[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 96.536449] audit: type=1800 audit(1547125331.587:25): pid=10781 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 96.555605] audit: type=1800 audit(1547125331.587:26): pid=10781 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 96.575031] audit: type=1800 audit(1547125331.607:27): pid=10781 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.182' (ECDSA) to the list of known hosts. 2019/01/10 13:02:24 fuzzer started 2019/01/10 13:02:30 dialing manager at 10.128.0.26:46261 2019/01/10 13:02:31 syscalls: 1 2019/01/10 13:02:31 code coverage: enabled 2019/01/10 13:02:31 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/01/10 13:02:31 setuid sandbox: enabled 2019/01/10 13:02:31 namespace sandbox: enabled 2019/01/10 13:02:31 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/10 13:02:31 fault injection: enabled 2019/01/10 13:02:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/10 13:02:31 net packet injection: enabled 2019/01/10 13:02:31 net device setup: enabled 13:05:16 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0x9, 0x7, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000040)=0x7fffffff, 0x3, 0x0) syzkaller login: [ 282.634264] IPVS: ftp: loaded support on port[0] = 21 [ 282.810921] chnl_net:caif_netlink_parms(): no params data found [ 282.884709] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.891263] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.899964] device bridge_slave_0 entered promiscuous mode [ 282.908856] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.915517] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.923861] device bridge_slave_1 entered promiscuous mode [ 282.958231] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 282.970229] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 283.004380] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 283.013433] team0: Port device team_slave_0 added [ 283.020037] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 283.028863] team0: Port device team_slave_1 added [ 283.035704] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 283.044475] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 283.217388] device hsr_slave_0 entered promiscuous mode [ 283.472793] device hsr_slave_1 entered promiscuous mode [ 283.713125] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 283.720680] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 283.752311] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.758882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.766116] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.772696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.857989] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.866652] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.891572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.905660] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 283.917511] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 283.924555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.932589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.949165] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 283.955547] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.969010] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 283.977442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.986273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.994804] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.001307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.017163] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 284.025329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.034181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.042722] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.049219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.065944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 284.078801] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 284.092048] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 284.104937] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 284.112623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.122441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.132830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.141848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 284.150702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 284.160055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 284.171440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 284.184042] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 284.192833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 284.201427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 284.218003] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 284.228514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.241753] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 284.247822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 284.257349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 284.265880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 284.293003] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 284.315941] 8021q: adding VLAN 0 to HW filter on device batadv0 13:05:19 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0x9, 0x7, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000040)=0x7fffffff, 0x3, 0x0) 13:05:19 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0x9, 0x7, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000040)=0x7fffffff, 0x3, 0x0) 13:05:19 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x7000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0x9, 0x7, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000040)=0x7fffffff, 0x3, 0x0) 13:05:19 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x2e9c000000000000, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, 0xd}, 0x80, 0x0, 0x0, &(0x7f0000001840)=[{0x40, 0x29, 0x3, "8e05ae7b630626dce68fff4267bdd2efb008b8694fd5c402b8c8e56864bd0adadcca6f36e4a5afa17b"}], 0x40}, 0x0) 13:05:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x2b, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x4}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) 13:05:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x2b, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x4}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) 13:05:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x2b, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x4}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) 13:05:20 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x2b, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff94, 0x4}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) 13:05:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x1040000000000001, @dev}, 0xe, {0x2, 0x0, @broadcast}, '\x00\xdd\x83\x9d\xc7W\x00'}) 13:05:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x1040000000000001, @dev}, 0xe, {0x2, 0x0, @broadcast}, '\x00\xdd\x83\x9d\xc7W\x00'}) 13:05:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x1040000000000001, @dev}, 0xe, {0x2, 0x0, @broadcast}, '\x00\xdd\x83\x9d\xc7W\x00'}) 13:05:20 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x1040000000000001, @dev}, 0xe, {0x2, 0x0, @broadcast}, '\x00\xdd\x83\x9d\xc7W\x00'}) 13:05:20 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x5}) 13:05:20 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x5}) 13:05:21 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x5}) 13:05:21 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x5}) 13:05:21 executing program 0: r0 = gettid() exit(0x0) capget(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000100)) [ 286.282570] capability: warning: `syz-executor0' uses deprecated v2 capabilities in a way that may be insecure 13:05:21 executing program 1: kexec_load(0x6, 0x4, &(0x7f0000000200)=[{&(0x7f0000000000)="5112c1c2e931b9b5332c7a0f8399bd164639f260ecf18fdd52b37899c54dc277e52f9a317fa4537ff7a4c4646859d0a6bf80a3b7fe96126b26f0c855a5b69bebfb74bdb4", 0x44, 0x7, 0x8}, {&(0x7f0000000080)="57b20ea6deb7c6e958fda9144130dfca4348acee1cb817965451aa8151b3b202008b28ca0873bd4618dd676aeea0d2097c2121adeb10377331c246e0904985d95f994162", 0x44, 0x8, 0x6}, {&(0x7f0000000100)="61165e0367e8c525a549c6a7044fa5a1", 0x10, 0x800, 0x3ae0e6af}, {&(0x7f0000000140)="8a5c0df43d505cc50f6c6d0b62bb184d1e97434c35fda9a0a7dbb62c504a825c8ffd83b9235bc4b8fdeac8c6da59ecd99f289e7b3a6c19fb1ca40e7959bdc9fea3b1730b381796ca06b51c14af4475200fb6f25352601990d9e40ded67aaaa42d035d06d414317a0645bc42b4d7cda96fce1437aab3f94834d628c3cdcd899da4e9da171d5f24eeb89992cc2ed", 0x8d, 0x1, 0xb263}], 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x40640, 0x0) utimensat(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x100) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000380)={0xa, &(0x7f0000000340)=[{0x5, 0x7f}, {0x7, 0xfffffffffffffffe}, {0xfffffffffffffffd, 0x7485c451}, {0x896, 0x5}, {0x3, 0x4}, {0x0, 0x81}, {0x7, 0x8}, {0xfffffffffffffffa, 0x8}, {0x1, 0x101}, {0x3, 0x2de}]}) r1 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x9121, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = shmget(0x3, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000400)=""/40) r3 = getpgrp(0x0) ptrace$getenv(0x4201, r3, 0x6, &(0x7f0000000440)) read(r1, &(0x7f0000000480)=""/54, 0x36) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) getpeername$inet(r1, &(0x7f00000004c0)={0x2, 0x0, @multicast1}, &(0x7f0000000500)=0x10) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000540)=""/45) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f00000005c0)) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000600)={'nlmon0\x00', 0x7ff}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000980)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400042}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)={0x24c, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xe4, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'yam0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bcsf0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @loopback, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4000000040000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_BEARER={0xb4, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x6c5e6fa6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @mcast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xe2e, @dev={0xfe, 0x80, [], 0x1c}, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}]}]}, 0x24c}}, 0x40000) fsync(r0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) setpgid(r3, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000a00)=[@in6={0xa, 0x4e22, 0x5, @local, 0x7ff}], 0x1c) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000a40)={0x2, 0x800, 0x6, 0xcdb3, 0x401, 0x729}) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000a80)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r0, 0x50, &(0x7f0000000ac0)}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r5, 0x19, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffff01}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000cc0), &(0x7f0000000d00)=0x8) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000d40)=0x20000, 0x4) [ 286.908721] IPVS: ftp: loaded support on port[0] = 21 13:05:22 executing program 0: r0 = gettid() exit(0x0) capget(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000100)) [ 287.079651] chnl_net:caif_netlink_parms(): no params data found [ 287.177997] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.184658] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.193060] device bridge_slave_0 entered promiscuous mode [ 287.209578] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.216798] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.225202] device bridge_slave_1 entered promiscuous mode [ 287.267494] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 287.279291] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 287.312693] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 287.321755] team0: Port device team_slave_0 added [ 287.329648] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 287.338349] team0: Port device team_slave_1 added [ 287.346095] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 287.354763] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 287.427241] device hsr_slave_0 entered promiscuous mode [ 287.672267] device hsr_slave_1 entered promiscuous mode [ 287.933090] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 287.940766] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 287.976033] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.982622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.989803] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.996404] bridge0: port 1(bridge_slave_0) entered forwarding state 13:05:23 executing program 0: r0 = gettid() exit(0x0) capget(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000100)) [ 288.104776] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.117272] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.180089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.200631] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 288.214391] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 288.222208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 288.230112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.244943] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 288.251061] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.267586] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 288.275839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.286162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.294607] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.301132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.316098] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 288.323517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 288.332334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.340551] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.347098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.363999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 288.376664] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 288.387642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 288.397200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 288.410930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 288.425574] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 288.432925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.442076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.450988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.460711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.474701] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 288.482571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 288.490761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 288.499550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 288.516242] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 288.526429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.538231] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 288.544489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 288.553383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 288.561959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 288.593984] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 288.619137] 8021q: adding VLAN 0 to HW filter on device batadv0 13:05:24 executing program 0: r0 = gettid() exit(0x0) capget(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000100)) 13:05:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000240)={0x100000000, {{0x2, 0x4e24, @empty}}}, 0x88) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f0000000400)='./file0\x00') sendfile(r2, r2, &(0x7f00000000c0)=0x4d, 0x8) 13:05:24 executing program 1: unshare(0x28020400) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000000c0), 0x0) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/74, 0x4a}], 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d778066f9d1ac8a570e3a42f70a7c0f30f66157a96aae15813f0dceb297", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e89046550fa2d2d25b60361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a3410334", "7b8ddcc0c891591c4116893616105829576914e70bfed06d00f97c97644ab8a7"}) 13:05:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{}, 0x1}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 13:05:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x3, 0x8000) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x7) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x84, 0xa, 0x0, &(0x7f0000000100)=0x380eed7c114b2053) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) close(0xffffffffffffffff) 13:05:25 executing program 1: r0 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) r1 = dup2(r0, r0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000000)={0x101, @broadcast}) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f00000002c0)={@empty, @remote}, 0x8) 13:05:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000100)=""/82) r2 = dup2(r0, r0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000000c0)='cpusetkeyring%[\'&selinuxeth1(\x00') 13:05:25 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x320, 0x0, 0x0, 0x0, 0x110, 0x110, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xc8, 0x110}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7ff, 0x5, 0x40, 'netbios-ns\x00', 0x5}}}, {{@ipv6={@ipv4={[], [], @empty}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffffff, 0xff, 0xff000000], 'irlan0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x11, 0x7ff, 0x4, 0x10}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x0, 0x3}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x5}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x53}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x2c000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote={0xfe, 0x7e}, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 13:05:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000100)=""/82) r2 = dup2(r0, r0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000000c0)='cpusetkeyring%[\'&selinuxeth1(\x00') 13:05:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffff9c, r0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000380)) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x80000) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4) migrate_pages(0x0, 0x3, &(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x1) r5 = getpgid(0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000200)='JYO', &(0x7f0000000240)="1860a1eced2c93f97347bd439f24e63500dc28699414c2651504524088892ac08cc68f758bdb52837dcade60cae0cad5c9afe2adfef290b633bf5106f1ff0b33de9adf46978d0a48e17f33446de9b8ff67d303be69d8f823fccc54acb4ebea223ea446cabbc0c9425135e003fcce82a8defb73d330b3b854ee41a76345d4dc5899fd37f67a0c1f6aad38d2544e53d23fb363655cf63c49bf3d9676863177e7c1db3b64fec69ce97d3b4192748ee59b63c23485d805c2dd98c6653f76e7b13f0a27f0449c7aaba9fb680727b1b90ba15cf72899bcda9dbc7a", 0x1}, 0x20) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r0, &(0x7f00000001c0)={r3, r4, 0x2}) 13:05:25 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x188, [0x20000140, 0x0, 0x0, 0x20000170, 0x20000298], 0x0, &(0x7f0000000000), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x6, 0x88be, 'ipddp0\x00', 'irlan0\x00', 'bridge0\x00', 'ip6erspan0\x00', @remote, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @dev={[], 0x18}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0xc0, 0xf8}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x107}}}]}, @snat={'snat\x00', 0x10, {{@local, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x2, 0x3, 0x100000000, 0x8, 0xfffffffffffffffb}) ioctl$TIOCCONS(r3, 0x541d) 13:05:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000200)={0x0, 0x0, 0x5, @thr={&(0x7f0000000140)="11c6b172b0f74cb203ba22b0d83bee6b9b36f089f3deb7c625f08f27fddefcffac789c2b17ce589079d9835ecce6e4ae435c2b3c0ddc008c41a397d14eacd803b645a51b29dfb8c27c8a3d9158007b5913246f38c83daf5c7e39c7ccdf40dd19375ff3902b86b655c4fc2998518acbbd35f553ce7d77f16a8d63ea463f404bfc35bb951629220dc643d0d4f6201a5b56fdc62c", &(0x7f00000000c0)="ff3233a091bad2a17130f70652b45a91b1ecb23c6bcd997476c00e5653399feb1df89d1e384f6b9adc51b6f2f56eaea0"}}, &(0x7f0000000240)=0x0) timer_gettime(r1, &(0x7f0000000280)) wait4(0x0, 0x0, 0x80000008, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x3ffc, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000040)={0x6, 0xf, 0x4, 0x2, {}, {0x6, 0x2, 0x9, 0xffff, 0x6, 0x2, "e9dad287"}, 0x800, 0x7, @offset=0x1, 0x4}) tkill(r2, 0x1000000000016) sched_getscheduler(r2) 13:05:25 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400082, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000140)={'team0\x00', {0x2, 0x4e20, @multicast2}}) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x10, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x1) 13:05:25 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="a0eb563a1dfbb6a9d75939c72dd520dce81b05d21c0e6e0702f99a3e07b904712c8fd3b03586aa", 0x27, 0xfffffffffffffffc) keyctl$assume_authority(0x10, r0) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000000100)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r1, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000500000010d10200cf", 0x1f) [ 290.898146] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 290.908732] netlink: 'syz-executor0': attribute type 5 has an invalid length. [ 290.919766] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 290.929988] netlink: 'syz-executor0': attribute type 5 has an invalid length. 13:05:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) lseek(r1, 0xfffffffffffffffc, 0x1) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000140)={0x4, 0x1000, 0x8}) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) lseek(r1, 0xfffffffffffffffc, 0x1) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000140)={0x4, 0x1000, 0x8}) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) lseek(r1, 0xfffffffffffffffc, 0x1) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000140)={0x4, 0x1000, 0x8}) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) lseek(r1, 0xfffffffffffffffc, 0x1) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000140)={0x4, 0x1000, 0x8}) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) lseek(r1, 0xfffffffffffffffc, 0x1) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000140)={0x4, 0x1000, 0x8}) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) lseek(r1, 0xfffffffffffffffc, 0x1) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000140)={0x4, 0x1000, 0x8}) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) lseek(r1, 0xfffffffffffffffc, 0x1) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000140)={0x4, 0x1000, 0x8}) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:26 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000040)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x5, @remote, 0x4}}, 0x80, 0x6}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x2b}, 0x4}}, 0x6e9a, 0x101}, &(0x7f0000000280)=0x90) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0xc0012, r1, 0x4c) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={r2, 0x10001}, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000300)) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vfio/vfio\x00', 0x400900, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000480)={r3, 0x2, 0x30, 0x3, 0xff}, &(0x7f00000004c0)=0x18) r6 = openat$cgroup_ro(r1, &(0x7f0000000500)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000540)={r2, @in6={{0xa, 0x4e20, 0x8ff, @ipv4={[], [], @remote}, 0x80000001}}, 0x8000, 0x1}, &(0x7f0000000600)=0x90) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000640)={r5, @in6={{0xa, 0x4e24, 0x5b3e, @rand_addr="922fac3a4f8f8de7a0da0458fcb142a3", 0x10001}}}, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)) mkdirat$cgroup(r6, &(0x7f0000000740)='syz1\x00', 0x1ff) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000780)={0x0, 0x2, 0xff}) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000940)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000a40)=0xe8) setresuid(r8, r9, r10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000a80)={r7, 0x1}, 0x8) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000000ac0)={0x1, 0x0, 0x102, 0x2, {0x4, 0x0, 0x100000001, 0x3}}) io_setup(0x1000, &(0x7f0000000b00)=0x0) clock_gettime(0x0, &(0x7f0000000c00)={0x0, 0x0}) io_getevents(r11, 0x100000000, 0x5, &(0x7f0000000b40)=[{}, {}, {}, {}, {}], &(0x7f0000000c40)={r12, r13+30000000}) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000c80)=""/222) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000d80)={0x408, {0x7ff, 0x63a, 0x3, 0x5, 0x1000, 0x5}}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r6, 0x408c563e, &(0x7f0000000dc0)={0x7, 0xf, 0x13, "80ba69940a09a114e3e89a0d68c39b564d5f73be1c744fa79207660726fc8b5dd3fcc24a49fb4073bf80efba45bbc52ffcf03d63a05ac0ba5c60aaef", 0x0, "41faca6485357201761eaab0439612d223e2551d04836ad461823492b3e80d301f022c82bbfbf863fb65dd606cfbd7ddf739ef2a50677d9b53bcdee7", 0x40}) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000e80)) 13:05:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) [ 292.181296] IPVS: ftp: loaded support on port[0] = 21 [ 292.358171] chnl_net:caif_netlink_parms(): no params data found [ 292.439538] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.446232] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.455054] device bridge_slave_0 entered promiscuous mode [ 292.464148] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.470656] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.479187] device bridge_slave_1 entered promiscuous mode [ 292.514966] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 292.526844] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 292.561375] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 292.570445] team0: Port device team_slave_0 added [ 292.578852] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 292.587771] team0: Port device team_slave_1 added [ 292.594963] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 292.603690] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 292.787567] device hsr_slave_0 entered promiscuous mode [ 292.922378] device hsr_slave_1 entered promiscuous mode [ 293.073255] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 293.080878] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 293.117436] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.124059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.131257] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.137876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.247117] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 293.253308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.270241] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 293.286649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.300848] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.312038] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.325146] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 293.344239] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 293.350348] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.369596] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 293.379864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.389430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.398259] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.404823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.422972] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 293.436074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 293.446658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.456257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.464965] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.471469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.479404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.499585] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 293.506645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 293.523744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 293.530727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 293.540919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.558008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 293.571781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 293.579134] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.587543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.597030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.606581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.615267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.631206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 293.645077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.656865] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 293.663213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.690031] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 293.696887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.705705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.732977] 8021q: adding VLAN 0 to HW filter on device batadv0 13:05:28 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f00000000c0)='system_u:object_r:ldconfig_cache_t:s0\x00', 0x26) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, r1, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x40000000000d0, &(0x7f0000000080), 0x4) 13:05:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:29 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) r4 = geteuid() r5 = getegid() getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=0x0, &(0x7f0000000480)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r6, 0x400, 0x3ff}, 0xc) r7 = geteuid() write$P9_RSTATu(r3, &(0x7f0000000300)={0x8c, 0x7d, 0x1, {{0x0, 0x66, 0x5, 0x8, {0x20, 0x2, 0x6}, 0x40000000, 0x0, 0x2, 0x3, 0x11, '/dev/dlm-control\x00', 0xc, 'nodev+cgroup', 0x11, '/dev/dlm-control\x00', 0x5, 'syz1\x00'}, 0x11, '/dev/dlm-control\x00', r4, r5, r7}}, 0x8c) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 13:05:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f00000000c0)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e22, 0x86, @loopback, 0xffffffffffffff74}, 0xfffffffffffffd35) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) socket$key(0xf, 0x3, 0x2) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000080)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x7, 0x200040) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000380)={@rand_addr, @broadcast}, &(0x7f00000003c0)=0xc) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = open(&(0x7f0000000100)='./file0\x00', 0xa0002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f00000002c0)=0x4) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), r6, 0x7f}}, 0x18) 13:05:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:29 executing program 2: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x450181, 0x9) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000100)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000000)={0x7b, 0x600000000000000, [0x9e], [0xc2]}) 13:05:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) [ 294.648181] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 13:05:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:29 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x6287, 0x4000000000000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x44002, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000280)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:event_device_t:s0\x00', 0x24, 0x3) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x4, 0x81, 0x2}}, 0x30) fstat(r0, &(0x7f0000000100)) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x1, @output}) 13:05:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:30 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x24100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r1, 0xf2a, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x200, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20004054}, 0x10) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000900)={0xc9f8, 0x6, 0x4, 0x80000, {}, {0x7, 0xa, 0xfffffffffffffc01, 0x7, 0x7, 0x3f, "73dbd093"}, 0xffffffff, 0x1, @offset=0x3, 0x4}) r2 = add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="cb2dfa6a753a9b52e056b1860ee319265a296059ed2bff8ac27ad7263023efc39dd3a6c2fd85584eeea830c57a44be30ab396e435e629e7ded28164740aa97edec24831e85aed05d51d3dfa58532a08d8486482bffeeda8aa582aa422a317e781dc27405c88bee39f0682db03d88b25a7fe47321764f496434e7952b0e8f6e4c831ec2f7f48b3bfb411f5ca2e85274976ee2d7f5c5b219217d4516f101ce0ba5dec184ee64eec6c6f63e68a0c01ab55889bfd193eec3302c1b849a0a5c9b1c5035c35ce38c1150bf32981c09339c3d81a8e6f648c1edd70e6339e1f4abbc7dba862a4678218aab97", 0xe8, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r2) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000280)) keyctl$restrict_keyring(0x1d, r3, 0xffffffffffffffff, &(0x7f0000000100)='\x00') vmsplice(r0, &(0x7f0000000880)=[{&(0x7f00000004c0)="3ea7bdf3202b475658306597030234456bfd977b20810f7392e21df8b3bfa03580f0e27c51274a6005797ac6fc92019d906257fe2afebad3276541f7dead0f3d1f73ff3e1222aadbf1555199cdae676f6e525af3d252fafae07f115ca704a1b2c18630307c36740397017bc9697f950ccd663106d9b10a125372b91af1246dc29decb72f86d41ab07b04b20697af05d67a99f5949b56", 0x96}, {&(0x7f0000000580)="3017b48bb4c4d44685ad96b1b339c9b497b2d165ad95d9cad6c2bb3896914437a8018bbb99f8e251f312f05b9719c8a0c7d668647999117a3987bcdc205d47480ba6c01dd7d9c30ac31f2fe667001287785bc7d37974079546cdb11a26fdf4af2b610e41bbf53de42c9c537cb23c8b6b3028bccbf49e02ab7dacafc0d1837f3a97041b8958dc58b93e3ba96ddbac74b9c4e6575a", 0x94}, {&(0x7f0000000640)="a525bd4acf18e37cf77663d63b2c43bb867f861c4c5e30bb91d0ed16da1e2da0c48b9e987d802c46ee375d3a65faa9d1e5a9edacd429048009c49838b6d164fa9fec85bbf3f70e9a33baf03e673c25570a52be80f481e2cf8d9830eac62a92b020ff8b341cafeb61f1269c9ff2bc33235b286a52e66f35b949c7d0a53912fcf0d43560383c335e7bf3e5152aee27229aa155c5fcaca0c44282bf5a5c0ba00c1958a03d7625432d45d7303523ec833b9006", 0xb1}, {&(0x7f0000000700)="fdfb7dff2f9b803d2fffaece88bddc40ad2b7ef113568401a694fd626c840d93a8588f9eb4c9e1b997008d892ba85cc86f014d47e8064d79f18e51828fbdce6ce159ed8cb3d6d486c36f4f2419a7154a0ca7bca1207641a0dd84d4cad230d1552f482d278b6ac0fbd8c06e2e33a1a1f3d78944e46fa8662e2f13b46b47827fbfc4c4d7", 0x83}, {&(0x7f0000000080)="cf613c9a4015cf7c250e2ee39c966226bd4bf85706e5eb8169d6e33d581314ad81ecd168dab5ba6151e97eaf540935ce900f97d668b123203e9d57c78adcb642bf694e592ca176b61b3ca4e06a16385b2378a9", 0x53}, {&(0x7f00000007c0)="760466dd6eb037f57d6faf7fa98434ef00d35c9eadb6b318b43bd94b807862a9060fd0c34a3ff3a84a8936cdd2f25ab52afc9a11d910bf112f474f0cf2f4d4f55335548ef3e7f53388c528eaaf3b6ec7392f3f452a399dc646b6549c5390e2de7c3d98b86088caed0ebe6fb2f38aa0ccbc1679aa8d3ea035985a97f15d9d325ae839d6fbb10cba44197b3d151a518c6911a0e1eb7c2d3cdd52ed7802b7cefd525bcff41ea61414af1598643123ce1660e9f43140914844111c7b6f58b918", 0xbe}], 0x6, 0xa) 13:05:30 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) r4 = geteuid() r5 = getegid() getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=0x0, &(0x7f0000000480)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r6, 0x400, 0x3ff}, 0xc) r7 = geteuid() write$P9_RSTATu(r3, &(0x7f0000000300)={0x8c, 0x7d, 0x1, {{0x0, 0x66, 0x5, 0x8, {0x20, 0x2, 0x6}, 0x40000000, 0x0, 0x2, 0x3, 0x11, '/dev/dlm-control\x00', 0xc, 'nodev+cgroup', 0x11, '/dev/dlm-control\x00', 0x5, 'syz1\x00'}, 0x11, '/dev/dlm-control\x00', r4, r5, r7}}, 0x8c) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 13:05:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) getdents64(0xffffffffffffffff, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/156, 0x9c) 13:05:30 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) r1 = perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x19, &(0x7f0000000380), 0x4) socket$caif_seqpacket(0x25, 0x5, 0x1) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @loopback={0xffffff7f00000000}}, 0x80, &(0x7f00000001c0), 0x2ab, &(0x7f0000000680)}, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x410041, 0x38) r3 = accept4$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10, 0x800) recvmsg(r0, &(0x7f00000029c0)={&(0x7f0000000840)=@l2, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000240)=""/122, 0x7a}, 0x2061) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x0, @multicast1, 0x4e21, 0x3, 'nq\x00', 0x2c, 0x200, 0x1}, 0x2c) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x7}, 0x8) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000200)) 13:05:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) getdents64(0xffffffffffffffff, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/156, 0x9c) 13:05:30 executing program 2: unshare(0x20400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0xffffffffffffffff}, 0x30) process_vm_writev(r0, &(0x7f00000000c0), 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/48, 0x30}, {&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000000300)=""/132, 0x84}, {&(0x7f00000003c0)=""/117, 0x75}], 0x5, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x200000, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{&(0x7f00000004c0)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/211, 0xd3}], 0x1, &(0x7f0000000640)=""/145, 0x91}, 0x40000000000001}], 0x1, 0x10000, &(0x7f0000000700)) sendmmsg(r1, &(0x7f0000005c00), 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000000)=0x7) 13:05:30 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) r4 = geteuid() r5 = getegid() getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=0x0, &(0x7f0000000480)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r6, 0x400, 0x3ff}, 0xc) r7 = geteuid() write$P9_RSTATu(r3, &(0x7f0000000300)={0x8c, 0x7d, 0x1, {{0x0, 0x66, 0x5, 0x8, {0x20, 0x2, 0x6}, 0x40000000, 0x0, 0x2, 0x3, 0x11, '/dev/dlm-control\x00', 0xc, 'nodev+cgroup', 0x11, '/dev/dlm-control\x00', 0x5, 'syz1\x00'}, 0x11, '/dev/dlm-control\x00', r4, r5, r7}}, 0x8c) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 13:05:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) getdents64(0xffffffffffffffff, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/156, 0x9c) 13:05:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x7fe, 0x2000802) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000000)={0x5, 0x401, 0x9bb5, 0x5, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000300)) write$9p(r1, &(0x7f0000000080)="33b5ea52fb5e0ff9795f3c9190e469a9192b2028e274039fc4d1ee07098b4f935257b9e6f9c289dfc5e4dad031cf6f85888320884591d714e4380e4fb23cca1d916138cf89dd19662adbd83b151f03188b3929248f6a91741abf09e51c710d055c163f81f873f77b7371bd6f94ae7e5fa5d1776ff707a83182d7456c6ce14b05c3864662398e65bebbdc41d044a9149efda2e1ae3289f8451624509e47f5c0a9829e99", 0xa3) ioctl$TIOCCBRK(r1, 0x5428) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) write$FUSE_OPEN(r1, &(0x7f0000000280)={0x20}, 0x20) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x4000, 0x0) select(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x1, 0x9, 0x10001, 0x2d2, 0xf0, 0x2}, &(0x7f0000000200)={0x5, 0x401, 0x4, 0x5, 0x3c, 0x7, 0x6, 0x7131}, &(0x7f0000000240)={0x4, 0x3, 0xffff, 0x0, 0x3, 0x261c, 0x7, 0x1}, &(0x7f00000002c0)={0x77359400}) r2 = getpgid(0xffffffffffffffff) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000180)=r2) 13:05:30 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:31 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:31 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:31 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:31 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:31 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) r4 = geteuid() r5 = getegid() getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=0x0, &(0x7f0000000480)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r6, 0x400, 0x3ff}, 0xc) r7 = geteuid() write$P9_RSTATu(r3, &(0x7f0000000300)={0x8c, 0x7d, 0x1, {{0x0, 0x66, 0x5, 0x8, {0x20, 0x2, 0x6}, 0x40000000, 0x0, 0x2, 0x3, 0x11, '/dev/dlm-control\x00', 0xc, 'nodev+cgroup', 0x11, '/dev/dlm-control\x00', 0x5, 'syz1\x00'}, 0x11, '/dev/dlm-control\x00', r4, r5, r7}}, 0x8c) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 13:05:31 executing program 0: fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:31 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:31 executing program 0: fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:31 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:31 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:32 executing program 0: fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:32 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) r4 = geteuid() r5 = getegid() getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=0x0, &(0x7f0000000480)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r6, 0x400, 0x3ff}, 0xc) r7 = geteuid() write$P9_RSTATu(r3, &(0x7f0000000300)={0x8c, 0x7d, 0x1, {{0x0, 0x66, 0x5, 0x8, {0x20, 0x2, 0x6}, 0x40000000, 0x0, 0x2, 0x3, 0x11, '/dev/dlm-control\x00', 0xc, 'nodev+cgroup', 0x11, '/dev/dlm-control\x00', 0x5, 'syz1\x00'}, 0x11, '/dev/dlm-control\x00', r4, r5, r7}}, 0x8c) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:32 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:32 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:32 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:32 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) r4 = geteuid() r5 = getegid() getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=0x0, &(0x7f0000000480)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r6, 0x400, 0x3ff}, 0xc) r7 = geteuid() write$P9_RSTATu(r3, &(0x7f0000000300)={0x8c, 0x7d, 0x1, {{0x0, 0x66, 0x5, 0x8, {0x20, 0x2, 0x6}, 0x40000000, 0x0, 0x2, 0x3, 0x11, '/dev/dlm-control\x00', 0xc, 'nodev+cgroup', 0x11, '/dev/dlm-control\x00', 0x5, 'syz1\x00'}, 0x11, '/dev/dlm-control\x00', r4, r5, r7}}, 0x8c) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:32 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:32 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:33 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) r4 = geteuid() r5 = getegid() getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=0x0, &(0x7f0000000480)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r6, 0x400, 0x3ff}, 0xc) r7 = geteuid() write$P9_RSTATu(r3, &(0x7f0000000300)={0x8c, 0x7d, 0x1, {{0x0, 0x66, 0x5, 0x8, {0x20, 0x2, 0x6}, 0x40000000, 0x0, 0x2, 0x3, 0x11, '/dev/dlm-control\x00', 0xc, 'nodev+cgroup', 0x11, '/dev/dlm-control\x00', 0x5, 'syz1\x00'}, 0x11, '/dev/dlm-control\x00', r4, r5, r7}}, 0x8c) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) 13:05:33 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:33 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:33 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/156, 0x9c) 13:05:33 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:33 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(0x0, 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:33 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/156, 0x9c) 13:05:33 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(0x0, 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:33 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/156, 0x9c) 13:05:33 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) r4 = geteuid() r5 = getegid() getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=0x0, &(0x7f0000000480)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r6, 0x400, 0x3ff}, 0xc) r7 = geteuid() write$P9_RSTATu(r3, &(0x7f0000000300)={0x8c, 0x7d, 0x1, {{0x0, 0x66, 0x5, 0x8, {0x20, 0x2, 0x6}, 0x40000000, 0x0, 0x2, 0x3, 0x11, '/dev/dlm-control\x00', 0xc, 'nodev+cgroup', 0x11, '/dev/dlm-control\x00', 0x5, 'syz1\x00'}, 0x11, '/dev/dlm-control\x00', r4, r5, r7}}, 0x8c) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) 13:05:33 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(0x0, 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:34 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:34 executing program 2: r0 = open(0x0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:34 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) r4 = geteuid() r5 = getegid() getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=0x0, &(0x7f0000000480)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r6, 0x400, 0x3ff}, 0xc) r7 = geteuid() write$P9_RSTATu(r3, &(0x7f0000000300)={0x8c, 0x7d, 0x1, {{0x0, 0x66, 0x5, 0x8, {0x20, 0x2, 0x6}, 0x40000000, 0x0, 0x2, 0x3, 0x11, '/dev/dlm-control\x00', 0xc, 'nodev+cgroup', 0x11, '/dev/dlm-control\x00', 0x5, 'syz1\x00'}, 0x11, '/dev/dlm-control\x00', r4, r5, r7}}, 0x8c) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) 13:05:34 executing program 2: r0 = open(0x0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:34 executing program 2: r0 = open(0x0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:34 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) r4 = geteuid() r5 = getegid() getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=0x0, &(0x7f0000000480)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r6, 0x400, 0x3ff}, 0xc) r7 = geteuid() write$P9_RSTATu(r3, &(0x7f0000000300)={0x8c, 0x7d, 0x1, {{0x0, 0x66, 0x5, 0x8, {0x20, 0x2, 0x6}, 0x40000000, 0x0, 0x2, 0x3, 0x11, '/dev/dlm-control\x00', 0xc, 'nodev+cgroup', 0x11, '/dev/dlm-control\x00', 0x5, 'syz1\x00'}, 0x11, '/dev/dlm-control\x00', r4, r5, r7}}, 0x8c) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:34 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:35 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) geteuid() getegid() getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=0x0, &(0x7f0000000480)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r4, 0x400, 0x3ff}, 0xc) geteuid() ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:35 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:35 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:35 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:35 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) geteuid() getegid() getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=0x0, &(0x7f0000000480)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r4, 0x400, 0x3ff}, 0xc) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:35 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:35 executing program 3: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) r4 = geteuid() r5 = getegid() getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=0x0, &(0x7f0000000480)=0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r6, 0x400, 0x3ff}, 0xc) r7 = geteuid() write$P9_RSTATu(r3, &(0x7f0000000300)={0x8c, 0x7d, 0x1, {{0x0, 0x66, 0x5, 0x8, {0x20, 0x2, 0x6}, 0x40000000, 0x0, 0x2, 0x3, 0x11, '/dev/dlm-control\x00', 0xc, 'nodev+cgroup', 0x11, '/dev/dlm-control\x00', 0x5, 'syz1\x00'}, 0x11, '/dev/dlm-control\x00', r4, r5, r7}}, 0x8c) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:36 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0x0, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:36 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) 13:05:36 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) geteuid() getegid() getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000440), &(0x7f0000000480)=0x4) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0x0, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0x0, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:36 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) [ 301.559852] IPVS: ftp: loaded support on port[0] = 21 13:05:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x0) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:36 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/156, 0x9c) [ 301.901240] chnl_net:caif_netlink_parms(): no params data found 13:05:37 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) geteuid() getegid() ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) [ 302.082491] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.089084] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.097703] device bridge_slave_0 entered promiscuous mode [ 302.206612] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.213424] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.221997] device bridge_slave_1 entered promiscuous mode [ 302.304518] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 302.318346] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 302.366357] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 302.375331] team0: Port device team_slave_0 added [ 302.382107] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 302.390885] team0: Port device team_slave_1 added [ 302.415908] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 302.432886] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 302.547138] device hsr_slave_0 entered promiscuous mode [ 302.564895] device hsr_slave_1 entered promiscuous mode [ 302.623692] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 302.631280] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 302.663182] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.669744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.677082] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.683700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.776193] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 302.782417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.798443] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 302.815082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.824817] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.833768] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.846559] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 302.866198] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 302.872403] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.888045] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 302.895352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.905441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.913772] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.920268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.939606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 302.947007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.957318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.965673] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.972241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.986523] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 302.993969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 303.011299] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 303.019815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 303.041269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 303.048984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.058295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.077100] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 303.087905] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.096321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.105578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.126254] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 303.138890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.149943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.167437] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 303.177751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.186378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.199211] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 303.205428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.230670] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 303.250452] 8021q: adding VLAN 0 to HW filter on device batadv0 13:05:38 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000001000)='/dev/midi#\x00', 0x200, 0x81) syz_open_dev$midi(0x0, 0x0, 0x202) close(r0) 13:05:38 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x0) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:38 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/156, 0x9c) 13:05:38 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) geteuid() ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:38 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x0) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:38 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:05:39 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000100)="ec", 0x1) r2 = epoll_create(0x16) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000340)) sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000040)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000001500)=[{&(0x7f0000000080)="f6d1b19e28c047121e641133dc90e5b0b916", 0x12}, {&(0x7f0000000200)="5d4f79fc3b44f41118ebc29ea0e85d0c5b2ec3bf88b38acb7be830f1b348c50b15d2948e51fa49f711b1beed8340e979e81f45a874f649a3daaef73a3069809b81f679a5", 0x44}, {&(0x7f0000000280)="9b2e77bfb5a6a949880e57db8075e23ac69e66dbd28794ece54c2f881724d3223fe60b53278e19c932c16a7747a8511ade95819785790be3fa46c9fd0ffafee0dcbfb6", 0x43}, {&(0x7f0000000380)="ce3565e2a275037aa78852c7f3654102b259598d472d6516e95c2cbc3007cc3156b4d7fd8282f246ab9b74c3128ddfca832257d39f3a77078ead254a1f63fb3515985cff1518ffcb05f577e91ffd5bd3dc428b3810ecc1803f45298dc818993cb09600fba067d09ee0eba156351cf5947199cc96ece0bedbfb519c2a1dae0c2e963a942daa259d6f92635d64bd76dedcab6f487ddf9be22a9c5644ed9d57359513c0528ba91025e34a1f483eddf50109c86b8c648098f6bc7bfbc7b245bc016deae4520f09917c2121977576a63c037a386941b211ef410da3b51a", 0xdb}, {&(0x7f00000000c0)="36c12ccae561abd2f25466db517ba0b3859f", 0x12}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="f2f7484d8f22e1759b0f990c461440c341c0d4a3c27b8644394db34959bf9f3b871ddde1d02a722a50951ccd1f9093da6ab253c0b27c93c5ee5baa4312ce9bd95a7edf6953a85a79825768463eba7e6f77f317fec597e47bb0eb725e7175ecb426549752897120748922", 0x6a}], 0x7, 0x0, 0x0, 0x40004}, 0x40) poll(&(0x7f0000000140)=[{r0}, {r2, 0x1}], 0x2, 0xfffffffffffffffb) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 13:05:39 executing program 2 (fault-call:3 fault-nth:0): r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:05:39 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:39 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) 13:05:39 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:39 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:39 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 13:05:39 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:39 executing program 2: socketpair(0x3, 0x5, 0x8000, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x706, &(0x7f0000000100)=0x4) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000140)=0xc) getdents(r1, &(0x7f00000003c0)=""/181, 0xb487ab256a9ff575) getdents(r1, 0x0, 0x0) 13:05:39 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, 0x0, 0x0) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:40 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 13:05:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, 0x0, 0x0) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:40 executing program 3: socketpair(0x3, 0x5, 0x8000, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x706, &(0x7f0000000100)=0x4) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000140)=0xc) getdents(r1, &(0x7f00000003c0)=""/181, 0xb487ab256a9ff575) getdents(r1, 0x0, 0x0) 13:05:40 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000136000/0x4000)=nil, 0x4000}, 0x9}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, 0x0, 0x0) getdents(r1, &(0x7f0000000180)=""/156, 0x9c) 13:05:40 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000140)={0x2, 0x0, @raw_data=[0x6, 0x2, 0x3f, 0x5, 0x800, 0x7fffffff, 0xfffffffffffff466, 0x9, 0x8, 0x7fffffff, 0x2, 0x10001, 0x3, 0x3, 0x7fffffff]}) getdents(r0, 0x0, 0x0) 13:05:40 executing program 3: socketpair(0x3, 0x5, 0x8000, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x706, &(0x7f0000000100)=0x4) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000140)=0xc) getdents(r1, &(0x7f00000003c0)=""/181, 0xb487ab256a9ff575) getdents(r1, 0x0, 0x0) 13:05:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(0xffffffffffffffff, &(0x7f0000000180)=""/156, 0x9c) 13:05:40 executing program 2: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x20) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:05:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:05:40 executing program 3: socketpair(0x3, 0x5, 0x8000, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x706, &(0x7f0000000100)=0x4) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000140)=0xc) getdents(r1, &(0x7f00000003c0)=""/181, 0xb487ab256a9ff575) getdents(r1, 0x0, 0x0) 13:05:40 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:05:40 executing program 0 (fault-call:6 fault-nth:0): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:05:40 executing program 3: socketpair(0x3, 0x5, 0x8000, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x706, &(0x7f0000000100)=0x4) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000140)=0xc) getdents(r1, &(0x7f00000003c0)=""/181, 0xb487ab256a9ff575) 13:05:41 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) openat$vhci(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhci\x00', 0x4000) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) quotactl(0xfffffffffffffffb, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000001c0)="6cf10a194f5bbdd3b853be51cdda1943ab8081c9986d14fe21a7ab75019a6cfba5e63e2d66a99ac4564abc9c0e74fc4e4a33a90f0cee5704579d46d6e23592560a68c7b94800b02ff414208c2a912b41f6f8340146d146070f6ffb613efd9c3504b62e632534ed81982ee8fc2077bb149096a2e3d38ddb98ca67b37725e5d67823f085e7de94b6bdbcdb23a5ecbf45ce5d9dbda3a0e9494f467e46103123f6dcaf0b67bed0eb927695104ce45a420f9363dcbbed7ad40e06c518171d1b0267a6e745c82f8b398973c4dda52bc2634f6b5c223fbe4ab0647060a246033bad1953df82a6e482120dac26cacaaa3c486d805187a96b94ca71fffc6623") 13:05:41 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000280)={0x0, 0x9, 0x400, &(0x7f0000000240)=0x80000001}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:41 executing program 3: socketpair(0x3, 0x5, 0x8000, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x706, &(0x7f0000000100)=0x4) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) getsockname$netlink(r1, &(0x7f0000000000), &(0x7f0000000140)=0xc) 13:05:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0xffffff3f) 13:05:41 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="a6396748ec6b4940e135a60cf2a7c0bb90b7ad8d849b874756e86ecb878bced26b446d11128218f4fd6136f3b920aba0817126f5e6cf2f760e0c2bedfc630173f6a67a4101b85bb75670b742e4651e5e9a0647154ed3bdd24199ed7c982dfe80b8ed29a4ec828c71ef8d5aa44e0e7395cca5058f1d2c445c8396b3ae271de997e22e5521d9", @ANYRES16=r1, @ANYBLOB="000327bd7000fedbdf25010000000000000002410000001000137564703a73797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x20008005) getdents(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f00000001c0)) 13:05:41 executing program 3: socketpair(0x3, 0x5, 0x8000, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x706, &(0x7f0000000100)=0x4) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 13:05:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) fsetxattr$security_smack_entry(r0, &(0x7f0000000140)='security.SMACK64IPIN\x00', &(0x7f0000000180)='./cgroup.cpu\x00', 0xd, 0x1) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:05:41 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:05:41 executing program 3: socketpair(0x3, 0x5, 0x8000, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x706, &(0x7f0000000100)=0x4) lseek(0xffffffffffffffff, 0x0, 0x4) 13:05:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x60400, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000140)=0x7) getdents(r1, 0x0, 0x0) 13:05:41 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/4096, 0x1000) 13:05:42 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:05:42 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:42 executing program 3: socketpair(0x3, 0x5, 0x8000, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x706, &(0x7f0000000100)=0x4) lseek(0xffffffffffffffff, 0x0, 0x4) 13:05:42 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) getdents(r0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x6, 0xfffffffffffffff9}) 13:05:42 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x3f}) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, 0x0, 0xfffffee0) 13:05:42 executing program 3: socketpair(0x3, 0x5, 0x8000, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x706, &(0x7f0000000100)=0x4) lseek(0xffffffffffffffff, 0x0, 0x4) 13:05:42 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x6, 0xbb, 0x1, 0x40, 0x3, 0x3, 0x10000, 0x334, 0x38, 0x36, 0xd9e, 0x800, 0x20, 0x1, 0x0, 0x4, 0x2}, [{0x70000007, 0x1, 0x3, 0xffffffffffffff7f, 0x7, 0xffffffff80000001, 0xfe, 0x400}, {0x70000000, 0x4, 0x10000, 0xff0, 0x6, 0x4, 0x5b, 0xbdd8}], "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", [[], [], [], [], [], [], []]}, 0x1778) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) get_mempolicy(&(0x7f0000000180), &(0x7f00000001c0), 0x7fffffff, &(0x7f0000ffa000/0x4000)=nil, 0x1) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) mknodat(r0, &(0x7f0000001980)='./file0\x00', 0x60, 0x4) 13:05:42 executing program 3: socketpair(0x3, 0x5, 0x8000, &(0x7f0000000180)) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 13:05:42 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) rt_sigprocmask(0x100002, &(0x7f00000001c0)={0xffffffff00000002}, &(0x7f0000000200), 0x8) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:05:42 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000140)="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") getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:05:42 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:42 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 13:05:43 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0xfffffffffffffea4) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r1}) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000001c0)={'nr0\x00', 0x100000001}) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="13000006000500000030300000000000000000"], 0x13) 13:05:43 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="63980ec02c3d", 0x6, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate(0xc, r1, &(0x7f00000001c0)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'selfwlan1mime_type@eth0)self'}, 0x34, r2) ptrace$peekuser(0x3, 0xffffffffffffffff, 0xfffffffffffffffe) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:05:43 executing program 3: r0 = open(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x4) 13:05:43 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:05:43 executing program 2: socketpair(0x1b, 0x5, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$l2tp(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @multicast1}, 0x0, 0x1, 0x2, 0x4}}, 0x2e) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) socketpair(0x3, 0x3, 0x800, &(0x7f0000000140)) getdents(r1, 0x0, 0x0) 13:05:43 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:43 executing program 3: r0 = open(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x4) 13:05:43 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='.\x92cd\xb0oupc(.\r', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:05:43 executing program 3: r0 = open(0x0, 0x0, 0x0) lseek(r0, 0x0, 0x4) 13:05:43 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x1000000000000, 0xfffffffffffffffc) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001740)='/proc/capi/capi20ncci\x00', 0x800, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000001780)={0xffff, {{0xa, 0x4e20, 0x8d9, @mcast1}}}, 0x88) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) pipe2$9p(&(0x7f0000000280), 0x80800) r3 = memfd_create(&(0x7f0000000200)='\x00^\xcc\xb2\xd3\xab\x04O\x8d\x9f\xd1\x8d\x0e\xfa\xd0\x00\x06\x00\x00\x00\x00\x00\x00\x10', 0x0) write$binfmt_script(r3, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000002c0)={r4, 0x8}, &(0x7f0000000300)=0x8) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x800000000001000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x80010, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000340)={@loopback, @multicast2, 0x0}, &(0x7f0000000380)=0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@gettfilter={0x54, 0x2e, 0x801, 0x70bd27, 0x25dfdbfc, {0x0, r5, {0xffe0}, {0xffff, 0xffff}, {0xf, 0xfff7}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x80000001}, {0x8, 0xb, 0x7f}, {0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20\x00', 0x2080, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x5) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000001c0)) 13:05:43 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x6b, 0x6, 0xffffffffffffffe1, "19eaf0bd74c4b462bc10cc7f5b21807e", "9215c6e339de43fb6fcc870f0ebdccd18912918876f038eae939524721973ffac6dde88ccda65c8c190494178d76dc7850a2ce5958150c3db3e97f38241bdaf639d66f3ac7208c285554e6b009ce358fdb2235f55a20"}, 0x6b, 0x2) getdents(r1, 0x0, 0x0) 13:05:44 executing program 3: open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) 13:05:44 executing program 0: syz_open_dev$sndpcmc(&(0x7f0000000280)='/dev/snd/pcmC#D#c\x00', 0x0, 0x103000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = accept$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000180)={0x649eb8bf, 0x6, 0x7}, 0xc) r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x8, 0x10000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000200)={{0x2, 0x3}, {0xffffffffb1edc9df, 0x8}, 0x7f, 0x2, 0x8001}) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000340)=""/79, 0x4f) getdents(r3, &(0x7f0000000080)=""/181, 0xb5) getdents(r3, 0x0, 0xffffffffffffffab) 13:05:44 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:44 executing program 3: open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) 13:05:44 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000300)) socket$netlink(0x10, 0x3, 0x6) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500), 0x1000000000000103) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8000000003, 0x400000000032, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000015) getdents(r1, 0x0, 0x0) 13:05:44 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:44 executing program 3: open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) 13:05:44 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000140)=""/237) 13:05:44 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 13:05:44 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:49 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x2, 0x4) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x36, 0x8, "3da5d835e2e8286d28e8f3e1a238e4a120910729aa7485021043ea20962a1eac4ae29fc11d6d89b5172bc7cb3fb7"}, &(0x7f0000000180), 0x1400) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:05:49 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:49 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 13:05:49 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:05:49 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000300)) socket$netlink(0x10, 0x3, 0x6) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x0, 0x0) readv(r3, &(0x7f0000000500), 0x1000000000000103) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x8000000003, 0x400000000032, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000015) getdents(r1, 0x0, 0x0) 13:05:49 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000140)="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") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0xc2a) fchdir(r1) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f00000002c0)={[0x0, 0x100000, 0x0, 0x7000], 0xe, 0x1, 0xff}) getdents64(r3, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r3, 0xfffffffffffffffc, 0x1) getdents(r3, &(0x7f0000000080)=""/181, 0xb5) getdents(r3, 0x0, 0x0) 13:05:49 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) 13:05:49 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) prctl$PR_GET_NO_NEW_PRIVS(0x27) getdents(r0, 0x0, 0x0) 13:05:49 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='.\x00', 0x1, 0x10000000002) r2 = getpgrp(0x0) r3 = getpid() setpgid(r2, r3) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000200)={0x4, 0x0, [{0x7ff, 0x0, 0x20}, {0x3decf1b6}, {0x0, 0x0, 0x2}, {0x2, 0x0, 0x7}]}) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x400040, 0x0) getdents(r4, 0x0, 0x36) 13:05:49 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000400)={0x3f, 0x7a, 0x80000000, 0xa85, 0x1a, 0x3, 0x6, 0x2, 0x8, 0x6, 0x2, 0x7}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:49 executing program 3 (fault-call:1 fault-nth:0): r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 13:05:49 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000000)) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x54) 13:05:50 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x100) lseek(r0, 0x0, 0x4) modify_ldt$read_default(0x2, &(0x7f0000000080)=""/206, 0xce) 13:05:50 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x200081, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:50 executing program 0: r0 = syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x7fff, 0x800) fstat(r0, &(0x7f00000000c0)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r2, 0xfffffffffffffffc, 0x1) getdents(r2, &(0x7f00000002c0)=""/181, 0xfffffffffffffec8) getdents(r2, 0x0, 0x0) [ 315.457847] IPVS: ftp: loaded support on port[0] = 21 [ 315.703754] chnl_net:caif_netlink_parms(): no params data found [ 315.800588] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.807210] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.815920] device bridge_slave_0 entered promiscuous mode [ 315.827661] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.834304] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.842911] device bridge_slave_1 entered promiscuous mode [ 315.881334] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 315.896018] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 315.939033] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 315.948016] team0: Port device team_slave_0 added [ 315.956779] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 315.965693] team0: Port device team_slave_1 added [ 315.972379] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 315.984222] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 316.127393] device hsr_slave_0 entered promiscuous mode [ 316.382576] device hsr_slave_1 entered promiscuous mode [ 316.575238] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 316.585732] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 316.618856] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.625470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.632697] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.639308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.737895] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.747915] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.776746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.793663] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 316.808854] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 316.815727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 316.823742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.847901] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 316.854150] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.871204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 316.880225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 316.889094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.897555] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.904138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.921495] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 316.937144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 316.946451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 316.955283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.963696] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.970159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.984127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.996838] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 317.004186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 317.020221] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 317.029745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 317.038158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 317.053104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 317.060037] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 317.069037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 317.078408] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.093504] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 317.100838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 317.109780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.125157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 317.132134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.140436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.154089] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 317.160131] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 317.180239] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 317.195255] 8021q: adding VLAN 0 to HW filter on device batadv0 13:05:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000240), 0x4) 13:05:52 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000140)=[0x1, 0x10001]) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:05:52 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000100)=""/172, 0xac) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:52 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0xfffffffffffffd95) 13:05:52 executing program 3: socket$pppoe(0x18, 0x1, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x81, 0x3, 0x3, 0x1000000007, 0x16, 0x10, 0x37, 0x5, 0x100000001, 0x6de}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x8001005, 0x200, 0x1}) lseek(r0, 0x0, 0x3) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 13:05:52 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x100, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0xfff, 0x4919, 0x1, 0x3b9, 0x101, 0x80000000, 0x7, {0x0, @in6={{0xa, 0x4e23, 0x8, @mcast1}}, 0xffff, 0x3, 0xf9, 0x0, 0x8001}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x6}, &(0x7f0000000200)=0x8) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000240)=r0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000280)=0xffe, &(0x7f00000002c0)=0x2) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000300)=0x507c) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0xb) ioctl$VT_DISALLOCATE(r0, 0x5608) pread64(r0, &(0x7f00000003c0)=""/245, 0xf5, 0x0) r4 = socket$inet6(0xa, 0x8000f, 0x7) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={r1, 0x1}, 0x8) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000500)=""/240) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000640)={r5, r6/1000+30000}, 0x10) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000680)) fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) write$FUSE_CREATE_OPEN(r0, &(0x7f00000007c0)={0xa0, 0xfffffffffffffff5, 0x1, {{0x6, 0x1, 0xd8d0, 0x80000000, 0x6, 0x4, {0x0, 0x80000001, 0x7aa7fe2c, 0x9, 0x40000000000, 0x8, 0x7, 0x8, 0x5, 0x100, 0x7, r7, r8, 0xffffffffffffff01, 0xa20b}}, {0x0, 0x2}}}, 0xa0) write$P9_RLERROR(r0, &(0x7f0000000880)={0x9, 0x7, 0x1}, 0x9) sendfile(r4, r4, &(0x7f00000008c0), 0x87f) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000900)={r2, 0x2, 0x30}, &(0x7f0000000940)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000980)={r9, 0x6, 0x5, 0x5, 0x90, 0x1, 0x100000001, 0x3d7c, {r3, @in={{0x2, 0x4e23, @local}}, 0xfffffffffffffffa, 0x3, 0x401, 0x5, 0x5}}, &(0x7f0000000a40)=0xb0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000a80)={r2, 0x100000001}, 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000ac0)={0x6, [0x3, 0x1, 0x29f, 0x3, 0x290, 0x1]}, 0x10) prctl$PR_GET_SECUREBITS(0x1b) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000b00)={0x5, 0x6, 0xf3, 0x2612, 0xfffffffffffffeff}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000b40)={0x4, 0x355899fd, 0x5, 0x8, 0xb34f, 0x3ff}) r10 = shmget$private(0x0, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT(r10, 0xd, &(0x7f0000000b80)=""/188) 13:05:52 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x100, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@rand_addr="6fcf2552d5e36dae5d189f3d217a82f0", @rand_addr="952940f5501a9c378af8aa5a6fbe1902", @mcast2, 0x5cb6c1fa, 0x1f, 0x6, 0x100, 0x3, 0x480100, r2}) 13:05:52 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000000)={0x4, 0xf02e, 0xe1f, 0x5, 0x6}) getdents(r0, 0x0, 0x0) 13:05:52 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x400, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10100, 0x0) 13:05:52 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000240), 0x4) 13:05:53 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$getflags(r0, 0x408) lseek(r0, 0x0, 0x6) 13:05:53 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x18) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:05:53 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000240), 0x4) 13:05:53 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:05:53 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) lseek(r0, 0x0, 0x4) 13:05:53 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) [ 318.769741] IPVS: ftp: loaded support on port[0] = 21 [ 318.919294] chnl_net:caif_netlink_parms(): no params data found [ 318.967409] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.973981] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.981502] device bridge_slave_0 entered promiscuous mode [ 318.990560] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.997254] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.005561] device bridge_slave_1 entered promiscuous mode [ 319.030103] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 319.040306] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 319.069589] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 319.077689] team0: Port device team_slave_0 added [ 319.084203] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 319.092663] team0: Port device team_slave_1 added [ 319.098424] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 319.106567] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 319.174597] device hsr_slave_0 entered promiscuous mode [ 319.212709] device hsr_slave_1 entered promiscuous mode [ 319.253136] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 319.260312] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 319.281310] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.287768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.294947] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.301404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.412643] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 319.418738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.432504] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 319.444971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.455523] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.463710] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.472574] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 319.487185] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 319.493402] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.504767] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.514797] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.521290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.535605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.544091] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.550576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.575708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.585550] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.602311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.623302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.631614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.645893] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 319.652132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 319.674682] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 319.689771] 8021q: adding VLAN 0 to HW filter on device batadv0 13:05:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x200000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r1) socket$kcm(0xa, 0x2, 0x73) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x8, 0x0) close(r1) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="fc", 0x1}], 0x1, 0x0) 13:05:55 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140)=0x61f1, 0x4) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) lseek(r0, 0x0, 0x0) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) 13:05:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x0, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x20, @hyper}, 0x10, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000000c0)) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080)=0x100000001, 0x4) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000100)={0x8000, 0x3, "abe3329533427a32d2c9869a41c0220e8aaa01855685c9bab821bba129bcf6d8", 0x7, 0x401, 0x2, 0xffff, 0x200}) 13:05:55 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="0950cdcb957d9be65e98ae0cc6ef2ef612907bb922236cc9d5cf4e22f55b3785083786c60d4d73e40cd1c5601cb4acf0736008e9cdadffad1ab487b04e37424659ac924cc012c4eaa4a43f2b983fd2034da4b45f64e1a41718484d8fdc3e9286a781f1c540a9b4e9c03fa6fc969219cddba86897ebdaa9b88b56f5aefea66eeb5942305116f291b7c9bac96199654011074eab55c2b25ef6da9816509b6ad7242b43b68b6179b762c64b68b447f779a01d26ee5762a51c9ec3b13af3554f230a22f26444f79eb38045ec76d37edd8e6f4e3dd52bcbfefa947a88d986dfa207d1b5072baf50af", 0xe6}], 0x1, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:05:55 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000240), 0x4) 13:05:55 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:55 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @initdev}, &(0x7f0000000200)=0xc) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000240)={@broadcast, @local, 0x0}, &(0x7f0000000280)=0xc) recvmmsg(r1, &(0x7f0000002040)=[{{&(0x7f0000000300)=@ax25={{0x3, @bcast}, [@netrom, @null, @bcast, @remote, @bcast, @rose, @default]}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000440)=""/95, 0x5f}, {&(0x7f00000004c0)=""/87, 0x57}], 0x3}, 0x1}, {{&(0x7f0000000580)=@xdp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/199, 0xc7}, {&(0x7f0000000700)=""/101, 0x65}, {&(0x7f0000000780)=""/116, 0x74}, {&(0x7f0000000800)=""/25, 0x19}, {&(0x7f0000000840)=""/104, 0x68}, {&(0x7f00000008c0)=""/215, 0xd7}], 0x6, &(0x7f0000000a40)=""/190, 0xbe}, 0x1}, {{&(0x7f0000000b00)=@nl=@proc, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b80)=""/185, 0xb9}], 0x1, &(0x7f0000000c80)=""/195, 0xc3}, 0x8}, {{&(0x7f0000000d80)=@pppol2tpin6, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000e00)=""/16, 0x10}, {&(0x7f0000000e40)=""/199, 0xc7}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000001040)=""/52, 0x34}, {&(0x7f0000001080)=""/76, 0x4c}, {&(0x7f0000001100)=""/198, 0xc6}, {&(0x7f0000001200)=""/132, 0x84}], 0x7, &(0x7f0000001340)=""/240, 0xf0}, 0x8}, {{&(0x7f0000001440)=@sco, 0x80, &(0x7f0000001600)=[{&(0x7f00000014c0)=""/112, 0x70}, {&(0x7f0000001540)=""/174, 0xae}, {&(0x7f0000001740)=""/251, 0xfb}, {&(0x7f0000001840)=""/253, 0xfd}], 0x4}, 0x7ff}, {{&(0x7f0000001640)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001940)=""/219, 0xdb}, {&(0x7f0000001a40)=""/129, 0x81}, {&(0x7f0000001b00)=""/181, 0xb5}], 0x3}, 0x745}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001c00)=""/49, 0x31}], 0x1}, 0x3}, {{&(0x7f0000001c80)=@nfc_llcp, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)=""/87, 0x57}, 0x7f}, {{&(0x7f0000001dc0)=@vsock, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001e40)=""/213, 0xd5}], 0x1, &(0x7f0000001f80)=""/184, 0xb8}, 0x635f}], 0x9, 0x10022, &(0x7f0000002280)) accept4$packet(r1, &(0x7f00000022c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002300)=0x14, 0x80000) getsockname$packet(r1, &(0x7f0000002340)={0x11, 0x0, 0x0}, &(0x7f0000002380)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000023c0)={@broadcast, @dev, 0x0}, &(0x7f0000002400)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002440)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000025c0)={'vcan0\x00', 0x0}) accept4$packet(r1, &(0x7f0000002640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002680)=0x14, 0x80000) getsockname(r1, &(0x7f00000026c0)=@hci={0x1f, 0x0}, &(0x7f0000002740)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002780)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002840)={0x0, @dev, @dev}, &(0x7f0000002880)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000028c0)={'bond_slave_1\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000002900)={@rand_addr, @multicast1, 0x0}, &(0x7f0000002940)=0xc) getpeername$packet(r1, &(0x7f0000003fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004000)=0x14) accept$packet(r1, &(0x7f0000004040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004080)=0x14) accept4$packet(r1, &(0x7f00000040c0)={0x11, 0x0, 0x0}, &(0x7f0000004100)=0x14, 0x800) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000006940)={@multicast1, @remote, 0x0}, &(0x7f0000006980)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000006c80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000006cc0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000006d40)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000006e40)=0xe8) getsockname(r1, &(0x7f0000006e80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006f00)=0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000006f40)={'bond_slave_0\x00', 0x0}) accept4$packet(r1, &(0x7f0000006f80)={0x11, 0x0, 0x0}, &(0x7f0000006fc0)=0x14, 0x80800) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000078c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8001400}, 0xc, &(0x7f0000007880)={&(0x7f0000007000)=ANY=[@ANYBLOB='t\b\x00\x00', @ANYRES16=r2, @ANYBLOB="240a29bd7000ffdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="b00002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r5, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c000400070006080400000008000100", @ANYRES32=r6, @ANYBLOB="3c0002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="cc02020040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000300000008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000500000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000300000008000600", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400ff01000008000100", @ANYRES32=r14, @ANYBLOB="f80002003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="400001002400019aaa72938b6a696adf737461747300000000000000000000000000000000000000080003000b000000080004000500000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB="2401020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040001000100080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040005000000080007000000000064000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b000000340004003f97ff07010000001f000800050000000400020805000000590a00ff0500000000000100da00000001008100080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="8c0002004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r20, @ANYBLOB="8401020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000500000008000600", @ANYRES32=r21, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000600000008000600", @ANYRES32=r22, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004001f00000008000600", @ANYRES32=r23, @ANYBLOB="400001002400010071756575655f696400000000000000000000000000000000000000000000000008000300030000000800040000feffff08000600", @ANYRES32=r24, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000800000008000600", @ANYRES32=r25, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000000000008000600", @ANYRES32=r26], 0x874}, 0x1, 0x0, 0x0, 0x810}, 0xc004) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:05:55 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x1}, 0x50) open(&(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) rmdir(&(0x7f00000003c0)='./file0/file1\x00') write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/file1/file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[], 0x0, 0x0) close(r0) 13:05:56 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/181, 0xb5) getdents(r0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x40, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000080)={r1, 0x1800000000000}) 13:05:56 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:56 executing program 3: r0 = open(&(0x7f0000000000)='\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x10, 0x8) 13:05:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x200000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r1) socket$kcm(0xa, 0x2, 0x73) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x8, 0x0) close(r1) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="fc", 0x1}], 0x1, 0x0) 13:05:56 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @speck128, 0x1, "3c66e6c7c826c613"}) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:05:56 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) getdents(r1, 0x0, 0x0) 13:05:56 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) finit_module(r0, &(0x7f0000000000)='ppp1wlan0\x00', 0x3) lseek(r0, 0x0, 0x4) 13:05:56 executing program 1: r0 = socket$kcm(0x10, 0xe, 0x0) readahead(r0, 0x8, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x200000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r1) socket$kcm(0xa, 0x2, 0x73) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x8, 0x0) close(r1) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="fc", 0x1}], 0x1, 0x0) 13:05:56 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x8) 13:05:56 executing program 1: socket$kcm(0x10, 0xe, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:57 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x1}, 0x50) open(&(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) rmdir(&(0x7f00000003c0)='./file0/file1\x00') write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/file1/file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[], 0x0, 0x0) close(r0) 13:05:57 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0xf587a214562729d7, 0x100) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xf7fffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x13bb065, 0x2, 0x3, 0xffff, 0xf1}, 0x14) 13:05:57 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0xb) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r1, 0xa4, &(0x7f0000000140)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e23, 0x5, @local, 0x8}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e22, 0xf8, @mcast1, 0x7}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x7f, @rand_addr="560ee6f7c55af5975294c62e1e50fa50", 0x125e00}, @in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000240)=0x10) lseek(r0, 0x0, 0x4004) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000280)) 13:05:57 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") socketpair$unix(0x1, 0x200000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r1) socket$kcm(0xa, 0x2, 0x73) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x8, 0x0) close(r1) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="fc", 0x1}], 0x1, 0x0) 13:05:57 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/89, 0x59}, {&(0x7f00000001c0)=""/207, 0xcf}, {&(0x7f00000002c0)=""/229, 0xe5}, {}, {&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/218, 0xda}, {&(0x7f0000000500)=""/247, 0xf7}], 0x7, 0x0) getdents(r0, 0x0, 0x0) 13:05:57 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) close(r0) 13:05:57 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x1}, 0x50) open(&(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) rmdir(&(0x7f00000003c0)='./file0/file1\x00') write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/file1/file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[], 0x0, 0x0) close(r0) 13:05:57 executing program 2: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0xfffffffffffffffc) lseek(r0, 0x0, 0xfffffffffffffffe) getdents64(r0, &(0x7f0000000740)=""/130, 0x82) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000800)='eth1self-bdevsecurity\x00') getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x48, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x3, @rand_addr="a4c12b8e73acd346912fb2276216a638", 0x5}, @in6={0xa, 0x4e23, 0x6, @loopback, 0x4}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10) execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000640)=[&(0x7f0000000480)='IPVS\x00', &(0x7f00000004c0)='IPVS\x00', &(0x7f0000000500)='eth1self-bdevsecurity\x00', &(0x7f0000000540)='IPVS\x00', &(0x7f0000000580)='IPVS\x00', &(0x7f00000005c0)='IPVS\x00', &(0x7f0000000600)='em0vboxnet0\'%\x00'], &(0x7f0000000700)=[&(0x7f0000000680)='IPVS\x00', &(0x7f00000006c0)='IPVS\x00']) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000280)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000200)={r1, 0x10000}, &(0x7f0000000240)=0x8) getdents(r0, 0x0, 0x2b3) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r0, 0xfffffffffffffffc) 13:05:57 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x200000, 0x0) faccessat(r1, &(0x7f0000000180)='./file0\x00', 0x159, 0x700) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000001c0)=0x3) fchdir(r0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x8) getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r2, 0xfffffffffffffffc, 0x1) getdents(r2, &(0x7f0000000080)=""/181, 0xb5) getdents(r2, 0x0, 0x0) 13:05:57 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x4, 0x40) 13:05:57 executing program 1: socket$kcm(0x10, 0xe, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:57 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:05:58 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x1}, 0x50) open(&(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) rmdir(&(0x7f00000003c0)='./file0/file1\x00') write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/file1/file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[], 0x0, 0x0) close(r0) 13:05:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x2}, [{0x2, 0x5, r1}], {0x4, 0x4}, [], {0x10, 0x4}, {0x20, 0x1}}, 0x2c, 0x1) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r2, &(0x7f0000000080)=""/181, 0xb5) getdents(r2, 0x0, 0x0) 13:05:58 executing program 3: r0 = socket(0xa, 0x4, 0x5c) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) quotactl(0x3f, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000000c0)="20c48bee91f52619fdcd23619e26a3c0e7c01702afab53c7aca8ab5e35096d9fbe52dddd623939d529c8e30e9199ebe992485783417cd4520ce3b4a4592073cf") r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x19}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd14f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x0, 0x4) 13:05:58 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='reiserfs\x00', 0x0, &(0x7f0000000200)='./cgroup.cpu\x00') lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:05:58 executing program 1: socket$kcm(0x10, 0xe, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) [ 323.212592] protocol 88fb is buggy, dev hsr_slave_0 [ 323.218413] protocol 88fb is buggy, dev hsr_slave_1 13:05:58 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$sndseq(r1, &(0x7f0000000200)=[{0xff, 0x1f, 0x3, 0xffffffff00000000, @time={r2, r3+30000000}, {0x5, 0x100000000}, {0x2, 0x8}, @raw8={"7f65c79f0849eece7f01059e"}}, {0x4, 0x1, 0x7ff, 0xa000000000, @tick=0x4, {0x5, 0x7}, {0x6, 0x4}, @addr={0x1, 0x10000}}, {0x5, 0x7, 0x0, 0x5c3, @tick=0x1, {0xfffffffffffffff8, 0x1}, {0xb2, 0x4}, @ext={0x60, &(0x7f0000000180)="388780b66f4693a9369c22830934b0e61770ada690899fc508bc2d917552b06aeefe76b0a35aa36970e2e498c1fefa60d25dc34ae360271c0422d79e51f753539667c0f3686e6495f4f4848f3c65a45853c1c691841c2f3106c58de153502a1a"}}], 0x90) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000340)) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) bind$pptp(r1, &(0x7f00000002c0)={0x18, 0x2, {0x2, @local}}, 0x1e) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000380)) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000300)={0x0, 0x947, 0x8, 0x1, 0x10, 0x9, 0x80, 0x3, 0x1, 0x8001}) getdents(r1, 0x0, 0x0) 13:05:58 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x1}, 0x50) open(&(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) rmdir(&(0x7f00000003c0)='./file0/file1\x00') write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/file1/file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[], 0x0, 0x0) close(r0) 13:05:58 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@reserved}) getdents(r0, 0x0, 0x0) 13:05:58 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009905000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005c000002ff0000000600000007000000ffffffffa0131741edcbf29dcf19eec18f52ced64bc77236308cf0b5e7fdc256b3728f5c96a805ebaa940675a37b2ab722cba0fb0b6515e0036e97bd6cc17bfd5517afaa0a4a628b3996fb749e70104c5bbd042e9041fad18952bccc9e8b51eb"], 0x174) 13:05:58 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r2, 0xfffffffffffffffc, 0x1) getdents(r2, &(0x7f0000000080)=""/181, 0xb5) getdents(r2, 0x0, 0x0) 13:05:58 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:58 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000980)) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000940)={0x6, &(0x7f0000000900)=[{0xf1, 0x0, 0x4, 0xffffffff}, {0x40, 0x6, 0xffffffffffffff00, 0xcb9}, {0x8, 0x4, 0x2, 0xff}, {0x2400000, 0xff, 0x7}, {0x847b, 0x4, 0x7, 0x401}, {0x9, 0xf72, 0x1}]}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x7bd) getdents(r0, 0x0, 0x0) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x800}, 0xc) 13:05:59 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 13:05:59 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1002040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f00000001c0)=0x1000800) 13:05:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x1}, 0x50) open(&(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) rmdir(&(0x7f00000003c0)='./file0/file1\x00') write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/file1/file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[], 0x0, 0x0) close(r0) 13:05:59 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./\xe3gJ\x00\x00\x00.net/4\xf1\x7f\xff\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000000)={0x2, 0x7ff, 0x2, 0xe2, 0x101, 0x800}) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) write$P9_RWRITE(r1, &(0x7f0000000140)={0xb, 0x77, 0x1, 0x10000}, 0xb) getdents(r1, 0x0, 0x0) 13:05:59 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='.\xce4\xe0!/cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000300)=""/79, 0xfffffffffffffd34) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x20000, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) lseek(r1, 0x13, 0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) writev(r2, &(0x7f0000000000), 0x0) getdents(r1, 0x0, 0x0) fsetxattr(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2a8eafc81d89a32d76ed89"], &(0x7f0000000140)='.\xce4\xe0!/cgroup.cpu\x00', 0x11, 0x1) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000180)=r1) 13:05:59 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x2) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x1000000) 13:05:59 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x1}, 0x50) open(&(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) rmdir(&(0x7f00000003c0)='./file0/file1\x00') write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/file1/file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[], 0x0, 0x0) close(r0) 13:05:59 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) getpeername(r0, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000000)=0x80) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{r1, r2/1000+30000}, {0x0, 0x2710}}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x0, 0x2}, 0x8) 13:05:59 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:05:59 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x101000, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0x8e, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) fchdir(r0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r2, 0xfffffffffffffffc, 0x1) getdents(r2, &(0x7f0000000080)=""/181, 0xb5) getdents(r2, 0x0, 0x0) 13:05:59 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x6, 0x1, 0x8000, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) lseek(r0, 0x0, 0x4) 13:05:59 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80001, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000140)={0x1a, 0x4, 0x14, 0x18, 0x0, 0x3, 0x2, 0x98}) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0xffffffe5) 13:06:00 executing program 0: fchdir(0xffffffffffffffff) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getsockopt(r0, 0xffffffffffffff70, 0x4, &(0x7f0000000140)=""/152, &(0x7f0000000000)=0x98) getdents(r0, 0x0, 0x0) 13:06:00 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) lseek(r0, 0x0, 0x1) getdents(r0, 0x0, 0x0) 13:06:00 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x700) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffe2a, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x109, 0x100000000000000f}}, 0x20) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000200)=0x9) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x1, r1, 0x10, 0x0, @in6={0xa, 0x4e24, 0x80000000, @local, 0x2}}}, 0xa0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) 13:06:00 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:00 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x1}, 0x50) open(&(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) rmdir(&(0x7f00000003c0)='./file0/file1\x00') write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/file1/file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[], 0x0, 0x0) close(r0) 13:06:00 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:00 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', r1}) timerfd_gettime(r0, &(0x7f0000000140)) lseek(r0, 0x0, 0x4) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x80200, 0x0) 13:06:00 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x400000, 0x0) fchdir(r0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r2, 0xfffffffffffffffc, 0x1) connect$l2tp(r1, &(0x7f0000001240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x4, 0x4, 0x1, {0xa, 0x4e22, 0xff, @empty, 0xfffffffffffffff7}}}, 0x3a) getdents(r2, &(0x7f0000000080)=""/181, 0xb5) fsetxattr$trusted_overlay_origin(r1, &(0x7f00000011c0)='trusted.overlay.origin\x00', &(0x7f0000001200)='y\x00', 0x2, 0x2) getsockopt(r1, 0x2, 0x8, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) getdents(r2, 0x0, 0x0) 13:06:00 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200040, 0x0) getdents(r0, 0x0, 0x0) 13:06:00 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:00 executing program 5: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000000)={0x9, {0x0, 0x0, 0x800}}) 13:06:00 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x2800) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x7ff, 0x4, 0x4}}) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:00 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x3, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000240)=""/180) fchdir(r0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) shmget(0x3, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r2, 0xfffffffffffffffc, 0x1) getdents(r2, &(0x7f0000000080)=""/181, 0xb5) getdents(r2, 0x0, 0x0) 13:06:00 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:00 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$void(r0, 0x5450) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x80) lseek(r1, 0x0, 0x4) 13:06:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000001040)={0x90, 0x0, 0x2, {0x7}}, 0x90) 13:06:01 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x1}, 0x50) open(&(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) rmdir(&(0x7f00000003c0)='./file0/file1\x00') write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/file1/file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[], 0x0, 0x0) close(r0) 13:06:01 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) 13:06:01 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 13:06:01 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000001040)={0x90, 0x0, 0x2, {0x7}}, 0x90) 13:06:01 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x1ffffffffff) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:06:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x28100, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000180)={0x5, 0x4, [{0xd0c4, 0x0, 0x5c447cd0}, {0x6, 0x0, 0x6}, {0x3f00000000, 0x0, 0x10001}, {0x4, 0x0, 0x6e8e}, {0x3, 0x0, 0x5}]}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0x9, 0x4) getdents(r2, &(0x7f0000000080)=""/181, 0xb5) getdents(r2, 0x0, 0x0) 13:06:01 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x0, 0xffffffffffffff80, 0x9, 0x8, 0x0, 0xffff, 0x8}, 0x1c) 13:06:01 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000001040)={0x90, 0x0, 0x2, {0x7}}, 0x90) 13:06:01 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) lseek(r0, 0x0, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 13:06:01 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0xffffffffffffff72) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x0) getdents(r1, 0x0, 0x0) 13:06:02 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x1}, 0x50) open(&(0x7f0000000180)='./file0/file1\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90) read$FUSE(r0, &(0x7f0000001000), 0x1000) rmdir(&(0x7f00000003c0)='./file0/file1\x00') write$FUSE_ENTRY(r0, &(0x7f0000003000)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x90) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/file1/file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000480)=ANY=[], 0x0, 0x0) close(r0) 13:06:02 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x40000000000004) getdents(r0, &(0x7f0000000140)=""/181, 0xb5) prctl$PR_SVE_SET_VL(0x32, 0x1461a) getdents(r0, 0x0, 0x0) 13:06:02 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040), 0x1000) write$FUSE_ENTRY(r1, &(0x7f0000001040)={0x90, 0x0, 0x2, {0x7}}, 0x90) 13:06:02 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x8693, 0x2a, 0x1, r0}) lseek(r0, 0x0, 0x4) 13:06:02 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000001c0)={{0x1, 0x3, 0xfc, 0x1, 0xfff}}) fchdir(r0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r2, 0xfffffffffffffffc, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) getdents(r2, &(0x7f0000000080)=""/181, 0xb5) getdents(r2, 0x0, 0x0) 13:06:02 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:02 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x3, 0xac, 0x0, 0x1, 0x1, 0xe8a}) getdents(r0, 0x0, 0x0) 13:06:02 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x88fc, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x7fff, 0x40) write(r1, &(0x7f0000000080), 0x0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) lseek(r2, 0x0, 0x5) recvfrom(r2, &(0x7f0000000180)=""/248, 0xf8, 0x12020, &(0x7f0000000280)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80) 13:06:02 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2000000000}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}) dup3(r0, r1, 0x0) 13:06:02 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000180)=""/58) lseek(r1, 0xfffffffffffffffc, 0x1) sigaltstack(&(0x7f0000ffe000/0x2000)=nil, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000140)='./cgroup.cpu\x00') getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:03 executing program 2: io_setup(0x5, &(0x7f0000000000)) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000140)=0x7) 13:06:03 executing program 3: open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) lseek(r0, 0x1f, 0x4) 13:06:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2000000000}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}) dup3(r0, r1, 0x0) 13:06:03 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2000000000}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}) dup3(r0, r1, 0x0) 13:06:03 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2000000000}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}) dup3(r0, r1, 0x0) 13:06:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) lseek(r0, 0x0, 0x1) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), r2, r1}}, 0x18) 13:06:03 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0x3e, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000080)=0x0) timer_gettime(r1, &(0x7f00000000c0)) lseek(r0, 0x0, 0x4) 13:06:03 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:06:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2000000000}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}) dup3(r0, r1, 0x0) 13:06:03 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:03 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) getsockname$unix(r0, &(0x7f0000000140), &(0x7f0000000000)=0x6e) lseek(0xffffffffffffffff, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/current\x00', 0x2, 0x0) 13:06:03 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="d6b1c9c6a16ee23102aba304ebb4f7456e4da816a761caac61bb05a136187f26201ded460588881bb9107afe87e9747edd34914c39c4de9d0fffb8559d6ec9c44210046d9f4b83f91fbc9481e1b193c1ac8abbc99c12436315817d7406c9f5526be67144472faa9723d0a349497b3ed58ca9d21e69fdc2aae331d24cde8a3f6b0ec9fcf2cb7f03ab0d806a8dc592cb886e", 0x91}], 0x1) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffffc) lseek(r1, 0x0, 0x4) 13:06:03 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r1, 0x80044323, &(0x7f0000000140)) 13:06:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2000000000}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}) dup3(r0, r1, 0x0) 13:06:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2000000000}) fcntl$lock(r1, 0x26, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}) dup3(r0, r1, 0x0) 13:06:04 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:04 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x100) lseek(0xffffffffffffffff, 0x800000000000000, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)=0x2) getdents(r0, 0x0, 0xffffffffffffffb7) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000240)) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bond0\x00') 13:06:04 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0xc040, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x20002, 0x0) lseek(r1, 0x0, 0x4) 13:06:04 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0x33) getdents(r1, 0x0, 0x0) 13:06:04 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:04 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name, 0x10) dup2(r1, r0) 13:06:04 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x143) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0x10f, {0x0, r1, 0x2}}, 0x18) 13:06:04 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000180)=0xc) ptrace$pokeuser(0x6, r1, 0x0, 0x5) write$P9_RAUTH(r0, &(0x7f0000000200)={0x14, 0x67, 0x2, {0x0, 0x1, 0x8}}, 0x14) r2 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x3, 0x2) lseek(r0, 0x0, 0x4) ioctl(r0, 0x66, &(0x7f0000000080)="31c8ebc18fe2112b0c6ce34615df304f57176afc943f5bad8da039264099c664d0cf2d65fc3e9d01da5b1ecee77656fc804139c069fa1f7ff7ca9842d590ea1a159cb99954a12a85b51edc655f872dceb070804378488475b0624e5d796888647b61fb692e6c5aeb66b9a247ce46694f9860e1dc2b7b413b430eaf6012d60d6b28a55beca5109cf06a75968dd3d3804bed88b4c08e47f13ab212eb99733ba2e96aad2a8b138d496d24e7d2906496891b1e6ce97d18f1749c54243c824d6dfb28d573a923b358ea224d90e1a5d7411f51172e47cf9f7bf534622618471284a28240d3d6de0a99451fdf98b230159768868b31") ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000240)=0x1) 13:06:04 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r1, &(0x7f00000001c0)=0x4) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000002c0)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ashmem\x00', 0x0, 0x0) r2 = semget(0x3, 0x1, 0x202) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000200)=""/152) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000380)=""/185) getdents(r0, 0x0, 0x0) 13:06:04 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x3) getdents64(r1, &(0x7f00000016c0)=""/79, 0x4f) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r2, 0x3}}, 0x10) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0xb33, 0x19b, 0x5}, 0xc) getdents(r1, 0x0, 0xfffffed2) 13:06:04 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:04 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name, 0x10) dup2(r1, r0) 13:06:04 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) fcntl$setflags(r0, 0x2, 0x1) fcntl$getflags(r0, 0x401) lseek(r0, 0x0, 0x8000000000) r1 = gettid() ptrace$setregs(0xf, r1, 0x1, &(0x7f0000000080)="470c2696b67666ab0053f5d1c1e7e5f8741277231faa91823d11cb924674380d3399b1a049354dc942cd67decd42d948bace9a7b5924a9c47fa9940c3ce4d2e15ec69426975733cf8f9604c0dd8b7084d7c25592178d987a23667520220082e4ae4a2de910758cb15df6af1dca8dfd33c4cefdb58601a78d31b599bb582ec2a92f421aa9c75ec6dd02836621e3a3f7ce12494896f96b3505487e5016627be85bc181172e8d47435d3ddb7068eb78939108a593c6e2240c8926cb87af45ee18d4e202d4a36cfdc3077feaf9e9f178955ca19d50c62c72939940d731a877ff7eab6ce51d74f7205e94f5430d") 13:06:04 executing program 4: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffffa, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0xbd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000300)={{0xfffffffffffffffb}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000200)={0x0, @time}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, r3+10000000}, {0x0, 0x9}}, &(0x7f0000000480)) tkill(r2, 0x1000000000015) 13:06:04 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:05 executing program 2: r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x8) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:06:05 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name, 0x10) dup2(r1, r0) 13:06:05 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x3, 0x4) getdents(r1, 0x0, 0x0) 13:06:05 executing program 3: r0 = syz_open_pts(0xffffffffffffff9c, 0x101000) write$binfmt_script(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c65302020207b657468317d657474305e2d6367726f75705d406c6f2c2e980a080e64ab348f4e6dcaddf242eeeee32a1c522aae0475e32fbce049c2e26b5584279a2cc1688ff43daa26b064d965653c1132d4b669362d18fecc9b74512f0a93ffa709a31b4a8adeb6c4a9ca2e1e2a3d11c56134c6e01320a1e71f6b2c2142bff610421c37c6e86c24269361b91500615b703693eba8371f2710000000000000000000000000000000000000000000"], 0xc5) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = semget$private(0x0, 0x3, 0x200) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000380)={{0x7fff, r3, r4, r5, r6, 0xc, 0x5}, 0x0, 0x81, 0x31c}) lseek(r1, 0x0, 0x4) 13:06:05 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:05 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000180)) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000440)) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000380)=0x3) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') r2 = gettid() fcntl$setownex(r0, 0xf, &(0x7f00000003c0)={0x2, r2}) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="d5a05210fdd2bed247c3662ed02b34ee1e7193a5220078", @ANYRES16=r1, @ANYBLOB="bf9c04c71b3b0c7bcaec988416f4081fe244cb3e844ff02f49a554882f92fba8d7cc4f0626b0db4dbe231e7ad481cb4fe314fc1452956b317277c5e7551426dafce79c2cb34c5514e8b061df3a2993a87b1e8583710080fc98d2d2860d638fecead0dae74d89101fe48db485a65f305afe079bc65ffbf70f8b2779b7d2b1ce08ac07bf760a4f0d4b78f3e7770e8de499e6d3a2eacf0493fea57e964535cef4a45874a8e8b6b84caf6cb9193ae50acfe64ccada"], 0x3}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f00000001c0)=""/227) 13:06:05 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name, 0x10) dup2(r1, r0) 13:06:05 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:05 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x200000, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x6, 0x2, 0xf29}) 13:06:05 executing program 5: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000254f80)=@generic={0x1e, "0103000000a300b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401000559829a2b0afe7ce43a4b2c70a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000001840)=@generic={0x1e, "0103000009000000000000000000000009a979f321b30cbf00000000000100010a53a632ed4938d36d0e00000007000000829a2b0a0006e43a4b2470a0c5216669ca021f6f65dce060e7e58f358c0002f0000178d19b7e3151314a8ef1f1620c85bdb9c8ead2000077aeb81c90001d6d7c980ee590ebb9f70dc136cb184a"}, 0x80) 13:06:05 executing program 4: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffffa, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0xbd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000300)={{0xfffffffffffffffb}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000200)={0x0, @time}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, r3+10000000}, {0x0, 0x9}}, &(0x7f0000000480)) tkill(r2, 0x1000000000015) 13:06:05 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:06:05 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 13:06:05 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000140)={0x94, ""/148}) 13:06:05 executing program 5: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000254f80)=@generic={0x1e, "0103000000a300b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401000559829a2b0afe7ce43a4b2c70a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000001840)=@generic={0x1e, "0103000009000000000000000000000009a979f321b30cbf00000000000100010a53a632ed4938d36d0e00000007000000829a2b0a0006e43a4b2470a0c5216669ca021f6f65dce060e7e58f358c0002f0000178d19b7e3151314a8ef1f1620c85bdb9c8ead2000077aeb81c90001d6d7c980ee590ebb9f70dc136cb184a"}, 0x80) 13:06:06 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0xffffffff}, 'syz1\x00'}) 13:06:06 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) socket$caif_stream(0x25, 0x1, 0x2) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = inotify_add_watch(r1, &(0x7f0000000440)='./file0\x00', 0x8) inotify_rm_watch(r1, r2) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) statx(r1, &(0x7f00000004c0)='./file0\x00', 0x6000, 0xfff, &(0x7f0000000500)) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000480)=0xc00, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000600)={0x0, 0x10000, 0x5, 0x0, 0x3915, 0x26fb9b03}, &(0x7f0000000640)=0x14) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000680)={r5, 0x2}, 0x8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote, 0x4e24, 0xfffffffffffffffd, 0x4e20, 0x200, 0xa, 0x80, 0x0, 0x73, r3, r4}, {0x2, 0x8, 0x7f, 0x9, 0x5, 0x3, 0x8}, {0x8, 0x2, 0x9, 0x7fffffff}, 0x3c86, 0x6e6bba, 0x1, 0x0, 0x2, 0x1}, {{@in=@empty, 0x4d2, 0x7e}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x1, 0x1, 0x4, 0x80, 0x24, 0x1}}, 0xe8) getsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000140), &(0x7f0000000180)=0x4) 13:06:06 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:06:06 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dsp\x00', 0x20000, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f00000004c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={r2}) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x5c2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xd4, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309, r3, 0x4}, @register_looper, @reply={0x40406301, {0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x58, 0x20, &(0x7f00000000c0)=[@flat={0x77682a85, 0x100, r4, 0x4}, @fd={0x66642a85, 0x0, r0, 0x0, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x2, 0x24}], &(0x7f0000000140)=[0x58, 0x0, 0x20, 0x78]}}, @increfs_done={0x40106308, r5, 0x2}, @clear_death={0x400c630f, 0x4, 0x1}, @acquire={0x40046305, 0x4}, @reply_sg={0x40486312, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x50, 0x10, &(0x7f0000000240)=[@ptr={0x70742a85, 0x1, &(0x7f00000001c0), 0x1, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000200), 0x1, 0x0, 0x3a}], &(0x7f00000002c0)=[0x78, 0x40]}, 0x5}}], 0x15, 0x0, &(0x7f0000000400)="d3dd52c767155fa41150b40cfdc8fb6c48c911e701"}) 13:06:06 executing program 5: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000254f80)=@generic={0x1e, "0103000000a300b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401000559829a2b0afe7ce43a4b2c70a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000001840)=@generic={0x1e, "0103000009000000000000000000000009a979f321b30cbf00000000000100010a53a632ed4938d36d0e00000007000000829a2b0a0006e43a4b2470a0c5216669ca021f6f65dce060e7e58f358c0002f0000178d19b7e3151314a8ef1f1620c85bdb9c8ead2000077aeb81c90001d6d7c980ee590ebb9f70dc136cb184a"}, 0x80) 13:06:06 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='team_slave_1\x00') lseek(r0, 0x0, 0x4) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) 13:06:06 executing program 2: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) splice(r1, &(0x7f0000000300), r1, &(0x7f0000000340), 0x1, 0x7) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x400, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000002c0)={0x2000000000000000, 0x5000, 0x10001, 0xf, 0x13}) fstatfs(r0, &(0x7f0000000180)=""/251) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) write(r3, &(0x7f0000000080)="e63750a4273adc6592ff1bb49038a51c385e2c94f96211453db20ad1ce093a0ed91bc832fe124a896fa08ced6fa9e58a94f8a49e92a538d7202495e74560bc7fecbd1b0241d1db55f317cda498912939ed9548c98a6d1bb986a0f8af21cf74e5405bda4bf39cef3e6167091f3d3439e76c4586bb74d5d8ead82b5a7215f97eb3da81a57fae1f3429d79c10f0e853a585bc061c86524788c8df8c2b9b6d90fac35e97d7b2c05304c6d108fbab2eb5d5274253be755780c35a438b3e87e1c50bf6298b55", 0xc3) r4 = add_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="f00e102525200fcde15a0b62654de1514e248f3e8823abf9b8747b3048a5bb6d5bc43ddb5809f7a6a9bd9e50e0a30e3e5466451390d1858744a23b5f5a4a912c593092b564e05f0e3da61dd62c35672462d5f15708ac0e06fda855b2d21b6681ad946e4e5a3a044eb5a86131b330c4656e87fbcea7cb407001f13317a95b77e722eb0ce92729b5958ade3d3b82e74341d7fcfca792ac1334c8", 0x99, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r4) getdents(r3, 0x0, 0xfffffffffffffd7b) 13:06:06 executing program 4: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffffa, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0xbd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000300)={{0xfffffffffffffffb}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000200)={0x0, @time}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, r3+10000000}, {0x0, 0x9}}, &(0x7f0000000480)) tkill(r2, 0x1000000000015) 13:06:06 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200, 0x0) r2 = getpgrp(0xffffffffffffffff) syz_open_procfs(r2, &(0x7f0000000240)='projid_map\x00') renameat2(r0, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x6) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r3, 0xfffffffffffffffc, 0x1) ioperm(0x2, 0x9, 0x0) getdents(r3, &(0x7f0000000080)=""/181, 0xb5) getdents(r3, 0x0, 0x0) 13:06:06 executing program 5: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000254f80)=@generic={0x1e, "0103000000a300b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401000559829a2b0afe7ce43a4b2c70a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001d6d7c980400000000f70dc136cb184a"}, 0x80) bind(r0, &(0x7f0000001840)=@generic={0x1e, "0103000009000000000000000000000009a979f321b30cbf00000000000100010a53a632ed4938d36d0e00000007000000829a2b0a0006e43a4b2470a0c5216669ca021f6f65dce060e7e58f358c0002f0000178d19b7e3151314a8ef1f1620c85bdb9c8ead2000077aeb81c90001d6d7c980ee590ebb9f70dc136cb184a"}, 0x80) 13:06:06 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) 13:06:06 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000000080)="d9ebdfb7c2118e05509e9db68f427dabe5e33f1b95859b7cba5401632cb455182d5e8c4ee3795fe92cd99bf0143de7264fc2cbc607436b67101654754ba280c5ef50c7fc8f89cdaac7217e0d9df9dbf1ab275f", 0x53, 0x0) lseek(r1, 0x0, 0x4) 13:06:06 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r0) 13:06:07 executing program 3: r0 = open(&(0x7f0000000080)='.\x00', 0xfffffffffffffff9, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000001c0)={0xe, 0x9, 0x6, 0x1, 0x9b, "90c29c796b162330825d60d34938869bcc7cea66358871aaa911d13f898623d4ca1117a27c77504bbdf0a2a8f1a0deacf0a5a11539508416f1dca4b0df83b5b41ac6dea490e14eca60674074875c989384397020efae491228d8e00f76610d1b1dc32f57f28baecc3e5ff54714118b5e4ac2f4fd656a2364050e1bcd105ddbd4c45bfee43a5af566aae65f2c5bcfe347c81d5e166abea50066ff16"}, 0xa7) lseek(r0, 0x0, 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000328bd7000ffdbdf25010000000000000007410000004cbb41ee47ca7a4f610a7a7ad30018000000016574680000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x8d5) 13:06:07 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/181, 0x80) getdents(r0, 0x0, 0x0) 13:06:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x20000, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) write$P9_RFSYNC(r1, &(0x7f0000000140)={0x7, 0x33, 0x1}, 0x7) getdents(r1, 0x0, 0x0) 13:06:07 executing program 5: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffffa, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0xbd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000300)={{0xfffffffffffffffb}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000200)={0x0, @time}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, r3+10000000}, {0x0, 0x9}}, &(0x7f0000000480)) tkill(r2, 0x1000000000015) 13:06:07 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x202, 0x0) ftruncate(r0, 0x9) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000000)={0x2000000, 0x81, 0x7}) lseek(r1, 0x0, 0x4) r2 = geteuid() getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) fchown(r0, r2, r3) 13:06:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0xe) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000380)={0x4600000000000000, 0x7, 0x4, 0x0, {r2, r3/1000+30000}, {0x2, 0xd, 0x3abb6dc1, 0x4, 0x6, 0x6, "3ea2d259"}, 0x7, 0xe9d95b71860e7862, @fd=r1, 0x4}) getdents64(r1, &(0x7f0000000300)=""/79, 0x4f) lseek(r1, 0xfffffffffffffff9, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x100, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x804) 13:06:07 executing program 4: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffffa, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0xbd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000300)={{0xfffffffffffffffb}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000200)={0x0, @time}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, r3+10000000}, {0x0, 0x9}}, &(0x7f0000000480)) tkill(r2, 0x1000000000015) 13:06:07 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x5, 0x101000) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000000c0)=[0x1], 0x2) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x3, 0x100000000000044) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) 13:06:07 executing program 2: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x40080000148) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000040)={0xff, 0xda37}) getdents(r0, 0x0, 0x0) 13:06:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) 13:06:07 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) poll(&(0x7f0000000140)=[{r0}, {r0}], 0x2, 0x2496) mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) 13:06:08 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x8, 0x4, 0x0, 0x0, @sint={0x200}}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r2, 0xfffffffffffffffc, 0x1) getdents(r2, &(0x7f0000000080)=""/181, 0xb5) getdents(r2, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0x0}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000240)={r3, &(0x7f00000001c0)=""/93}) 13:06:08 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) 13:06:08 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x88) lseek(r0, 0x0, 0x4) sendfile(r0, r0, 0x0, 0x101) 13:06:08 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) poll(&(0x7f0000000140)=[{r0}, {r0}], 0x2, 0x2496) mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) 13:06:08 executing program 5: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffffa, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0xbd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000300)={{0xfffffffffffffffb}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000200)={0x0, @time}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, r3+10000000}, {0x0, 0x9}}, &(0x7f0000000480)) tkill(r2, 0x1000000000015) 13:06:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0xfffffffffffffed2) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) 13:06:08 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r1, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x85c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800100}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) recvfrom(r0, &(0x7f0000000080)=""/145, 0x91, 0x0, &(0x7f0000000140)=@ipx={0x4, 0x6700000000000000, 0x7fff, "c9e3c2117107", 0x9}, 0x80) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000003c0)=@get={0x1, &(0x7f0000000340)=""/79, 0x5}) lseek(r0, 0x0, 0x800000000004) 13:06:08 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) read$eventfd(r0, &(0x7f0000000140), 0x8) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000000c0)={0xff, r1}) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) keyctl$set_timeout(0xf, 0x0, 0xf1) 13:06:08 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) ioctl$RTC_PIE_OFF(r0, 0x7006) getdents(r0, 0x0, 0x0) 13:06:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:08 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) poll(&(0x7f0000000140)=[{r0}, {r0}], 0x2, 0x2496) mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) 13:06:08 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) close(r0) [ 333.901702] hrtimer: interrupt took 217844 ns 13:06:09 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 13:06:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x800, 0x4) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000140)=""/44, 0x2c}, &(0x7f0000000180), 0x40}, 0x20) 13:06:09 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x319e5a66, 0x0, 0x4, 0x1, 0x2, 0x2, 0x6, 0x8, 0x1b8, 0x40, 0x216, 0x0, 0x80, 0x38, 0x2, 0x9b5, 0x1, 0xd43}, [{0x6474e553, 0x3, 0x7, 0x8, 0x6, 0x1000, 0x3, 0x8}, {0x5, 0x3a02, 0x5, 0x5da, 0x9, 0x80000001, 0xfffffffffffffbab, 0x9}], "981c3a5b09ef9ca8", [[], []]}, 0x2b8) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) 13:06:09 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) close(r0) 13:06:09 executing program 5: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffffa, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0xbd}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000300)={{0xfffffffffffffffb}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000200)={0x0, @time}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, r3+10000000}, {0x0, 0x9}}, &(0x7f0000000480)) tkill(r2, 0x1000000000015) 13:06:09 executing program 1: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) poll(&(0x7f0000000140)=[{r0}, {r0}], 0x2, 0x2496) mount(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='jffs2\x00', 0x201000, &(0x7f00000002c0)) 13:06:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:09 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x80000001, 0x4, 0x3, 0xffc0, 0x99, 0xf2fe}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x8c042, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x500, 0x0) getdents(r0, 0x0, 0x0) 13:06:09 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 13:06:09 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) close(r0) 13:06:09 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x8200000000000004) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0x1}, 0x28, 0x3) 13:06:09 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:06:09 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) close(r0) 13:06:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) open$dir(&(0x7f0000000340)='./file0\x00', 0x40, 0x1) getdents(r1, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x132b) recvfrom(r1, &(0x7f0000000140)=""/154, 0x9a, 0x21, &(0x7f0000000280)=@xdp={0x2c, 0x6, r2, 0x4}, 0x80) 13:06:10 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000580)='ip6_vti0\x00') 13:06:10 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000480)="78d70bdc4fe546", 0x7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000001c0)={'syz'}, &(0x7f00000000c0), 0xcb, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000680)={r0, r1, r0}, 0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={'rmd160\x00'}}) 13:06:10 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000140)="690139663721fc9df1d20ee3a638f4bd3b1a1f40700805155e0133b96dbc35ecfef3412987ed222f3875242229bd4daa2d036f8d1ce65dee6239417d90baa962b74b4b7d16ce0b054d5fdd1a621098d78288b1e2193da94863fed9e4ae2cc3bfc97e098f6a5d9e98bd247f190577a9a0dcbaf5884900413c35d55d6d963ea4734afeee87bc156780b9910767435e3b14d8adfbeccf3c395aac8e3f56a12bc53616d1dfa52eba23cb55be713e70446d449777bc7af5539754750508164ba25ad36657f1c3b619155f9f5c11873ed0cc147c80ea40", &(0x7f0000000240)=""/245}, 0x18) 13:06:10 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) lseek(r0, 0x0, 0x4) r1 = getpid() sched_getscheduler(r1) 13:06:10 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x840, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000380)=""/79, 0xfffffffffffffdcf) lseek(r3, 0xfffffffffffffffc, 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x300, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x3}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') getdents(r3, &(0x7f0000000080)=""/181, 0xb5) getdents(r3, 0x0, 0x0) 13:06:10 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000580)='ip6_vti0\x00') 13:06:10 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000480)="78d70bdc4fe546", 0x7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000001c0)={'syz'}, &(0x7f00000000c0), 0xcb, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000680)={r0, r1, r0}, 0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={'rmd160\x00'}}) 13:06:10 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}], 0x1, 0x0) r3 = dup2(r1, r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 13:06:10 executing program 2: r0 = open(&(0x7f0000000000)='.\x00', 0x20000000000000, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) socket$tipc(0x1e, 0x7, 0x0) getdents(r0, 0x0, 0x0) 13:06:10 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000080)={"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"}) 13:06:10 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='.\x00', 0x800, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x18) lseek(r1, 0xfffffffffffffffc, 0x1) accept4(r1, &(0x7f0000000300)=@xdp={0x2c, 0x0, 0x0}, 0xfffffffffffffffe, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0xc, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x100, 0x7, 0xa, 0x9}, @map={0x18, 0xa, 0x1, 0x0, r1}, @ldst={0x1, 0x3, 0x3, 0x8, 0x7, 0x5, 0x8}, @map={0x18, 0x0, 0x1, 0x0, r1}, @alu={0x4, 0x9, 0x9, 0x6, 0x6, 0x0, 0xfffffffffffffffc}, @ldst={0x1, 0x0, 0x7, 0xf, 0x9, 0xc, 0xfffffffffffffffc}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @exit], &(0x7f00000000c0)='GPL\x00', 0x5f, 0x41, &(0x7f0000000180)=""/65, 0x41100, 0x1, [], r2, 0x6}, 0x48) getdents(r1, 0x0, 0x0) 13:06:10 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000580)='ip6_vti0\x00') 13:06:10 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000480)="78d70bdc4fe546", 0x7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000001c0)={'syz'}, &(0x7f00000000c0), 0xcb, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000680)={r0, r1, r0}, 0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={'rmd160\x00'}}) 13:06:10 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}], 0x1, 0x0) r3 = dup2(r1, r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 13:06:11 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/181, 0xb5) getdents(r0, 0x0, 0x1ec) 13:06:11 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000580)='ip6_vti0\x00') 13:06:11 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000480)="78d70bdc4fe546", 0x7, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000001c0)={'syz'}, &(0x7f00000000c0), 0xcb, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000680)={r0, r1, r0}, 0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={'rmd160\x00'}}) 13:06:11 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:11 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) write$9p(r0, &(0x7f0000000080)="814a9b250b2b611e57d00524c73f742d6353c4a45f6e3d6100", 0x19) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x2, 0x2}) 13:06:11 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}], 0x1, 0x0) r3 = dup2(r1, r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 13:06:11 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:06:11 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}], 0x1, 0x0) r3 = dup2(r1, r0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 13:06:11 executing program 2: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x13d) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x1, 0x4) syz_open_dev$vivid(&(0x7f0000000180)='/dev/video#\x00', 0x1, 0x2) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000300)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x80000, 0x0) modify_ldt$read(0x0, &(0x7f00000001c0)=""/17, 0x11) getdents(r1, &(0x7f0000000200)=""/174, 0xae) syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0xb4, 0x10000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x20, 0x4, 0x3, 0x8000, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={r2, 0xb570}, &(0x7f0000000380)=0x8) getdents(r0, 0x0, 0x0) [ 336.809483] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 336.809483] The task syz-executor4 (12698) triggered the difference, watch for misbehavior. 13:06:11 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:12 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x5) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x9b1, 0x5, 0x3f, 0x10000}) 13:06:12 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{}, {}]}) getdents(r0, 0x0, 0x0) 13:06:12 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="eb280a1a75511eb82753cf3edb473d6a", 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00'}) 13:06:12 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf6\x9a&\xf8\xcc\x9c#g\xaa\xa1k5\x9cg\x90\x16[\x86+1\x03I\xdf_\xb4\xcc\x98\xf9\x16\x1e`\xce\x83QM\xfc\x96\x9f\xc5m\x04\xd9\xf2\xb4\xd4&\xb0W\'-', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) getpid() getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r2, 0xfffffffffffffffc, 0x1) getdents(r2, &(0x7f00000002c0)=""/181, 0xb5) getdents(r2, 0x0, 0x0) 13:06:12 executing program 4: r0 = semget$private(0x0, 0x207, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x41}, {}], 0x2) semop(r0, &(0x7f0000000000)=[{0x3, 0x1d}, {0x3}], 0x2) semctl$IPC_RMID(r0, 0x0, 0xf) 13:06:12 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x100000216) 13:06:12 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="eb280a1a75511eb82753cf3edb473d6a", 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00'}) 13:06:12 executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x30000, 0x0) lseek(r0, 0x0, 0x4) 13:06:12 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000200)={0x0, 0x0, @pic={0x0, 0x35, 0x0, 0x6}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[], 0x0, 0x680}) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$caif(r0, &(0x7f0000000000)=@dbg={0x25, 0x70, 0xfff}, 0x18) getdents(r0, &(0x7f0000000140)=""/181, 0xfffffffffffffdbd) getdents(r0, 0x0, 0x0) 13:06:13 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @broadcast}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r2, 0x5}, 0x8) fchdir(r0) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r3, 0xfffffffffffffffc, 0x1) getdents(r3, &(0x7f0000000080)=""/181, 0xb5) getdents(r3, 0x0, 0x0) 13:06:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="eb280a1a75511eb82753cf3edb473d6a", 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00'}) 13:06:13 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r2}}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)=""/186, 0x10b9, 0xba}, 0x20) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000400)={0x0, @bt={0xcac, 0x9, 0x1, 0x2, 0x0, 0x100, 0x40, 0xda2, 0x8, 0x80, 0x4, 0xffffffff, 0x9, 0x1ff, 0x2, 0x20}}) getdents(r1, 0x0, 0x0) 13:06:13 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100), 0x151) 13:06:13 executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040), 0x80, 0x2, &(0x7f00000000c0)={r1, r2+30000000}, &(0x7f0000000100)=0x1, 0x1) lseek(r0, 0x0, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000002c0)) 13:06:13 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000280)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000240)='io\x00') ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x65f, 0x2000) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000140)) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r3, &(0x7f0000000080)=""/181, 0xb5) openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x40000, 0x0) getdents(r3, 0x0, 0x0) 13:06:13 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000240)=""/79, 0x4f) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:13 executing program 2: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x0, 0x20f00) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000200)=0x100) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) getrusage(0x0, &(0x7f0000000140)) 13:06:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff73, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da01}, [@typed={0xc, 0x3, @u64}]}, 0x20}}, 0x0) 13:06:13 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x4) open(&(0x7f0000000040)='.\x00', 0x0, 0x138) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:unconfined_execmem_exec_t:s0\x00', 0x2f, 0x3) 13:06:14 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100), 0x151) [ 339.028677] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 339.077671] netlink: 'syz-executor5': attribute type 3 has an invalid length. 13:06:14 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0xffffffff, 0x2, 0x20c, 0xb69, 0xd245, 0x18a8763e, 0xffff, 0x7, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r1, 0x0, 0xb93}, 0x10) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) flistxattr(r0, &(0x7f00000002c0)=""/254, 0x78) getdents(r0, 0x0, 0x0) 13:06:14 executing program 4: r0 = semget$private(0x0, 0x207, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x41}, {}], 0x2) semop(r0, &(0x7f0000000000)=[{0x3, 0x1d}, {0x3}], 0x2) semctl$IPC_RMID(r0, 0x0, 0xf) 13:06:14 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100), 0x151) 13:06:14 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = dup(r0) ioctl$TIOCEXCL(r1, 0x540c) fchdir(r0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r2, 0xfffffffffffffffc, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10111, r0, 0x25) getdents(r2, &(0x7f0000000080)=""/181, 0xb5) getdents(r2, 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x10) 13:06:14 executing program 3: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x4000000000000002) lseek(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000040)=0x4) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f00000000c0)={0x7b, 0x0, [0x6, 0x101, 0x10000, 0x3]}) 13:06:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff73, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da01}, [@typed={0xc, 0x3, @u64}]}, 0x20}}, 0x0) 13:06:14 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x7) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) [ 339.673902] netlink: 'syz-executor5': attribute type 3 has an invalid length. 13:06:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff73, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da01}, [@typed={0xc, 0x3, @u64}]}, 0x20}}, 0x0) 13:06:14 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xd) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:06:14 executing program 3: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000000)=0xe8) setfsuid(r0) socket$bt_bnep(0x1f, 0x3, 0x4) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) 13:06:14 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000100), 0x151) 13:06:14 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$vcsa(&(0x7f0000000700)='/dev/vcsa#\x00', 0xfff, 0x402001) perf_event_open$cgroup(&(0x7f0000000680)={0x3, 0x70, 0xfffffffffffffff8, 0x1, 0x2, 0x1, 0x0, 0x1f6b, 0x822, 0x0, 0x3f, 0x2, 0x0, 0x200, 0x2, 0x5, 0x1, 0x8001, 0x7507, 0x1, 0xd45, 0x1e, 0x4, 0x1, 0x1, 0x4, 0x8, 0x0, 0x0, 0x4c, 0x8, 0x6, 0xb09, 0x20, 0xfff, 0x5, 0x7f, 0x5, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000640), 0x3}, 0x9000, 0x6, 0x1, 0x6, 0xfff, 0x8, 0x3}, r0, 0xa, r1, 0xc) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) sendmsg$tipc(r2, &(0x7f0000000580)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x3}}, 0x10, &(0x7f0000000500)=[{&(0x7f00000001c0)="e49a85bd56212a84b048b37e64ff677c7831c8959fdcc499c80c71f6e3056c0b3594f2a1bdda3a125c43f4a8ac8506cd6d7f8a7241e3496c0b05e67ba390e6b39503c88dbfc07388b0e4517d58f0debbae048624e8cde930bb60817ff2c1431a35261d98a7e09a8007b08d65e3fdb4806fc7fee62cb956fc2b1aaefc499892b87a9bd42d0251184b905395e98fc5cc9998e8a52e7e7f3e5bbb61a4d374dbaeb915c1c80d7c7f0733a5f523f443dbc0783a6e5be86223ab05", 0xb8}, {&(0x7f0000000280)="646474fa51b893c6dc01731c8aee16d66f9836", 0x13}, {&(0x7f00000002c0)="a2b1fbd5cb0410f3d684844a882cc2b4d99fea3c", 0x14}, {&(0x7f0000000300)="46a7ae910f26277f5fbddf5b09aaebbf508fb90dc91163ef113a88033568c1e7044dff30bc1ab2dadfa15374efcd8346de9fe838fd9566a03e0162af7e63b5323f1d26b3e3fbdde3c293e4ccb82de49f59de48ad8babde43fd17e399c20517ef6b248899eb96b090f6a2d679ba15ae4864a349f84c88d0728738ed8818c0a289edc5bbd7bc55a42579864c1ec1974750f04689c48744077094d7ddf7acdea42d1b0a797cbb4fc79fea81a17c9f58988941120ded9c23e0c3175d28a3dc05d9f932e70315", 0xc4}, {&(0x7f0000000400)="360e49a982973e18f0e4ece91b3cb2597b8a6875fecdf4cdb7c30376194f6044e45d62bb35539ef8bbcf701624f890d55d753157ed343e6c9f642d460e720a824369e257b80756ede44aee98ddd8d300b78476119dffbc293dedeeede0c463103539cc7b1b26da0d14a2e53acb76a2120fb18752102976cd005bd0635ac94601d218629cb9c68864cfd5e4b91b2b12c98245d3bea46119a0af516c6fa709cf565ddab049ad5f318b5011600953bb564f942b7c602d9be4995f901722adf7b40449a44fcd8d64dc5a6b955ebb9edc", 0xce}], 0x5, 0x0, 0x0, 0x4}, 0x4) accept4(0xffffffffffffffff, &(0x7f0000000000)=@can, &(0x7f0000000100)=0x80, 0x0) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000680)={r3, r4, r3}, &(0x7f0000000600)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f00000006c0)={'rmd160\x00'}, &(0x7f0000000540)}) lseek(r2, 0xfffffffffffffffc, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/hwrng\x00', 0x20000, 0x0) getdents(r2, &(0x7f0000000080)=""/181, 0xb5) openat$cgroup_int(r0, &(0x7f0000000140)='io.bfq.weight\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000740)='/dev/fuse\x00', 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000780)='/dev/uhid\x00', 0x2, 0x0) getdents(r2, 0x0, 0xfee1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snapshot\x00', 0xa00, 0x0) [ 339.865864] netlink: 'syz-executor5': attribute type 3 has an invalid length. 13:06:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff73, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1d, 0xffffffffeffffffd, 0x0, 0x0, {0x7592da01}, [@typed={0xc, 0x3, @u64}]}, 0x20}}, 0x0) [ 340.267468] netlink: 'syz-executor5': attribute type 3 has an invalid length. 13:06:15 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000140)={'veth1_to_bridge\x00', {0x2, 0x4e24, @loopback}}) lseek(r0, 0xfffffeffffffffff, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:06:15 executing program 1: ioprio_set$pid(0x0, 0x0, 0x0) 13:06:15 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x18080) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000000)={0x1, 0x8, [@empty, @empty, @local, @random="de730548a506", @local, @local, @local, @local]}) write$P9_RREADDIR(r1, &(0x7f00000000c0)={0x2a, 0x29, 0x2, {0x4, [{{0x8c, 0x3, 0x5}, 0x9, 0x7, 0x7, './file0'}]}}, 0x2a) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x80, 0x3, 0x8}, 0x5}}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 13:06:15 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x412800, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000200)=0x63, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x28, &(0x7f0000000180)}, 0x10) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r2, 0xfffffffffffffffc, 0x1) getdents(r2, &(0x7f0000000080)=""/181, 0xb5) getdents(r2, 0x0, 0x0) 13:06:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3d1ff7ec}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) dup3(r0, r1, 0x0) 13:06:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 13:06:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r1, &(0x7f0000000180)="2f7dc7ac7937fd0b32ebfced83cfdc8799573140994ad9fdee4edf52aa0fbb7dfc4115f9ee78bd091ae1a72abaa2deb9ec1afa89477148ae61dc7178ced1b5c757", 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) r2 = dup(r0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x1) 13:06:15 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3d1ff7ec}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) dup3(r0, r1, 0x0) 13:06:15 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f00000002c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x4000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @initdev, @loopback}, &(0x7f0000000340)=0xc) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4c, 0x101000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x120, 0x70bd27, 0x25dfdbfb}, 0x4}}, 0x90) fchdir(r1) r4 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r4, 0xfffffffffffffffc, 0x1) getdents(r4, &(0x7f0000000080)=""/181, 0xb5) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f00000003c0)={0x0, 0x9, 0xb0, [], &(0x7f0000000380)=0x1ff}) getdents(r4, 0x0, 0x0) 13:06:15 executing program 2: r0 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x2) lseek(r0, 0xc, 0x3) symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') getdents(r0, &(0x7f0000000080)=""/181, 0xb5) r1 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue0\x00'}) getdents(r0, 0x0, 0x0) 13:06:15 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x800, 0xfffffffffffffff9, 0xc6b2, 0x0, 0x7, 0x57eaa9d1, 0x1, {0x0, @in={{0x2, 0x4e22, @local}}, 0x101, 0x8, 0xffff, 0x1, 0x9}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0x8) lseek(r0, 0x0, 0x4) 13:06:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 13:06:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3d1ff7ec}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) dup3(r0, r1, 0x0) 13:06:16 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x37, "86acc0d581183daf43f617de0e56c803525d755fa7c8ac0f4aec5d0f648390f2f891b595428a772b7ee48216b3674bad559b7fb2b244a0"}, &(0x7f0000000180)=0x3f) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={r2, 0x2, 0x104b, 0x30, 0x0, 0x8}, 0x14) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:16 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x0) lseek(r0, 0x0, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80080, 0x0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040)={0x1a}) 13:06:16 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:06:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r1, &(0x7f0000000180)="2f7dc7ac7937fd0b32ebfced83cfdc8799573140994ad9fdee4edf52aa0fbb7dfc4115f9ee78bd091ae1a72abaa2deb9ec1afa89477148ae61dc7178ced1b5c757", 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) r2 = dup(r0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x1) 13:06:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 13:06:16 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x204002, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000200)=0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$caif_stream(0x25, 0x1, 0x5) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x100, 0x0) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/userio\x00', 0x0, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f0000000540)='/dev/snd/midiC#D#\x00', 0x6c9681ea, 0x0) r11 = socket$inet6(0xa, 0x804, 0xcfc6) r12 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000580), 0x80800) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)={0x13, 0x5, 0xd60, 0x7, 0x23, 0xffffffffffffff9c, 0xffffffff00000001}, 0x2c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0}, &(0x7f0000000a40)=0xc) getcwd(&(0x7f0000000980)=""/167, 0xa7) r16 = getgid() r17 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000007c0)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000000940)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfb, 0x208008b0}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000180)={0x18, 0x37, 0x400, 0x70bd26, 0x25dfdbfb, "", [@typed={0x8, 0x78, @ipv4=@rand_addr=0x8}]}, 0x18}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="00000000200000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x4040}, 0x20000000) r20 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r20, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r20, 0x84, 0x18, &(0x7f00000000c0)={r21, 0x5}, 0x8) lseek(r20, 0x0, 0x200004) fcntl$F_GET_RW_HINT(r9, 0x40b, &(0x7f0000000680)) 13:06:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r1, &(0x7f0000000180)="2f7dc7ac7937fd0b32ebfced83cfdc8799573140994ad9fdee4edf52aa0fbb7dfc4115f9ee78bd091ae1a72abaa2deb9ec1afa89477148ae61dc7178ced1b5c757", 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) r2 = dup(r0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x1) 13:06:16 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000300)=0x10000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x7, 0x3}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={r1, 0xffffffffffffff81, 0x6}, &(0x7f0000000340)=0x177) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000140)={{0xfffffffffffffffe, 0x3}, 'port0\x00', 0x1, 0x10004, 0x0, 0x7fff, 0x3, 0x130, 0xffffffff, 0x0, 0x4, 0xf9}) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f00000002c0)={0x1, 0x80000001}) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x2, 0x100}) getdents(r0, 0x0, 0x0) 13:06:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3d1ff7ec}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) dup3(r0, r1, 0x0) 13:06:16 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:16 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 13:06:16 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r1, &(0x7f0000000180)="2f7dc7ac7937fd0b32ebfced83cfdc8799573140994ad9fdee4edf52aa0fbb7dfc4115f9ee78bd091ae1a72abaa2deb9ec1afa89477148ae61dc7178ced1b5c757", 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) r2 = dup(r0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x1) 13:06:16 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000000)="2e3d6b84f7b15a2e5975113e5dcf1fc4c69178a949b11b8e75", &(0x7f0000000140)=""/70}, 0x18) getdents(r0, 0x0, 0x0) 13:06:16 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3d1ff7ec}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) dup3(r0, r1, 0x0) 13:06:17 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x5, 0x8) lseek(r0, 0x0, 0x3) 13:06:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3d1ff7ec}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) dup3(r0, r1, 0x0) 13:06:17 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x4441, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000400)={0xd0, 0x1, 0x85, &(0x7f0000000340)="ca582444ba41bd6906100e99c7e888118d463dd0b7e0bc2aff6fcdf4f0d8d6e87bfe3da488d6a963b9c343057bec1ae8e77b2ff6fec784d847fb7dc7317c40fd51916bf8dd900d1cbe1f5f35c9abdea1a8a7304538b06a474c89f6669d10b70f6ffadc25f2c0024a20fe6168f50a188f448d7d7725f491e7d3c8cbf8e92a3d0a099f1e0f73"}) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r2, 0xfffffffffffffffc, 0x1) getdents(r2, &(0x7f0000000080)=""/181, 0xb5) getdents(r2, 0x0, 0x0) 13:06:17 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047459, &(0x7f0000000180)) 13:06:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3d1ff7ec}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) dup3(r0, r1, 0x0) 13:06:17 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) lseek(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x30, 0x5, 0x20}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r1, 0x4) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000200)={{0x0, 0x4, 0xe, 0xf00, 0xffffffffffffff3c, 0xfffffffffffff13b, 0x28, 0x21, 0x2, 0x7, 0x0, 0x3}, {0xf000, 0x4001, 0x9, 0x4, 0x8, 0x0, 0x24ab, 0x10000, 0x20, 0xbc74, 0x20, 0xfffffffffffffff8}, {0x10f004, 0x0, 0xd, 0x2, 0x6, 0x1f, 0x5, 0xfffffffffffff000, 0x7, 0x1000, 0x0, 0x3}, {0x0, 0xf000, 0xb, 0x3, 0x4, 0x1ff, 0x4, 0xdf8, 0xec7, 0x62, 0x9, 0x4}, {0xf004, 0x0, 0x0, 0xf8d, 0x80000001, 0x5, 0x8, 0x8, 0x2, 0x2c, 0x866}, {0x3000, 0x4002, 0xc, 0x1, 0x0, 0x200000000, 0x2020000000000000, 0x6, 0x4, 0x8, 0x7, 0x6}, {0x100000, 0x2, 0xf, 0x20, 0x4, 0x3, 0xff, 0x8, 0xffffffffffffff46, 0x81, 0x1, 0x100}, {0x107000, 0x2000, 0xa, 0x20, 0x4, 0x9, 0x401, 0x8, 0xffffffff, 0x7fff, 0xff, 0x1f}, {0x10001, 0x7001}, {0xd000, 0x6000}, 0x20, 0x0, 0xd000, 0x100, 0x5, 0x100, 0x100000, [0x8, 0x6, 0x3, 0x1ff800]}) getdents(r0, 0x0, 0x0) 13:06:17 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002bbd7000fbdbdf25010000000000005825410000001800170000000e000000d97564703a73797a3200000000"], 0x34}}, 0x80) lseek(r0, 0x46, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000001c0)={{0x9ea4, 0xff, 0x1, 0x7, 0xffffffff7fffffff, 0x7}, 0x8}) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x8) 13:06:17 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) eventfd(0x101) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:17 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3d1ff7ec}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) dup3(r0, r1, 0x0) 13:06:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3d1ff7ec}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) dup3(r0, r1, 0x0) 13:06:17 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x2) 13:06:17 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000004c0), 0x4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0xfffffffffffffe01, {{0xa, 0x4e24, 0x101, @mcast2, 0x6}}, 0x1, 0x7, [{{0xa, 0x4e22, 0x1e8, @dev={0xfe, 0x80, [], 0x18}}}, {{0xa, 0x4e24, 0x4792, @loopback, 0x8}}, {{0xa, 0x4e24, 0x3f, @dev={0xfe, 0x80, [], 0x19}, 0xfffffffffffffff7}}, {{0xa, 0x4e22, 0x2, @mcast1}}, {{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x12}, 0x8000}}, {{0xa, 0x4e23, 0x1ff, @ipv4={[], [], @loopback}, 0x9}}, {{0xa, 0x4e22, 0x3fbd, @mcast1, 0xab}}]}, 0x410) ioctl$RTC_UIE_OFF(r0, 0x7004) 13:06:17 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047459, &(0x7f0000000180)) 13:06:17 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgrou].cpu\x00G\xf0', 0x200002, 0x0) fchdir(r0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x10602, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000180)={0x1, 0x1, 'client1\x00', 0xffffffff80000000, "0bd69ee316f8d79e", "4a0771e05e0e210504e85042503535db0a98477016e7455d4869e9c13c81d7cd", 0x7, 0x5}) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000003c0)={'ipvs\x00'}, &(0x7f0000000400)=0x1e) getdents64(r1, &(0x7f00000002c0)=""/79, 0xfffffe8a) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000340)) lseek(r2, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000000)=0x3ff) getdents(r2, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000240)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000280)={r4, 0x80000, r2}) 13:06:17 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000000)=0xb0) 13:06:18 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f00000002c0)) r1 = open(&(0x7f0000000280)='./file0\x00', 0x4000, 0x4) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @local}}, [0x3ff, 0x5, 0x4000000000000000, 0x8ddb, 0xc286, 0x6, 0x10001, 0x7, 0x5, 0x7, 0x80, 0x1, 0x101, 0x3, 0x4]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r2, 0x9}, 0x8) 13:06:18 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)) write$P9_RLINK(r0, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) write$vhci(r0, &(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, "fbef24fe722c5c0685951035682c3470edba500d2043b5fd9ab115b6dda20201914eaf3b308d8da54bf66eb20ab95a6bd1edaba6468fe6fd4c81e312da9152d99a0f8cd65d9b3ffd2fd4771287f871d9ac683dee662896953a4360852292765c2f145c6962eeaa8c412894ee14a4b4bb5b44c3b599249d7b16ec5923f52c039369a5a572b19e5efb60bb9c9704b09a837f3c28319c6bc4c2e3426f473bde276552bef763497ad52088299486f7226941d5d11597c38584f1fd30"}, 0xbb) 13:06:18 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3d1ff7ec}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) dup3(r0, r1, 0x0) 13:06:18 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047459, &(0x7f0000000180)) 13:06:18 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x62000, 0x0) lseek(r0, 0x0, 0x4) 13:06:18 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x18) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x400000) 13:06:18 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0xfffffffffffffffd) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:06:18 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047459, &(0x7f0000000180)) 13:06:18 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) fchdir(r0) ppoll(&(0x7f0000000200)=[{r1, 0x1}, {r1, 0x4020}, {r1, 0xa1}, {r0, 0xc021}, {r0, 0x2402}, {r0, 0x8400}, {r0, 0x10}, {r0, 0x80}], 0x8, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f0000000280), 0x8) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) perf_event_open$cgroup(&(0x7f0000000180)={0x7, 0x70, 0x1, 0x7, 0x3, 0x4, 0x0, 0x7fff, 0x0, 0xa, 0x400, 0xfffffffffffffffb, 0x6e7d, 0x1ff, 0x7f, 0x1ff, 0x1, 0x3, 0x6, 0x0, 0x3, 0x8538, 0x0, 0x78a, 0x7, 0x4, 0x20, 0x9, 0x5, 0xbf7, 0x9, 0xffffffffffffffff, 0x1, 0xffffffffffffffc0, 0x3, 0x6, 0xffff, 0x2, 0x0, 0x100000001, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x201, 0x800, 0x9, 0x0, 0xffffffff, 0x7, 0xecaa}, r2, 0xc, 0xffffffffffffff9c, 0xb) lseek(r2, 0xfffffffffffffffc, 0x3) getdents(r2, &(0x7f0000000080)=""/181, 0xb5) getdents(r2, 0x0, 0x0) 13:06:18 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000000)) 13:06:19 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000000)=0xb0) 13:06:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x400000) 13:06:19 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x80000000000000, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:06:19 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 13:06:19 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x2, 0x4) 13:06:19 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x400000, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000480)={0x7fff, 0x4, 0x1000}, 0x4) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x1ff, @rand_addr="101ee678cf0d15dc8e788d1d639e7ff9", 0x56b}}, 0x80000000, 0x6, 0x7, 0x3, 0x66}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e24, 0x1, @rand_addr="7549e0f54d01c55387114f1c698ff1e5", 0x9}}, [0x6, 0x8, 0x80000001, 0x9, 0x2, 0x2, 0x100000001, 0x6, 0x3, 0x4, 0x20, 0x5b, 0xb4, 0x7fff, 0x3]}, &(0x7f0000000340)=0x100) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0x20000000000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3ff}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x3, @loopback, 0x80}, @in6={0xa, 0x4e24, 0x80, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xb1e}, @in6={0xa, 0x4e23, 0x4, @mcast1, 0x3}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0xb}, 0x4}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, @in6={0xa, 0x4e21, 0x1, @local, 0x1000}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x770d, @loopback, 0x1}], 0xf4) 13:06:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x400000) 13:06:19 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000140)={{0x7, 0x1f, 0x100000001, 0x49, 0x2, 0x101}, 0x5, 0x4, 0x5}) getdents(r0, 0x0, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000180)={0xd0, 0xfffffffffffffffe, 0x5, [{0x3, 0x6, 0x0, 0x5}, {0x1, 0x81, 0x17, 0x8001, '%\xb9{mime_typeusercgroup-'}, {0x6, 0x0, 0x42, 0x7ff, 'cpusetvboxnet0vboxnet0*)selinux,keyringusertrustedposix_acl_access'}, {0x1, 0x99, 0x0, 0x100}]}, 0xd0) 13:06:19 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x80) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000080)={0xf9, 0x0, [0x1, 0x8, 0x101, 0x5]}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x2) lseek(r1, 0x0, 0x4) 13:06:19 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x802) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000140)=0x6, 0x4) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:19 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 13:06:19 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000140)={0x56, 0xffffffff80000000, 0xdeb, {0x5, 0x3}, {0x0, 0x8}, @rumble={0x5d98f7bd, 0x10000000000}}) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0x800) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000280)=0x1ff) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000180)=""/182, 0x100000, 0x1800, 0x100}, 0x18) 13:06:20 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000000)=0xb0) 13:06:20 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) read(r0, &(0x7f0000000000)=""/26, 0x1a) 13:06:20 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x400000) 13:06:20 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 13:06:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) ioctl$KIOCSOUND(r1, 0x4b2f, 0x224) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:20 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200000, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000180)=0x32) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000000)) getdents(r0, &(0x7f0000000280)=""/181, 0xffffffe2) getdents(r1, 0x0, 0x0) 13:06:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2000, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000180)={0x68, 0x8, 0x8}) fchdir(r0) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r2, 0xfffffffffffffffc, 0x3) write$FUSE_IOCTL(r1, &(0x7f00000001c0)={0x20, 0xffffffffffffffff, 0x2, {0x1000, 0x4, 0x4, 0x7fff}}, 0x20) getdents(r2, &(0x7f0000000080)=""/181, 0xb5) getdents(r2, 0x0, 0x0) 13:06:20 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)={0x3ff, 0x8000, 0x100000000}) lseek(r0, 0x0, 0x4) 13:06:20 executing program 2: r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:06:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcc, &(0x7f0000000000), 0x3c) 13:06:20 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) 13:06:20 executing program 3: r0 = open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r2, 0x100) fcntl$getown(r0, 0x9) openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x40000, 0x0) lseek(r0, 0x0, 0x4) 13:06:20 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000000)=0xb0) 13:06:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcc, &(0x7f0000000000), 0x3c) 13:06:20 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x20) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:06:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) fsetxattr$security_evm(r0, &(0x7f0000000140)='security.evm\x00', &(0x7f0000000180)=@ng={0x4, 0x11, "33b1a419c6415dcc771c3e"}, 0xd, 0x2) getdents(r1, 0x0, 0x0) 13:06:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 13:06:20 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x6, [0x7, 0x5, 0x7ff, 0x68fc, 0x81, 0x10000]}, 0x10) 13:06:21 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x2, 0x400000) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x4, 0x1}}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000180)='attr\x00') getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcc, &(0x7f0000000000), 0x3c) 13:06:21 executing program 3: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x0, 0x3, 0x9, [], &(0x7f0000000000)=0x9}) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f00000000c0)={0x4, 0x102000}) 13:06:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 13:06:21 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:21 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e22, @loopback}}) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0xfffffffffffffdeb) 13:06:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 13:06:21 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) name_to_handle_at(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x63, 0x6, "727ac98d7bc2933de69e69b43ce5c29da121cd334a91583ebbc82e1631c881c0609a7f58665ae43f691fd4cadb02fbe359a31811d63ac63566c8705f06b18ab9971c7fa7694c30add50c63213f615fab0c488f9bfe8dec1c3390c5"}, &(0x7f0000000200), 0x1000) getdents(r1, 0x0, 0x0) 13:06:21 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000)=0x1, 0x4) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000080)=[0x80, 0x3]) 13:06:21 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcc, &(0x7f0000000000), 0x3c) 13:06:21 executing program 2: r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents64(r0, &(0x7f00000001c0)=""/95, 0x5f) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) uselib(&(0x7f0000000000)='./file0\x00') getdents(r0, 0x0, 0xffffffffffffff07) acct(&(0x7f0000000140)='./file0\x00') 13:06:21 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x7fff) 13:06:22 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x61, 0x1000, &(0x7f0000000080)="245ee812cd91a2acddc2982c3a4b5892c5fb1acf9b07d413ff3a7173f22c619a2dfad6bf060baf13c93ec8e0bf04ed89dc7bf92ef7134c7ff1f2a54620ccada302fce4191f51428a7bdcaad6cc03c3e0efb599ecb00906f26ba6ae6f2caa87a45c", &(0x7f0000000100)=""/4096, 0x7fff}, 0x28) 13:06:22 executing program 4: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000136000)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f000079dff8), 0x8) 13:06:22 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'user.', '%..(nodevmd5sum$vmnet0\x00'}) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000340)=0xe8) getpeername$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) accept4$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14, 0x800) getsockname$packet(r1, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000007c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000800)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000900)=0xe8) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000980)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000ac0)=0xe8) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000002f80)={@rand_addr, @loopback, 0x0}, &(0x7f0000002fc0)=0xc) getpeername$packet(r1, &(0x7f0000005c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005c40)=0x14) accept$packet(r1, &(0x7f0000005c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000005cc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005d40)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000005e40)=0xe8) accept4$packet(r1, &(0x7f0000005f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005fc0)=0x14, 0x80000) accept4$packet(r1, &(0x7f0000006000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000006040)=0x14, 0x80800) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000006440)={@empty, 0x0}, &(0x7f0000006480)=0x14) getpeername$packet(r1, &(0x7f00000064c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006500)=0x14) getpeername$packet(r1, &(0x7f0000006540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006580)=0x14) accept4$packet(r1, &(0x7f00000065c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000006600)=0x14, 0x800) accept4$packet(r1, &(0x7f0000006640)={0x11, 0x0, 0x0}, &(0x7f0000006680)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000006800)={'vcan0\x00', 0x0}) accept$packet(r1, &(0x7f0000006840)={0x11, 0x0, 0x0}, &(0x7f0000006880)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000006fc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4100104}, 0xc, &(0x7f0000006f80)={&(0x7f00000068c0)={0x6b4, r2, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x4}}, {{0x8, 0x1, r4}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x17c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x7, 0xed4, 0x0, 0x9}, {0x10000, 0x80000001, 0x100, 0x7fff}, {0x8001, 0x8, 0x3, 0x5a}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xff30}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r8}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x130, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r12}, {0x140, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r13}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r15}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0xf8, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r19}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r20}, {0xf8, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}]}, 0x6b4}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 13:06:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil}) 13:06:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x7fff) 13:06:22 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x80, 0x3}, {0x7f, 0xff}]}, 0x14, 0x3) getdents(r0, 0x0, 0x0) 13:06:22 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) io_setup(0x7ff, &(0x7f0000000000)=0x0) io_submit(r1, 0x4, &(0x7f0000000400)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000000080)="c332f8895a25408dfbf3a151d7ed9c93d43e2ac1f6859301d4575b4f1c0c086d59f876ba80e8da8e6371a601145b958dcbb4819b3052d563919f33da3579cc2913439df9c4d75396cd18f2d48115f1cc5c7515fc572973b6abde39ed43d5cd55346f66d62364807d9df93ff8b4a0b127f17d8bf48a24ed8a4ac38fc6a1c1aa552e2fddee54fd90aec34ac468c3d9acd854294968c1b40d937b8cb05d5c233776d8327947f3908dc5d76bfc46e50fd9fb05b1f92166cd08beca1b4f18885cf2995fb8c3f125bbfa9cf774a708", 0xcc, 0x8, 0x0, 0x2, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f00000001c0)="a3e1123333763ce65b25826dd9871dcb04ebcbee27c2676ce0c120157a1d3fd47df7c0bb661f562c91ac185bcf3d194dc74cec0ac3a9f4c41dc31fe08688521f0698ca4c1184454036ae762c4187dcac6fddd5380a1183e72636444e964af56673f100ac0aec47920e1ed90b63b6d7dbdef6e28b0b59f78a8db21e86e67c484b1266c377d3f091b970239b9801466afe507fd594626fc29f5bd6adba4e8a1f9aa3d4778eb6244ec24a15e5c51381", 0xae, 0x200, 0x0, 0x2, r0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x10000, r0, &(0x7f00000002c0)="33c0ed81752694afafdbe0f5540b76c226e7996f03f5fe4bc533566685b9bd17f747ca9082c767d75f90a0e254cda0819ad2d9ef0fe3c0519d33508a75e4b2ca4ac34db5ae9025fc713f1da660120c4a54814cc318374bdf1a67ad8dac6fc318760258f4", 0x64, 0xfffffffffffffeff, 0x0, 0xea6719f91c09523f, r0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x39, r0, &(0x7f0000000380)="963202a4ac6ce46d51950214c5fddb7fed83ab30bfa7f00f1119b448a57e13c6016e9d", 0x23, 0x36, 0x0, 0x2}]) syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0xbdd, 0x800) 13:06:22 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x6f, 0x3, "9d688b71537b743840706704a74e436f7d39cf4f16f54643c6322cb99c29d648aa7e72e1b28223b5db824ed8c9990c16fca8ac75b91aa1b980455a680c1aa123c27d0bc5f70beb19f92f9fafe9841e667387c0f6086d821a40249b25e517f6afbf4e9ff2bc8c61"}, &(0x7f00000001c0), 0x400) 13:06:22 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x7fff) 13:06:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f00000000c0)) 13:06:22 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x101800, 0x0) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:22 executing program 4: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000136000)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f000079dff8), 0x8) 13:06:22 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) readahead(r0, 0x2400, 0x6) r1 = gettid() perf_event_open(&(0x7f0000000140)={0x5, 0x70, 0x400, 0x8, 0x401, 0x3, 0x0, 0x0, 0x800, 0x3, 0xfc00000000000000, 0x5, 0x7, 0xa6, 0x2, 0xfffffffffffffff9, 0x9f, 0x1, 0x4, 0x6, 0x85, 0x8, 0x7fff, 0x401, 0x80, 0x7, 0x1f, 0x0, 0x6, 0x6, 0x4, 0x1, 0x7, 0x5, 0x1000, 0x80, 0x6, 0x86bf, 0x0, 0x744, 0x5, @perf_bp={&(0x7f0000000000), 0x4}, 0x10040, 0x9, 0x1, 0x0, 0x4, 0x5, 0x3ff}, r1, 0x5, 0xffffffffffffff9c, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000001c0)={0x3, 0x4, [0x1]}) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:06:22 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) 13:06:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f00000000c0)) 13:06:23 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendfile(r1, r0, 0x0, 0x7fff) 13:06:23 executing program 4: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000136000)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f000079dff8), 0x8) 13:06:23 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x1, 0x0) lseek(r0, 0x0, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0x0) 13:06:23 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0xfffffffffffffffe) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000080)={{0x0, 0x10000, 0x5, 0xffffffffffffff00, 0xffffffff, 0x7}, 0x3, 0x1, 0xe7a, 0x8000, 0x3, "f080480f55f9f728300fec46d4361f8e12762a2223f963bb00a5f5abe43a9aa41c763cde4e91acadac5a8afdc30b40453b56fd676e8502b53a0e12fb4da2b39020f615fb697f36ea9e0822d03af37eafc9d643abead3a107510eb053d9de15ab22b7a15102a1e608649bb1cb810e5c9f56c9a93f8b089267da2a1c20dfcae9a7"}) lseek(r0, 0x0, 0x4) 13:06:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x829, 0x0, 0x0, {0x1000003}, [@typed={0x8, 0x1, @binary="ff"}]}, 0x1c}}, 0x0) 13:06:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x80000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0xb08, 0x8000, 0x7fffffff, 0x20, r2}, 0x10) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r3, 0xfffffffffffffffc, 0x1) eventfd(0x7) getdents(r3, &(0x7f0000000180)=""/181, 0xb5) getdents(r3, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000140)={'bridge_slave_1\x00', {0x2, 0x4e21, @remote}}) 13:06:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f00000000c0)) 13:06:23 executing program 4: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000136000)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x9}}, 0x0) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1c9c380}, &(0x7f000079dff8), 0x8) [ 348.543924] netlink: 'syz-executor5': attribute type 1 has an invalid length. 13:06:23 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200200, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="02c000697faccba146c5b032fea6d5e5158784f2ab15ce20c5ce86521c0e878500a0271e063c5f14f7d643d1eb16e67a5914f34849ab435055bd87db55b19b22a7a497d19f0f"], 0x8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0x5, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xf5, "938ea3d2685ef4b9e650118e4bea458067d9eb05d94864d90d2cfd35fa95bda5a98e6cbc4851d005f0a8b5006a9bcb764517a135d34ccc276ea8d2a9832dc9edf96b7455d4a28c16cabb2fe6741836bcedc5523be85c3169a574247f9e6ca3e220f24d2fadc12a4cd8d43d02394c11f2b01fb9aa5820694eb31a0ff4b9f0e1460101836572deb5df564698a9a527d1d0393fe7aff5fe50efe0e2ab8155cd81abefd71c953523ac4b0b10ba4b2afa7c46ae3a3ff8eefff1cfe6769fdc74116702dd466c1582cc542764807aea759194b4084cd12bec08f482686807f192685023704a732d2ab6fc00177ed658c943a54a5b7543fefc"}, &(0x7f0000000080)=0xfd) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r2, 0x3800000}, &(0x7f0000000300)=0x296) 13:06:23 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000200)={0x0, 0x7, 0xec, 0x1}, 0x8) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x1f, 0x0, 0x6, 0xfb25}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r1, 0x1}, &(0x7f00000001c0)=0x8) getdents(r0, 0x0, 0x0) clock_gettime(0x7, &(0x7f0000000300)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000240)={0xb94}, &(0x7f0000000280), &(0x7f0000000340)={r2, r3+10000000}, 0x8) 13:06:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f00000000c0)) 13:06:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000140)={0xb11, "f484b5c420fa0f2110dc63ca59d1cb5934b858f8dbd716514c68c68a98496304", 0x1000, 0x72, 0x9, 0x5, 0x6}) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x829, 0x0, 0x0, {0x1000003}, [@typed={0x8, 0x1, @binary="ff"}]}, 0x1c}}, 0x0) [ 348.932224] netlink: 'syz-executor5': attribute type 1 has an invalid length. 13:06:24 executing program 3: lseek(0xffffffffffffffff, 0x0, 0x4) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x10001, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000080)={0xa, 0x1, 0x5, 0x3ff, 'syz1\x00', 0x9}) memfd_create(&(0x7f0000000000)='\x00', 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000040)="ffcb611fb62819041c3033", 0xb, r0}, 0x68) 13:06:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/4096, 0x1000) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r0, 0xfffffffffffffffc, 0x10000000000001) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x829, 0x0, 0x0, {0x1000003}, [@typed={0x8, 0x1, @binary="ff"}]}, 0x1c}}, 0x0) [ 349.179142] netlink: 'syz-executor5': attribute type 1 has an invalid length. 13:06:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0xfffffffffffffef4) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)) timer_create(0x1, &(0x7f0000000580)={0x0, 0x0, 0x4, @thr={&(0x7f0000000380)="a8ae8d6a578e00ca5745fd30e0b9887d2752701684d1eb42270da9ccf766d402cda298359767f9c78f9a74fad9119c8e58ea56244ff6402625463f81815698d356053471b79991aed2140da3a28d7baacd8d38f367cb433d068302c5bbe87016b77a866bb821dc4d7a1308a99d356c914ad03b60038cd9d47060f7c190c6bc0d32b844e0a0306935579b827199a5ae12271faf5d3607ba5a867f9fae20f436a42507f535ba9e9de5e65a6828f2cc52bc9fe134c9819be5166c86a21ef7e64511731b6b75eb3a29a7efd6897efe3781420d529361de5bcc00e6b05840af50", &(0x7f0000000480)="2c9beef09c2886ce5f32c0f81eb69a46653855d1d5bfcecd1c43115b86b605fbafdb4ab4da3f7ab3109cc350becb619869e8082742f736bddd73f0cd7d2d3eb928498942ad0456dec6294d5aa053c64f33bac4c72d4bf2e9297dd37a66681c9c8d0fdfe7eae7d6190933947c49fe364794c9ecb6772dde10e5758ca3b32c0ebeb9c4287ce8f1a5760c9a8efa4dc725ae6fdbc2a08b2cc1fd54f20a251cb1f31d154f6546f5fac71b160b370716b4fbb80b277a6df53eb4eb1cb953c85cd7d36229c7800bde7dc44abfe160bc617eb11f4ec66b64dc2fbfa063cb86bdda030ac14c682108"}}, &(0x7f00000005c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000240)={0x6, 0x4e, 0xfa00, {{0xe2, 0xfffffffffffffff9, "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", 0xf6, 0x2, 0x0, 0x165, 0x80, 0x100, 0x100000000}, r2}}, 0x120) getdents(r1, 0x0, 0x0) 13:06:24 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x420000, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f00000000c0)=0x4) r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r1, 0x8, 0x53, 0x1000, 0x100000001}) 13:06:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x829, 0x0, 0x0, {0x1000003}, [@typed={0x8, 0x1, @binary="ff"}]}, 0x1c}}, 0x0) [ 349.386639] netlink: 'syz-executor5': attribute type 1 has an invalid length. 13:06:24 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) getpeername$packet(r0, &(0x7f0000000180), &(0x7f00000001c0)=0x14) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x1) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f0000000280)=""/14, 0xe}, &(0x7f0000000100), 0x8}, 0x20) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) fstat(r0, &(0x7f0000000200)) io_setup(0x800, &(0x7f00000000c0)=0x0) io_pgetevents(r1, 0x3, 0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0xe8000000000}, 0x8}) 13:06:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) getdents64(0xffffffffffffffff, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(0xffffffffffffffff, 0xfffffffffffffffc, 0x1) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5) getdents(0xffffffffffffffff, 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') 13:06:24 executing program 2: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="91e4ae5a23e9c648313fb63d402a21130d52c3e1152abdecc4c3095aafbce9c173a062cb196a37e22b88a650cfce112790", 0x31, 0xfffffffffffffffe) keyctl$get_security(0x11, r1, &(0x7f0000000200)=""/243, 0xf3) lseek(r0, 0x2, 0x3e) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) getdents(r0, 0x0, 0xffffffffffffff0f) socket$key(0xf, 0x3, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xff) 13:06:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x9, 0x200, 0x0, 0x0, 0x1b, 0x14, "f7cb6a4b0935c9f0dceceff3c77475a6acae4883cce6defc5b6e700deb747135e65dcf356390462d336b62f2606e2666f8a73c3c11b7c3422c59d73c2851cdff", "42cba4a3442ce1d0de44c993d8fc403201ba4e27a7e5d5fe207ab74284240e1556452c3053612fcf48fa682b18b320d892f5cf4f94c747a572299a52bb5c714e", "aa09de743a9f5c861b200e5a978c8da0e90a00ec7ddf13ffa311c9f8bf5be143", [0xffffffffffffbaec, 0xfffffffffffffffe]}) 13:06:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x230040, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vfio/vfio\x00', 0x400, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000400)=r2) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r3, 0xfffffffffffffffc, 0x1) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') read$eventfd(r1, &(0x7f0000000440), 0x8) r5 = accept(r3, &(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x80) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x84001000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000027bd7000fedbdf25050000002400070008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="0c00080082000000000000000c0005002000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) getdents(r3, &(0x7f0000000080)=""/181, 0xb5) getdents(r3, 0x0, 0x0) 13:06:24 executing program 2: r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0x15a) r1 = socket(0x3, 0x804, 0xfd2) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0408d5f50ba8eb310686822793b48425f28291"], 0x16, 0x1) getdents(r0, &(0x7f0000000080)=""/181, 0xb5) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000001340)={'team_slave_0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}}) syz_open_dev$sg(&(0x7f0000001300)='/dev/sg#\x00', 0xc92, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000240)=0xae8, 0x4) ioctl$void(r0, 0x5451) getdents(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x1, 0x80) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000001280)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000280)=""/4096, 0x1000, 0xcd, &(0x7f00000012c0)={r2, r3+10000000}) 13:06:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000140)=0x7fffffff) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='.z\a\xd305\xc7\xac\x04\x96\x9f\xc8\x812\x84\xc9\xd8\xde\xb4\xf6>\x84c\x0e\rR\xc5^%\xc3\x98\x18=\xf4\x92\x8f\xe3\xdb\x80\xea\x10Q&\xa4\ahZ\t\xb9\x03\'\xfe\xc4\xb42\x85m\x1c\x89c*b\xf3`\xa8\xa9\x915?E\x82y^yj\x19\xcc\x19\x95`\xb6F\xf7@\xb1\x10\xf9\xf7\x94Pq\xbd?Ab\xbe\vb\xc2x\x1c\xf7\xb6IF*\xe5\x83\xb2\xc2L8\xcacq\xa7H\xae3\xdb\x11\xcf\xc1\x01<\xea\xd7\xd4\xe0A`\xc6\xb1}\xab\x06\r:\xa1\x84\xd6\x8f\x8b\xb1\xfaNV%~M\xfbC(\xa5:\xe6\xf8t\xb2k\x9brl\xa3\xad\x12\xe0\xa1\x95\xa2\xe4\xdd\xfa\xcb`=B\xd3m\xd9xp\xbb\xe6\x0eY\xfa7\xdc\xb2A\x17e\x86\xb9\xea\\\x92r\x86\x8b\xe4\xfb\xf3\xf8/*\xf0\xf61\x1d\xd0i\x9e\x82\v.\x81\xdc\xc9\x9b\xd5\xa7\xd3]1\xcdbr\x1a\xa0\x9eU\xde\x9d\x18\x80\x1dd\xb6\xb1\x1b\x19~\xea\xf5\x8b\xc2\xf9\x9f\xbd4\xbemu\xb7\v\xb0\x1c\x10m\xd5\xc9\n\'g\xcc\x97\xeb\x1d\x1cZv[C', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000140)={0x179d, 0x0, 0x1}) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) 13:06:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x24, @loopback, 0x1}, r1}}, 0x30) r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) getdents(r2, &(0x7f0000000080)=""/181, 0xb5) ioctl$KVM_ASSIGN_SET_INTX_MASK(r2, 0x4040aea4, &(0x7f0000000200)={0x5, 0xfffffffffffffff7, 0x1, 0x2, 0x9}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000240)=r3, 0x4) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000001c0)=0x5) getdents(r2, 0x0, 0x0) 13:06:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) getdents(r1, 0x0, 0x0) r2 = request_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)='+proc\x00', 0xfffffffffffffff9) keyctl$describe(0x6, r2, &(0x7f0000000200)=""/74, 0x4a) 13:06:25 executing program 2: lseek(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/181, 0xb5) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) getdents(r0, 0x0, 0x0) 13:06:25 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x66, 0x0, &(0x7f0000012000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x803, 0x32, 0xffffffffffffffff, 0x0) close(r0) 13:06:25 executing program 3: r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'bond_slave_1\x00', &(0x7f0000000040)=@ethtool_rxfh={0x46, 0x4, 0x100, 0x40, 0x7fffffff, "c048ee", 0x1, [0x7]}}) lseek(r0, 0x0, 0x800000004) r1 = getegid() r2 = getgid() stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r1, r2, r3) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @local}, &(0x7f0000000100)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="75268bfff0ffff0104000000ffffffff00500400070000000215fcff24000000001600050000000000000000000000008f6fa02fb1dcc62eedb5bf9f81ecd5dd68b5f834e93fe3530be8b40e57de573705ee22aeccf7ea730c4589bcd8afc43afaa7d3e6564c164296b9f70717ab7e2e9a782d6aa4e68b4dbe20147f0d12d2701a72c9a8fe8af1a0298323a3b86f5a41835f98e29dca9e5423544c6fce7abd8f57b5746071d2eeebc5446b5ad51147bdc1aee4ecf98906e615d10903a7a2281e0f754693e63fea5e1dfce3622f9e3fabcc3ded08e8b266a3734f0f4f2f74f40663"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, [], r4}, 0x48) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000003c0)={0x8, 0x3, 0x400, 0x2, 0x3, 0x3}) 13:06:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000780)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aSJ\xb9\xe1}Q\xf8\xb4 kt\x06\xf6%\x15\x92zv\xb3\xf8h>\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91{Pq\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\x00\x00b\x9d\xde\x1d.1\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\x1cZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\x04\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd41\xfb3eu\xbd\r\xfe\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xce\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x06\x00\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xbfL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xc9\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xeb\xa7\x85\xd1&=\\e\x04\xa4go\xc1\xba\xa9\x0f\xb0k\x8b\xddp\xf5\xcbT\xa3\xe4\xd5\x87\xb5\x12\x92\x1b\x95S\x9c\x89\xe6\xc1&\xdbi\xb9\xc8l\xb0|6>x\xbc\x1a89B\x97yL\xc5{\xa7\x1b\xe0+NY{j \xf8\xb8; N\xb9C%\xb2\x8bK\x8f\xd3q\xf0\xde[a\xdf\x00\xf9\x17\xefhW\x02\xbb\x99\xb1\xbc\xe7i+\x8bAD\xec\nMax7\xab\xd9\x00c\xa7\xa6X\x8321>\x16\xe2X\x04]\\\x03\x9e\xe4\xc3\xb0\xc3\a\x03;\x9a\xa5\xafv\xa8\x13\xbb\xe4\x99\xe1\xbc\x1d[\xba\xe8\xc6a\x93l@\x8e\xb7-*\xdd\x84n3\xb1$M\xe4:\xf4n\x88\xe9\xf5\xc6\x9a\xe2!\n\xbf)u\x1b\x0f\x1d\x95hXw\xaeN!\x95\xd1\xd0W\x10U\xdb\xcc]c\xa7a\xcf(\x84\'\xcc\xacl\x85\xe5z&\x8f\x85R\x90\xc0\xa0g\xaf\x93\x9c;C\xe4\xe1[\x94\xe8\xae\x7f\x83\x89]\rN') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)) 13:06:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14}, 0x14}}, 0x20000044) 13:06:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000016c0)=""/79, 0x2d1cd2b520aa99d1) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB="0100f32841ba8bd7dee2"]) lseek(r1, 0xfffffffffffffffc, 0x1) getdents(r1, &(0x7f0000000080)=""/181, 0xb5) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000140)) getdents(r1, 0x0, 0x0) 13:06:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x743, 0xfff6) 13:06:25 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x66, 0x0, &(0x7f0000012000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x803, 0x32, 0xffffffffffffffff, 0x0) close(r0) 13:06:25 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x84) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r1}}, 0x38) 13:06:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14}, 0x14}}, 0x20000044) 13:06:25 executing program 3: open(&(0x7f0000000040)='.\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) 13:06:25 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000780)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aSJ\xb9\xe1}Q\xf8\xb4 kt\x06\xf6%\x15\x92zv\xb3\xf8h>\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91{Pq\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\x00\x00b\x9d\xde\x1d.1\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\x1cZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\x04\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd41\xfb3eu\xbd\r\xfe\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xce\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x06\x00\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xbfL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xc9\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xeb\xa7\x85\xd1&=\\e\x04\xa4go\xc1\xba\xa9\x0f\xb0k\x8b\xddp\xf5\xcbT\xa3\xe4\xd5\x87\xb5\x12\x92\x1b\x95S\x9c\x89\xe6\xc1&\xdbi\xb9\xc8l\xb0|6>x\xbc\x1a89B\x97yL\xc5{\xa7\x1b\xe0+NY{j \xf8\xb8; N\xb9C%\xb2\x8bK\x8f\xd3q\xf0\xde[a\xdf\x00\xf9\x17\xefhW\x02\xbb\x99\xb1\xbc\xe7i+\x8bAD\xec\nMax7\xab\xd9\x00c\xa7\xa6X\x8321>\x16\xe2X\x04]\\\x03\x9e\xe4\xc3\xb0\xc3\a\x03;\x9a\xa5\xafv\xa8\x13\xbb\xe4\x99\xe1\xbc\x1d[\xba\xe8\xc6a\x93l@\x8e\xb7-*\xdd\x84n3\xb1$M\xe4:\xf4n\x88\xe9\xf5\xc6\x9a\xe2!\n\xbf)u\x1b\x0f\x1d\x95hXw\xaeN!\x95\xd1\xd0W\x10U\xdb\xcc]c\xa7a\xcf(\x84\'\xcc\xacl\x85\xe5z&\x8f\x85R\x90\xc0\xa0g\xaf\x93\x9c;C\xe4\xe1[\x94\xe8\xae\x7f\x83\x89]\rN') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)) 13:06:25 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x66, 0x0, &(0x7f0000012000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x803, 0x32, 0xffffffffffffffff, 0x0) close(r0) 13:06:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14}, 0x14}}, 0x20000044) 13:06:26 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x84) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r1}}, 0x38) 13:06:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000780)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aSJ\xb9\xe1}Q\xf8\xb4 kt\x06\xf6%\x15\x92zv\xb3\xf8h>\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91{Pq\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\x00\x00b\x9d\xde\x1d.1\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\x1cZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\x04\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd41\xfb3eu\xbd\r\xfe\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xce\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x06\x00\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xbfL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xc9\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xeb\xa7\x85\xd1&=\\e\x04\xa4go\xc1\xba\xa9\x0f\xb0k\x8b\xddp\xf5\xcbT\xa3\xe4\xd5\x87\xb5\x12\x92\x1b\x95S\x9c\x89\xe6\xc1&\xdbi\xb9\xc8l\xb0|6>x\xbc\x1a89B\x97yL\xc5{\xa7\x1b\xe0+NY{j \xf8\xb8; N\xb9C%\xb2\x8bK\x8f\xd3q\xf0\xde[a\xdf\x00\xf9\x17\xefhW\x02\xbb\x99\xb1\xbc\xe7i+\x8bAD\xec\nMax7\xab\xd9\x00c\xa7\xa6X\x8321>\x16\xe2X\x04]\\\x03\x9e\xe4\xc3\xb0\xc3\a\x03;\x9a\xa5\xafv\xa8\x13\xbb\xe4\x99\xe1\xbc\x1d[\xba\xe8\xc6a\x93l@\x8e\xb7-*\xdd\x84n3\xb1$M\xe4:\xf4n\x88\xe9\xf5\xc6\x9a\xe2!\n\xbf)u\x1b\x0f\x1d\x95hXw\xaeN!\x95\xd1\xd0W\x10U\xdb\xcc]c\xa7a\xcf(\x84\'\xcc\xacl\x85\xe5z&\x8f\x85R\x90\xc0\xa0g\xaf\x93\x9c;C\xe4\xe1[\x94\xe8\xae\x7f\x83\x89]\rN') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)) 13:06:26 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x1, 0x1) flistxattr(r0, &(0x7f0000000080)=""/118, 0x76) 13:06:26 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x66, 0x0, &(0x7f0000012000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x803, 0x32, 0xffffffffffffffff, 0x0) close(r0) 13:06:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x2, 0x230, [0x20000a40, 0x0, 0x0, 0x20000a70, 0x20000bd8], 0x0, 0x0, &(0x7f0000000a40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'sit0\x00', 'hsr0\x00', 'bridge0\x00', 'syzkaller1\x00', @local, [], @random="310b5ea9f695", [], 0xc0, 0xc0, 0xf8, [@ipvs={'ipvs\x00', 0x28, {{@ipv6=@remote, [0xff000000, 0xff0000ff, 0xff, 0xff], 0x4e23, 0xbf, 0x6, 0x4e21, 0x3d, 0xa}}}]}}, @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, '\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x2a8) 13:06:26 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x84) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r1}}, 0x38) 13:06:26 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14}, 0x14}}, 0x20000044) 13:06:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000780)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aSJ\xb9\xe1}Q\xf8\xb4 kt\x06\xf6%\x15\x92zv\xb3\xf8h>\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91{Pq\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\x00\x00b\x9d\xde\x1d.1\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\x1cZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\x04\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd41\xfb3eu\xbd\r\xfe\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xce\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x06\x00\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xbfL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xc9\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xeb\xa7\x85\xd1&=\\e\x04\xa4go\xc1\xba\xa9\x0f\xb0k\x8b\xddp\xf5\xcbT\xa3\xe4\xd5\x87\xb5\x12\x92\x1b\x95S\x9c\x89\xe6\xc1&\xdbi\xb9\xc8l\xb0|6>x\xbc\x1a89B\x97yL\xc5{\xa7\x1b\xe0+NY{j \xf8\xb8; N\xb9C%\xb2\x8bK\x8f\xd3q\xf0\xde[a\xdf\x00\xf9\x17\xefhW\x02\xbb\x99\xb1\xbc\xe7i+\x8bAD\xec\nMax7\xab\xd9\x00c\xa7\xa6X\x8321>\x16\xe2X\x04]\\\x03\x9e\xe4\xc3\xb0\xc3\a\x03;\x9a\xa5\xafv\xa8\x13\xbb\xe4\x99\xe1\xbc\x1d[\xba\xe8\xc6a\x93l@\x8e\xb7-*\xdd\x84n3\xb1$M\xe4:\xf4n\x88\xe9\xf5\xc6\x9a\xe2!\n\xbf)u\x1b\x0f\x1d\x95hXw\xaeN!\x95\xd1\xd0W\x10U\xdb\xcc]c\xa7a\xcf(\x84\'\xcc\xacl\x85\xe5z&\x8f\x85R\x90\xc0\xa0g\xaf\x93\x9c;C\xe4\xe1[\x94\xe8\xae\x7f\x83\x89]\rN') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)) 13:06:26 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x84) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}, r1}}, 0x38) [ 351.666703] kernel msg: ebtables bug: please report to author: Valid hook without chain 13:06:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000080)={@link_local, @remote, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @empty, @remote, @empty, @mcast2}}}}, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000000d000009b690f20005000098f72849000000004000000000010000000000000025000000fffffffdfb080100000000000a00000006cd"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="060000000000000086010000"]) 13:06:26 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x5) [ 351.723903] kernel msg: ebtables bug: please report to author: Valid hook without chain 13:06:26 executing program 1: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000600000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0xd, 0x8, 0x0) 13:06:26 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) 13:06:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x2, 0x230, [0x20000a40, 0x0, 0x0, 0x20000a70, 0x20000bd8], 0x0, 0x0, &(0x7f0000000a40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'sit0\x00', 'hsr0\x00', 'bridge0\x00', 'syzkaller1\x00', @local, [], @random="310b5ea9f695", [], 0xc0, 0xc0, 0xf8, [@ipvs={'ipvs\x00', 0x28, {{@ipv6=@remote, [0xff000000, 0xff0000ff, 0xff, 0xff], 0x4e23, 0xbf, 0x6, 0x4e21, 0x3d, 0xa}}}]}}, @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, '\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x2a8) 13:06:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x8, 0xc04e27d3b502e3e1, 0x0, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x9cf0000000, 0x1}) 13:06:27 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@random={'user.', '\x00'}, &(0x7f00000000c0)='\x00', 0x1, 0x3) 13:06:27 executing program 1: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000600000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0xd, 0x8, 0x0) 13:06:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000080)={@link_local, @remote, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @empty, @remote, @empty, @mcast2}}}}, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000000d000009b690f20005000098f72849000000004000000000010000000000000025000000fffffffdfb080100000000000a00000006cd"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="060000000000000086010000"]) [ 352.250698] kernel msg: ebtables bug: please report to author: Valid hook without chain 13:06:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) 13:06:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000080)={@link_local, @remote, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @empty, @remote, @empty, @mcast2}}}}, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000000d000009b690f20005000098f72849000000004000000000010000000000000025000000fffffffdfb080100000000000a00000006cd"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="060000000000000086010000"]) 13:06:27 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x2, 0x230, [0x20000a40, 0x0, 0x0, 0x20000a70, 0x20000bd8], 0x0, 0x0, &(0x7f0000000a40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'sit0\x00', 'hsr0\x00', 'bridge0\x00', 'syzkaller1\x00', @local, [], @random="310b5ea9f695", [], 0xc0, 0xc0, 0xf8, [@ipvs={'ipvs\x00', 0x28, {{@ipv6=@remote, [0xff000000, 0xff0000ff, 0xff, 0xff], 0x4e23, 0xbf, 0x6, 0x4e21, 0x3d, 0xa}}}]}}, @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, '\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x2a8) 13:06:27 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) r1 = fcntl$getown(r0, 0x9) syz_open_procfs(r1, &(0x7f0000000000)='net/unix\x00') 13:06:27 executing program 1: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000600000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0xd, 0x8, 0x0) 13:06:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000080)={@link_local, @remote, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @empty, @remote, @empty, @mcast2}}}}, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000000d000009b690f20005000098f72849000000004000000000010000000000000025000000fffffffdfb080100000000000a00000006cd"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="060000000000000086010000"]) [ 352.672954] kernel msg: ebtables bug: please report to author: Valid hook without chain 13:06:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) 13:06:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000080)={@link_local, @remote, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @empty, @remote, @empty, @mcast2}}}}, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000000d000009b690f20005000098f72849000000004000000000010000000000000025000000fffffffdfb080100000000000a00000006cd"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="060000000000000086010000"]) 13:06:27 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.nlink\x00', &(0x7f0000000100)=""/118, 0x76) lseek(r0, 0x0, 0x4) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) 13:06:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x2, 0x230, [0x20000a40, 0x0, 0x0, 0x20000a70, 0x20000bd8], 0x0, 0x0, &(0x7f0000000a40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'sit0\x00', 'hsr0\x00', 'bridge0\x00', 'syzkaller1\x00', @local, [], @random="310b5ea9f695", [], 0xc0, 0xc0, 0xf8, [@ipvs={'ipvs\x00', 0x28, {{@ipv6=@remote, [0xff000000, 0xff0000ff, 0xff, 0xff], 0x4e23, 0xbf, 0x6, 0x4e21, 0x3d, 0xa}}}]}}, @snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x0, '\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @link_local, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x2a8) 13:06:28 executing program 1: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000600000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000040)=0xd, 0x8, 0x0) 13:06:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000080)={@link_local, @remote, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @empty, @remote, @empty, @mcast2}}}}, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000000d000009b690f20005000098f72849000000004000000000010000000000000025000000fffffffdfb080100000000000a00000006cd"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="060000000000000086010000"]) [ 353.115446] kernel msg: ebtables bug: please report to author: Valid hook without chain 13:06:28 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) 13:06:28 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$TIOCCBRK(r0, 0x5428) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000080)=""/138) fallocate(r0, 0x1, 0xfffffffffffffeff, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000000)={0x8, 0x7, 0x7, 0x80, '\x00', 0x7}) 13:06:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000080)={@link_local, @remote, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @empty, @remote, @empty, @mcast2}}}}, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000000d000009b690f20005000098f72849000000004000000000010000000000000025000000fffffffdfb080100000000000a00000006cd"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="060000000000000086010000"]) 13:06:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000080)={@link_local, @remote, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @empty, @remote, @empty, @mcast2}}}}, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000000d000009b690f20005000098f72849000000004000000000010000000000000025000000fffffffdfb080100000000000a00000006cd"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="060000000000000086010000"]) 13:06:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2) add_key(&(0x7f0000000340)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="9a", 0x1}], 0x1) [ 353.449265] sg_write: process 410 (syz-executor2) changed security contexts after opening file descriptor, this is not allowed. 13:06:28 executing program 5: unshare(0x8000400) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000100)=""/174) 13:06:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2) add_key(&(0x7f0000000340)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="9a", 0x1}], 0x1) 13:06:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000080)={@link_local, @remote, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @empty, @remote, @empty, @mcast2}}}}, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000000d000009b690f20005000098f72849000000004000000000010000000000000025000000fffffffdfb080100000000000a00000006cd"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="060000000000000086010000"]) 13:06:28 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x189080, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), 0x0) sendfile(r1, r1, 0x0, 0x2000005) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) 13:06:28 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8931, &(0x7f00000000c0)={'veth0_to_team\x00', @ifru_map={0x100}}) 13:06:28 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x9) 13:06:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000080)={@link_local, @remote, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @empty, @remote, @empty, @mcast2}}}}, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000000d000009b690f20005000098f72849000000004000000000010000000000000025000000fffffffdfb080100000000000a00000006cd"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="060000000000000086010000"]) [ 354.095540] print_req_error: I/O error, dev loop0, sector 768 13:06:29 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8931, &(0x7f00000000c0)={'veth0_to_team\x00', @ifru_map={0x100}}) 13:06:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2) add_key(&(0x7f0000000340)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="9a", 0x1}], 0x1) 13:06:29 executing program 3: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x200000000000080) unshare(0x4000400) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}}) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000000)) lseek(r0, 0x0, 0x4) 13:06:29 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local, 'bond0\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000003c40)) 13:06:29 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x189080, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), 0x0) sendfile(r1, r1, 0x0, 0x2000005) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) 13:06:29 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) write$evdev(r0, &(0x7f0000000240)=[{{}, 0x0, 0x1}], 0xfec4) 13:06:29 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8931, &(0x7f00000000c0)={'veth0_to_team\x00', @ifru_map={0x100}}) 13:06:29 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2) add_key(&(0x7f0000000340)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="9a", 0x1}], 0x1) 13:06:29 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local, 'bond0\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000003c40)) [ 354.716173] print_req_error: I/O error, dev loop0, sector 768 13:06:29 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8931, &(0x7f00000000c0)={'veth0_to_team\x00', @ifru_map={0x100}}) 13:06:29 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x0, 0x4) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000000)={r0, 0x6, 0x2, r0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpid() fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000002780)={0x0, 0x5}, &(0x7f00000027c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000002800)={r7, 0x1}, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000ac0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000b00)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000c00)=0xe8) r10 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c40)={0x0}, &(0x7f0000000c80)=0xc) lstat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = gettid() lstat(&(0x7f0000002500)='./file0\x00', &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000025c0)='./file0\x00', &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f00000026c0)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000100)="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", 0xfa}, {&(0x7f0000000200)="edde0a045b1ece19e7b6b2cde3008df8ad46dd3dfb19b9f6371a2e414e6a6266a6d8cf9419d62bf4a244fc330cdc1ec65581857ece4772b8f4fbad50a1d0039517a7c7205fc0a7b8c67c1a1594c10831c7c7ea4ff999b450ae83c0eb596584bf09d078e7ad5ac7d6", 0x68}, {&(0x7f0000000280)="820948f54f7983615e01e324f48c0c4c6f9bc2c7f31af5363f36841af95cd0e4e40f4dd66af1263f8195d8d764116dfaf0fac2c8d3c8917cefa7f5d9f3fdbb3bd0484eec3c80985276bfcb16fb35121b930f5e343482451f06a965804988f70a2b164c24f04d4bc1e94fa5c18566e9502a9ba0f664e4a6f7091dbd94fa3f994befae2b21c3c9047e7ee7625b0d563d76604b1ebd085807a7bc89b3630eea7af3b193052ae8306b0d8db8e0f18de7c982372d820ffd9dd79783197c8e7886d5590303a481132821fde744229e65", 0xcd}, {&(0x7f0000000380)="6afbf283b6d2f7e20d0ac706d2fea2b481d919ef78576224e6150211a827cb790239ffef7c97c2bbbcb2", 0x2a}, {&(0x7f00000003c0)="f7ec9b281c0ca40ae807514f82682a1704bdf626ab7b6b708cf0b882", 0x1c}], 0x5, &(0x7f0000000780)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}], 0x40, 0x8801}, {&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000840)="b51617a9381ae0c3e03d0b8b8133490dcb6734e66f0233faaf44dfea2103e755b89ac01b5d0c81bf17f06f6f66f64b", 0x2f}, {&(0x7f0000000880)="ff1e5b8d0ee99fd686f60074f49f6dfaaa749554ef7ffe84513a7687ddd83c1123c5cbcee56e4b951997486405f13367506d83a71aaf85b39ff6f319c0591e66a489dd00cccd4d38a6dde5ea2a9a0b75f280532707403c703b3381dd5761667f04e31bf85eda995c03c6f79dc274ffb7d56bfb5036262ee9927e734ae3b79c6a25ae5ccc5b00f00203c942c0f1116e86cac4cbe800d1c92b1b71d42056f4bcc7dbeda9df043029d2a4dde2f3b82bedbdd76f887fcb62cc3e9076f8780f0a0ca7a8c30cf4b393f8568ca2d969fd8814c7f6e561a918635b32fcaf0e22fdec6feb9b31a295eb", 0xe5}, {&(0x7f0000000980)="8be2f6725a898f603f0b4a81702deaa906a7bde9956345608f990f5bc7bc8f5f3f5cace68f9e2a1eb0161a909f2a7dae34ba2b83ba14a517602bbe1d4cfaab15d1762ac3d29fc28bb6e54a31b83598e73510fc2d0bfcfb5024e468c241669f34dfc0b9bc1d3fd806c9ff96343e422e995764e53df2d1579528558f3ea1faf1cf76661bb24864ee1f60f67103c2e012c7df12c495745af8193364e48126902a328e14929b6be19ee18dc31388cb866aecf5868014b8d41f794ed097c98ab453a2450aea2b837adbd2c9ec96d1ab7d3363d1945979b674e7a0c1f08b806b678ae84a3581e07f615a8e10d3da10b2a9b9", 0xef}], 0x3, &(0x7f0000000e40)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xb8}, {&(0x7f0000000f00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002440)=[{&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000001f80)="832f5825c8cf099fe32b877c79f5aeb0ac7eb2777401753ee958fb4f45545ec0b8c7bec9a521cb622cd89e776e1d07d876f21c813d28563265d77e057c9645c3662cf5c4f29096b7986040137be2ba6df7d6e85098f2f72c69f0ae263bf8e848caa02a85b7a92f875af0e880804c13c21e5ff3075e0e65e5537dee4ffe142008ea1abf107f597b5f913b18761aebf2aa04c60d49775db7b845fd33333aa61f", 0x9f}, {&(0x7f0000002040)="22da87dff069dc0f3ce4a719588fde776e1ac5dc8ab541a68e4c3e51e31cfd7409c83e93fc2cd172075f5a2d", 0x2c}, {&(0x7f0000002080)="a902c7505014bc5d75a937ef48af400dcb0d091265b4f6ef4e7e4d38a03033a3e82cdb59e6028b970c17dd744883d41be28cba6c108057bb8694cd5c90be966c8701c504340edddb07db", 0x4a}, {&(0x7f0000002100)="b2c528426c0907963643efd8e2ad4815841eb8bbf7bcb72bf6ef6a6a78afc0abe27da72b8f62eb6df8da102d1153b171534a", 0x32}, {&(0x7f0000002140)="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", 0xfc}, {&(0x7f0000002240)="e78421884c43d0792e24452d11d77a165fc5c9f58574c4e526f48105c8601d8195798a2b7de904172a52588791e80214af063411b3dd1005414acd6532405f4f0fa9b4ac9348c58ffc0666f289c673ef4acae02c14b4067ed559463b7d052552876158fbf8e4cd550b1aeecd61104d51fc23fab3e14bbeb9c3feb4dde36cab22d2340789146e0e824fe27ba1c7aca70c1dd02a2ba9e448af272324f6", 0x9c}, {&(0x7f0000002300)="c1e792f7ed93189d0b48fd67dc2e55b7aa157a94226718b1320cc042a54c5e2fd8bac2976d73df92025cc957a5e13f43d3fbf0b88933e336de5c536654103747258203dca3dbf6fbf36a37c861425e14acf4a1565a6e7c2fca76354f1c311b931bb4237936ded60ead33a1651215b6390d565495a1e008c964468bb504c37d5f7bdc63f9d7d3617c9f5b902634cbf0a3898a9c0fc16f6dc2e7c57368dda64aa4fad166322a011d4889b402f5b0e2da6befb1fa16ac87a476d7e2ae77ba3c", 0xbe}, {&(0x7f00000023c0)="ea36b071c5725f81092c70fad94c222adc3da058a715bfda5934eb1d08b7f6ae644274abeb4815996920587e4b16fa16ae2995eb7725669852fca7dbe8c2317f5cb32d46d1e7a52713a8333246c2fc8727eb5e72cb3bfd7c012c17ad8955cc23fb9ad485ef385b2f9ad6e191f17a29", 0x6f}], 0x9, &(0x7f0000002680)=[@cred={0x20, 0x1, 0x2, r14, r15, r16}], 0x20, 0x40000}], 0x3, 0x1) 13:06:30 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x189080, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), 0x0) sendfile(r1, r1, 0x0, 0x2000005) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) 13:06:30 executing program 2: r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000280)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="27000000000000002900000039000000c902020100ff3a063ca3115f83856832b87f25f8fba8ca"], 0x27}, 0x0) 13:06:30 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local, 'bond0\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000003c40)) 13:06:30 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000481000)=""/128, 0x80) 13:06:30 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x180) lseek(r0, 0x0, 0x4) 13:06:30 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) write$evdev(r0, &(0x7f0000000240)=[{{}, 0x0, 0x1}], 0xfec4) [ 355.247197] print_req_error: I/O error, dev loop0, sector 1024 13:06:30 executing program 2: r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000280)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="27000000000000002900000039000000c902020100ff3a063ca3115f83856832b87f25f8fba8ca"], 0x27}, 0x0) 13:06:30 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local, 'bond0\x00'}}, 0x1e) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000003c40)) 13:06:30 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x189080, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), 0x0) sendfile(r1, r1, 0x0, 0x2000005) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) 13:06:30 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000481000)=""/128, 0x80) 13:06:30 executing program 3: r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x3, r0}) lseek(r0, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000180)={0x0, 0x1, 'client0\x00', 0x6, "eea3fbb154b77653", "63f05715a4fc923188927d5d6035b33c36a3666f00", 0x9, 0x100000000}) ioctl(r0, 0x10100000000000, &(0x7f0000000140)="58e47f50c5d93b6a64cfd8e3eee078bd623c5859ec0b86bcf4b6a673c8e0bf53bc1b04349ca375b081f54906abad97") 13:06:30 executing program 2: r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000280)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="27000000000000002900000039000000c902020100ff3a063ca3115f83856832b87f25f8fba8ca"], 0x27}, 0x0) 13:06:30 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80) 13:06:31 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x2) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)) write$evdev(r0, &(0x7f0000000240)=[{{}, 0x0, 0x1}], 0xfec4) 13:06:31 executing program 0: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x3}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000481000)=""/128, 0x80) 13:06:31 executing program 3: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x20) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000440)=&(0x7f00000003c0)) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000000000}, 0x4, &(0x7f0000000240)={&(0x7f0000000200)={0xfffffe0c, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0xfffffffffffffd1d}, 0x1, 0x0, 0x0, 0x4000}, 0x8008010) r2 = open(&(0x7f0000000040)='.\x00', 0x2, 0xffffffffffffffff) lseek(r2, 0x0, 0x4) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f00000004c0), &(0x7f0000000500)=0x4) lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000380)='TRUE', 0x4, 0x3) r3 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000200)='>', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x1b, &(0x7f0000000000)={r3}, &(0x7f00000000c0)=""/83, 0x53, &(0x7f00000001c0)={&(0x7f0000000340)={'sm4-generic\x00'}, &(0x7f0000000300), 0xfffffffffffffdfb}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000480)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000540)=0x5) 13:06:31 executing program 2: r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000280)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="27000000000000002900000039000000c902020100ff3a063ca3115f83856832b87f25f8fba8ca"], 0x27}, 0x0) 13:06:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80) 13:06:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='/exe\x00\x00\x00\x00\x00\x005\xc8\xe1\xe8\xf7\x8f>\rqz\xc1\x88\x9aE\xe5\x81\xc9\xe1Jk\x8f\x95\xf5\xd2\x86\x8a\xe8\xc7V\xe9\xd1\x8f\xd6\x9a\xb3\xc8\xdbZo\x16+H\xc8F\xb9uO\xef\xbf\x0e<\x0f\x82\xbf\xbb\xc3\xdd\xeb\xb6`\x9b\x03\xfb\xb4M$gy\xf3\x82>=oF\xd3,\xe9\xbb\x12\xa2\xa0\x05N\xd9\x1bk\x1f\xf6\xcbh\xe0\xe9\xc2\xbb\xb8T>\x9fmr\xf6\x1c\x9c\xea\xe48\x19\ti*\x94\x88\xc3:\xa7\x84ho\xca;\xe4\x18\xd8\xdb\x04N\xb7\xc6\x91') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280), 0x8) [ 356.382897] ================================================================== [ 356.390342] BUG: KMSAN: uninit-value in keyctl_pkey_params_get+0x294/0x7c0 [ 356.397382] CPU: 1 PID: 13728 Comm: syz-executor3 Not tainted 4.20.0-rc7+ #6 [ 356.404579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.413952] Call Trace: [ 356.416614] dump_stack+0x173/0x1d0 [ 356.420296] kmsan_report+0x12e/0x2a0 [ 356.424135] __msan_warning+0x82/0xf0 [ 356.427983] keyctl_pkey_params_get+0x294/0x7c0 [ 356.432674] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 356.438080] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 356.443296] keyctl_pkey_params_get_2+0x211/0x5e0 [ 356.448187] keyctl_pkey_e_d_s+0x113/0x660 [ 356.452520] __se_sys_keyctl+0xf5d/0x1b00 [ 356.456713] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 356.462204] ? prepare_exit_to_usermode+0x114/0x420 [ 356.467253] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 356.472500] ? syscall_return_slowpath+0xb2/0x650 [ 356.477396] ? __msan_get_context_state+0x9/0x20 [ 356.482221] __x64_sys_keyctl+0x62/0x80 [ 356.486226] do_syscall_64+0xbc/0xf0 [ 356.489988] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 356.495199] RIP: 0033:0x457ec9 [ 356.498420] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 356.517358] RSP: 002b:00007f53c7ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 356.525092] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457ec9 13:06:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'syz_tun\x00'}) [ 356.532378] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000000001b [ 356.539678] RBP: 000000000073bf00 R08: 00000000200001c0 R09: 0000000000000000 [ 356.546965] R10: 0000000000000053 R11: 0000000000000246 R12: 00007f53c7ce16d4 [ 356.554262] R13: 00000000004c3876 R14: 00000000004d6358 R15: 00000000ffffffff [ 356.561562] [ 356.563202] Local variable description: ----args.i@keyctl_pkey_params_get [ 356.570128] Variable was created at: [ 356.573866] keyctl_pkey_params_get+0xaa/0x7c0 [ 356.578463] keyctl_pkey_params_get_2+0x211/0x5e0 13:06:31 executing program 2: io_setup(0x97, &(0x7f0000000000)=0x0) io_destroy(r0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0xfffffc21, 0x0, 0x0, 0x293) io_submit(r0, 0x0, 0x0) 13:06:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80) [ 356.583320] ================================================================== [ 356.590695] Disabling lock debugging due to kernel taint [ 356.596168] Kernel panic - not syncing: panic_on_warn set ... [ 356.602077] CPU: 1 PID: 13728 Comm: syz-executor3 Tainted: G B 4.20.0-rc7+ #6 [ 356.610670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.620067] Call Trace: [ 356.622687] dump_stack+0x173/0x1d0 [ 356.626356] panic+0x3ce/0x961 [ 356.629621] kmsan_report+0x293/0x2a0 [ 356.633488] __msan_warning+0x82/0xf0 [ 356.637341] keyctl_pkey_params_get+0x294/0x7c0 [ 356.642050] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 356.647471] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 356.652701] keyctl_pkey_params_get_2+0x211/0x5e0 [ 356.657619] keyctl_pkey_e_d_s+0x113/0x660 [ 356.661942] __se_sys_keyctl+0xf5d/0x1b00 [ 356.666159] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 356.671644] ? prepare_exit_to_usermode+0x114/0x420 [ 356.676699] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 356.681948] ? syscall_return_slowpath+0xb2/0x650 [ 356.686851] ? __msan_get_context_state+0x9/0x20 [ 356.691637] __x64_sys_keyctl+0x62/0x80 [ 356.695641] do_syscall_64+0xbc/0xf0 [ 356.699391] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 356.704615] RIP: 0033:0x457ec9 [ 356.707833] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 356.726752] RSP: 002b:00007f53c7ce0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa 13:06:31 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_triestat\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x80) [ 356.734484] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457ec9 [ 356.741782] RDX: 00000000200000c0 RSI: 0000000020000000 RDI: 000000000000001b [ 356.749088] RBP: 000000000073bf00 R08: 00000000200001c0 R09: 0000000000000000 [ 356.756405] R10: 0000000000000053 R11: 0000000000000246 R12: 00007f53c7ce16d4 [ 356.763690] R13: 00000000004c3876 R14: 00000000004d6358 R15: 00000000ffffffff [ 356.772023] Kernel Offset: disabled [ 356.775655] Rebooting in 86400 seconds..