriority(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x10e182)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
getpid()
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r0, r1, 0x0, 0x20000102000007)

15:21:47 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
fchdir(r0)
r1 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r1, &(0x7f0000000140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da3393", 0x42)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000040)='./control\x00', 0xa4000960)

15:21:47 executing program 2:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, 0x0)
setpriority(0x1, r0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x10e182)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
setresuid(0x0, 0x0, 0x0)
geteuid()
syz_open_procfs(0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
sched_setaffinity(0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r2, 0x0, 0x20000102000007)

15:21:47 executing program 4:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x10600)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0x0)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

15:21:47 executing program 5:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1)

15:21:47 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='oom_score_adj\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x6)

15:21:47 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
getpid()
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$setsig(0xffffffffffffffff, 0xa, 0x12)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="03002bc1157546bab58d000000000000223327a9bc916717d9d412ee227d397a08a51bf594e465aef49e49d8858111df1f4750686464e92ce64e97fb3fc9519f33da"], 0x1}}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18472824, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:21:48 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1)
clone(0x6100f00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='vfat\x00', 0x0, 0x0)

15:21:48 executing program 4:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x10600)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0x0)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

15:21:48 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='oom_score_adj\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0x6)

15:21:48 executing program 1:
semop(0x0, &(0x7f0000000080)=[{0x0, 0x9}, {}], 0x2)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000002c0))

15:21:48 executing program 0:
syz_init_net_socket$rose(0xb, 0x5, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x10600)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0x0)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

15:21:48 executing program 2:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, 0x0)
setpriority(0x1, r0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x10e182)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
setresuid(0x0, 0x0, 0x0)
geteuid()
syz_open_procfs(0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
sched_setaffinity(0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r2, 0x0, 0x20000102000007)

15:21:48 executing program 5:
setpriority(0x1, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x10e182)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
geteuid()
syz_open_procfs(0x0, 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)

15:21:48 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, r1, 0x0)

15:21:48 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)

15:21:48 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000000004cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:21:48 executing program 0:
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10)
r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0)
ftruncate(r1, 0x1000000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

15:21:48 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000000))

15:21:49 executing program 5:
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

15:21:49 executing program 3:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setpriority(0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x10e182)
r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4)
sendfile(r0, r1, 0x0, 0x20000102000007)

15:21:49 executing program 4:
mkdir(&(0x7f0000001080)='./file0\x00', 0x0)
lgetxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)

15:21:49 executing program 4:
r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r0, &(0x7f00000000c0)='i', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040), 0x4)

15:21:49 executing program 3:

15:21:49 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x801, 0x0, 0x0, {{@in6=@mcast1, @in6=@remote}, {@in, 0x0, 0x33}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)

15:21:49 executing program 4:
r0 = memfd_create(&(0x7f0000000780)='\x00', 0x0)
write(r0, &(0x7f00000000c0)='i', 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c)

15:21:49 executing program 4:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000100)=0xc)
setpriority(0x1, r0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x10e182)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
setresuid(0x0, 0x0, 0x0)
geteuid()
r3 = syz_open_procfs(0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
ioctl$TIOCNXCL(r3, 0x540d)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
sched_setaffinity(0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r2, 0x0, 0x20000102000007)

15:21:49 executing program 0:
syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f0000002640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=ANY=[@ANYBLOB='errors=continue,nls=iso8859-14,errors=r'])

[  310.365717][T10663] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF
[  310.382704][T10663] FAT-fs (loop5): Filesystem has been set read-only
15:21:50 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000000004cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:21:50 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000000004cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:21:50 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xf}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x315}]}}]}, 0x3c}}, 0x0)

15:21:50 executing program 2:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0xfffffffffffffffa, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x280001c, 0x0)
r1 = socket(0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001480)}}], 0x1, 0x0)
r2 = socket(0x0, 0x0, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
sendmmsg(r2, 0x0, 0x0, 0x0)
r3 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)
fchdir(r3)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0x8000}, 0x4)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r5, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000140))

15:21:50 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x7, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200090c5}, 0x20004000)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1)
clone(0x6100f00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='vfat\x00', 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

15:21:50 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x21)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000011000700ee00"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000000f1ff0c0001d8510870d00acfa5779754007533320007000000d0455083cf"], 0x30}}, 0x0)

[  310.748396][ T2630] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  310.773798][T10707] FAT-fs (loop5): unable to read boot sector
[  310.783040][T10721] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
15:21:50 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000000c0))
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000000004cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:21:50 executing program 0:
bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @local}, 0x10)
r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
r1 = memfd_create(&(0x7f0000000100)='\\vmnet0?\'`@{,vmnet1em0user\x00', 0x0)
ftruncate(r1, 0x1000000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, &(0x7f00000000c0)=0xf18001, 0xeefffdef)

15:21:50 executing program 4:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r0=>0x0}, &(0x7f0000000100)=0xc)
setpriority(0x1, r0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x10e182)
r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffd000/0x2000)=nil)
setresuid(0x0, 0x0, 0x0)
geteuid()
syz_open_procfs(0x0, 0x0)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
sched_setaffinity(0x0, 0x0, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil)
shmctl$IPC_SET(r4, 0x1, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x0)
write$binfmt_script(r1, &(0x7f00000004c0)=ANY=[@ANYRES32], 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r1, r2, 0x0, 0x20000102000007)

15:21:50 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
unshare(0x60040000)
socket$inet6(0xa, 0x0, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)

15:21:51 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100000000004cb]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  311.342270][T10741] IPVS: ftp: loaded support on port[0] = 21
[  311.753561][T10757] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  311.824544][T10757] FAT-fs (loop2): Filesystem has been set read-only
15:21:51 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYRES64], 0xb0)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000001440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x900828}, 0xc, &(0x7f0000001400)={&(0x7f0000000500)=ANY=[@ANYBLOB="00a87969170959d7d2d9cae17ed100", @ANYRES16=r4, @ANYBLOB="080009007000fbdbdf25010000000000000008410000004c0018000000016574681d00000000000000000000000000000000000000000000000000f9ffffff00"/98], 0x3}, 0x1, 0x0, 0x0, 0x48000}, 0x800)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000002980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x34, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4498df9796d3d79}, 0x490)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4845}, 0x20004000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="b8000000020119050000000000000000000000003c0001002c0001001400030016f8bcd383af9b1577def13edad6b8bf14000400fe8000000000000000000000000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe88000000000000000000000000000114000400ff00000c000000000000000000000001080007000000000024000f0014000100080001007f0002007f0000010c0002000500010000000000"], 0xb8}}, 0x0)

[  311.940651][T10744] IPVS: ftp: loaded support on port[0] = 21
15:21:51 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
unshare(0x60040000)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)

15:21:51 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
r1 = socket(0x400000000010, 0x2, 0x0)
write(r1, &(0x7f00000005c0)="2400000021002551071c0165ff00db020200000000100f000ee1000c0800060000008c09", 0x238)

[  312.157227][  T336] tipc: TX() has been purged, node left!
15:21:52 executing program 2:
r0 = socket(0x11, 0x800000003, 0x0)
setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="080100004a020000000000000000000000000066509f1de517568b0000000000e606b1c2062a6d0000000000"], 0xfdef)

[  312.342099][T10779] IPVS: ftp: loaded support on port[0] = 21
15:21:52 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
r1 = dup2(r0, r0)
write$cgroup_int(r1, 0x0, 0x0)

15:21:52 executing program 3:
r0 = epoll_create1(0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)

15:21:52 executing program 1:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x540c, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0)

15:21:52 executing program 0:
r0 = socket$inet6(0xa, 0x80003, 0x6b)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
syz_emit_ethernet(0x46, &(0x7f0000000540)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @local, @empty, {[], @ni={0x8b}}}}}}, 0x0)

15:21:52 executing program 2:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket(0xa, 0x3, 0x87)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr="ffba4195a8916923d5b3b2e03404d378"}, 0x1c)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r5 = socket$inet6(0xa, 0x80003, 0x6b)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x420, 0x0, 0x280, 0x0, 0x0, 0x0, 0x350, 0x350, 0x350, 0x350, 0x350, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x280, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'team_slave_1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x800}}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
splice(r0, 0x0, r2, 0x0, 0x10002, 0x0)

[  312.765312][T10781] IPVS: ftp: loaded support on port[0] = 21
15:21:52 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x16, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1, 0x50}]}, &(0x7f0000f6bffb)='GPL\x00'}, 0x48)

[  312.860610][T10802] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  312.956859][T10801] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  313.162530][T10802] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
15:21:55 executing program 5:

15:21:55 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000240007051300"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000007000100667100003400020008000b000000000008000600000000000800030003000000080008400c00000008000100ffffffff08000700ff98ffffff"], 0x60}}, 0x0)

15:21:55 executing program 4:

15:21:55 executing program 3:

15:21:55 executing program 0:

15:21:55 executing program 2:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket(0xa, 0x3, 0x87)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr="ffba4195a8916923d5b3b2e03404d378"}, 0x1c)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r5 = socket$inet6(0xa, 0x80003, 0x6b)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x420, 0x0, 0x280, 0x0, 0x0, 0x0, 0x350, 0x350, 0x350, 0x350, 0x350, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x280, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'team_slave_1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x800}}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0xa6}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
splice(r0, 0x0, r2, 0x0, 0x10002, 0x0)

15:21:55 executing program 4:

[  315.535605][T10823] sch_fq: defrate 0 ignored.
15:21:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r0, &(0x7f0000003300)=[{{&(0x7f0000000740)={0x2, 0x4e23, @local}, 0x10, 0x0}}], 0x1, 0x8000)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)

15:21:55 executing program 0:

[  315.640385][T10822] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
15:21:55 executing program 1:

15:21:55 executing program 5:

15:21:55 executing program 4:

15:21:55 executing program 0:

15:21:55 executing program 5:

15:21:55 executing program 3:

15:21:55 executing program 1:

15:21:55 executing program 0:

15:21:56 executing program 2:

15:21:56 executing program 4:

15:21:56 executing program 0:

15:21:56 executing program 3:

15:21:56 executing program 1:

15:21:56 executing program 5:

15:21:56 executing program 5:

15:21:56 executing program 0:

15:21:56 executing program 4:

15:21:56 executing program 3:

15:21:56 executing program 1:

15:21:56 executing program 2:

15:21:56 executing program 0:

15:21:56 executing program 4:

15:21:56 executing program 3:

15:21:56 executing program 5:

15:21:56 executing program 1:

15:21:56 executing program 0:

15:21:56 executing program 4:

15:21:56 executing program 2:

15:21:56 executing program 3:

15:21:56 executing program 5:

15:21:56 executing program 1:

15:21:57 executing program 0:

15:21:57 executing program 2:

15:21:57 executing program 3:

15:21:57 executing program 4:

15:21:57 executing program 5:

15:21:57 executing program 1:

[  317.482555][  T336] tipc: TX() has been purged, node left!
15:21:57 executing program 2:

15:21:57 executing program 3:

15:21:57 executing program 5:

15:21:57 executing program 0:

15:21:57 executing program 4:

[  317.652671][  T336] tipc: TX() has been purged, node left!
15:21:57 executing program 1:

15:21:57 executing program 2:

15:21:57 executing program 5:

15:21:57 executing program 0:

15:21:57 executing program 3:

15:21:57 executing program 4:

15:21:57 executing program 0:

15:21:57 executing program 2:

15:21:57 executing program 1:

15:21:57 executing program 5:

15:21:57 executing program 3:

15:21:57 executing program 2:

15:21:57 executing program 4:

15:21:58 executing program 3:

15:21:58 executing program 0:

15:21:58 executing program 5:

15:21:58 executing program 1:

15:21:58 executing program 4:

15:21:58 executing program 2:

15:21:58 executing program 3:

15:21:58 executing program 0:

15:21:58 executing program 5:

15:21:58 executing program 1:

15:21:58 executing program 4:

15:21:58 executing program 3:

15:21:58 executing program 2:

15:21:58 executing program 1:

15:21:58 executing program 0:

15:21:58 executing program 5:

15:21:58 executing program 4:

15:21:58 executing program 3:

15:21:58 executing program 2:

15:21:58 executing program 4:

15:21:58 executing program 1:

15:21:58 executing program 0:

15:21:58 executing program 5:

15:21:59 executing program 2:

15:21:59 executing program 3:

15:21:59 executing program 1:

15:21:59 executing program 0:

15:21:59 executing program 5:

15:21:59 executing program 4:

15:21:59 executing program 2:

15:21:59 executing program 3:

15:21:59 executing program 1:

15:21:59 executing program 5:

15:21:59 executing program 0:

15:21:59 executing program 4:

15:21:59 executing program 2:

15:21:59 executing program 3:

15:21:59 executing program 1:

15:21:59 executing program 5:

15:21:59 executing program 0:

15:21:59 executing program 2:

15:21:59 executing program 4:

15:21:59 executing program 3:

15:21:59 executing program 1:

15:22:00 executing program 2:

15:22:00 executing program 5:

15:22:00 executing program 0:

15:22:00 executing program 3:

15:22:00 executing program 4:

15:22:00 executing program 3:

15:22:00 executing program 2:

15:22:00 executing program 1:

15:22:00 executing program 4:

15:22:00 executing program 5:

15:22:00 executing program 0:

15:22:00 executing program 2:

15:22:00 executing program 3:

15:22:00 executing program 1:

15:22:00 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=@acquire={0x12c, 0x17, 0x295, 0x0, 0x0, {{@in6=@remote}, @in=@dev, {@in=@local, @in6=@loopback}, {{@in=@local, @in6=@mcast2}}}, [@tmpl={0x4}]}, 0x12c}}, 0x0)

15:22:00 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xf7)
r4 = dup2(r2, r3)
ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246)
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000001c0)=""/246)
dup3(r0, r1, 0x0)

15:22:00 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x10001)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
accept(r0, 0x0, &(0x7f0000000080))
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

15:22:00 executing program 2:
r0 = socket(0x10, 0x802, 0x0)
write(r0, &(0x7f0000000180)="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", 0xfc)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
r4 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
dup2(r5, r4)
socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
socket$inet6_tcp(0xa, 0x1, 0x0)

15:22:00 executing program 1:
io_setup(0x7, &(0x7f0000000000)=<r0=>0x0)
io_destroy(r0)
io_setup(0x8, &(0x7f0000000040))
io_destroy(r0)

15:22:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)={0x24, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}]}, 0x24}}, 0x0)

15:22:00 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r3}, &(0x7f0000000240)=0x8)

15:22:01 executing program 3:
io_setup(0xa, &(0x7f0000000080)=<r0=>0x0)
io_destroy(r0)
io_setup(0x6, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
io_destroy(r0)

15:22:01 executing program 2:
io_setup(0x7, &(0x7f0000000000)=<r0=>0x0)
io_destroy(r0)
io_destroy(r0)

15:22:01 executing program 4:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000)=0xffffff00, 0x4)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x230, 0x0, 0xd0, 0x0, 0xd0, 0x0, 0x198, 0x198, 0x198, 0x198, 0x198, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev, 0x0, 0x0, [0x0, 0x80], 0x1}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x290)

15:22:01 executing program 1:
io_setup(0x7, &(0x7f0000000000)=<r0=>0x0)
io_destroy(r0)
io_setup(0x8, &(0x7f0000000040))
io_destroy(r0)

15:22:01 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000c103000003000000180300000000000000000000300100003001000030010000480200004802000048020000480200004802000003000000000000000000000000000000000000000000ffffe0000002fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000697036746e6c3000000000000088555174657468305f746f5f687372000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8003001000000000000000000000000000000000000000000000000280065636e00000000000000000000000000000000000000000000000000000021000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000038005345540000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0001801000000000000000000000000000000000000000000000000280069707636686561646572000000000000000000000000000000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000736e6d705f74726170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00"], 0x1)

15:22:01 executing program 4:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0xd0, 0x0, 0xd0, 0x0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x22]}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)

[  321.552286][T11110] ipt_CLUSTERIP: Please specify destination IP
[  321.588162][T11117] xt_ecn: cannot match TCP bits for non-tcp packets
[  321.641926][T11118] xt_ecn: cannot match TCP bits for non-tcp packets
[  321.712551][T11124] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead
[  321.778542][T11124] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  321.795441][T11130] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
15:22:01 executing program 5:
pipe2(&(0x7f00000010c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000), 0x138f}], 0x1, 0x0)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000))

15:22:01 executing program 2:
unshare(0x24020400)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x20)

15:22:01 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_setup(0x7, &(0x7f0000000000)=<r3=>0x0)
io_destroy(r3)
io_destroy(r3)

15:22:01 executing program 3:
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x10}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x9, 0x5, 0x4, 0x1000000, 0x7cf, {r0, r1/1000+10000}, {0x4, 0x2, 0x0, 0x9, 0xff, 0x1, "8024120b"}, 0x48, 0x1, @planes=&(0x7f0000000080)={0x40, 0x6, @userptr=0x2, 0x8c}, 0xffffffff})
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00')
lseek(r2, 0x0, 0x3)
fsmount(r2, 0x1, 0x81)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffff877)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1e, @rand_addr=0xdd}}, 0x24)
sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1632598808b355f7b815bd92281145dd688759844bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94c7c8d5e02f38fdcdad2e5cc200000180000000003d912967"], 0x18}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)

15:22:01 executing program 4:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0xd0, 0x0, 0xd0, 0x0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x22]}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)

15:22:01 executing program 0:
r0 = memfd_create(&(0x7f0000000100)='#\x00', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="40000000000025000400000005002c00000000000000280000000000d4040000006ebd451a22dec4c83108206624ca7a4f9d38e16565a16eb68ca2227b28aa5a5282ff43ba0c2b77d868c0757da79288e04d05da00f45ebf460b26bbc8ff1a1aecab81fe6d383a064ea312ba66db4ce4948913585fc97ed370ddb2a3acadc69287b2e940eb689162949f0e102da9edd02e3913d84945b63c470000000000003d5e1e904c000000000000000000dea589cc0a9f9257a7c96663f4eb30be1c4672b8f2"], 0x1c)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10)

15:22:01 executing program 4:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0xd0, 0x0, 0xd0, 0x0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x22]}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)

[  322.099831][T11136] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
15:22:01 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x1}, 0x212)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup2(r0, r1)

15:22:02 executing program 1:
pipe(0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000040)='\x00', 0x0)
memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)

15:22:02 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000004000000000000fe90000"], 0x14}}, 0x0)

15:22:02 executing program 4:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0xd0, 0x0, 0xd0, 0x0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x22]}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)

[  322.323235][T11155] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  322.422489][    C1] 
[  322.425059][    C1] ================================
[  322.430269][    C1] WARNING: inconsistent lock state
[  322.435541][    C1] 5.5.0-next-20200207-syzkaller #0 Not tainted
[  322.441869][    C1] --------------------------------
[  322.446975][    C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[  322.453826][    C1] syz-executor.3/11151 [HC0[0]:SC1[1]:HE1:SE0] takes:
[  322.460637][    C1] ffff8880a68f71c8 (&(&local->client_conns_lock)->rlock){+.?.}, at: rxrpc_put_client_conn+0x6ed/0xc90
15:22:02 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
recvmmsg(r0, &(0x7f0000000300), 0x64, 0x0, 0x0)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x3fd, 0x1b2)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = gettid()
r3 = getuid()
r4 = getgid()
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32], 0x3c}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x0, 0x18, 0x300, 0x70bd25, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_CS_XOR={0x0, 0x5, {0x3, 0xfffffffffffffffd, 0x4}}, @CGW_MOD_SET={0x0, 0x4, {{{0x2, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "865b8fc83c8a372f"}, 0x1}}, @CGW_MOD_UID={0x0, 0xe, r3}, @CGW_CS_CRC8={0x0, 0x6, {0x48, 0x42, 0x28, 0xfb, 0x0, "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", 0x0, "4f530910dc6538161c43574f655d6303171b24d1"}}]}, 0x25}}, 0x0)

15:22:02 executing program 5:
msgsnd(0x0, &(0x7f0000000040)={0x1}, 0x8, 0x0)

[  322.471693][    C1] {SOFTIRQ-ON-W} state was registered at:
[  322.477464][    C1]   lock_acquire+0x190/0x410
[  322.480434][T11167] x_tables: ip_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  322.482131][    C1]   _raw_spin_lock+0x2f/0x40
[  322.482152][    C1]   rxrpc_connect_call+0x358/0x4e30
[  322.502264][    C1]   rxrpc_new_client_call+0x9c0/0x1ad0
[  322.507947][    C1]   rxrpc_do_sendmsg+0xffa/0x1d5f
[  322.512996][    C1]   rxrpc_sendmsg+0x4d6/0x5f0
[  322.517880][    C1]   sock_sendmsg+0xd7/0x130
15:22:02 executing program 4:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0xd0, 0x0, 0xd0, 0x0, 0x0, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_team\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev, 0x0, 0x6}}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)

[  322.522512][    C1]   ____sys_sendmsg+0x358/0x880
[  322.527382][    C1]   ___sys_sendmsg+0x100/0x170
[  322.532151][    C1]   __sys_sendmmsg+0x1bf/0x4d0
[  322.536967][    C1]   __x64_sys_sendmmsg+0x9d/0x100
[  322.542029][    C1]   do_syscall_64+0xfa/0x790
[  322.546629][    C1]   entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  322.552605][    C1] irq event stamp: 3426
[  322.556957][    C1] hardirqs last  enabled at (3426): [<ffffffff87f01836>] _raw_spin_unlock_irqrestore+0x66/0xe0
[  322.564118][T11174] ipt_CLUSTERIP: bad local_nodes[0] 0
15:22:02 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
io_setup(0x7, &(0x7f0000000100)=<r3=>0x0)
io_destroy(r3)
io_getevents(r3, 0x0, 0x0, 0x0, 0x0)

[  322.567295][    C1] hardirqs last disabled at (3425): [<ffffffff87f01baf>] _raw_spin_lock_irqsave+0x6f/0xcd
[  322.567371][    C1] softirqs last  enabled at (3372): [<ffffffff863223d6>] release_sock+0x156/0x1c0
[  322.591931][    C1] softirqs last disabled at (3375): [<ffffffff8147a12b>] irq_exit+0x19b/0x1e0
[  322.601174][    C1] 
[  322.601174][    C1] other info that might help us debug this:
[  322.609339][    C1]  Possible unsafe locking scenario:
[  322.609339][    C1] 
[  322.616788][    C1]        CPU0
[  322.620068][    C1]        ----
[  322.623376][    C1]   lock(&(&local->client_conns_lock)->rlock);
[  322.629533][    C1]   <Interrupt>
[  322.632983][    C1]     lock(&(&local->client_conns_lock)->rlock);
[  322.639428][    C1] 
[  322.639428][    C1]  *** DEADLOCK ***
[  322.639428][    C1] 
[  322.647577][    C1] 1 lock held by syz-executor.3/11151:
[  322.653022][    C1]  #0: ffffffff89bac640 (rcu_callback){....}, at: rcu_core+0x562/0x1390
[  322.661432][    C1] 
[  322.661432][    C1] stack backtrace:
[  322.667320][    C1] CPU: 1 PID: 11151 Comm: syz-executor.3 Not tainted 5.5.0-next-20200207-syzkaller #0
[  322.676939][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  322.686985][    C1] Call Trace:
[  322.690259][    C1]  <IRQ>
[  322.693186][    C1]  dump_stack+0x197/0x210
[  322.697513][    C1]  print_usage_bug.cold+0x327/0x378
[  322.702706][    C1]  mark_lock+0xbb4/0x1220
[  322.707032][    C1]  ? lock_downgrade+0x920/0x920
[  322.711876][    C1]  ? check_usage_backwards+0x330/0x330
[  322.717431][    C1]  __lock_acquire+0x1e8e/0x4a00
[  322.722281][    C1]  ? find_held_lock+0x35/0x130
[  322.727119][    C1]  ? __kasan_check_read+0x11/0x20
[  322.732243][    C1]  ? mark_lock+0xc2/0x1220
[  322.736749][    C1]  ? mark_held_locks+0xf0/0xf0
[  322.741520][    C1]  ? _raw_spin_unlock_irqrestore+0x66/0xe0
[  322.747397][    C1]  lock_acquire+0x190/0x410
[  322.751904][    C1]  ? rxrpc_put_client_conn+0x6ed/0xc90
[  322.757375][    C1]  _raw_spin_lock+0x2f/0x40
[  322.761875][    C1]  ? rxrpc_put_client_conn+0x6ed/0xc90
[  322.767326][    C1]  rxrpc_put_client_conn+0x6ed/0xc90
[  322.772604][    C1]  ? rxrpc_rcu_destroy_call+0xbd/0x200
[  322.778056][    C1]  rxrpc_rcu_destroy_call+0xbd/0x200
[  322.783389][    C1]  rcu_core+0x5e1/0x1390
[  322.787624][    C1]  ? __rcu_read_unlock+0x700/0x700
[  322.792743][    C1]  ? rcu_read_lock_sched_held+0x9c/0xd0
[  322.798289][    C1]  ? rcu_read_lock_any_held.part.0+0x50/0x50
[  322.804464][    C1]  rcu_core_si+0x9/0x10
[  322.808628][    C1]  __do_softirq+0x262/0x98c
[  322.813175][    C1]  ? sched_clock_cpu+0x1b/0x1b0
[  322.818025][    C1]  irq_exit+0x19b/0x1e0
[  322.822169][    C1]  smp_apic_timer_interrupt+0x1a3/0x610
[  322.827731][    C1]  apic_timer_interrupt+0xf/0x20
[  322.832653][    C1]  </IRQ>
[  322.835578][    C1] RIP: 0010:lock_is_held_type+0x91/0x320
[  322.841199][    C1] Code: b3 89 48 ba 00 00 00 00 00 fc ff df 48 c1 e8 03 80 3c 10 00 0f 85 58 02 00 00 48 83 3d f7 12 59 08 00 0f 84 0a 02 00 00 9c 58 <0f> 1f 44 00 00 48 ba 00 00 00 00 00 fc ff df 48 89 45 c0 48 c7 c0
[  322.860811][    C1] RSP: 0018:ffffc900084ef8c0 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
[  322.869227][    C1] RAX: 0000000000000286 RBX: 0000000000000000 RCX: 1ffffffff154c0e2
[  322.877204][    C1] RDX: dffffc0000000000 RSI: 00000000ffffffff RDI: ffff888049c28a5c
[  322.885168][    C1] RBP: ffffc900084ef908 R08: ffff888049c281c0 R09: ffff888049c28a58
[  322.893131][    C1] R10: fffffbfff154baa0 R11: ffffffff8aa5d507 R12: ffff888049c281c0
[  322.901120][    C1] R13: 000000000000000b R14: ffffffff89bac680 R15: 0000000020004200
[  322.910279][    C1]  ___might_sleep+0x205/0x2c0
[  322.914961][    C1]  __might_sleep+0x95/0x190
[  322.919546][    C1]  __might_fault+0xc6/0x1e0
[  322.924099][    C1]  _copy_from_user+0x30/0x1a0
[  322.928786][    C1]  copy_msghdr_from_user+0xa0/0x440
[  322.933979][    C1]  ? move_addr_to_kernel.part.0+0x110/0x110
[  322.939980][    C1]  ? __kasan_check_read+0x11/0x20
[  322.945248][    C1]  ? mark_lock+0xc2/0x1220
[  322.949661][    C1]  ? __kasan_check_read+0x11/0x20
[  322.954679][    C1]  recvmsg_copy_msghdr+0x43/0x80
[  322.959624][    C1]  ___sys_recvmsg+0xb1/0x150
[  322.964320][    C1]  ? recvmsg_copy_msghdr+0x80/0x80
[  322.969429][    C1]  ? __might_fault+0x12b/0x1e0
[  322.974266][    C1]  ? do_dup2+0x4f0/0x4f0
[  322.978596][    C1]  ? lock_downgrade+0x920/0x920
[  322.983448][    C1]  do_recvmmsg+0x27e/0x7a0
[  322.987861][    C1]  ? ___sys_recvmsg+0x150/0x150
[  322.992705][    C1]  ? lock_downgrade+0x920/0x920
[  322.997649][    C1]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  323.004044][    C1]  ? put_timespec64+0xda/0x140
[  323.008946][    C1]  __sys_recvmmsg+0x259/0x270
[  323.013630][    C1]  ? __ia32_sys_recvmsg+0xb0/0xb0
[  323.018649][    C1]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  323.024211][    C1]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  323.029666][    C1]  ? do_syscall_64+0x26/0x790
[  323.034352][    C1]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  323.040857][    C1]  ? do_syscall_64+0x26/0x790
[  323.045543][    C1]  __x64_sys_recvmmsg+0xe6/0x140
[  323.050476][    C1]  do_syscall_64+0xfa/0x790
[  323.055037][    C1]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  323.061007][    C1] RIP: 0033:0x45b399
[  323.064892][    C1] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  323.084583][    C1] RSP: 002b:00007fcf2c69dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  323.093124][    C1] RAX: ffffffffffffffda RBX: 00007fcf2c69e6d4 RCX: 000000000045b399
[  323.101100][    C1] RDX: 04000000000005cd RSI: 0000000020000800 RDI: 0000000000000005
[  323.109164][    C1] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[  323.117132][    C1] R10: 0000000000000042 R11: 0000000000000246 R12: 00000000ffffffff
[  323.125545][    C1] R13: 0000000000000891 R14: 00000000004c9f8b R15: 000000000075bfd4
15:22:02 executing program 3:
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x10}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x9, 0x5, 0x4, 0x1000000, 0x7cf, {r0, r1/1000+10000}, {0x4, 0x2, 0x0, 0x9, 0xff, 0x1, "8024120b"}, 0x48, 0x1, @planes=&(0x7f0000000080)={0x40, 0x6, @userptr=0x2, 0x8c}, 0xffffffff})
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00')
lseek(r2, 0x0, 0x3)
fsmount(r2, 0x1, 0x81)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffff877)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1e, @rand_addr=0xdd}}, 0x24)
sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1632598808b355f7b815bd92281145dd688759844bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94c7c8d5e02f38fdcdad2e5cc200000180000000003d912967"], 0x18}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)

15:22:02 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="3e260f090f20e0350000d7a5f30f09020019e02626205bf30f098503f800443c0f20c0c00f000000440f22c0b949090000f3e1000fae44ee08", 0x39}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  323.262592][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
15:22:03 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r3 = fcntl$dupfd(r0, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

15:22:03 executing program 5:
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x80, 0x0, 0x10}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x3)
clock_gettime(0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x9, 0x5, 0x4, 0x1000000, 0x7cf, {r0, r1/1000+10000}, {0x4, 0x2, 0x0, 0x9, 0xff, 0x1, "8024120b"}, 0x48, 0x1, @planes=&(0x7f0000000080)={0x40, 0x6, @userptr=0x2, 0x8c}, 0xffffffff})
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00')
lseek(r2, 0x0, 0x3)
fsmount(r2, 0x1, 0x81)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffff877)
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1e, @rand_addr=0xdd}}, 0x24)
sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0xfffffffffffffd95, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000100100000100000005e8000000000000e458c598ba4904c77813ab29fb450a2e834efe3f87695931515781ae36a4d148f269399022f544be4fac9508cce4df4d7015eb590bbfb45e2584f446722053f1632598808b355f7b815bd92281145dd688759844bd09b0f55e7ca54b07bd9189de8daeb173aca360f4bca4f5019235efcea227e56f94c7c8d5e02f38fdcdad2e5cc200000180000000003d912967"], 0x18}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}], 0x4000000000005cd, 0x42, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)

15:22:03 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c07bc3376003639405cb4aed12f0000000000", 0x19}], 0x4, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x3c)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r2, 0x0, 0x0)

15:22:03 executing program 1:
pipe(0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000040)='\x00', 0x0)
memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)

15:22:03 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x1800300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000b80200004801000000000000480100000000000000000000200200002002000020020000200200002002000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0004801000000000000000000000000000000000000000048006c696d6974000000000000000000000000000000000000000000000000007cf92632010000000000000000000000000000000000000000000000000000000000000000000000280069636d7000000000000000000000000000000000000000000000000000000011ef000000000068004354000000000000000000000000000000000000000000000000000000020000000000000000000000007070747000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000d80000000000e2a14cfe0000000000000000000000006800435400000000000000000000000000000000000000000000000000000001000000000000000000000000736e6d705f747261700000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff"], 0x1)

15:22:03 executing program 2:
pipe(0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000040)='\x00', 0x0)
memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
dup(0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)

15:22:03 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f00000000c0)={0xd, 0x1ff, {0x55, 0x7f, 0x400, {0x80, 0x7}, {0x2, 0x40}, @const={0x2, {0xfff, 0x6, 0x9f}}}, {0x54, 0x8a, 0x7, {0xb61, 0x93}, {0x5c38}, @const={0x3a63, {0x4, 0x0, 0x0, 0x1}}}})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x3116, 0x0, "00ffff0200"})
r4 = syz_open_pts(r3, 0x0)
readv(r4, &(0x7f0000000500)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1)

[  323.505626][T11217] x_tables: ip_tables: icmp match: only valid for protocol 1
[  323.533771][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
15:22:03 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa75, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000272000))

15:22:03 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x800, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendto$inet6(r1, 0x0, 0xfe32, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socketpair(0x0, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x0, 0x84)
shutdown(0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0xfffffffffffffe17)
sendto$inet6(r1, &(0x7f0000003400)="88", 0x1, 0x20000041, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000005380)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000004b40), 0x80, &(0x7f0000004fc0)=[{&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000004c80)=""/181, 0xb5}, {&(0x7f0000004d40)=""/9, 0x9}, {&(0x7f0000004d80)=""/171, 0xab}, {&(0x7f0000004e40)=""/81, 0x51}, {&(0x7f0000004ec0)=""/126, 0x7e}, {&(0x7f0000004f40)=""/82, 0x52}], 0x7, &(0x7f0000005040)=""/20, 0x14}}, {{&(0x7f0000005080)=@l2, 0x80, &(0x7f0000005340)=[{&(0x7f0000000500)=""/156, 0x9c}, {&(0x7f00000051c0)=""/186, 0xba}, {&(0x7f0000005280)=""/175, 0xaf}], 0x3}, 0x1000}], 0x3, 0x4101, 0x0)

[  323.719142][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
15:22:03 executing program 5:
r0 = memfd_create(&(0x7f0000000100)='#\x00', 0x0)
write(r0, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="40000000000025000400000005002c00000000000000280000000000d4040000006ebd451a22dec4c83108206624ca7a4f9d38e16565a16eb68ca2227b28aa5a5282ff43ba0c2b77d868c0757da79288e04d05da00f45ebf460b26bbc8ff1a1aecab81fe6d383a064ea312ba66db4ce4948913585fc97ed370ddb2a3acadc69287b2e940eb689162949f0e102da9edd02e3913d84945b63c470000000000003d5e1e904c000000000000000000dea589cc0a9f9257a7c96663f4eb30be1c4672b8f2"], 0x1c)
sendfile(r0, r0, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0)
ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x1f0, &(0x7f0000000000)=[{}]}, 0x10)

15:22:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00')
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x3e, 0x0, 0x0, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='oom_score_adj\x00')
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x100, 0x840000003, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3], 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  323.760195][T11232] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
15:22:03 executing program 0:
io_setup(0x7, &(0x7f0000000100)=<r0=>0x0)
io_destroy(r0)
io_setup(0x1, &(0x7f00000001c0))
io_getevents(r0, 0x0, 0x5f, 0x0, 0x0)

15:22:03 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:22:03 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x8000c})

15:22:06 executing program 3:
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @broadcast, @dev}}}}}}, 0x0)

15:22:06 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:06 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:22:06 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r0, 0x0)
syz_open_dev$vcsn(0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0)
read$usbfs(r1, &(0x7f0000000340)=""/4096, 0x1000)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
dup(0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0)

15:22:06 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x8000c})

15:22:06 executing program 5:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r4, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

15:22:06 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

[  326.445390][T11294] No such timeout policy "syz1"
[  326.448406][T11289] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
15:22:06 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
unshare(0x2000400)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, 0x0)

15:22:06 executing program 3:
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"/311], 0x94}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x15})
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000000000020000000000a01080000000000f520b479063aa09200010073797a31000000002c0000000c0a03000000000003800900010073797a31000000000800044000000000140000001100010000000000000700000000000a3aaa5dcc090b1ebc796cc8e6824411447d77185bbacab9319af01b51dee5c5c75d022d804d64ddc59b43fe8e05deb2"], 0x94}}, 0x0)

15:22:06 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x8000c})

[  326.602100][T11308] No such timeout policy "syz1"
15:22:06 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:06 executing program 5:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r4, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

15:22:06 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:22:06 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x4480, 0x0)

[  326.751827][T11323] No such timeout policy "syz1"
15:22:06 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:06 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x8000c})

[  326.916673][T11343] No such timeout policy "syz1"
15:22:06 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)

15:22:06 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:06 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f)

15:22:06 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:22:06 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:06 executing program 5:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r4, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

15:22:06 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = gettid()
syz_open_procfs(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00')
tkill(r0, 0x1b)

15:22:06 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x8000c})

15:22:07 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = gettid()
syz_open_procfs(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00')
tkill(r0, 0x1b)

15:22:07 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:07 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = gettid()
syz_open_procfs(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00')
tkill(r0, 0x1b)

15:22:07 executing program 5:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r4, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

15:22:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x8000c})

[  327.630969][T11402] No such timeout policy "syz1"
15:22:07 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10)
sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0xac14140d}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e53, 0x120, 0x0, 0x4f)

15:22:07 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:22:07 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = gettid()
syz_open_procfs(0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00')
tkill(r0, 0x1b)

15:22:07 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x8000c})

15:22:07 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = gettid()
syz_open_procfs(0x0, 0x0)
tkill(r0, 0x1b)

[  327.847521][T11420] No such timeout policy "syz1"
15:22:07 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = gettid()
tkill(r0, 0x1b)

15:22:07 executing program 5:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r4, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4)
r7 = socket(0x10, 0x2, 0x0)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

15:22:07 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:07 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x8000c})

15:22:07 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:22:07 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
tkill(0x0, 0x1b)

[  328.126574][T11447] No such timeout policy "syz1"
15:22:08 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$P9_RSTATFS(r1, &(0x7f0000000240)={0x43}, 0x43)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8)
r3 = socket$inet(0x2, 0x3, 0x29)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

15:22:08 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
tkill(0x0, 0x1b)

15:22:08 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:08 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x8000c})

15:22:08 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:22:08 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
tkill(0x0, 0x1b)

[  328.373672][T11461] No such timeout policy "syz1"
15:22:08 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
tkill(r0, 0x1b)

15:22:08 executing program 5:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r4, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4)
r7 = socket(0x10, 0x2, 0x0)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

15:22:08 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:08 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x8000c})

15:22:08 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$P9_RSTATFS(r1, &(0x7f0000000240)={0x43}, 0x43)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8)
r3 = socket$inet(0x2, 0x3, 0x29)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

15:22:08 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:22:08 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
tkill(r0, 0x1b)

15:22:08 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
tkill(r0, 0x1b)

[  328.997217][T11501] No such timeout policy "syz1"
15:22:08 executing program 2:
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = gettid()
tkill(r0, 0x1b)

15:22:08 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000280)={0x8000c})

15:22:08 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$P9_RSTATFS(r1, &(0x7f0000000240)={0x43}, 0x43)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8)
r3 = socket$inet(0x2, 0x3, 0x29)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

15:22:08 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:08 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  329.287989][T11527] No such timeout policy "syz1"
15:22:09 executing program 5:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r4, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4)
r7 = socket(0x10, 0x2, 0x0)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

15:22:09 executing program 2:
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = gettid()
tkill(r0, 0x1b)

15:22:09 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000280)={0x8000c})

15:22:09 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:09 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
write$P9_RSTATFS(r1, &(0x7f0000000240)={0x43}, 0x43)
close(r2)
write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8)
r3 = socket$inet(0x2, 0x3, 0x29)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

15:22:09 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:22:09 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:09 executing program 2:
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = gettid()
tkill(r0, 0x1b)

15:22:09 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000280)={0x8000c})

15:22:09 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:09 executing program 3:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
write$P9_RSTATFS(r0, &(0x7f0000000240)={0x43}, 0x43)
close(r1)
write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8)
r2 = socket$inet(0x2, 0x3, 0x29)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)

15:22:09 executing program 2:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = gettid()
tkill(r0, 0x1b)

15:22:10 executing program 5:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r4, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4)
write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

15:22:10 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0)

15:22:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[], 0x1f004})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

15:22:10 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000280)={0x8000c})

15:22:10 executing program 2:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = gettid()
tkill(r0, 0x1b)

15:22:10 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0)

15:22:10 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000280)={0x8000c})

15:22:10 executing program 2:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = gettid()
tkill(r0, 0x1b)

15:22:10 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0)

15:22:10 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[], 0x1f004})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

15:22:10 executing program 3:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
write$P9_RSTATFS(r0, &(0x7f0000000240)={0x43}, 0x43)
close(r1)
write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8)
r2 = socket$inet(0x2, 0x3, 0x29)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)

15:22:10 executing program 1:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000280)={0x8000c})

15:22:10 executing program 5:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r4, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4)
write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

15:22:10 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:10 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x8000c})

15:22:10 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x1b)

15:22:10 executing program 5:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r4, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4)
write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

15:22:11 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x8000c})

15:22:11 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x1b)

15:22:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[], 0x1f004})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

15:22:11 executing program 5:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r4, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

[  331.464119][T11648] nf_ct_set_timeout: 1 callbacks suppressed
[  331.464126][T11648] No such timeout policy "syz1"
15:22:11 executing program 3:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
write$P9_RSTATFS(r0, &(0x7f0000000240)={0x43}, 0x43)
close(r1)
write$binfmt_misc(r0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8)
r2 = socket$inet(0x2, 0x3, 0x29)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)

15:22:11 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x0, 0x0)
r0 = gettid()
tkill(r0, 0x1b)

15:22:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000280)={0x8000c})

15:22:11 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth1_to_bond\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f0000000080)={0x10, 0xfffffffffffffffe}, 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:22:11 executing program 5:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r4, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

15:22:11 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
gettid()
tkill(0x0, 0x1b)

[  331.984139][T11672] No such timeout policy "syz1"
15:22:11 executing program 1:
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000280)={0x8000c})

15:22:11 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:11 executing program 0:
clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x2, 0x3, 0x200, 0xd8, 0x0, 0xd8, 0xd8, 0x0, 0x168, 0x168, 0x168, 0x168, 0x168, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x0, 0x0, 0x5, '\x00', 'syz1\x00', {0x80}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)

15:22:11 executing program 2:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
gettid()
tkill(0x0, 0x1b)

15:22:11 executing program 5:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c)
sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket(0x11, 0x800000003, 0x0)
bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r4, r3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev, r6}, 0x14)
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

[  332.087885][T11687] xt_CT: You must specify a L4 protocol and not use inversions on it