[ 54.540510][ T26] audit: type=1800 audit(1567234876.086:25): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 54.580186][ T26] audit: type=1800 audit(1567234876.086:26): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 54.629740][ T26] audit: type=1800 audit(1567234876.086:27): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 55.072567][ T8619] sshd (8619) used greatest stack depth: 23464 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.61' (ECDSA) to the list of known hosts. 2019/08/31 07:01:23 fuzzer started 2019/08/31 07:01:26 dialing manager at 10.128.0.26:45397 2019/08/31 07:01:26 syscalls: 2487 2019/08/31 07:01:26 code coverage: enabled 2019/08/31 07:01:26 comparison tracing: enabled 2019/08/31 07:01:26 extra coverage: extra coverage is not supported by the kernel 2019/08/31 07:01:26 setuid sandbox: enabled 2019/08/31 07:01:26 namespace sandbox: enabled 2019/08/31 07:01:26 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/31 07:01:26 fault injection: enabled 2019/08/31 07:01:26 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/31 07:01:26 net packet injection: enabled 2019/08/31 07:01:26 net device setup: enabled 07:04:09 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) semget$private(0x0, 0x0, 0x100) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$netlink(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x0, 0xfff, 0x200, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x0, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x1, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440)}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000700), &(0x7f0000000740)=0x75) ftruncate(0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) sysinfo(&(0x7f0000000240)=""/59) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40485404, &(0x7f0000000200)={{0x1}}) write(0xffffffffffffffff, &(0x7f0000000580)="24000000210005ff006b000421ed382002190008000000000010ffea", 0x1c) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/zero\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x40000) 07:04:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCFLSH(r2, 0x8925, 0x70e000) syzkaller login: [ 228.560188][ T8722] IPVS: ftp: loaded support on port[0] = 21 [ 228.598588][ T8724] IPVS: ftp: loaded support on port[0] = 21 07:04:10 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af12, &(0x7f0000000000)) [ 228.841189][ T8724] chnl_net:caif_netlink_parms(): no params data found [ 228.867160][ T8722] chnl_net:caif_netlink_parms(): no params data found [ 228.964198][ T8728] IPVS: ftp: loaded support on port[0] = 21 [ 228.971048][ T8722] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.979304][ T8722] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.994537][ T8722] device bridge_slave_0 entered promiscuous mode [ 229.005702][ T8724] bridge0: port 1(bridge_slave_0) entered blocking state 07:04:10 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4b47, 0xfffffffffffffffe) [ 229.013508][ T8724] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.023595][ T8724] device bridge_slave_0 entered promiscuous mode [ 229.034225][ T8722] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.044452][ T8722] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.053171][ T8722] device bridge_slave_1 entered promiscuous mode [ 229.065753][ T8724] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.073286][ T8724] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.083553][ T8724] device bridge_slave_1 entered promiscuous mode [ 229.133061][ T8722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.173462][ T8722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.186439][ T8724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.197874][ T8724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.228070][ T8722] team0: Port device team_slave_0 added [ 229.249022][ T8731] IPVS: ftp: loaded support on port[0] = 21 [ 229.265778][ T8722] team0: Port device team_slave_1 added [ 229.276580][ T8724] team0: Port device team_slave_0 added [ 229.323014][ T8724] team0: Port device team_slave_1 added 07:04:10 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af10, &(0x7f0000000000)) [ 229.388207][ T8728] chnl_net:caif_netlink_parms(): no params data found [ 229.457467][ T8722] device hsr_slave_0 entered promiscuous mode [ 229.530445][ T8722] device hsr_slave_1 entered promiscuous mode 07:04:11 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af10, &(0x7f0000000000)={0x0, 0x2}) [ 229.618103][ T8734] IPVS: ftp: loaded support on port[0] = 21 [ 229.662924][ T8724] device hsr_slave_0 entered promiscuous mode [ 229.710315][ T8724] device hsr_slave_1 entered promiscuous mode [ 229.760513][ T8724] debugfs: Directory 'hsr0' with parent '/' already present! [ 229.804383][ T8728] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.811803][ T8728] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.819589][ T8728] device bridge_slave_0 entered promiscuous mode [ 229.836216][ T8736] IPVS: ftp: loaded support on port[0] = 21 [ 229.873018][ T8728] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.880406][ T8728] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.888147][ T8728] device bridge_slave_1 entered promiscuous mode [ 229.938624][ T8728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.955491][ T8728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.998546][ T8728] team0: Port device team_slave_0 added [ 230.011845][ T8731] chnl_net:caif_netlink_parms(): no params data found [ 230.029513][ T8728] team0: Port device team_slave_1 added [ 230.072616][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.079862][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.088055][ T8731] device bridge_slave_0 entered promiscuous mode [ 230.097429][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.104560][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.112242][ T8731] device bridge_slave_1 entered promiscuous mode [ 230.169477][ T8731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.186559][ T8731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.208115][ T8731] team0: Port device team_slave_0 added [ 230.254303][ T8728] device hsr_slave_0 entered promiscuous mode [ 230.310462][ T8728] device hsr_slave_1 entered promiscuous mode [ 230.350511][ T8728] debugfs: Directory 'hsr0' with parent '/' already present! [ 230.359824][ T8731] team0: Port device team_slave_1 added [ 230.368245][ T8734] chnl_net:caif_netlink_parms(): no params data found [ 230.471886][ T8731] device hsr_slave_0 entered promiscuous mode [ 230.520582][ T8731] device hsr_slave_1 entered promiscuous mode [ 230.560162][ T8731] debugfs: Directory 'hsr0' with parent '/' already present! [ 230.574769][ T8734] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.581975][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.589742][ T8734] device bridge_slave_0 entered promiscuous mode [ 230.613385][ T8734] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.620761][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.628378][ T8734] device bridge_slave_1 entered promiscuous mode [ 230.657333][ T8736] chnl_net:caif_netlink_parms(): no params data found [ 230.670845][ T8722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.679782][ T8734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.696977][ T8724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.708965][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.716163][ T8731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.724033][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.731133][ T8731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.748512][ T8734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.774018][ T8734] team0: Port device team_slave_0 added [ 230.786614][ T8734] team0: Port device team_slave_1 added [ 230.809136][ T8722] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.822117][ T8729] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.830327][ T8729] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.843684][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.852287][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.894973][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.905290][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.914254][ T8740] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.921489][ T8740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.929126][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.936954][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.947216][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.003329][ T8734] device hsr_slave_0 entered promiscuous mode [ 231.050659][ T8734] device hsr_slave_1 entered promiscuous mode [ 231.090146][ T8734] debugfs: Directory 'hsr0' with parent '/' already present! [ 231.098019][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.105579][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.113690][ T8736] device bridge_slave_0 entered promiscuous mode [ 231.123096][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.130229][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.138366][ T8736] device bridge_slave_1 entered promiscuous mode [ 231.154098][ T8724] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.163976][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.173257][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.182282][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.189474][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.197277][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.206067][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.214602][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.221744][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.229680][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.269221][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.278570][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.287814][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.295279][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.303315][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.313879][ T8736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.324996][ T8736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.363814][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.373440][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.382564][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.392068][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.400586][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.422418][ T8736] team0: Port device team_slave_0 added [ 231.443488][ T8728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.452218][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 231.461732][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 231.471171][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.479430][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.491600][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.499911][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.508396][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.516865][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.525349][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.533682][ T8737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 231.543312][ T8736] team0: Port device team_slave_1 added [ 231.552963][ T8731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.560836][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.589656][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.603054][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.612319][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.620288][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.627927][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 231.635919][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 231.660691][ T8728] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.669285][ T8722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.686315][ T8722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.700696][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 231.709182][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 231.718234][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 231.726831][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 231.735508][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 231.762962][ T8731] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.779211][ T8722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.793508][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.808926][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.821635][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.828727][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.837036][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.846030][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.854511][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.863795][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.871894][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.932218][ T8736] device hsr_slave_0 entered promiscuous mode [ 231.980415][ T8736] device hsr_slave_1 entered promiscuous mode [ 232.050452][ T8736] debugfs: Directory 'hsr0' with parent '/' already present! [ 232.064676][ T8724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.082101][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.109265][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.121830][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.130796][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.139612][ T8729] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.153797][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.162936][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.195055][ T8728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.213871][ T8728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.228452][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.242944][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.253817][ T8740] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.261085][ T8740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.269008][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.278381][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.286935][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.295418][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.304168][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.351563][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.370565][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.379222][ T8740] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.387179][ T8740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.397048][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.405965][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.431239][ C0] hrtimer: interrupt took 32594 ns [ 232.439238][ T8728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.457113][ T8734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.489548][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.502784][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.521798][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.548819][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.557761][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 232.566566][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.575010][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 232.583554][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.594608][ T8731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.753469][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.787899][ T8734] 8021q: adding VLAN 0 to HW filter on device team0 07:04:14 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x400, 0x8) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000980)='team\x00') recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000009c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000a40)=""/171, 0xab}, {&(0x7f0000000b00)=""/75, 0x4b}, {&(0x7f0000000b80)=""/230, 0xe6}, {&(0x7f0000000c80)=""/15, 0xf}], 0x4}, 0x40000000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'vcan0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000e00)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000e40)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000f40)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000f80)={@broadcast, @broadcast, 0x0}, &(0x7f0000000fc0)=0xc) accept$packet(0xffffffffffffffff, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001040)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000001080)={0x11, 0x0, 0x0}, &(0x7f00000010c0)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001380)={0x0, @multicast1, @empty}, &(0x7f00000013c0)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000001400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001440)=0x14, 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001600)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001680)={'veth0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001800)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000001900)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001940)={{{@in6=@ipv4={[], [], @loopback}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000001a40)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001a80)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f0000001ac0)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001b00)={'nlmon0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001b80)={{{@in=@initdev, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000001c80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001d80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001dc0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001e00)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001e40)={@dev, @remote, 0x0}, &(0x7f0000001e80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001ec0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001fc0)={0x0, @loopback, @local}, &(0x7f0000002000)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000002040)={@local, @local, 0x0}, &(0x7f0000002080)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000027c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000002780)={&(0x7f00000020c0)={0x6a0, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xbc, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r9}, {0x100, 0x2, [{0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4c, 0x4, [{0x2e7438f8, 0x6, 0x8, 0x100000001}, {0x14ed914b00000, 0x60d, 0x7f, 0x9}, {0x4, 0xfffffffffffffcf9, 0x9, 0x6}, {0x8, 0xffffffffffffffff, 0x7ff, 0xfffffffffffffff8}, {0x1, 0xfff, 0x9, 0x2807}, {0x2, 0x1, 0x1, 0xfffffffffffffffc}, {0x0, 0x3f, 0x6, 0x5}, {0x0, 0x1ff, 0x60f986c4, 0x6}, {0x43060fac, 0x401, 0x2, 0x80000001}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x100, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fc7}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x238, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x30000000000}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r24}}}]}}, {{0x8, 0x1, r25}, {0x90, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xff}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x1, 0x100000000, 0x5, 0x7}, {0x7, 0x16, 0x3, 0x101}, {0x6, 0x2, 0x1, 0x400}, {0xfffffffffffffff8, 0x2, 0x5a, 0x5}]}}}]}}, {{0x8, 0x1, r26}, {0x40, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x6a0}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) r27 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r27, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf002}, 0x334, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000092a388a7e40db60f45caebd66ace0000", @ANYRES32=r28, @ANYBLOB="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"], 0x42e}}, 0x0) [ 232.820424][ T8736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.845365][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.861426][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 07:04:14 executing program 0: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x300, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000140, 0x20000170, 0x200001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) [ 232.964886][ T8736] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.003327][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.022797][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.061866][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.069136][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state 07:04:14 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x4400) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x82, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) [ 233.118102][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.127929][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.136588][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.143871][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.187405][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.210960][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.243389][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.260859][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.288107][ T8731] 8021q: adding VLAN 0 to HW filter on device batadv0 07:04:14 executing program 0: r0 = socket$packet(0x11, 0xb399afa4ba43927, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001180)={0x0, @remote, @initdev}, &(0x7f00000011c0)=0xc) getsockname$packet(r0, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001280)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1\x00', r2}) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000001200)={0x0, 0x1000, 0x100, 0x1f, 0x4}, 0x14) listen(r4, 0xfc0004) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="19", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf3}, 0xb) recvfrom$packet(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x72f715b1, 0x6, 0x4, 0x7, 0xffffffffffffffff}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="0503032206063e0000000200c52cf7c25975e605b02f80357f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0x3fb2, 0x0, 0x0, 0x0) [ 233.343403][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.365048][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.417634][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.457930][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.494473][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.525380][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.563397][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.604924][ T8742] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.612231][ T8742] bridge0: port 1(bridge_slave_0) entered forwarding state 07:04:15 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) dup2(r2, r3) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r4 = socket$inet6(0xa, 0x6, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) ioctl$SIOCAX25ADDFWD(r5, 0x89ea, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) sendmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10}], 0x10}}], 0x1, 0x0) [ 233.665194][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.712526][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.747470][ T8742] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.754675][ T8742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.815319][ T8734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network 07:04:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x100000001, 0x400) connect$netlink(r2, &(0x7f0000000140)=@unspec, 0xc) ioctl$int_in(r1, 0x40000000af01, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x88000, 0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "28044d5c75f13d10", "44e4a899775e8b2356cf8c5cfe21a084", "57cdebe6", "5693dd8846e1a3a0"}, 0x28) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)=ANY=[@ANYBLOB="070000000000000002000000000bbc0500000000001c00f600000000003354278c66261b6a2e9c45b0b48ce5bac274e6b7b173dca2014e814569470300000000000000d5495e462dae75e0634bdf4aa02db521ba122e86bb6c6dc20f0a8bb68fffcefa5b46ea1582557202cab49a7e9bbd3c4e092588ce2720d3865d28a0704fa3cfb1fecbea768930340100000000008031202a99096590609ca6b7a7b6b9a57e2577fd86319c8c41cf98ad71c3377588bdd91f795f8a6bd3de39ff0037b7bcd1758af9c99e31c6a3859dbdbc733bf5f0"]) dup2(r0, r1) [ 233.872092][ T8734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 07:04:15 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x801, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000000180)=""/171, 0xab}, &(0x7f0000000240), 0x7e}, 0x20) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x9, 0x7}, 0x1, 0x7, 0x800, {0x1ff}, 0x8, 0x9}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x5, 0x800, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001180)={r2, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) [ 233.932325][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.955242][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.004757][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.041598][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.084052][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.124437][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.151986][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.189287][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.222373][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 07:04:15 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x801, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000000180)=""/171, 0xab}, &(0x7f0000000240), 0x7e}, 0x20) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x9, 0x7}, 0x1, 0x7, 0x800, {0x1ff}, 0x8, 0x9}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x5, 0x800, 0x3}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001180)={r2, &(0x7f0000000040), &(0x7f00000021c0)=""/4096}, 0x18) [ 234.249230][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.282573][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.321487][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.351312][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.375305][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.398756][ T8740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 07:04:16 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0) write$P9_RRENAMEAT(r1, &(0x7f0000000340)={0x7, 0x4b, 0x1}, 0x7) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0xe2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000040)={0x51, 0x0, {0x3, 0x0, 0x1f, 0x3, 0x8}}) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000380)) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0xa34, 0xffffffffffffff81, 0x100000001, 0x3}) write$cgroup_subtree(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="0055c5128dde8003aaa174036ed7e08f93dd86dd20"], 0xfdef) socket$kcm(0x2, 0x2, 0x73) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000200)={{0x4, 0x5, 0x6, 0x0, 'syz1\x00', 0x2}, 0x3, 0x30, 0x72f1, r4, 0x4, 0x3ff, 'syz1\x00', &(0x7f0000000180)=['/dev/net/tun\x00', '\'trustedem0wlan0-GPLselfppp1^trusted\x00', '/dev/net/tun\x00', 'nr0\x01\x00'], 0x44, [], [0x10001, 0x4, 0x9]}) [ 234.437091][ T8734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.463070][ T8736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.503857][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.559437][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.580995][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.608598][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 234.700715][ T8736] 8021q: adding VLAN 0 to HW filter on device batadv0 07:04:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) kcmp(r1, r2, 0x3, r0, r0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0x7ffffffffffff00c}, {0x6}]}, 0x10) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[]}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r5, 0x0, 0x10001, 0x0) 07:04:16 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3, 0x4, 0x7, 0x4, 0x0, 0x1, 0x20080, 0xdd5d70240fdd5721, 0x400, 0x8, 0x8be7, 0xe95, 0x0, 0x6, 0x5, 0x8, 0x6, 0x3ff, 0x401, 0x0, 0xc4, 0xfff, 0x400, 0x81, 0xc87a, 0x80000001, 0x0, 0x20, 0xe6f, 0x80000001, 0x93bb, 0xfffffffffffffff7, 0x4, 0x10001, 0x100000000, 0x3ff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000000c0), 0x3}, 0x250, 0x8, 0x77, 0x3, 0x2, 0x539}, r1, 0x6, r0, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4000, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='reiserfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='/[wlan1\x17cpuset.ppp0system)\x00', &(0x7f0000000080)='securityfs\x00', 0x0) close(r3) 07:04:16 executing program 5: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x2000) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 07:04:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x800, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/80) write$apparmor_current(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0xd) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffde3, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0124fc0010000b400c000200053582c137153e370900018004081700d1bd", 0x2e}], 0x1}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x10080, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0xb) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 07:04:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x100}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x400, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7, 0x90000) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000180)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00t\x00\x00\x00\x00\x04\x00', 0x221565395964279b}) 07:04:16 executing program 0: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x92\xee2\xc2$Wx\x15^\xdaM\xeaB\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WZ;\xce\x05\xfc\x95\xd9\x88\x1f|\x8b\xf1\xbf\xf2u\xdd\xd8AV\xd87\x96M\xea\xd2\xa2iM\xe9\xa1\xbc\xba}\xbe\xa1\x05J\"\f\xf9\b\xcf\xb8J\x13#\xecT\xdf\xe0\x9dOA>\xe9\x99\xf8\xaf@{dw\b\xe7{\xaf\x9a\x1e3\xc1\x83&\x89\xc2\xa5\xb1\xe2NN\xdf\xd3\x0f{\x8c\xc1\xc8y\x01\x04\x00\xc7\x94\xe3\x89|\xd7\x9f\xd3\x06\x17\xe6]\xd7\x81q\x1d\x1dN\x9e\xf4c\x83\x86_\xfc\xbc\xdd\xd4{\xde\xc4\xe5\xb6\b;L\x1cN\xa2\xc9k\xd7 \xc3\xe4\x19\x96\x8c\x04\xea\x9c9\xfa\xe3\xc1\x8dDuTHL\n\xe8\xb7oSx\'\xfd=\xfc\xa4\xa51\b\x02j\xb7\x98{`\x89\x8c\xd3\xc6\xe8\xe2\x9b\xd7\xab\xd1s\xfb\xaa\xcd\x9d\xf1\x9e\xee\xe3e\xf1\x91\xf7\xee%\xf8\xc7G', 0x2761, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000040)=r1, 0xab) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000003c0)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00000002c0)=""/251}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r0, r2}) sendmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x200, 0x70bd26, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x8080) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000140)={r0}) [ 235.277748][ T8886] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 07:04:16 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3, 0x4, 0x7, 0x4, 0x0, 0x1, 0x20080, 0xdd5d70240fdd5721, 0x400, 0x8, 0x8be7, 0xe95, 0x0, 0x6, 0x5, 0x8, 0x6, 0x3ff, 0x401, 0x0, 0xc4, 0xfff, 0x400, 0x81, 0xc87a, 0x80000001, 0x0, 0x20, 0xe6f, 0x80000001, 0x93bb, 0xfffffffffffffff7, 0x4, 0x10001, 0x100000000, 0x3ff, 0x0, 0x4, 0x1, @perf_bp={&(0x7f00000000c0), 0x3}, 0x250, 0x8, 0x77, 0x3, 0x2, 0x539}, r1, 0x6, r0, 0x1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4000, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='reiserfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='/[wlan1\x17cpuset.ppp0system)\x00', &(0x7f0000000080)='securityfs\x00', 0x0) close(r3) [ 235.355842][ T8886] device  entered promiscuous mode [ 235.385368][ T8891] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 07:04:17 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x3, 0x101, 0x800}, {0x5, 0x2, 0xae, 0x8}, {0x400, 0x3, 0x6, 0xfffffffffffffffd}, {0x4, 0x0, 0x9, 0x9b}, {0x5299, 0x977, 0x3, 0x8}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") futex(&(0x7f0000000040), 0x8, 0x0, 0x0, 0x0, 0x0) 07:04:17 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000000}, [@ldst={0x7, 0x3, 0x9}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 07:04:17 executing program 4: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x40083, &(0x7f00000003c0)=0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r2, 0x8200) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800003, 0x11, r3, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) fcntl$setstatus(r0, 0x4, 0x44800) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x2000003d) io_submit(r1, 0x1a00, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 07:04:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") clone(0x200000000a000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)='nodev\x11\x00', 0xfffffffffffffffe) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x50) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x300, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x1, 0x6, @l2={'ib', 0x3a, 'eql\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x87bc994383dce2c3}, 0x4000000) 07:04:17 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x2, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x280000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x303, 0x5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0xfffffffffffff583, @ipv4={[], [], @rand_addr=0x7}, 0x10f}}}, &(0x7f0000000140)=0x84) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000200)={0x0, "c78d82ca63599108a7061bb6783e8e132b9a6f6491d2b8974f4b75c56dd1fbaa", 0x2, 0x20, 0x10001, 0x80000000, 0x10, 0x0, 0x10001, 0x4eb}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x11) 07:04:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0xa2762718ec785d0, 0x0, 0x0, 0x342) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)={0xc, 0x0, "1b975b08"}, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000140)={0x57, 0x2, 0x3, {0x7, 0x4}, {0x40, 0x2}, @cond=[{0xc0, 0x7, 0x8, 0x8, 0x6, 0x100000001}, {0x87, 0xfffffffffffffffa, 0x3, 0x6, 0x10000, 0x2}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 235.784671][ T8916] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 07:04:17 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) sendmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x6000, 0x0) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000100)) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000000c0)={0x1}, 0x8) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000700)="d5", 0x1}], 0x1}}], 0x1, 0x24000004) [ 236.003848][ T8931] syz-executor.4 (8931) used greatest stack depth: 22712 bytes left 07:04:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5285e0bcfe47bf070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xab4f, 0x410000) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000140)) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 07:04:17 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x400400, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000180)={0x101, 0x408f, 0x8, 0x10001}) keyctl$get_security(0x11, r0, &(0x7f0000000080)=""/160, 0xa0) 07:04:17 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffff, 0x202) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000003"], 0x5) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x5, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_delete(r1) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000080)={0x21}, 0x21) 07:04:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x1f) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x100, 0x34101) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000000c0)=0x100000001) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000c07e98)=ANY=[@ANYBLOB="540100001000130700000000000000000000000000000009000000000000000000000000000000000000ffffac14ffaa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000001c001700020000000000000000000000000000000000000000000000480001006d643500"/268], 0x154}}, 0x0) 07:04:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fstatfs(r0, &(0x7f00000000c0)=""/163) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ptype\x00') write$P9_RXATTRCREATE(r3, &(0x7f0000000840)={0x7, 0x21, 0x1}, 0x7) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) pipe2(&(0x7f0000000640)={0xffffffffffffffff}, 0x84000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000180)='wlan0ppp0\x00', 0xfffffffffffffffe) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, &(0x7f0000000480)={0x80000000, 0xd, "f3b5bf905a7fa3383545cb36ede8b18b5e2452b9677569b99fd59289bb68daa3", 0xb2b, 0xfffffffffffffffd, 0x40, 0x0, 0x0, 0x5, 0x101, 0x80, [0x7, 0xffffffff, 0x9, 0x1f]}) r8 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r7, &(0x7f00000001c0)='trusted\x00', &(0x7f0000000240)={'syz', 0x3}, r8) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x10000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000001d40)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r4, @ANYPTR=&(0x7f0000001ac0)=ANY=[@ANYBLOB="015dc56f6a8881f14b7a7258a707328ce859cfb6028bbfd50806019e4dd69bea737e565540f9195b3dafbd66565052b64413a8bb60608f0d229b24c44b45934694947b1807c4387ef6c9b39f7a43d5a28609604c0eafd36ab9d3a51de4f23bf7a43a795597a874ab959b3ec9dac785f28fe2b3fe518aa94d513894ce7bf319d185b945bd9c8dd9146477520bd26fe5ef2c1fa6da4b20a7b256c05a4a2f266c1960d0b69111a56aa5902aee9c163186b79063f7a7ca1a30", @ANYPTR64=&(0x7f0000000a40)=ANY=[@ANYRESOCT=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRESOCT=r8, @ANYPTR64, @ANYBLOB="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"], @ANYRESHEX=0x0, @ANYRES16=r5, @ANYRES64=r2, @ANYRES64=r2, @ANYPTR]], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x8c0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f000000f000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x800, 0x0) write$UHID_SET_REPORT_REPLY(r6, &(0x7f0000000680)={0xe, 0x6, 0x7, 0x8, 0x4e, "4812caf9b7bda193491a0db6a3ec102e0080a4cae986250295d068578024713cc8fdb6f27f495581bf2762794c0a7e0fdc7b32b3c5805252a00586e92fd33cd998afc2eb66d7f1044a28f93ec4d2"}, 0x5a) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000000340)='&\x00', 0x0, r2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 07:04:18 executing program 3: r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x6}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x74, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffff8}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5e}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mq_timedreceive(r1, &(0x7f0000000400)=""/16, 0x10, 0x5, &(0x7f0000000440)={0x77359400}) mq_timedreceive(r0, &(0x7f0000000340)=""/100, 0x64, 0x51, &(0x7f00000003c0)) mq_timedreceive(r0, &(0x7f0000000080)=""/204, 0x3a, 0x0, 0x0) 07:04:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x13) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x15) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x2a) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 07:04:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0xfff, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x600) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000140)=0x833, &(0x7f0000000180)=0x1) fchdir(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x88) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}]}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f00000001c0)=0xc7) 07:04:18 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x480, &(0x7f0000000140)="11dcf57000458f84cd774011f0") r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4008ae52, &(0x7f0000000080)=0x7) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close(r1) r4 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffffffffffffff) ioctl$TIOCCONS(r4, 0x541d) fanotify_init(0x20, 0x1) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f000000f000/0x18000)=nil, 0x0, 0x26b, 0x0, 0x0, 0xbf9276dc353fbae1) [ 236.656088][ T8971] input:  as /devices/virtual/input/input5 07:04:18 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2d32a2634bdd2c754f5bdc65f221fa0ce354b34869f67055acc173b630beee97e0eda9367b389c15d3231e2a62da247642996d734cfeb8d462a5b0f09031ee01000000715c5302f8cbab7fbe5c273b8aebc66851ce4d2cac565c0fa0be365137141cbffed36297bd2c04bc2e0269d425e4fbb9e8b9f4795d57e4c4c4609b0df2e27d7108ce3e983ed3a754"], 0x2) 07:04:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002f00ff0300000000000006dfe3dcc1b2bde45b36ffec32749ea53e0789e6513c4091dc", @ANYRES32=r0], 0x1c}}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4a4801, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000000c0)={0x6d6c2abf, 0x100000000, 0x1}) 07:04:18 executing program 1: unshare(0x8000000) semget$private(0x0, 0x404b, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1) unshare(0x800) 07:04:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c) r1 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x6, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xb261767d55de35fd}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x68, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008040}, 0x882416b36f2c5560) ioctl$UI_DEV_CREATE(r0, 0x5501) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000440)={0x0, 0x25, "2083d753dbf3097ee16157649c0f4305e7033cee3ecc5a23407eef2b3f073658f8266f20d1"}, &(0x7f0000000500)=0x2d) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000540)={r3, 0x6}, &(0x7f0000000580)=0x8) ioctl$UI_SET_SNDBIT(r0, 0x4004556b, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x7, 0x0, [], [{0x79, 0x10001, 0x10000, 0x2, 0x9, 0x100000000}, {0x401, 0xbbea, 0x1ff, 0x9, 0x5, 0x7014}], [[], [], [], [], [], [], []]}) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffff000, 0x220a42) 07:04:18 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000f9a936b4af3a3a1c00adcbff397f55a79788fad9a8338ab5da957b16e5cc6ff100000000000000", @ANYRES32=r2, @ANYBLOB="000000000000000024001200140001006272696467655f734c617665000000000c0005000800030000540100"], 0x44}}, 0x0) 07:04:18 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000004c0)={0x0, 0xd9e, 0x4, {0x2, @raw_data="7a96b6fbdf62bba845a52d283bb5a8dd7f85e61011ce5e9f9b04ddb9012500247fbf42196476f3d9503327a912bd364605e0446a5559377e7bf92ef30863951aaa53f7270160142e2eeaef347c1e02f86b9b6d4bb3c26f51d9fbf95a71bcd057022d48177863b1f3c453ffc3707cabc8eb6356a35480256ccf100f0699de633c9c7d1e7392d5322ba8cb887f11ce6b63f76445cc8d3cb45ecd3e2bbac22aea5bfc2abd157b05d12e9e772f0adcf0fa4b686c7272b6d4089d037562eeddd4c8d170f697a243b6f096"}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @pix_mp={0x500}}) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) pread64(r0, &(0x7f0000000180)=""/243, 0xf3, 0x0) 07:04:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, r3, 0x4c8d8417b3221117, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0xa2fa46a625899045) getsockname(r1, 0x0, &(0x7f0000000140)) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast1, @loopback}, &(0x7f0000000280)=0xc) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000002c0)={r4, @multicast2, @dev={0xac, 0x14, 0x14, 0x16}}, 0xc) [ 237.133499][ T8998] input: syz1 as /devices/virtual/input/input7 07:04:18 executing program 1: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000040)={{0x0, @multicast1, 0x4e22, 0x4, 'fo\x00', 0xa, 0x1, 0x50}, {@empty, 0x4e24, 0x0, 0x5, 0x48, 0xfffffffffffffff8}}, 0x44) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x2, &(0x7f0000000240), &(0x7f0000000180), 0x0) [ 237.274718][ T9009] input: syz1 as /devices/virtual/input/input8 07:04:18 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@empty, @in=@local}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0x4, 0x4, 0xffffffffffffe4a5, 0x0, 0x1}, 0x259) 07:04:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) clock_getres(0x2, &(0x7f0000000080)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x22800, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000180)='veth1_to_bond\x00', &(0x7f00000001c0)='./file0\x00', r1) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000200)=0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0)=0x4, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e25, @multicast2}, 0x10) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000240)) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000300)="9d4bb53d0dafa33a0de18e17c61718443f4b2bda3d54220a65f096c1499dd460aa621c806dfc348e93e6e2fdf77f7535b0a8e79068816e5bd879f923ba8ef3df21f25817a34426aa5714905bb1acd308ada0809578d84c69803669b6469a055965f2657a33ae3e16", 0x68) 07:04:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:auth_cache_t:s0\x00', 0x22, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipveuse_\x14\xdf\x17\xa1c.\xc2\xc5\x9d,_\xc9mode\x00', 0x2, 0x0) 07:04:19 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x101200, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x7, 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)={0x30, 0x4, 0x0, {0x6, 0x7, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xe, 0x1, 0x400, 0x0, 0xb5, "0624e4bafffc4cb3bfd4d86f499342dc224e32bcdfa2f56c75b0f25cd2d71f1bddd581caf5afaa7fd1121659349922be773dc2da910d3bb195e13d858d98d93ba02f9affa9c6578090ad3e9a698e93680e19ba79e6f40df362de66e9e12ed28bb5135bb6096b2273f0a0691c776a24382ca88f0e26f99e5dacafdc33d42e0acd2291ab29f71ce3a40a98457adc7fd29b4438e7568f1024d6ce1f97e1177034a945e7f4ddccade01c9e86bee1c86951b1c8bf6e8877"}, 0xc1) fsetxattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='security.capability\x00', 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) fremovexattr(0xffffffffffffffff, &(0x7f00000012c0)=@known='security.capability\x00') 07:04:19 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) poll(&(0x7f0000000200)=[{r0}], 0x1, 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x8000, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000000c0)={0x2, 0x7a}) dup2(r1, r0) pread64(r2, &(0x7f0000000240)=""/254, 0xfe, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") 07:04:19 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x200002, 0x0) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000100)="b919d9a4bb7602b51b1795a385f562c4382bce095d66d58bf08125b64a91aabe0c0d60ad3c84134a6e2ce7e1a3d22e41f47815857b600c0e2f0664001f0f580e3c8737088c2c9562") r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = fcntl$getown(r1, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001200)={0x0, r1, 0x0, 0xe, &(0x7f00000011c0)='poly1305-simd\x00', 0xffffffffffffffff}, 0x30) kcmp(r3, r4, 0x6, r1, r0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000001c0)=""/4096, 0x20004580}], 0x1, 0x0, 0x27}, 0x6}], 0x52e495d0968b621e, 0x20ee2fc0644b5f5a, 0x0) 07:04:19 executing program 3: r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x6}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000180)={0x3ff}, &(0x7f00000001c0), &(0x7f0000000280)={r1, r2+10000000}, 0x8) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mq_timedreceive(r0, &(0x7f0000000080)=""/204, 0xcc, 0x800000000000, 0x0) 07:04:19 executing program 2: r0 = socket(0x10, 0x800, 0x2) sendmsg$alg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)="4bf16c1745725104b52f770858d0568afe9169c3568de8e936cc7d233ed14337a5af395840f302e73c794ff89fdbd83d8463b19f5a", 0x35}, {&(0x7f0000000100)="f59679679f91302c2f0c53ebc0df103545809ef5a12234c5b251088caa509856774ba403f247bce0b974fab6c5cc5fbffbe661260efa4ae0464cebbeb91814079fdf1e81a00c94c02e4cb04604a148e5362582554c9bc953b071b753b92f97f9306101b3ef991ab8b8", 0x69}, {&(0x7f00000002c0)="b40bd80c0c68ec9e80ea4a4e3843049f7811012166d3d9f7657c6d1ee20bed828a78483b2e55002e5a2e27b86d71415a2eaa8d3dc9b9f7ec110a16a4879f01fff63896d869e25afb0a863a581768b1a716f8d40f638ae7d945867d6811e46a975c712237eeffd8658986ed3adb5f9c81069c0d7a210339babe0d1713a1dafab40cd28ea90b9611393ee5926f7b375ca34750677b03eb41f44b8f59466c090762147466715aa7d2fb847c962567893d79fb822c22bc2f129e0b4e539639f6e5a71f79b70b", 0xc4}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000080)="04537effdf7c2c5f848646bc95524fd5d160496ae5746bc529bd262b793d532a9ad08e19ccd5224879f1", 0x2a}, {&(0x7f00000013c0)="81c8ecd58b688465799eea945d9419a25b5837587b53acdb0201a4dd0b8a6f57c0f1b360dac8a5f9e2950b9c266bc0c4f5590a9178d94592d291dc971c4086ab4910e75c1abfa6ee4cc78b03a3", 0x4d}], 0x6}, 0x4000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) write(r0, &(0x7f00000001c0)="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", 0xfc) 07:04:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0xffffffffffffff5c, &(0x7f00000000c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x5, 0x4) close(r0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x8010, r1, 0x0) 07:04:19 executing program 5: bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4}}, 0x10) 07:04:19 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x4, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$rose(r3, &(0x7f0000000180)=""/120, 0x78, 0x160, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x40) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000240)=""/17, 0x10000, 0x1000}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x40200, 0x0) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000340)=0x20, &(0x7f00000003c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000080)=0x400, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) ioctl$TIOCSRS485(r4, 0x542f, &(0x7f0000000000)={0x5, 0x2, 0x7fffffff}) sendmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0xffffffff00000000}], 0x142, 0x44040) [ 238.230371][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 238.236545][ C0] protocol 88fb is buggy, dev hsr_slave_1 07:04:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2100000890f, &(0x7f0000000100)="714c4e93b09f411ddb6d76a3e9e5500867a89c59fcd0edb1caedf87c932b40d1166be05bc9dfdf5633662bfe0e65aa496f6466374bf89fc94df5a6c5d03db7bd422cc9aef47b4f6d3ed49632081d2e17419561192db9984718dc8b53db1924fecc09125242cbcefac194548b94dfd76f5835b51ce0080a8a5cc322188306a370e1c6949dec9e7196cfda8435bbd63c45afeebaddddb36c564c5dc446a1ada4cf02fa1a468a7702e02c6e9d1cd94bcf1a90fd22ec1b4d73d2d62f7c9599f7fc0d7b3da4982716cf0f22f95fd3e6ad970cd3bd71ce") msync(&(0x7f00007d5000/0x400000)=nil, 0x400000, 0x5) 07:04:19 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)="6d72df0079c44b4493264319d7b195d6627ce4ac43c30ee38a218386acfc274e4f23ba614699e88bf4454666ec41c13b0060d366d4a5151211dce49f33ea7f1f7f3475ed36d77c20", 0x48}], 0x1}, 0x0) r0 = memfd_create(&(0x7f00000001c0), 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008911, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") setrlimit(0x6, &(0x7f0000000080)={0x8}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x90581f, 0x45011, r0, 0x0) pwrite64(r0, &(0x7f0000000000)="8df1", 0x2, 0x0) 07:04:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") splice(r0, &(0x7f0000000040), r0, &(0x7f0000000080), 0xa1, 0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r2, &(0x7f0000000180)={{}, "65017734593e15b8fed91fe48dba723bd9850842b26c9bfa156d023f8593818333bf0e21156ec0607f4d9e979000ed011de1455e5545494646a95773fd08c00565074deff4d24ceb4e519f353eb6bd116fd46b42c8445135fd20186a4d96230000ba81c2d054e497f45b3e87eb234ee32ad7dc5f1c4ca5a3cdcd279fb13caf9f00a0dfd0fd28f634a5f10c0b10626a843729a6228ab2af72"}, 0xb8) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffc70) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) getpeername$netlink(r2, &(0x7f0000000240), &(0x7f0000000280)=0xc) r4 = accept4(r3, 0x0, 0x0, 0x0) splice(r1, 0x0, r4, 0x0, 0x20000000003, 0x0) [ 238.390830][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 238.396674][ C1] protocol 88fb is buggy, dev hsr_slave_1 07:04:20 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = dup(r0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000500)={0x0, @reserved}) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000040)={0x0, 0x3231564e, 0x0, @stepwise}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r5 = openat$cgroup_int(r1, &(0x7f0000000340)='pids.max\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@ipv4={[], [], @initdev}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) r7 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@mcast2, @in=@loopback, 0x4e20, 0x0, 0x4e20, 0x7fff, 0xa, 0x80, 0xa0, 0x6c, r6, r7}, {0x7fffffff, 0x6, 0x31, 0x1f, 0xff, 0x42, 0x3, 0x4}, {0x101, 0x4, 0x7fdc00000000, 0x693}, 0xeb, 0x6e6bbc, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x4d4, 0x6c}, 0xa, @in6=@local, 0x3502, 0x2, 0x2, 0x4, 0x4, 0x0, 0xc2a}}, 0xe8) socketpair(0x9, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x10001, @rand_addr="b78d98db98c3a43b75faeb2b03060ce8", 0x800}, @in6={0xa, 0x4e20, 0x3f, @remote, 0x6}, @in={0x2, 0x4e21, @multicast1}], 0x48) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.type\x00', 0x2, 0x0) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x1, 0x0) ioctl$KVM_DIRTY_TLB(r8, 0x4010aeaa, &(0x7f0000000440)={0x7, 0x1}) syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x9, 0x8000) r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000640)={0x0, 0x70, 0xe6a7, 0x6, 0x5, 0x0, 0x0, 0xd3d, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0xfe8, 0x0, 0x5, 0x5, 0x0, 0x20, 0x0, 0x1f2, 0x4, 0xa9, 0x7ff, 0x3, 0x0, 0x1f, 0x80000001, 0x0, 0x6, 0x0, 0x0, 0x4f, 0x8, 0x0, 0x0, 0x0, 0x7, 0x5, @perf_config_ext={0xffff}, 0x2000, 0x0, 0x5da6, 0x7, 0x9}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x480040, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000300)=ANY=[@ANYRES32]) pipe(&(0x7f0000000400)) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}, 0x20) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) 07:04:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) socket$isdn(0x22, 0x3, 0x23) sendmsg$kcm(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2300000066000166bfa9d345e7eb8dfe204ee2d7080000000600000000000000801d52", 0x23}], 0x1}, 0x0) socket$isdn(0x22, 0x3, 0x24) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="eeb314e73b03f601c9812da62392f19e26822ce39fbef0144e2cef1910d8b6320f648f7a570cd718afbeca813691131bf420334a83245998d5ec78393abfb7c52b9e48941964e9023280765a2fda29cb45b038b6c6cd5d11c028c1107aa5dc5f561a6870773efb5854dca065c8cefc8567939fa776669c75aeea2ab4da179f13f44b8215f0bebadf000107e446f3255b62976fb87bdbb046fceb72368a787d76fd66039cd052c3ef934bbdc0317b", 0xae}, {&(0x7f0000000200)="27acbe6d43ff3b3c793539f6d1b0be503da24254c5c01b59b69e75f00c8bb9a0d66d87a3731230", 0x27}, {&(0x7f00000002c0)="1c13d16ce272ff5db4ad15e64063ffefa7b92c0d0b02096487b275c48556ec20133e70df647efb51eb266782c831691d9d8c26f60c294260efea3da7d30c54f1846714455279ef2725c634c98d3abaecb30f6ae247aae9a9224ce8e86e35ef4575cb46787036b4c622964aaf5d3bcaead48b5113fd684220eff295b7aedddc33a0dad7054c5dd139532ebfef096fa0360e84ab888a0037b64a77d3834296ec37d47ee5be97fb80e52ad07983b1376f80fb718d5228150ef4c799", 0xba}, {&(0x7f0000000380)="7fbc06ff68d4af14f19d3f15811eaa18b7c9091c4d9f6dd1ad670778d9a0bd64a7319ee4d1465c68f08e6aacb589181ebdbcd5780f44d218c8c10231b84ebe54538747812cdb1b4b095584b2342fd14ee519ffbe67f849a6e02fbacda372327143ec265cc6ad10f253f2ab3d7da156427a811464ed41289fc96785b2e6ece37473dadd14fe41734e7bd269a8a3965588d194", 0x92}], 0x4) r1 = io_uring_setup(0x6c8, &(0x7f0000000000)={0x0, 0x0, 0xba7ee8e96e9c89a1, 0x3, 0x127}) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1, 0x1) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x1, @empty, 'bpq0\x00'}}, 0x1e) mmap$IORING_OFF_SQ_RING(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x1, 0xc6051, r1, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000440), 0x2) 07:04:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/fib_triestat\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r4, 0x49, "195f7c7e20f989284cdf6fa538e165695f68450ad5384fd62cf288fa6dedec3fe983a7231b95f003326e8f48c3faac085ab37d88cab75a983ff9edfa75ca9be9c386d8149eb4b14022"}, &(0x7f0000000180)=0x51) getresuid(&(0x7f00000001c0), &(0x7f0000000400), &(0x7f0000000340)) ioctl$TCXONC(r3, 0x540a, 0x2) syz_extract_tcp_res(&(0x7f0000000240), 0x1ff, 0x0) 07:04:20 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) unshare(0x8020000) semget$private(0x0, 0x403, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') setns(r1, 0x0) write(0xffffffffffffffff, &(0x7f0000000100), 0x1ede5) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3f, 0x2000) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, &(0x7f0000000080)=0x1ff, 0x4) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000000)=[r0, r1, r0, r0, r1, r1, r1, r1], 0x8) 07:04:20 executing program 3: get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000274000/0xf000)=nil, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) munmap(&(0x7f0000376000/0x4000)=nil, 0x4000) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$peek(0x2, r0, &(0x7f0000000040)) 07:04:20 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000500)='/dev/audio#\x00', 0x2, 0x400) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000540)={0x2, 0x64241ca5, [{0x0, 0x0, 0x8001}, {0x5, 0x0, 0x7}]}) r2 = getuid() fstat(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)=0x0) fstat(r1, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000b80)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00]) r9 = getgid() stat(&(0x7f0000000bc0)='.\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000840)='system.posix_acl_default\x00', &(0x7f0000000c80)={{}, {0x1, 0x1}, [{0x2, 0x4, r2}, {0x2, 0x3, r3}], {0x4, 0x2}, [{0x8, 0x3, r4}, {0x8, 0x2, r5}, {0x8, 0x1, r6}, {0x8, 0x0, r7}, {0x8, 0x2, r8}, {0x8, 0x6, r9}, {0x8, 0x2, r10}], {0x10, 0x1}, {0x20, 0x6}}, 0x6c, 0x2) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r11, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x4b, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x4, 0x3}, 0x0, 0x0, &(0x7f0000000100)={0x4, 0x0, 0x1ff, 0x7}, &(0x7f0000000140)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0xffffffff}}, 0x10) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f00000004c0)) getsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000000580), &(0x7f00000005c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x94000, 0x0) getuid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r11, 0x18000000000002a0, 0x85, 0x0, &(0x7f0000000080)="b9ff0300000d698cb89e40f086ddd501890600de0500000077fb7f11c72be9", 0x0, 0x100}, 0x28) fcntl$getownex(r11, 0x10, &(0x7f0000000600)={0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) get_robust_list(r12, &(0x7f00000007c0)=&(0x7f0000000740)={&(0x7f0000000680)={&(0x7f0000000640)}, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)}}, &(0x7f0000000800)=0x18) 07:04:20 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x4) dup2(r0, r1) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:init_exec_t:s0\x00', 0x21, 0x2) 07:04:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000001e000507eda7fc76f8e75a7b3231d200100003402f00000000340080000000011400f88000f01700d0bd", 0x2e}], 0x1}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4500, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x700, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) 07:04:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/icmp6\x00') lseek(r0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x401}, &(0x7f0000000080)=0x8) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000180)) preadv(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000300)=""/195, 0xc3}, {&(0x7f0000000400)=""/54, 0x36}], 0x4, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0x13f8d3f5}, &(0x7f0000000140)=0x8) 07:04:20 executing program 5: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_settime(0x4, &(0x7f0000000100)={r0, r1+10000000}) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x40000) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x3) futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x4, 0x1, 0xf000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 07:04:20 executing program 3: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000424, 0x4) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000080), 0xfec) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file1\x00') [ 239.152651][ T9122] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 239.200342][ T9122] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. [ 239.225102][ T9132] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 239.247783][ T9132] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.1'. 07:04:20 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000b00)={&(0x7f0000000640)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}, @mask_fadd={0x58, 0x114, 0x8, {{}, 0x0, 0x0}}], 0x88}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000b40)=""/4096, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) 07:04:20 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) setsockopt$ax25_int(r0, 0x101, 0xc, &(0x7f0000000180)=0x3b34d9f0, 0x4) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6e3f00000000000, 0x4400) write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") connect$ax25(r0, &(0x7f00000000c0)={{0x3, @netrom, 0x7}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x25dfdbfc}, @bcast, @remote, @rose, @netrom, @default, @default]}, 0x48) 07:04:20 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x4000, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000300)={0x5, 0x2de9, 0x7f}) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="870a04057f40010400000000000000000000000000000001fe800000003d939c39bc1348d10000aafe80000000"], 0x1) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x400000000000064, 0x0) r2 = getpgrp(0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x5, 0x0, 0x5e3, 0x57, 'syz1\x00', 0x9}, 0x6, 0x23, 0x8, r2, 0x2, 0x4, 'syz0\x00', &(0x7f0000000100)=['#,\x00', 'lo^!^\xbd+bdevvmnet1\x00'], 0x15, [], [0x7, 0xd6a, 0x80, 0x9]}) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000380)=0xffff, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x80002, 0x0) 07:04:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7ff}, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getuid() syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x5de, 0x4, &(0x7f0000000340)=[{&(0x7f0000000140)="dc4481a165df2ddd8884ab7e565c32ac3db23d9c9cabb6fa4c4450f39e56c95f8ca8398cb784a33d7a7ee91f688bc5450586557d843eb6244060815df923e63842c9b8e2f6e15223f20b03917c0cd685643ac8f55b16606fa8c3b1ed98720059c8b7a5a771580061f48bcb7bf6780b115166e44bdc0678a6c12139bc515d6b7c55f81f3b8656d43ae7eee82cbb76c94ebe1114fda6f0af4b46c3563d3d4b15c9fd56b7cecedd4fb5d3cb4dfcac8914c848bb33c61a6907a0e04e0e825d879c73eee2bc5bbd15e237a3b273a651893626367dfef809979f505d625dd464918534f0", 0xe1, 0x800}, {&(0x7f0000000240)="ccb46b7c4c1ad9b1d0896d9b9a0f024b69334145fa0ff5f5a3f38e9da0cbf77a8b20ae335b09564d9a15cc5db06b6d28ef9d7bc5caac1efa5dd447dacee6ea790b0f32e8717103e4690527c81bc82e14cf79bfd01ec35a7c7f5acf", 0x5b, 0x80}, {&(0x7f00000002c0)="005e045fd5", 0x5, 0x9}, {&(0x7f0000000300)="f74d44d84b581f013665", 0xa}], 0x8080, &(0x7f0000000800)=ANY=[@ANYBLOB="64b092826fc8a74f9c086f74732c646f74732c6e6f646f74732c6f626a5f726f6c653d76626f786e657431612c7065726d69745f646972656374696f2c657569643d", @ANYRESDEC=r1, @ANYBLOB=',smavkfshat=[,fowner=', @ANYRESDEC=r2, @ANYBLOB="2c6f626a5f726f6c653d657468302e2c7375626a5f747970653d6e58646576232c736d61636b66736861743d73656375726974792c646f6e745f6d6561737572652c646f6e745f686173682c00957fd3f8884eaa7684890a5d9ed211500a62795d6d3df317a1313a5ca9cb1a5ca9e660aea5c178e2e56785550722ede265e9d17d1275c87d184072998c6cb1f88a4354aa1b6ac6290bda95a6"]) write(r0, &(0x7f0000000040)="200000001a00b301000000000000a00080000000000000800000000000002000", 0x20) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x80, r3, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4a5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x66}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x11}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x79}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x703}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) 07:04:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11d3a50d5e0bcfe47bf070") connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendto$inet6(r0, &(0x7f0000000000)="1df13d778e9552523590d90c8bf6f9da6876b117088cd2d6dd9c211d3916d20788495518e04b724983375b77b274e78a57053235d8c2477922834b57ecbe7dffe39cdab998aa44b334f1ccb136d23bd4bad70edf9fe43331a8", 0x59, 0x4, &(0x7f0000000080)={0xa, 0x4e21, 0xfffffffffffffffe, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f0000005fc0), 0x28e, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x400000, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000001c0)={0x3, 0x1e96f4a9570ce2e3, 0x2, 0xa35f, 0x2, 0xa1, 0xe5}) [ 239.395518][ T9146] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 239.454211][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.488698][ T9157] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 239.551934][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 07:04:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400800, 0x45) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000300)=0x3) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000100)={0x20, 0x1, 0x6, 0x3, 0x400}) r3 = dup2(r0, r0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000002c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) syz_open_dev$vivid(&(0x7f0000000340)='/dev/video#\x00', 0x1, 0x2) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) 07:04:21 executing program 0: socket$kcm(0x2b, 0x1, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000001740)='/dev/amidi#\x00', 0x8, 0x40200) syz_open_dev$radio(&(0x7f0000001780)='/dev/radio#\x00', 0x0, 0x2) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001880)='/proc/capi/capi20\x00', 0x28001, 0x0) read(r0, &(0x7f00000018c0)=""/30, 0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x800000) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x6, 0x8, &(0x7f0000001680)=[{&(0x7f0000000200)="28a6984f0835033143e7c2c7ec9ee7f92e91ad0084e3ca6fec3fb7ed121db7695d8973fc88014e97e9aded1cec5255ba36d98966ee2d75c4e9af1408d4f49a5ace1bb1e8382be089fd17c03dcb1f6accf7cf00a6024a9058b4d6eb3f4355f3102b2ede88cd2647a5d4357fc950d50e2e1e1918e35fab69d9947f393ebc012da08b4c423093769198d5403935cd13631994c0f9996844acb5551c78b7d7d68b32", 0xa0, 0x4}, {&(0x7f00000002c0)="ec96821a632c3f8cfd41660d41e5b885d3b0845041306d9c3fe0a6b5a708c29a54b5db0c98fff58dd99a3dfe4eb34ba7480999c6138e31313f811f58b267fe934b77f625380ebb460476d162a2ffed2d31c18dce4cd1c7b61bca0532d48b20a4ad1ccb3b37048eccc94d642aac997661eb13e6b9f009e117fc7eaaf1b90eb3e92e6f0b4e0ffc4fa4ef71e9b6095e409916d29ba95069ec24ea543496d16e088103e416f04195c4a24f2c01a65c5720b2224a76e7", 0xb4, 0xb5a1}, {&(0x7f0000000380)="2f272851c93d344419b1b4d5971115b8c74fa8931ff43b5cfa97c91b5208ec3bed1d8da5131e10dd9487019ff7086deabbc16b", 0x33, 0x10000}, {&(0x7f00000003c0)="b189b8f4514e5daa2b1254f05cf1612595db21f33df1db623cd188fb0b733ee82818d0700302a6716334e74561c88cf24f5a9232aab03f3a2d8935ceebc9c5a009e50c90f642", 0x46}, {&(0x7f0000000440)="d44d9bab8d64212612b359c1bee940a4341af32688679f6f1cb7695eeca7d5c4b4ab2aadf5de1a54c40c8054baae635f07dd932e4b03658ef0a2e5ea058aba58889bb10a8c4e449bb5c17ed1513c2721badc1033871ffb5ea1efbca838dbb6acccb652", 0x63, 0x8}, {&(0x7f00000004c0)="715c7200fd64caf5c551af915a52f6090d3dd492ec63458d3ac5632995a21b66df3edc5aecad763a28d12013634fb0fd96b00b4790173071538240356200d6cca2aee812ab3763a2b38730334e74b8d82b395b6781eda7bfd8edb3d4484d062549e96f68480187203fae6201699811265a2c8ca7962a2a8c57cb87c3394a9881e0b01f3515e6ec15ce23e3d023ca7ff17970fa9d98e8808abe397129b8454b5e92323ad342c5fc243fe54b9f19", 0xad}, {&(0x7f0000000580)="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", 0xfd, 0x4}, {&(0x7f0000000680)="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", 0x1000, 0x4}], 0x2010000, &(0x7f00000017c0)={[{@discard='discard'}, {@nodiscard='nodiscard'}, {@lockproto_nolock='lockproto=lock_nolock'}, {@barrier='barrier'}, {@data_ordered='data=ordered'}, {@statfs_quantum={'statfs_quantum', 0x3d, 0x12000000000000}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@euid_eq={'euid'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000080000bfa30000000000000703000000feffff7a0af0fff8ffffff71a4f0ff00000000b7060000000000811e6403000000000045040400010000001704000000df0a00b7040000000100006a0af2fe00000000850000004b000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x13}, 0x48) 07:04:21 executing program 3: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept4$inet(r0, 0x0, &(0x7f0000000080), 0x477b480491a43c14) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @empty}, {0x2, 0x4e22, @loopback}, 0x340, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)='ip6_vti0\x00', 0x6, 0x4, 0x3f}) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x6, 0xffffffffffffffbe) 07:04:21 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000040)=""/16) r2 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) dup2(r0, r2) 07:04:21 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000180)=0x81, 0x4) setsockopt(r0, 0x2, 0x1aae, &(0x7f0000000080)="2eedfa7116949503778c98e0b4a646e6329daf", 0x13) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000540)=""/191, &(0x7f0000000440)=0xffffffffffffff56) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000200)={r2}) close(r1) [ 239.862775][ T9170] gfs2: Bad value for 'statfs_quantum' [ 239.963255][ T9187] gfs2: Bad value for 'statfs_quantum' 07:04:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x183881, 0x0) r1 = dup2(r0, r0) write$P9_RMKNOD(r1, &(0x7f0000000080)={0xffe3}, 0x10000046f) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000000)=0x1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x10000000}) 07:04:21 executing program 2: mkdir(&(0x7f0000000280)='./file0\x00', 0x100000026) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', 0x0, 0x0) 07:04:21 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = fcntl$getown(r0, 0x9) ptrace$pokeuser(0x6, r1, 0x3, 0x7) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000b0500000000000000edffffff00", @ANYRES32=r3, @ANYBLOB="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"], 0x74}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x0, &(0x7f0000000100)}], 0x492492492492587, 0x0) 07:04:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000003000008912, &(0x7f0000000900)="11dca50d5e0bcfe47bf070") pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0xf) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfeac) splice(r1, 0x0, r3, 0x0, 0x20000000010005, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)=""/73, 0x49}, {&(0x7f0000000600)=""/239, 0xef}], 0x2, &(0x7f0000000740)=""/28, 0x1c}, 0x200}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000780)}, {&(0x7f00000007c0)=""/238, 0xee}, {&(0x7f00000008c0)}, {&(0x7f0000001940)=""/172, 0xac}, {&(0x7f0000001a00)=""/196, 0xc4}, {&(0x7f0000001b00)=""/160, 0xa0}], 0x6, &(0x7f0000001c40)=""/43, 0x2b}, 0x7ff}, {{&(0x7f0000001c80)=@ax25={{0x3, @rose}, [@default, @default, @bcast, @default, @rose, @default, @netrom, @default]}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001d00)=""/65, 0x41}, {&(0x7f0000001d80)=""/147, 0x93}, {&(0x7f0000001e40)=""/131, 0x83}, {&(0x7f0000001f00)=""/54, 0x36}, {&(0x7f0000001f40)=""/74, 0x4a}, {&(0x7f0000001fc0)=""/54, 0x36}], 0x6, &(0x7f0000002080)=""/172, 0xac}, 0x1480}, {{&(0x7f0000002140)=@l2, 0x80, &(0x7f0000002400)=[{&(0x7f00000021c0)=""/147, 0x93}, {&(0x7f0000002280)=""/97, 0x61}, {&(0x7f0000002300)=""/250, 0xfa}], 0x3, &(0x7f0000002440)=""/56, 0x38}, 0xffffffffffff08e8}, {{&(0x7f0000002480)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000003980)=[{&(0x7f0000002500)=""/205, 0xcd}, {&(0x7f0000002600)=""/135, 0x87}, {&(0x7f00000026c0)=""/166, 0xa6}, {&(0x7f0000002780)=""/227, 0xe3}, {&(0x7f0000002880)=""/102, 0x66}, {&(0x7f0000002900)=""/101, 0x65}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x7, &(0x7f0000003a00)=""/173, 0xad}, 0x2d0}, {{&(0x7f0000003ac0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003b40)=""/45, 0x2d}, {&(0x7f0000003b80)=""/228, 0xe4}, {&(0x7f0000003c80)=""/13, 0xd}, {&(0x7f0000003cc0)=""/175, 0xaf}, {&(0x7f0000003d80)=""/215, 0xd7}, {&(0x7f0000003e80)=""/27, 0x1b}, {&(0x7f0000003ec0)=""/172, 0xac}, {&(0x7f0000003f80)=""/19, 0x13}, {&(0x7f0000003fc0)=""/145, 0x91}], 0x9, &(0x7f0000004140)=""/248, 0xf8}, 0xfffffffffffffffd}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000004240)=""/239, 0xef}, {&(0x7f0000004340)=""/1, 0x1}], 0x2, &(0x7f00000043c0)=""/5, 0x5}, 0xcec1}, {{&(0x7f0000004400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, 0x0}}], 0x8, 0x1, &(0x7f0000004680)={0x0, 0x1c9c380}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000046c0)={r4, 0xd51728a, 0x0, 0x7195, 0x8, 0x7ff, 0x100000001}) 07:04:21 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101080, 0x976f5e660b4befef) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000100)={0x1ff, 0x5000}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0xa4, &(0x7f0000000140)=[{0x7fffffff, 0x7, 0x8c64, 0xa}, {0x53846886, 0x1, 0x1000, 0xfffffffffffffffd}]}, 0xfffffffffffffdb2) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x600, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "07a30cd41929926a9335701c068b17b9fc07cd039f5a47009833063800"}}) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x60000) r3 = semget$private(0x0, 0x0, 0x1) semctl$SETVAL(r3, 0x4, 0x10, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 07:04:21 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000180)=0x81, 0x4) setsockopt(r0, 0x2, 0x1aae, &(0x7f0000000080)="2eedfa7116949503778c98e0b4a646e6329daf", 0x13) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000540)=""/191, &(0x7f0000000440)=0xffffffffffffff56) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000200)={r2}) close(r1) 07:04:21 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000180)=0x81, 0x4) setsockopt(r0, 0x2, 0x1aae, &(0x7f0000000080)="2eedfa7116949503778c98e0b4a646e6329daf", 0x13) getsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000540)=""/191, &(0x7f0000000440)=0xffffffffffffff56) r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000200)={r2}) close(r1) 07:04:21 executing program 2: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x4, 0x0) flock(r0, 0xf) ioctl$EVIOCGABS2F(r0, 0x401845e0, &(0x7f0000000000)=""/38) 07:04:21 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r0, 0x8}, {r0, 0x27}, {r0, 0x4}, {r0, 0x20}, {r0, 0x159e3cd14f54b481}, {r0, 0x2000}, {r0, 0x101}, {r0, 0x5004}, {r0, 0x80}, {r0, 0x8000}], 0xa, &(0x7f0000000200)={r1, r2+10000000}, &(0x7f0000000240)={0x8}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x300000000) write$vnet(r0, &(0x7f0000000300)={0x1, {&(0x7f0000000080)=""/63, 0x3f, 0x0, 0x0, 0x2}}, 0x68) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f000000a740)={0x0, 0x0, 0x0, &(0x7f00000056c0)=""/42, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)=ANY=[]) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r4}) 07:04:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x3, r2, 0x22, r3}, 0x10) bind$bt_hci(r0, &(0x7f0000000040), 0x32) ioctl$sock_SIOCGIFINDEX(r0, 0x800448d5, 0x0) 07:04:22 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x800, 0x0) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f00000000c0)={0x7, 0x80000000}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x20000004e20, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x256, 0x24000000, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f00000001c0)="83", 0xffffff03, 0x4081, 0x0, 0xffffffffffffff03) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 07:04:22 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000380)={&(0x7f0000000240)=@sco={0x1f, {0x8bb1, 0x6, 0x80000000, 0x1d, 0x9, 0x401}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)="f798fca796353ad7810bc78575d78907b3c114a62dbdac6d36e7ffb4470dd749834c81949cb40b8edacd8b45175aa6ed5f7982b03639bf2b67fe3a3dc0f3bb12babe4f6d7210a328f159d94928cf1cc96bb71463aed04ffecebc513550bb5a77a95ecd30e3795a9ab54d01fd272de57f0bd46dd5f4c31ba51f6b22e6a37c2482faf13f7fb1c2", 0x86}], 0x1, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0x24, 0xb2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xfffffffffffffffe}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0xa8}, 0x4040044) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) mincore(&(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000400)=""/208) [ 240.578886][ T9237] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 07:04:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) clock_adjtime(0x2, &(0x7f0000000140)={0x2, 0x20, 0x80000000, 0x100000001, 0x1, 0x40, 0x7, 0x1f, 0x3, 0x1f21, 0x7, 0xffffffff, 0x400, 0x401, 0x9, 0x2, 0x1511, 0x0, 0x8, 0x7, 0xfff, 0x7, 0x0, 0x400, 0x401, 0x1}) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x428000, 0x0) 07:04:22 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = socket$kcm(0xa, 0x2, 0x73) r3 = fcntl$getown(r2, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) getresgid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r3, r4, r5}, 0xc) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x30) 07:04:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r0, 0x804, 0x0) 07:04:22 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TIOCNXCL(r0, 0x540d) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfffffc8f) splice(r1, 0x0, r3, 0x0, 0x100000000ffe0, 0x0) r4 = inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x1) inotify_rm_watch(r3, r4) 07:04:22 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x200000) r1 = syz_open_dev$sndpcmc(&(0x7f00000004c0)='/dev/snd/pcmC#D#c\x00', 0x40, 0x101) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0x0, 0x0, 0x0, @random}]}) ioctl$EVIOCSCLOCKID(r0, 0x80104592, &(0x7f0000000100)=0x27) 07:04:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x17) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306090368fe07002b00000000430a0014000200450001070300001419001a00120002000e00010005000300"/57, 0x39}], 0x1) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x3, 0x2) 07:04:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x200001200008912, &(0x7f0000000300)="11dca50d7a0bcfe47bf070") ioctl(r0, 0xd5, &(0x7f0000000380)="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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x50, 0x27}}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0x338, &(0x7f000000cf3d)=""/195}, 0x48) r1 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x400, 0x400000) write$FUSE_BMAP(r1, &(0x7f00000002c0)={0x18, 0x0, 0x1, {0xc27e}}, 0x18) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000001380)={0xb8, 0x19e3b12e0de4897e, 0x6, [{{0x2, 0x0, 0x2, 0x2, 0x0, 0x4, {0x5, 0x1, 0x0, 0x97f, 0x5, 0xc1f9, 0x7fffffff, 0x3, 0x3ff, 0x40, 0x80, r3, r4, 0x5, 0x7}}, {0x3, 0x1, 0xa, 0x5, 'syzkaller\x00'}}]}, 0xb8) 07:04:22 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/198, 0xc6}], 0x1, 0xa00) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000380)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={r1, @in6={{0xa, 0x4e21, 0xffffffffffffffff, @rand_addr="a43ea572c636c82767a2328692127925", 0x1}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0)={r2, 0x6a, "f841f0fe65beb9a15fa582c041b77aa7cf1b1310d28ed555f651b630ff07cfe1b9b77c77a82971b1bb3e065c3981fc91d73b1e943f8f06aae05a62d72075b40c3bb0df432bb6e6f75b620ae222009b2effc3f5ca66ba357c15da187b9ab45bc467fcb155bad5c573e2d2"}, &(0x7f0000000340)=0x72) 07:04:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f000088f000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x80, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000000)={0x3, 0x8}) fsetxattr(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='o^v/vcs\x00\x00\x00\x00\x00\x00'], &(0x7f00000002c0)='/dev/sg#\x00', 0x9, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000240)={0x7, 0x3f, 0x100000001, 0xff, 0x3f}, 0x14) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000300)) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000040)=0xff) openat$ashmem(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ashmem\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x401}, &(0x7f00000001c0)=0x8) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000340)=0x6) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x0, 0x40}, 0x8) 07:04:22 executing program 0: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x0, {0xa, 0x4e21, 0x71, @local, 0x5}}, 0xfffffe66) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000040)=0x68) 07:04:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x2) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1) 07:04:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") syz_open_procfs(0x0, &(0x7f0000000180)='net/sctp\x00') openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/autofs\x00', 0x10000, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/mixer\x00', 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0105303, 0x0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000002c0)=0xffffffffffffff59, 0x7fffc) write$binfmt_script(r2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x16c) symlinkat(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x100) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0xfffffffffffffffe) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23}, 0x1c) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f00000004c0)=0x9) r6 = syz_open_dev$midi(0x0, 0x9e7e, 0x1201c2) syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'syz_tun\x00', 0x1}, 0x18) write$P9_RLOPEN(r3, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x6, 0x6}, 0xfffffffffffffff7}}, 0xffffffffffffff56) listen(r5, 0x200000000002) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000140), 0x4) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0x7e0fdecf, @mcast2}, @in6={0xa, 0x4e24, 0x4ca, @mcast1, 0xfffffffffffffffa}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x3, @local, 0x100000000}, @in={0x2, 0x4e21, @local}], 0x74) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f00000003c0)={0x800, "45343e2dcb31b8b5c3be52e072b800a41540f59a91ae9e5c6ea47b016ce0f3a5", 0x3, 0x1}) signalfd4(r4, &(0x7f0000000100)={0xffffffffffffffff}, 0xffffffffffffffe6, 0x0) 07:04:22 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 07:04:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x20, 0x101440) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000040)={0x5, 0xa6d7, 0x10000}) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000000c0)={0x4, 0xffffffff7fffffff, 0x7f}) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)='vboxnet0\x00') 07:04:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8001, 0x6000) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x1ff, 0x8000, 0xfffffffffffffffc, 0x3}, {0x0, 0x6, 0x7, 0xa651}, {0x9, 0x7, 0x8, 0x8}, {0x40, 0x4, 0x4, 0x101}, {0x2, 0x2, 0x7fffffff, 0x1}, {0x7, 0x401, 0x80, 0x8c4b}]}) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x101000) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x1) [ 241.505618][ T9301] NFS: bad mount option value specified: vboxnet0 [ 241.531434][ T9308] source parameter not specified [ 241.576391][ T9315] source parameter not specified 07:04:23 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") 07:04:23 executing program 5: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0404309, &(0x7f0000000000)) 07:04:23 executing program 2: socketpair$unix(0x1, 0x10000000003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r0, 0x100}], 0x1, 0x0, 0x0, 0x0) 07:04:23 executing program 3: r0 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000e40)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000d80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x71, @loopback}}}], 0x20}, 0x0) 07:04:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x8000001000008912, &(0x7f0000000100)="11f0a505ba583bcb7bf070") r1 = socket$inet(0x10, 0x2, 0x9) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000180007041dfffd946f610500", 0x10}], 0x1}, 0x0) 07:04:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1) 07:04:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ptype\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1) readv(r0, &(0x7f0000000580), 0x26e) 07:04:23 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x2000000000000c) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) 07:04:24 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r0) 07:04:24 executing program 3: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000180)='/dev/capi20\x00', 0x0, 0x0) readv(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/42, 0x2a}], 0x1) 07:04:24 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) semget$private(0x0, 0x0, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$netlink(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0x0, 0xfff, 0x200, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x1000, 0x7, 0x1ff, 0x7fffffff, 0x6, 0x5, 0x0, 0x3, 0x3, 0xff, 0x1, 0x9, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000440), 0x4}, 0xc2, 0x63, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) ftruncate(0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40485404, &(0x7f0000000200)={{0x1}}) write(0xffffffffffffffff, &(0x7f0000000580)="24000000210005ff006b000421ed", 0xe) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) 07:04:24 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x10000) 07:04:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) 07:04:24 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00') fgetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='security.vboxnet0vb/xnet0\n-bd'], &(0x7f0000000240)=""/12, 0xc) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/125, 0x7d}], 0x1, 0x0) 07:04:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1aa) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) 07:04:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_read_part_table(0x4c000000, 0xaaaab82, &(0x7f0000000040)=[{&(0x7f0000000000)="0201a5ffffff00090000ff0700000000000000000000000000000000000000ffffff81000004800000000a0000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) ioctl(r0, 0x8000001000008912, &(0x7f0000000100)="11f0a505ba583bcb7bf070") 07:04:24 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2}, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$netlink(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x5) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000700), &(0x7f0000000740)=0x75) ftruncate(0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40485404, &(0x7f0000000200)={{0x1}}) write(0xffffffffffffffff, &(0x7f0000000580)="24000000210005ff006b000421ed382002190008000000000010ffea", 0x1c) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/zero\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x40000) 07:04:24 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000100)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00') fgetxattr(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='security.vboxnet0vb/xnet0\n-bd'], &(0x7f0000000240)=""/12, 0xc) preadv(r0, 0x0, 0x0, 0x0) 07:04:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") r1 = openat$usbmon(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x11b3e4) 07:04:24 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) dup2(r0, r1) 07:04:24 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) dup2(r0, r1) 07:04:24 executing program 1: openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) write(r0, &(0x7f00000000c0), 0xfffffe13) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x801) pipe(0x0) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) getpid() stat(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000004c0)) nanosleep(0x0, &(0x7f0000000100)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$P9_RRENAMEAT(r1, &(0x7f00000001c0)={0x7, 0x4b, 0x1}, 0x7) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r3, 0x4, 0x40400) write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18}, 0x18) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000000)={0x30000000000000}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x0, 0x0, 0x0, 0x207}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) [ 243.323164][ T9389] loop0: p1 p3 07:04:25 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000780)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) 07:04:25 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x10000000000025, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x2, 0x0, 0x2}) 07:04:25 executing program 0: syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x300, 0x0, 0x0, 0x0, 0x0) 07:04:25 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') r1 = socket$inet(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x10000000000, 0x4000000000000, @mcast2}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) uname(&(0x7f00000005c0)=""/247) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000380)=0x800000000, 0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfafd, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) setgroups(0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0]) openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x100) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000000c0), 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/190, 0xbe}, {&(0x7f0000000000)=""/12, 0xc}], 0x2) 07:04:25 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2800) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x60, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x11, 0xd8, &(0x7f00000003c0)="57af70a8cb41dab9dd077d67ef3a0a9c1f1061b709eaa25871103599be6522cb61fd5a63105ba2657e6c986b03fa2864fe34571fe53491d57b129daa18b214d0e795eb4435faf6af91f081beb05bdc34673dd3aa7be145fc4229ecd3286cb05e20652b014aa5bdc1eba75df45bd270893b1148f9c603c72e2f1619c7e09e4239d6647c2cb367f458cc9477f17c885ec7558af614d7791cfb99ac41521d202889bb1de3710d71a528f6f5a0684e451e981043049774e5ae2730665613149b0106498b4fff41e1a46a79627a15fd813e29bfc9233429b4574a"}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000653, 0x0, 0x0) 07:04:25 executing program 4: openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r1, 0x2081fc) write(r0, &(0x7f00000000c0), 0xfffffe13) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x801) pipe(0x0) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) getpid() fgetxattr(0xffffffffffffffff, &(0x7f0000000300)=@known='system.posix_acl_default\x00', &(0x7f0000000340)=""/220, 0xdc) stat(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000004c0)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) nanosleep(0x0, &(0x7f0000000100)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000005c0)={0x6, {{0xa, 0x4e23, 0x8001, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}, {{0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}, 0x5}}}, 0x104) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) write$P9_RRENAMEAT(r1, &(0x7f00000001c0)={0x7, 0x4b, 0x1}, 0x7) r3 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) fcntl$setstatus(r3, 0x4, 0x40400) write$FUSE_WRITE(r3, &(0x7f0000000080)={0x18}, 0x18) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000000)={0x30000000000000, 0xd000}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x0, 0x0, 0x0, 0x207}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) 07:04:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x1}}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 244.083459][ T9458] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.191709][ T9458] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.281976][ T9464] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 07:04:25 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip6_tables_names\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) [ 244.483698][ T9464] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 07:04:26 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0x21000002c32}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa0000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x0, 0x70bd25, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'bridge0\x00'}}}, ["", "", "", ""]}, 0x2c}}, 0xd56900b6bed1a505) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) ioctl$TIOCSSERIAL(r5, 0x541f, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in6=@local}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) dup3(r3, r0, 0x1f00000000000000) [ 244.588542][ T9464] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 07:04:26 executing program 0: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) 07:04:26 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) pwritev(r0, &(0x7f0000001740)=[{0x0}, {0x0}, {&(0x7f00000002c0)='0', 0x1}], 0x3, 0x0) [ 244.678612][ T9464] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.735993][ T9464] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 07:04:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xf642e7e) write$P9_RSYMLINK(r1, 0x0, 0x0) write$P9_RLOCK(r1, 0x0, 0x0) [ 244.891562][ T9464] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 07:04:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) 07:04:26 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$invalidate(0x15, r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') r1 = socket$inet(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x10000000000, 0x4000000000000, @mcast2}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="4c0000001200ff09fffefd956fa283b7270fd917df226c24a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d0f", 0x4c}], 0x1}, 0x0) uname(0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfafd, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000001380), 0x4000056, 0x0, &(0x7f0000000200)={0x77359400}) syz_emit_ethernet(0x1, &(0x7f0000001640)=ANY=[@ANYRESDEC], 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) setgroups(0x3, &(0x7f00000008c0)=[0x0, 0x0, 0x0]) openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x100) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f00000000c0), 0x0) [ 245.077467][ T9469] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.116067][ T9501] mmap: syz-executor.0 (9501) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 245.149907][ T9502] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.5'. [ 245.188981][ T9464] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 07:04:26 executing program 0: write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 245.316705][ T9469] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. 07:04:27 executing program 2: getpid() memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000240)='./bus\x00', 0x10186) fallocate(r1, 0x0, 0x0, 0x2000002) read$eventfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) fallocate(0xffffffffffffffff, 0x0, 0x6, 0x2) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) r4 = dup(r3) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r3) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000002c0)={{0xa, 0x4e22, 0x4, @ipv4={[], [], @empty}, 0x3f}, {0xa, 0x4e24, 0xda, @ipv4={[], [], @multicast2}, 0x400000}, 0x55, [0x1, 0xffffffffffff5c96, 0x9, 0x4, 0x100000001, 0xfffffffffffff001, 0x101, 0x2]}, 0x5c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000340)={0x7, 0x3, {0x2, 0x2, 0x3f, 0x2, 0xca}}) write$P9_RFSYNC(r2, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000100)=0x9, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) write$P9_RVERSION(r0, &(0x7f0000000580)=ANY=[], 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x800fe) open(&(0x7f0000000080)='./bus\x00', 0x82040, 0x10) sendfile(r4, r5, 0x0, 0x8000fffffffe) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) 07:04:27 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x808e18) write$P9_RGETLOCK(r0, &(0x7f0000000000)={0x2c, 0x37, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe, 'keyring&-eth1-'}}, 0x2c) fallocate(r0, 0x3, 0x0, 0xfff9) 07:04:27 executing program 5: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x808e18) fallocate(r0, 0x3, 0x0, 0xfff9) 07:04:27 executing program 3: clone(0x1410c1bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000001c0)) ptrace(0x4206, r0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x4207, r0) [ 245.706644][ T9526] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 07:04:27 executing program 5: socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000340)='hfsplus\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000740)=[{&(0x7f0000000400)="a114502dff87b581351d8a08db329c0d040b2615a04a857c6faae7209b0f8da323326f9b70495a15c9835a11fefd5bd5d3a0580afb08453f066aed4759097b53b66a00d9959fac42bb43c1a598ecb43c70923ce5a4c7474876b8b886877dc6615170373ef7d9799157546083b714cdb41498e6fb7e9b9ae4", 0x78, 0x6}, {&(0x7f0000000480)}], 0x40, &(0x7f00000007c0)={[{@part={'part'}}, {@type={'type', 0x3d, "9b850486"}}, {@session={'session', 0x3d, 0x8}}]}) 07:04:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x2000002) fallocate(r0, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="b3"]) 07:04:27 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14103e, 0x0) ftruncate(r0, 0x200003) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf79c96872210a904, 0x0, 0x4, 0x0, 0x38, 0x67}, [{0x0, 0x0, 0x0, 0x0, 0xffffffffffff0000}], "", [[], [], [], []]}, 0x458) [ 245.824322][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 245.824338][ T26] audit: type=1804 audit(1567235067.366:31): pid=9535 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir880243949/syzkaller.DccuDY/24/bus" dev="sda1" ino=16593 res=1 [ 245.970789][ T9539] hfsplus: invalid session number or type of track [ 245.994936][ T26] audit: type=1804 audit(1567235067.476:32): pid=9535 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir880243949/syzkaller.DccuDY/24/bus" dev="sda1" ino=16593 res=1 07:04:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}, 0x0) [ 246.010087][ T9539] hfsplus: unable to find HFS+ superblock 07:04:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f000000a9c0)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@tclass={{0x14}}], 0x18}}], 0x1, 0x0) [ 246.131241][ T9555] hfsplus: invalid session number or type of track [ 246.163250][ T9555] hfsplus: unable to find HFS+ superblock 07:04:27 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080), 0x8) listen(r0, 0x0) 07:04:27 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) close(r1) r2 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x20000000000006}, 0x1c) io_setup(0x3, &(0x7f00000001c0)=0x0) io_submit(r3, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x7ffffffff000}]) 07:04:27 executing program 4: r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x3000a) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) rmdir(&(0x7f0000000040)='./file1\x00') 07:04:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x2a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='wlan0^\x00') 07:04:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x2a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/148, 0xff1e}], 0x1}}, {{0x0, 0xffffffffffffffcd, 0x0}}], 0x40001de, 0x0, 0x0) [ 246.385423][ T26] audit: type=1800 audit(1567235067.926:33): pid=9549 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="cpuacct.usage_sys" dev="sda1" ino=16590 res=0 07:04:28 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0x21000002c32}) 07:04:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x40d554dc365b9583, 0x0) 07:04:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x2a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b700000001ed0000bfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000080000007d400300000000005504000001ed00003400000000ffffffcf640000000000007b1a00fe000000001d00000000000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693002e7f3be361917adef6ee1caa2b4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51ebd601b6bf01c8e8b1b5e4fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd8dff0c710e4cdbf4fc41fbb07f94369e646b8ee6de2109fbe4ef154400e2438ec649dc74a1a61ab36a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda8a3658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06ad99edc3a6138d5fcfba53f8d0c67ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6f7ffffffffffffffd228a40f9411fe7226a4040996e37c4f46756d50b928f63fc77b830282294484fa6da21b62987c71c1d6e6297eadbab95444937b029e3bd90eef517a2d0ab5b79d6041cb17a475f677085eaa790167cdd110d9fcc36a8dc6cf1c8e24fe23d7b67259611b731c6fc186844deadc5bdaa83c0556cbb3c059516806c9b3382fa112a062deb156619f6d14206180c0d4201ddb5e08f8325537bdfcb5e63d851e44dd66a233020e21523d52fb773cae297bb9c53b24e05e3c7e47420849fec082cb98cc58a3005d3dc31ef661261ddce821b6322061516eb2000000632058e42ccbf931b694069c46818c26e5a5396d975aad73cc0c4ea176dd51a6efe7d6c32ff62e0c63aa73feac44dd37775d26a406371fdccc17cfb0688e4a28232980b5ffe4bc8d0df46ad2a47e871ff9b6f2a71c1ade6b0ca48b8b8ed64cda"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) open(0x0, 0x80000, 0x80) 07:04:28 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x500000000003}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@hopopts_2292={{0x48, 0x29, 0x36, {0x0, 0x5, [], [@jumbo, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @hao={0xc9, 0x10, @loopback}]}}}], 0x48}}], 0x1, 0x0) sendmmsg$sock(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@mark={{0x14}}], 0x18}}, {{0x0, 0x24e, 0x0, 0x0, &(0x7f0000000900), 0x16}}], 0x6bb, 0x0) 07:04:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_read_part_table(0x6b6b6b, 0xaaaab82, &(0x7f0000000040)=[{&(0x7f0000000000)="0201a5ffffff00090000ff0700000000000000000000000000000000000000ffffff81000004800000000a0000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) ioctl(r0, 0x8000001000008912, &(0x7f0000000100)="11f0a505ba583bcb7bf070") 07:04:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_read_part_table(0xfdfdffff, 0xaaaab82, &(0x7f0000000040)=[{&(0x7f0000000000)="0201a5ffffff00090000ff0700000000000000000000000000000000000000ffffff81000004800000000a0000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) ioctl(r0, 0x8000001000008912, &(0x7f0000000100)="11f0a505ba583bcb7bf070") 07:04:28 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x10000000000025, &(0x7f0000000040)={0x1, 0x0, 0x5}) fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2}) 07:04:28 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0104307, &(0x7f0000000000)) 07:04:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000300)=0x6, 0x211) 07:04:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timer_create(0xfffffffbfffffffe, &(0x7f0000000240)={0x0, 0x17}, &(0x7f0000000080)) syz_open_procfs(0x0, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 07:04:28 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x400000000003}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) [ 247.262439][ T9612] loop3: p1 p3 [ 247.302918][ T9630] ------------[ cut here ]------------ [ 247.308640][ T9630] WARNING: CPU: 1 PID: 9630 at kernel/time/posix-cpu-timers.c:401 posix_cpu_timer_del+0x2f0/0x3b0 [ 247.319232][ T9630] Kernel panic - not syncing: panic_on_warn set ... [ 247.325841][ T9630] CPU: 1 PID: 9630 Comm: syz-executor.4 Not tainted 5.3.0-rc6-next-20190827 #74 [ 247.334858][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.344917][ T9630] Call Trace: [ 247.348281][ T9630] dump_stack+0x172/0x1f0 [ 247.352619][ T9630] ? posix_cpu_timer_del+0x230/0x3b0 [ 247.357910][ T9630] panic+0x2dc/0x755 [ 247.361803][ T9630] ? add_taint.cold+0x16/0x16 [ 247.366483][ T9630] ? printk+0xba/0xed [ 247.370461][ T9630] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 247.375922][ T9630] ? __warn.cold+0x14/0x3c [ 247.380333][ T9630] ? __warn+0xd9/0x1d0 [ 247.384409][ T9630] ? posix_cpu_timer_del+0x2f0/0x3b0 [ 247.389690][ T9630] __warn.cold+0x2f/0x3c [ 247.393935][ T9630] ? report_bug.cold+0x63/0xad [ 247.398700][ T9630] ? posix_cpu_timer_del+0x2f0/0x3b0 [ 247.403980][ T9630] report_bug+0x289/0x300 [ 247.408318][ T9630] do_error_trap+0x11b/0x200 [ 247.412911][ T9630] do_invalid_op+0x37/0x50 [ 247.417322][ T9630] ? posix_cpu_timer_del+0x2f0/0x3b0 [ 247.422648][ T9630] invalid_op+0x23/0x30 [ 247.426805][ T9630] RIP: 0010:posix_cpu_timer_del+0x2f0/0x3b0 [ 247.432696][ T9630] Code: 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 83 bb c8 00 00 00 00 74 16 e8 10 58 0d 00 <0f> 0b e9 87 fe ff ff e8 b4 3e 48 00 e9 dd fd ff ff e8 fa 57 0d 00 [ 247.452308][ T9630] RSP: 0018:ffff888051e47a30 EFLAGS: 00010093 [ 247.458389][ T9630] RAX: ffff888054dc8180 RBX: ffff8880a0397cf0 RCX: 1ffff1100a9b9142 [ 247.466361][ T9630] RDX: 0000000000000000 RSI: ffffffff8164d5c0 RDI: ffff8880a0397db8 [ 247.474328][ T9630] RBP: ffff888051e47ac0 R08: 0000000000000002 R09: ffff888054dc8a18 [ 247.482296][ T9630] R10: fffffbfff138b140 R11: ffffffff89c58a07 R12: ffff8880a4b18100 [ 247.490265][ T9630] R13: 1ffff1100a3c8f47 R14: ffff888051e47a98 R15: ffff8880a0397d48 [ 247.498264][ T9630] ? posix_cpu_timer_del+0x2f0/0x3b0 [ 247.503563][ T9630] ? lock_acquire+0x190/0x410 [ 247.508245][ T9630] ? thread_cpu_clock_getres+0x90/0x90 [ 247.513715][ T9630] ? thread_cpu_clock_getres+0x90/0x90 [ 247.519210][ T9630] exit_itimers+0xdb/0x2e0 [ 247.523649][ T9630] do_exit+0x1980/0x2e60 [ 247.527900][ T9630] ? get_signal+0x392/0x2500 [ 247.532490][ T9630] ? find_held_lock+0x35/0x130 [ 247.537250][ T9630] ? get_signal+0x392/0x2500 [ 247.541838][ T9630] ? mm_update_next_owner+0x640/0x640 [ 247.547210][ T9630] ? lock_downgrade+0x920/0x920 [ 247.552063][ T9630] ? _raw_spin_unlock_irq+0x28/0x90 [ 247.557260][ T9630] ? get_signal+0x392/0x2500 [ 247.561848][ T9630] ? _raw_spin_unlock_irq+0x28/0x90 [ 247.567060][ T9630] do_group_exit+0x135/0x360 [ 247.571659][ T9630] get_signal+0x47c/0x2500 [ 247.576082][ T9630] ? lock_downgrade+0x920/0x920 [ 247.580955][ T9630] do_signal+0x87/0x1700 [ 247.585197][ T9630] ? __kasan_check_read+0x11/0x20 [ 247.590223][ T9630] ? _copy_to_user+0x118/0x160 [ 247.594989][ T9630] ? setup_sigcontext+0x7d0/0x7d0 [ 247.600019][ T9630] ? exit_to_usermode_loop+0x43/0x380 [ 247.605388][ T9630] ? do_syscall_64+0x65f/0x760 [ 247.610150][ T9630] ? exit_to_usermode_loop+0x43/0x380 [ 247.615614][ T9630] ? lockdep_hardirqs_on+0x418/0x5d0 [ 247.620897][ T9630] ? trace_hardirqs_on+0x67/0x240 [ 247.625926][ T9630] exit_to_usermode_loop+0x286/0x380 [ 247.631228][ T9630] do_syscall_64+0x65f/0x760 [ 247.635825][ T9630] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 247.641724][ T9630] RIP: 0033:0x459879 [ 247.645620][ T9630] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 247.665229][ T9630] RSP: 002b:00007fbc188eccf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 247.673651][ T9630] RAX: 0000000000000001 RBX: 000000000075bfd0 RCX: 0000000000459879 [ 247.681628][ T9630] RDX: 00000000004c8fe7 RSI: 0000000000000081 RDI: 000000000075bfd4 [ 247.691211][ T9630] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 247.699176][ T9630] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000075bfd4 [ 247.707146][ T9630] R13: 00007ffdaa06d98f R14: 00007fbc188ed9c0 R15: 000000000075bfd4 [ 247.716530][ T9630] Kernel Offset: disabled [ 247.720963][ T9630] Rebooting in 86400 seconds..