[ 65.431455] audit: type=1800 audit(1543696954.477:25): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 65.450951] audit: type=1800 audit(1543696954.477:26): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 65.470523] audit: type=1800 audit(1543696954.507:27): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 66.865352] sshd (6758) used greatest stack depth: 53248 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.62' (ECDSA) to the list of known hosts. 2018/12/01 20:42:46 fuzzer started 2018/12/01 20:42:51 dialing manager at 10.128.0.26:36429 2018/12/01 20:42:52 syscalls: 1 2018/12/01 20:42:52 code coverage: enabled 2018/12/01 20:42:52 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/01 20:42:52 setuid sandbox: enabled 2018/12/01 20:42:52 namespace sandbox: enabled 2018/12/01 20:42:52 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/01 20:42:52 fault injection: enabled 2018/12/01 20:42:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/01 20:42:52 net packet injection: enabled 2018/12/01 20:42:52 net device setup: enabled 20:46:05 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x201, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0x0, 0x6, 0x6, 0x2, 0x3ff, 0xffffffffffffff60, 0x7ff, 0x6}, &(0x7f0000000080)) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001200)=[{&(0x7f0000000100)=""/237, 0xed}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x2, &(0x7f0000001540)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001240)=""/130, 0x82}, &(0x7f0000001300), 0x2}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x620e4e90}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001340)=""/218, 0xda}, &(0x7f0000001440), 0x61}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001480)=""/126, 0x7e}, &(0x7f0000001500), 0x2}}], 0xa8, 0x40}, 0x4004) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001640), &(0x7f0000001680)=0x4) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000016c0)=0x20) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000001700)={0x2, 'ip6_vti0\x00', 0x1}, 0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000001740), &(0x7f0000001780)=0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000017c0), &(0x7f0000001800)=0x4) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001840)='lo\x00') fsync(r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000001880)=@sack_info={0x0, 0xffff, 0xffffffff}, &(0x7f00000018c0)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001900)={0x3, 0x8003, 0x9, 0xa357, r1}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000001940), &(0x7f0000001980)=0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000019c0), &(0x7f0000001a00)=0x18) setns(r0, 0x2000000) epoll_wait(r0, &(0x7f0000001a40)=[{}, {}, {}, {}, {}], 0x5, 0x3) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000001a80)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001cc0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000001d40)={0x5, 0x10, 0xfa00, {&(0x7f0000001ac0), r2, 0x1}}, 0x18) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000002100)='/dev/dsp\x00', 0x400080, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000021c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x508, 0x0, 0x270, 0x180, 0x388, 0x0, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, &(0x7f0000002140), {[{{@ip={@loopback, @broadcast, 0xffffffff, 0xffffffff, 'rose0\x00', 'ip6tnl0\x00', {}, {}, 0x2e, 0x2, 0x4a}, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x80000001}}}, {{@uncond, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@local, @local, 0xffffff00, 0xffffffff, 'bridge_slave_1\x00', 'bond0\x00', {0xff}, {0xff}, 0xff, 0x0, 0x2}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x20000000000, 0x1ff, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x9, 0x3}}}, {{@uncond, 0x0, 0xe8, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xc}}, @common=@ttl={0x28, 'ttl\x00', 0x0, {0x1, 0x400}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x573, @loopback, 0x4e23}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, 0xff, 0xffffffff, 'syz_tun\x00', 'syzkaller1\x00', {0xff}, {}, 0xff, 0x1, 0x40}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x2}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) write$UHID_CREATE(r0, &(0x7f0000002800)={0x0, 'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000002740)=""/187, 0xbb, 0x2, 0x1, 0x0, 0x7, 0x6}, 0x120) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002940)=""/146, 0x92, 0x3, 0x64b, 0x4, 0xa81b, 0xfffffffffffffffc}, 0x120) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000002b40)=0xffffffffffffff7f) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002b80)='/dev/sequencer\x00', 0x200200, 0x0) write$P9_RSETATTR(r3, &(0x7f0000002bc0)={0x7, 0x1b, 0x2}, 0x7) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000002c00)) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) syzkaller login: [ 277.550372] IPVS: ftp: loaded support on port[0] = 21 [ 279.962703] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.969238] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.978306] device bridge_slave_0 entered promiscuous mode [ 280.135856] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.142419] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.151095] device bridge_slave_1 entered promiscuous mode [ 280.292078] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 280.429199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 280.869990] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 281.020693] bond0: Enslaving bond_slave_1 as an active interface with an up link 20:46:10 executing program 1: sync() r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000000c0)={0xb05, {{0x2, 0x4e21, @local}}}, 0x88) iopl(0x6) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000180)=0x2b8d) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) read(r1, &(0x7f00000001c0)=""/77, 0x4d) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000240)) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) ioprio_set$pid(0x1, r2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000400)={0x3, 0x3, 0x1, 0x7}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000440)={0x1, 0x6, 0x103, 0x7, {0x3ff, 0x6b, 0x4a, 0x8f8}}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000480)={0x0, 0x7f}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000500)={r3, 0x9}, &(0x7f0000000540)=0x8) write$P9_RLOPEN(r1, &(0x7f0000000580)={0x18, 0xd, 0x1, {{0x4, 0x1, 0x8}, 0x39}}, 0x18) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f00000005c0)) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000600)={0x6, 0x1, 0x4, 0x2, 0x2, 0x9, 0x1, 0x18, 0x1, 0x400, 0x86, 0xfffffffffffffff9}) r4 = getuid() stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000700)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000800)=0xe8) write$P9_RSTATu(r1, &(0x7f0000000840)={0x86, 0x7d, 0x2, {{0x0, 0x58, 0x2ba, 0x5, {0x2, 0x3, 0x5}, 0x40000, 0x100000000, 0x800, 0x1ff, 0x5, '}]GPL', 0xa, '/dev/zero\x00', 0xc, 'wlan1%{%self', 0xa, '/dev/zero\x00'}, 0x19, 'wlan0cgroup@vmnet0wlan0[@', r4, r5, r6}}, 0x86) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000900)="8d30228c35fa1253760438a668ff3f64", 0x10) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) open_by_handle_at(r1, &(0x7f0000000940)={0x1008, 0x7, "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"}, 0x2000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000019c0)={0x2, &(0x7f0000001980)=[{}, {0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000001a00)={r7, 0x3}) [ 281.360112] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 281.367336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.913322] IPVS: ftp: loaded support on port[0] = 21 [ 282.206063] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 282.214328] team0: Port device team_slave_0 added [ 282.419644] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 282.428229] team0: Port device team_slave_1 added [ 282.660939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 282.668131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 282.677346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 282.916074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 282.923373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 282.932647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.090042] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 283.098107] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.107417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.248415] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 283.256223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.265767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.699063] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.705695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.712836] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.719320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.728509] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 286.002257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.126227] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.133054] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.141917] device bridge_slave_0 entered promiscuous mode [ 286.396767] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.403390] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.412366] device bridge_slave_1 entered promiscuous mode [ 286.612910] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 286.864618] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 20:46:16 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x10800) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000580)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f00000006c0)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80001000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@bridge_newneigh={0x34, 0x1c, 0x20, 0x70bd2c, 0x25dfdbff, {0xf, 0x0, 0x0, r2, 0x0, 0x12}, [@NDA_DST_IPV4={0x8, 0x1, @empty}, @NDA_PORT={0x8, 0x6, 0x4e20}, @NDA_IFINDEX={0x8, 0x8, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x80) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000007c0)={{0xa, 0x4e20, 0x7fff, @remote, 0x80000000}, {0xa, 0x4e23, 0xfffffffffffffffc, @mcast2, 0x4}, 0x1, [0x500000000, 0x0, 0x0, 0xce, 0x3ff, 0x5e, 0x0, 0x8000]}, 0x5c) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000840)={0x0, @reserved}) prctl$PR_SET_TIMERSLACK(0x1d, 0x9) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000900)={0x0, 0x41, "b747ff637f91e4e6ab03e6f7fea2d21e58da9afec8276001d905700eb7f1d794e372948c4f518b292d117b97206fee9b9eb6485eea347805b21f7bafae0c4ba2fd"}, &(0x7f0000000980)=0x49) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000009c0)=@assoc_value={r4}, &(0x7f0000000a00)=0x8) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000a40)) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000a80)=0xdc, 0x4) prctl$PR_GET_TIMERSLACK(0x1e) fanotify_mark(r0, 0x10, 0x1, r0, &(0x7f0000000ac0)='./file0\x00') syz_emit_ethernet(0x56, &(0x7f0000000b00)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [], {@canfd={0xd, {{0x3, 0x7, 0x3, 0x3}, 0x20, 0x2, 0x0, 0x0, "a0da15475a9060eaceb053777e90867c72f63ede228ffd5b92dd01f20ec7e6f3dc1f9bf0b739b824287510f3c5d4731c25192e5e4a96e5cc8db240709385275c"}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000b80)=0xffffffffffff0001) fcntl$getownex(r0, 0x10, &(0x7f0000000bc0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000c40)={{0x6, 0x4, 0x6, 0x6b0e0f33, 'syz1\x00', 0x4}, 0x0, 0x21, 0x80000000, r5, 0x8, 0x2, 'syz0\x00', &(0x7f0000000c00)=['\x00', ',\x00', 'ppp1\x00', '/dev/dsp#\x00', '/dev/dsp#\x00', 'lo@\x00', '/self]GPLem0\x00', '/dev/dsp#\x00'], 0x37, [], [0x9, 0x4c693c9b, 0x80000001, 0x20]}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000d80)='team_slave_1\x00', 0x10) connect(r0, &(0x7f0000000dc0)=@ll={0x11, 0xff, r2, 0x1, 0x400, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000e40)=""/92) fanotify_mark(r0, 0x3e, 0x48000008, r0, &(0x7f0000000ec0)='./file0\x00') socketpair(0x1, 0x2, 0x9, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = creat(&(0x7f0000000f40)='./file0\x00', 0x8) poll(&(0x7f0000000f80)=[{r7, 0x10}, {r6, 0x4010}], 0x2, 0xff) [ 287.718277] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 288.053033] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 288.080340] IPVS: ftp: loaded support on port[0] = 21 [ 288.407731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 288.415087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 288.726797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 288.734004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 289.504100] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 289.512548] team0: Port device team_slave_0 added [ 289.750724] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 289.759217] team0: Port device team_slave_1 added [ 290.051487] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 290.064343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 290.073457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 290.386870] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 290.394598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 290.403645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 290.715062] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 290.722918] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.731866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.014309] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 291.022088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 291.030924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.907901] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.914505] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.922974] device bridge_slave_0 entered promiscuous mode [ 293.179868] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.186511] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.195054] device bridge_slave_1 entered promiscuous mode [ 293.530224] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 293.797916] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 294.315749] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.322489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.329423] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.336075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.345062] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 294.509111] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 294.631411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.779231] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 295.000083] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 295.007330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.308680] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 295.316129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 20:46:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = signalfd4(r0, &(0x7f0000000000)={0xfffffffffffffff9}, 0x8, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8000, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x7f, 0xf5bf, 0x1, 0x2, 0x0, 0x6, 0x20000000000000, 0xffffffffffff3be4, 0x7b7cd45c, 0x1, 0xc0, 0x8, 0x3f, 0x8001, 0x0, 0x10}}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e20, 0x7, @local, 0x5}, {0xa, 0x4e22, 0x3ff, @mcast2, 0x5}, 0x10001, [0x10001, 0x7, 0x5, 0x5, 0x0, 0x10001, 0x8, 0x3]}, 0x5c) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000240)={0x9, 0x5}) r3 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r3, r4) ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000380)={0x1, 0x7, 0x6, 0x625d, 0x4, 0x7}) r5 = shmget$private(0x0, 0x1000, 0x78001200, &(0x7f0000ffc000/0x1000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x2000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f00000003c0)={0x5, 0x4b5, 0x1}) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000400)=""/13) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000440)={0x8, 0x80000001, 0x9, 0x3}) fcntl$setsig(r1, 0xa, 0x12) io_setup(0x8, &(0x7f0000000480)=0x0) io_submit(r6, 0x1, &(0x7f0000000600)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x494f45a531f54a58, 0x6, r1, &(0x7f00000004c0)="93955e532ab7cc305131cfec5382240ad3c8b45174247d97416f3ea0e9629d2977fc09592a13501aa71957fce4ab955da1b938ff072463ee0f26bbe8b070b408ad2c342a72459ed3c5f2f9ec30037922b65b60b96a3367e69688a27d5c411d24c4f663d2b6e21b1dc370da5922dadcea4b5409f7a5a366d89707917b4e817e07f2f24ea263ad44337b19adc5f4d6b50c6c55b8b17eea6f23e2d3fff62e5e7bc6ecf6a88a072d9dc1c9ea431af05e9341bce9149bd76ece3643388bcb854c08c6e6f449d6e53d5f773e2ea81ae54d55ff86e25719fe7fdefdb8c5b0719bc79f920f79a43dcb0538637b2ab689e1542c32", 0xf0, 0x8, 0x0, 0x2, r2}]) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000640)=""/160, &(0x7f0000000700)=0xa0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000740)={0x4, 0x0, [], {0x0, @reserved}}) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000800)={0x1000, 0x4983792c}) write$9p(r2, &(0x7f0000000840)="498040c719d31b2a19e4951ddb072d32f64db18a8c6ef5f2a8a69492f5adc77c421c28c4dfeba334abccecf6f78966e0de4d3ce6529aece5c3eda80fcab89f19c43c1a06e1c939b89c305c16c28cd1fde7390b5baaaba9eec8f46736949b86e404c8c5d5850b39423eb37c0caf9260f37762dae249e3f7997a8ee1e8c848dcb374f9cd409d3e329eb9bd1b7d36df1fa95f2414cc50afad48942bd328c72fb0ae8bff56", 0xa3) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000900)='trusted.overlay.upper\x00', &(0x7f0000000940)={0x0, 0xfb, 0x68, 0x2, 0x2, "a3c1eb9f0f2b7763af90fe514fd6f74b", "7a1196c8145b6d5fe4c39a49c059506b39553555db5f1b845a9339872fbc7c0053a822d73bf58060b717315227dcbe45a2c139da66fa45f26ed6a23d816f244a72776cac3df48f9d0364d1ec9bd07b8d0912b5"}, 0x68, 0x3) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000009c0)) r7 = syz_open_dev$sg(&(0x7f0000000a00)='/dev/sg#\x00', 0x7fff, 0x400080) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000a40)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x5}}, [0x8000, 0x1, 0x10001, 0x7, 0x10000, 0x4, 0x9, 0x6, 0x8, 0x1f, 0x80000001, 0x7f, 0xffffffff, 0x0, 0x400]}, &(0x7f0000000b40)=0x100) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000b80)={r8, 0x0, 0x8, 0x7f, 0x1, 0x40}, &(0x7f0000000bc0)=0x14) [ 296.291918] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 296.300466] team0: Port device team_slave_0 added [ 296.651783] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 296.659928] team0: Port device team_slave_1 added [ 296.810902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.827039] IPVS: ftp: loaded support on port[0] = 21 [ 296.982184] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 296.989244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.998586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.353886] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 297.360967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.369907] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.715954] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 297.723684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.732782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.077235] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 298.095024] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 298.102679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 298.111796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.369217] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 299.375780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.383788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.683837] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.724162] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.730652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.737736] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.744317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.753178] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 302.012053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.815702] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.822340] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.830954] device bridge_slave_0 entered promiscuous mode [ 303.200910] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.207575] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.216539] device bridge_slave_1 entered promiscuous mode [ 303.584828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 303.961593] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 305.137076] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 305.414051] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 305.759050] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 305.766338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.099546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 306.106754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 20:46:36 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x8, 0x0, 0xc3ad8eb24870e898, 0x6f1}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000080)={r1, 0x20}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000000c0)={0x0, @reserved}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xa0, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=[0x78, 0x0, 0x38, 0x48]}, 0x8000}}, @acquire={0x40046305, 0x4}, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000200)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f0000000240)=[0x30, 0x38, 0x38]}, 0xfff}}], 0xf5, 0x0, &(0x7f0000000340)="773f7f321a8265a940b94a3c4be95a7baaa96bf55544aca0898e42e889b0591c544f31af2b61e3684bd09a430793d462cd463070e61658259e9d2d42f64cf4ff353f380729c9791d6a5067f5288aff25b24432d00a38c93253ba0772b87c42b8f5e8974eb249e92bf42d029d9ecca6a9d922e4c974e71c414b1065e0f7b5c401d705711bf576f8991c1bbe9954be581199c140cc3807f37d7bf6b6941b3f0c76910620c3857c1592aca8942b7eb140aeec5136a5e55bcf5fce40a7a1b33ae1b22cb54fa9877d5c81bcf9417fa50aa1d34ad9c9ca88a3a6b51b3b0f734c499c3afd2d64a222158b6d4d6a6866bcbdf35cd63bdbb62f"}) recvfrom(r0, &(0x7f0000000480)=""/37, 0x25, 0x40010062, &(0x7f00000004c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x80) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x4, @empty, 0x9b6}, 0x1c) ioctl$KDSETMODE(r0, 0x4b3a, 0x1f) membarrier(0x9, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000580)='skcipher\x00') io_setup(0x7fff, &(0x7f00000005c0)=0x0) r3 = fcntl$dupfd(r0, 0x0, r0) io_submit(r2, 0x6, &(0x7f0000000b00)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000600)="95afb6113b9b653f38974b2d2ce872d2130fde7b8b6f901011e95697e81c05505427f4cb00fdaa3870b16206e34dfef2f97026b0ab2f6e344af273e98b190ef8089441e0a9bc0b84", 0x48, 0x5, 0x0, 0x2, r0}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x7, 0xe277, r0, &(0x7f00000006c0)="18ed0e4ae89996756adadecebf616f47e84d693da68ec694cb5172c16717", 0x1e, 0xffff}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x427, r0, &(0x7f0000000740), 0x0, 0x400, 0x0, 0x1, r3}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x80000001, r0, &(0x7f00000007c0)="161351dd39ba2bfa4ca62956060485240b5dcf0cb321212f7f35df13605a2b9422194f823303ccfd6436d72c43b95e55c9f459aec12bd63dea0f68563dcdeef0e83b50a795f200a50c55e83cefcd7b80d4de8505c72144bf0adc6fd7dce1ab2c5d2bbd7ed2978597dae2582349d69df45853d84c333232784f7a254dd884b1e79c748b3fc13d3a654b1873ee5f3f47ad2b4db1aeaa73076f75485e5f7534bcc01823f7cd0291f5d346a3de85207a83f9e4c40ee9719ce686d054c7587e8b0582a12895b82887d4988a7ab4e4929c360c5c3bfe98600e1a6ff61cbef42e53fe527c0151f5413215ac867e21", 0xeb, 0x8001, 0x0, 0x0, r0}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7e36eeb4d76d3cde, 0x7, r0, &(0x7f0000000900)="220845b208c62c6e3760af8cdb671fce1c613196a4706cece0c8512be2effdd75fb38c92837436adb9d9097ea2016df7a1b7339cd39d529c969d6616182bae241a105089538c855a88261c86461b8376b56161415e93c29aaaabf2312e8af1bdea585a1cae438e9df655b7fced649817fc0a23686a50d7edec119dc4a33f02bf7bfd7738f18c2102ddc75fd4d471f34ba0e67eb227f68a75d914c084c1ba5182fbe4d96f705e8a53a8352848222986c0d3", 0xb1, 0x8, 0x0, 0x1}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x3, 0x0, r0, &(0x7f0000000a00)="c1bcc9b54247863924cd10087b51f0890882d119e5299dc5ae51ce54a49f2ac0064a04d16ecb548b46371bd015546b449eb8d9271953e11ed59d7b8b411aefeb43260e48738a1feb3281062760592fb78787d8bf777ee3ddffcb6ebcfd271e310be991202928037aacae2dce7930fb5278430e6f4aaeb0687d576ba91f72ae4a22ffc514c317fedba54f789c6d", 0x8d, 0xe2e6, 0x0, 0x0, r0}]) lgetxattr(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)=@known='system.posix_acl_access\x00', &(0x7f0000000bc0)=""/107, 0x6b) recvmmsg(r3, &(0x7f0000004240)=[{{&(0x7f0000000c40)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000cc0)=""/33, 0x21}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/191, 0xbf}, {&(0x7f0000001dc0)=""/122, 0x7a}, {&(0x7f0000001e40)=""/207, 0xcf}, {&(0x7f0000001f40)=""/180, 0xb4}, {&(0x7f0000002000)=""/125, 0x7d}], 0x7, &(0x7f0000002100)=""/111, 0x6f, 0x8}, 0x9}, {{0x0, 0x0, &(0x7f0000002180), 0x0, &(0x7f00000021c0)=""/94, 0x5e, 0x7fff}, 0x3}, {{&(0x7f0000002240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002700)=[{&(0x7f00000022c0)=""/167, 0xa7}, {&(0x7f0000002380)=""/162, 0xa2}, {&(0x7f0000002440)=""/151, 0x97}, {&(0x7f0000002500)=""/198, 0xc6}, {&(0x7f0000002600)=""/180, 0xb4}, {&(0x7f00000026c0)=""/51, 0x33}], 0x6, &(0x7f0000002780)=""/17, 0x11}, 0x9}, {{&(0x7f00000027c0)=@l2, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002840)=""/205, 0xcd}, {&(0x7f0000002940)=""/229, 0xe5}, {&(0x7f0000002a40)=""/123, 0x7b}], 0x3, &(0x7f0000002b00), 0x0, 0x8}, 0x3ff}, {{&(0x7f0000002b40)=@ax25, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002bc0)=""/75, 0x4b}, {&(0x7f0000002c40)=""/81, 0x51}], 0x2, 0x0, 0x0, 0xffff}, 0x9}, {{&(0x7f0000002d00)=@rc, 0x80, &(0x7f0000004100)=[{&(0x7f0000002d80)=""/219, 0xdb}, {&(0x7f0000002e80)=""/179, 0xb3}, {&(0x7f0000002f40)=""/23, 0x17}, {&(0x7f0000002f80)=""/190, 0xbe}, {&(0x7f0000003040)=""/40, 0x28}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/98, 0x62}], 0x7, &(0x7f0000004180)=""/144, 0x90, 0x8001}, 0x1f}], 0x6, 0x10100, &(0x7f00000043c0)) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000004400)={0x1, 0x3432564e, 0x3, @discrete={0xcee0, 0xfff}}) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000004440)={0x3, r0}) getpeername(r3, &(0x7f0000004480)=@xdp, &(0x7f0000004500)=0x80) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000004540)={0x7fffffff, 0x20000, "495cd78b9f9f97fd206da8418b3906305ab4b5104a4ccc60", {0x6, 0x8001}, 0x401}) execveat(r3, &(0x7f0000004580)='./file0\x00', &(0x7f0000004700)=[&(0x7f00000045c0)='${\x00', &(0x7f0000004600)='md5sum\x00', &(0x7f0000004640)='cpusetposix_acl_accesskeyringvboxnet1\x00', &(0x7f0000004680)=',posix_acl_access%mime_type\x00', &(0x7f00000046c0)='ctr-aes-aesni\x00'], &(0x7f00000047c0)=[&(0x7f0000004740)='system.posix_acl_access\x00', &(0x7f0000004780)='\x00'], 0x800) connect$netlink(r3, &(0x7f0000004800)=@unspec, 0xc) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000004840)=0x7fffffff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000004880)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000048c0)={0x6, 0x7, 0x4, 0x40000, {0x77359400}, {0x0, 0x2, 0x10000, 0x1f, 0x0, 0x8000, "733cf4fc"}, 0x7fffffff, 0x3, @userptr=0x7, 0x4}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x4) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000004940)={0xfffffffffffffbff, 0x9, 0x8001, 0x1, 0x7f}) ioctl$TIOCGPTPEER(r3, 0x5441, 0x10001) connect$inet(r0, &(0x7f0000004980)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000004a00)={0x6, &(0x7f00000049c0)=[{}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000004a40)={r4, 0x18}) [ 307.217431] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 307.225824] team0: Port device team_slave_0 added [ 307.655784] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 307.664233] team0: Port device team_slave_1 added [ 308.068480] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 308.075848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 308.085264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.518964] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 308.526287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 308.535441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 308.644308] IPVS: ftp: loaded support on port[0] = 21 [ 308.797255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.962071] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 308.969910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.979066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 309.408819] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 309.416633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 309.425792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 20:46:38 executing program 0: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffff7fffd}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0x2932}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0xffffffffffffff6a) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000001c0)=0x0) sched_setparam(r2, &(0x7f0000000200)=0xfffffffffffffff8) fcntl$setsig(r1, 0xa, 0x8) fcntl$setlease(r1, 0x400, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000180)={0xffffffffffffffff, 0x9, 0x1, [], &(0x7f0000000100)=0xe7c}) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) arch_prctl$ARCH_GET_CPUID(0x1011) creat(&(0x7f0000000140)='./file0\x00', 0x0) 20:46:39 executing program 0: mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xfa9ee6f72c19a25f, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000180)={0xa, @pix={0x80, 0x5, 0x34565559, 0x0, 0x3ff, 0x57f52a49, 0x5, 0x80000000, 0x1, 0x4, 0x2, 0x7}}) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000080)="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") [ 310.399509] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 311.741150] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 311.747759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 311.755879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.079455] 8021q: adding VLAN 0 to HW filter on device team0 20:46:42 executing program 0: r0 = socket$inet(0x10, 0x800, 0x7) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2400000012061f001cfffd946fa2830020207c88a6f021d6090a000900010001e7000000", 0x24}], 0x1}, 0x0) [ 313.848133] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.854725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.861852] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.868338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.876972] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 20:46:43 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socket$inet(0x2, 0x1, 0x0) r1 = socket(0x800000000000a, 0x80005, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'veth1_to_team\x00', 0x7b}) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x57, 0x6, 0x4, "7dbd7df00f755bcdf26c5631fa34ca84", "b5771e6d512d796842ee4a3eb285d5ad5d8657a750df50fdcdab072992d10f3961592d1b3d46d71666414b267f8eaedf9c13e3b334d29232045adfbe5319dc759cf6"}, 0x57, 0x3) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'bridge_slave_0\x00', 0x4340}) [ 314.292496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 20:46:43 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000017) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000003940)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x4a, 0x8000) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000100)=0x7fff) ioctl(r2, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xd0daffff, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000000000062e7c17e29f6720000000081fbae9bd3809c1a845b792b2cedff238d894580401ed2d50ff7ff1b78000aa11016990600c6970ffc2cbaadf8cbc5998c7cc3200d6544ec6ec216df9a76ecf660990c47beaa5b0600000070fa6bc88337b680bc337c48"], 0x1a000}}, 0x0) recvmmsg(r1, &(0x7f0000006940)=[{{&(0x7f0000004fc0)=@hci, 0x80, &(0x7f0000006080)=[{&(0x7f0000005080)=""/4096, 0x19de0}], 0x1}}], 0xffffff1f, 0x0, &(0x7f0000006a40)={0x77359400}) [ 315.567553] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.574192] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.583091] device bridge_slave_0 entered promiscuous mode 20:46:44 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x10000017) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000003940)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x4a, 0x8000) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000100)=0x7fff) ioctl(r2, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r4 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0xd0daffff, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000000000062e7c17e29f6720000000081fbae9bd3809c1a845b792b2cedff238d894580401ed2d50ff7ff1b78000aa11016990600c6970ffc2cbaadf8cbc5998c7cc3200d6544ec6ec216df9a76ecf660990c47beaa5b0600000070fa6bc88337b680bc337c48"], 0x1a000}}, 0x0) recvmmsg(r1, &(0x7f0000006940)=[{{&(0x7f0000004fc0)=@hci, 0x80, &(0x7f0000006080)=[{&(0x7f0000005080)=""/4096, 0x19de0}], 0x1}}], 0xffffff1f, 0x0, &(0x7f0000006a40)={0x77359400}) [ 316.068847] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.075634] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.084438] device bridge_slave_1 entered promiscuous mode 20:46:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000000)={0x2, 0x24e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x100000162) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") sendfile(r1, r2, 0x0, 0x100000001) [ 316.485669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 316.908604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 20:46:46 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x403c5404, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000000)={0xa, 0x8, 0x8d, 0x84800, r2}) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) write$binfmt_misc(r1, &(0x7f0000000680)=ANY=[@ANYBLOB='Q'], 0x1) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) io_setup(0x101, &(0x7f0000000040)=0x0) io_submit(r3, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x6000000, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) [ 318.110409] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 318.312767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.476345] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 318.855610] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 318.862955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.184601] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 319.221900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.822647] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 320.371408] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 320.379921] team0: Port device team_slave_0 added [ 320.797572] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 320.805822] team0: Port device team_slave_1 added [ 320.986531] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 320.993077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.000930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.018733] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 321.033157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.042022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.356404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 321.363646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.372602] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.596192] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 321.604152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.613182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 20:46:51 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_NUM_WAITING(r0, 0x2286, 0x0) [ 321.926078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 321.934166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.943249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 322.106123] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.225876] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.232486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.239433] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.246916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.256208] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 324.263241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 326.818048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.556552] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 20:46:56 executing program 2: [ 328.257482] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 328.264066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.272082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.806224] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.103117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.620032] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 332.129893] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 332.136399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 332.145077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 20:47:01 executing program 3: [ 332.583574] 8021q: adding VLAN 0 to HW filter on device team0 20:47:03 executing program 4: 20:47:03 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x10000, 0x800) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x7f) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x31, 0xffffffffffffffff, 0x0) clock_adjtime(0x0, &(0x7f0000000080)) 20:47:03 executing program 2: 20:47:03 executing program 5: rt_sigsuspend(&(0x7f0000000000)={0xb6}, 0x8) r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x4ac0cccf, 0x210002) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000200)={@rc={0x1f, {0x6ec, 0x0, 0x5, 0x5, 0x7, 0x9}, 0x1000}, {&(0x7f0000000140)=""/99, 0x63}, &(0x7f00000001c0), 0x60}, 0xa0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000002c0)) link(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') chmod(&(0x7f0000000380)='./file0\x00', 0x100) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000003c0)={0x7, 0x9, 0x1}) ioctl$KVM_RUN(r0, 0xae80, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000480)) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000500)='./file0\x00', 0x100) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000540)=0x5, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer2\x00', 0x400, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0xe, &(0x7f00000005c0)="c0c6bdb5540771b0a452ae9f472127dd59d19ac31cde4f36ebe2207fa8888932ac05e5a9cd41d0", 0x27) openat$nullb(0xffffffffffffff9c, &(0x7f0000000600)='/dev/nullb0\x00', 0x20042, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000640)={0x1f, 0x622, 0xff, 0x0, [], [], [], 0x800, 0x1ff, 0xffff, 0x10000, "b3e2b7752df4beea50e869e526efe0ed"}) timerfd_create(0x7, 0x800) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000780)={0x3e, 0x80000000, 0x31}) ioctl$FIBMAP(r1, 0x1, &(0x7f00000007c0)=0x1) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000800)=0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000840)=r0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) r3 = request_key(&(0x7f0000000880)='dns_resolver\x00', &(0x7f00000008c0)={'syz', 0x1}, &(0x7f0000000900)='wlan1bdev\x00', 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000980)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, r3, 0x5, r4) 20:47:03 executing program 3: 20:47:03 executing program 1: 20:47:03 executing program 2: r0 = syz_open_dev$sndseq(0x0, 0x0, 0x0) read(r0, &(0x7f0000000640)=""/28, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_setup(0x101, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) 20:47:03 executing program 1: r0 = socket(0x20080000000000a, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x18, 0x1f}}, 0x0, 0x1a, 0x0, 0x1}, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond0\x00', 0xffb}) 20:47:04 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3f, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 20:47:04 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 335.141539] device bond0 entered promiscuous mode [ 335.146902] device bond_slave_0 entered promiscuous mode [ 335.152957] device bond_slave_1 entered promiscuous mode [ 335.161548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.173623] hrtimer: interrupt took 58335 ns 20:47:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080), 0x4) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000001a80)=@nfc_llcp, 0x80, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, &(0x7f00000010c0)=""/164, 0xa4}}], 0x1, 0x40000002, 0x0) sendto$inet(r0, &(0x7f0000c95ffd), 0x0, 0x0, 0x0, 0x0) [ 335.357184] device bond0 left promiscuous mode [ 335.362329] device bond_slave_0 left promiscuous mode [ 335.367911] device bond_slave_1 left promiscuous mode 20:47:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300de0006000000000000000000080000000000000008000500ac14141b080003000100000f01"], 0x1}}, 0x2) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="19920000f752020000005e38c2238929fbb7e592fd210061940bfab6a7bb4b750c1d0dc047eae472e4ecce5a1a6e6e806293ac8709b0d1cf8ec01e08be57d8035010e1397768fe5d0e5424ae38944bee09de"], 0x1}}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x0, 0x3ff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 335.560019] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 20:47:04 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6gre0\x00', @ifru_ivalue=0x710000}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x100, 0x3, 0x3f, 0x23, 0x9}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r1}, 0x8) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) 20:47:04 executing program 1: r0 = socket(0x20080000000000a, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x18, 0x1f}}, 0x0, 0x1a, 0x0, 0x1}, 0x20) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond0\x00', 0xffb}) 20:47:04 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f00000002c0)=@ax25, &(0x7f0000000140)=0x80) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000280)=0x4c, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)='y', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @dev}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0xaa7f) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x100000000) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x80, 0x800) [ 335.935592] device bond0 entered promiscuous mode [ 335.940694] device bond_slave_0 entered promiscuous mode [ 335.946912] device bond_slave_1 entered promiscuous mode [ 335.955497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.483922] IPVS: ftp: loaded support on port[0] = 21 [ 337.934688] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.941203] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.950513] device bridge_slave_0 entered promiscuous mode [ 338.033391] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.039916] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.048448] device bridge_slave_1 entered promiscuous mode [ 338.128250] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 338.208819] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 338.450916] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 338.532541] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 338.609814] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 338.616907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 338.696117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 338.703255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 338.942151] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 338.949965] team0: Port device team_slave_0 added [ 339.031169] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 339.039069] team0: Port device team_slave_1 added [ 339.118999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.204535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 339.285351] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 339.292761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.302050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 339.382101] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 339.389408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.398608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.304385] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.310830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.317899] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.324496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.334547] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 340.512140] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 343.589770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.895229] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 344.196016] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 344.202345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.210271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.511324] 8021q: adding VLAN 0 to HW filter on device team0 20:47:16 executing program 5: rt_sigsuspend(&(0x7f0000000000)={0xb6}, 0x8) r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x4ac0cccf, 0x210002) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000200)={@rc={0x1f, {0x6ec, 0x0, 0x5, 0x5, 0x7, 0x9}, 0x1000}, {&(0x7f0000000140)=""/99, 0x63}, &(0x7f00000001c0), 0x60}, 0xa0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000002c0)) link(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') chmod(&(0x7f0000000380)='./file0\x00', 0x100) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000003c0)={0x7, 0x9, 0x1}) ioctl$KVM_RUN(r0, 0xae80, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000480)) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000500)='./file0\x00', 0x100) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000540)=0x5, 0x4) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer2\x00', 0x400, 0x0) setsockopt$inet6_dccp_buf(r2, 0x21, 0xe, &(0x7f00000005c0)="c0c6bdb5540771b0a452ae9f472127dd59d19ac31cde4f36ebe2207fa8888932ac05e5a9cd41d0", 0x27) openat$nullb(0xffffffffffffff9c, &(0x7f0000000600)='/dev/nullb0\x00', 0x20042, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000640)={0x1f, 0x622, 0xff, 0x0, [], [], [], 0x800, 0x1ff, 0xffff, 0x10000, "b3e2b7752df4beea50e869e526efe0ed"}) timerfd_create(0x7, 0x800) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000780)={0x3e, 0x80000000, 0x31}) ioctl$FIBMAP(r1, 0x1, &(0x7f00000007c0)=0x1) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000800)=0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000840)=r0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) r3 = request_key(&(0x7f0000000880)='dns_resolver\x00', &(0x7f00000008c0)={'syz', 0x1}, &(0x7f0000000900)='wlan1bdev\x00', 0xfffffffffffffff9) r4 = add_key$keyring(&(0x7f0000000940)='keyring\x00', &(0x7f0000000980)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$negate(0xd, r3, 0x5, r4) 20:47:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000007c0), &(0x7f00000008c0)=0x100) socket$inet6_sctp(0xa, 0x5, 0x84) 20:47:16 executing program 3: mlock2(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x1) mlock2(&(0x7f0000002000/0x10000)=nil, 0x10000, 0x0) mlock2(&(0x7f0000ff7000/0x7000)=nil, 0x7000, 0x1) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 20:47:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) r2 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x1, 0x70b141) r3 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000240)={r3}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0xd1, "10666a7b32e5443bbc85c649e4c805c7f31828ba432bc9fd66ce554a0a2d40347254f9395001099ed6e9c3f2d733d86ff5b1d7e27c29d0d13038d7aebe54dd64f8a306a82713e6f7e1b593e1097340ea740d66d11d12d7a6deea31a3c1d3367e630720d4f33047bdfe10530f1db3f81472eda488dec5d989a1a61094eb4e17821e09863ca26e94351753dc389395ed428c6fc175dc699aa37b40ca8cb89835ade9f2731de82c4d7a3d0420ba1295f14ad34e6b823610aebde5ae350fd1a0559e8df6621f65d778a55adb1773a0e4927de7"}, &(0x7f0000000140)=0xd9) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={r4, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$sock_void(r0, 0x29, 0x4, 0x0, 0x0) 20:47:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x3, 0x1000, 0x2000, 0x6, 0x100, 0x3, 0x97, 0x3, 0x9, 0x7}, 0x10) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:47:16 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x480000, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2100002}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@delqdisc={0x68, 0x25, 0x20, 0x70bd26, 0x25dfdbfd, {0x0, r1, {0xfff1, 0xa}, {0x7, 0xffff}, {0x5, 0x1}}, [@TCA_RATE={0x8, 0x5, {0x7, 0x5}}, @qdisc_kind_options=@q_choke={{0xc, 0x1, 'choke\x00'}, {0x20, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffffffffffa, 0x81, 0x10001, 0x17, 0x5, 0xb, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40) r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x1c, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="09631040", @ANYRES64=0x0, @ANYBLOB="0000000000000000076304400000000028c9cff89c77883acf6c79039ce5b56924c448126d5769574cb9207543c33551a87c425c8334bde62b358a0fa2"], 0x0, 0x0, 0x0}) [ 347.643926] binder: 8521:8532 BC_ACQUIRE_DONE node 3 has no pending acquire request [ 347.652169] binder: 8521:8532 DecRefs 0 refcount change on invalid ref 0 ret -22 20:47:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r2, 0x9062, 0xffff, 0x1fc}, &(0x7f0000000240)=0x14) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b801000019000100fa6bd62500000000000800000001e00000010000000200ffff000000000000000000000000000a0000000011000000000000000000000000cb037356e5442c1ad4021175bd4f6b1218841dac2f3342d0605a1a3c8f0b966e8d7d5c510da321d597cd319dbcab7788658bd2f134000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb8}}, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x40000037, &(0x7f00000002c0)={r4, r5/1000+10000}, 0x10) 20:47:16 executing program 2: r0 = shmget(0xffffffffffffffff, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) msgsnd(r0, &(0x7f0000000680)={0x3, "02a9fe3ca591b67c123d5cdf993e753159f49dfa9864ce3cc7b0952357dcf8b002ffecef2d925ad51226d4722d8e60bfe4ffb4feee6165ef4ea9df61dc9f95bc442fba9148daacb9a445d35b8f95710efeacd8dbbcc5fe6bd57657b7d65009ab39aaeaeec24b2dff97478ad0bc5cedb5f928284b74497aa59e9a845fb7f71f4e042bdd873020535117807f43c0c92f27390f972f0f9f06b7e0cba254e71cad571163a060b102"}, 0xae, 0x800) 20:47:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x31d, 0x400000000000) 20:47:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000005c0)=0xffffffffffff4413, 0x4) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000240)) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}}}, 0x20) write$apparmor_exec(r2, &(0x7f00000001c0)={'exec ', '\x00'}, 0x6) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}, 0xffffffffffffffff, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18) sendto(r3, &(0x7f00005c8f58), 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000001fe8)={0x7f, 0x0, 0x0, 0xffffffffffffffff, 0x5}) r5 = semget$private(0x0, 0x7, 0x1) semctl$SEM_INFO(r5, 0x3, 0x13, &(0x7f00000003c0)=""/61) fcntl$setstatus(r2, 0x4, 0x0) shmget$private(0x0, 0x2000, 0x820, &(0x7f0000ffd000/0x2000)=nil) dup3(r3, r0, 0x0) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0), &(0x7f0000000140)='hash\x00', 0x0) 20:47:17 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) io_setup(0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) sendfile(r1, r1, 0x0, 0x2000005) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket(0x0, 0x0, 0x10001) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 20:47:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f00000006c0)={&(0x7f0000004340)=ANY=[@ANYBLOB="2ebd5d65963917d8"], 0x1}}, 0x0) [ 348.591427] binder: send failed reply for transaction 2 to 8521:8525 [ 348.601593] binder: undelivered TRANSACTION_COMPLETE [ 348.607156] binder: undelivered TRANSACTION_ERROR: 29189 20:47:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x100000001}) lstat(0x0, &(0x7f00000000c0)) getgid() write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000340)='/dev/rfkill\x00', 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000001140)=[{&(0x7f0000001180)=""/83, 0xe5}], 0x114, 0x0) 20:47:17 executing program 3: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x2a2803, 0x0) [ 348.860301] print_req_error: I/O error, dev loop0, sector 0 [ 348.866390] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 348.874411] print_req_error: I/O error, dev loop0, sector 8 [ 348.880193] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 348.888090] print_req_error: I/O error, dev loop0, sector 16 [ 348.894135] Buffer I/O error on dev loop0, logical block 2, lost async page write [ 348.902145] print_req_error: I/O error, dev loop0, sector 24 [ 348.908019] Buffer I/O error on dev loop0, logical block 3, lost async page write [ 348.915900] print_req_error: I/O error, dev loop0, sector 32 [ 348.921884] Buffer I/O error on dev loop0, logical block 4, lost async page write [ 348.929656] print_req_error: I/O error, dev loop0, sector 40 [ 348.935633] Buffer I/O error on dev loop0, logical block 5, lost async page write [ 348.943782] print_req_error: I/O error, dev loop0, sector 48 [ 348.949651] Buffer I/O error on dev loop0, logical block 6, lost async page write 20:47:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x2000000011, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000180)="957a88cae59c5fd2c4b929f72305bc00f1ebb6e7", 0x14, 0x0, 0x0, 0x0) [ 348.957530] print_req_error: I/O error, dev loop0, sector 56 [ 348.963547] Buffer I/O error on dev loop0, logical block 7, lost async page write [ 348.971334] print_req_error: I/O error, dev loop0, sector 64 [ 348.977362] Buffer I/O error on dev loop0, logical block 8, lost async page write [ 348.980542] print_req_error: I/O error, dev loop0, sector 72 [ 348.985291] Buffer I/O error on dev loop0, logical block 10, lost async page write 20:47:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000005c0)=0xffffffffffff4413, 0x4) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000240)) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}}}, 0x20) write$apparmor_exec(r2, &(0x7f00000001c0)={'exec ', '\x00'}, 0x6) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}, 0xffffffffffffffff, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18) sendto(r3, &(0x7f00005c8f58), 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000001fe8)={0x7f, 0x0, 0x0, 0xffffffffffffffff, 0x5}) r5 = semget$private(0x0, 0x7, 0x1) semctl$SEM_INFO(r5, 0x3, 0x13, &(0x7f00000003c0)=""/61) fcntl$setstatus(r2, 0x4, 0x0) shmget$private(0x0, 0x2000, 0x820, &(0x7f0000ffd000/0x2000)=nil) dup3(r3, r0, 0x0) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0), &(0x7f0000000140)='hash\x00', 0x0) 20:47:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:18 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)="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") exit(0x0) sendfile(r0, r0, 0x0, 0x403) 20:47:18 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) 20:47:18 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 20:47:18 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) io_setup(0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) sendfile(r1, r1, 0x0, 0x2000005) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket(0x0, 0x0, 0x10001) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 20:47:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) [ 349.963351] binder: 8605:8609 BC_FREE_BUFFER u0000000000000000 no match 20:47:19 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='maps\x00') pread64(r0, 0x0, 0x0, 0x800000000000000) 20:47:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000280)={0x2, 0x0, @ioapic}) [ 350.050005] binder: 8605:8609 BC_FREE_BUFFER u0000000000000000 no match 20:47:19 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_NUM_WAITING(r0, 0x2271, 0x0) 20:47:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:19 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, "73797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffffffffffff00", 'syz1\x00', 'syz0\x00', &(0x7f0000000480)=""/195, 0xc3}, 0x4d6) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x0, 0x0, @ipv4}, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}, 0x5c) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040), 0x21c}], 0x8) 20:47:19 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) io_setup(0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) sendfile(r1, r1, 0x0, 0x2000005) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket(0x0, 0x0, 0x10001) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) [ 350.783598] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.790479] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.797486] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.804423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.811259] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.818276] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.825291] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.832246] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.839066] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.846091] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.853017] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.859837] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.866842] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.869234] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.873779] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.880650] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.887428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.894285] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.900943] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.907867] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.914509] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.914599] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.921301] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.928157] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.934853] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.941569] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.948360] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.955409] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.961896] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.968611] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.975503] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.982186] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 350.988882] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 350.995668] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.002973] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.009601] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.016389] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.023233] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.029823] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.036654] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.043828] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.050076] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.056883] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.063696] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.070373] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.077182] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.083957] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.090647] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.097434] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.104219] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.110899] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.117717] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.124563] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.131246] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.138483] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.138571] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.138660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.138759] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.145555] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.152315] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.159009] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.165810] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.172619] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.179310] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.186070] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.192846] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.199517] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.206801] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.213575] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.220263] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.227072] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.233847] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.240529] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.247300] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.254067] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.260739] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.267514] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.274259] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.280951] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.287740] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.294531] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.301780] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.308487] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.315107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.321891] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.328569] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.335344] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.342093] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.348843] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.355616] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.362381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.369037] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.375801] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.383088] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.389814] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.396602] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.403394] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.410113] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.416919] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.423689] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.430378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.437166] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.444009] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.450663] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.457439] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.464204] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.470919] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.477761] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.484514] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.491195] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.497987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.505223] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.511987] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.518625] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.525437] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.532249] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.538936] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.545678] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.552434] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.559107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.565878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.572638] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.579331] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.586070] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.592878] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.599527] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.606275] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.613011] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.619728] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.626494] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.633381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.639991] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.646754] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.653509] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.660190] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.666930] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.673689] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.680356] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.687112] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.693854] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.700569] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.707319] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.714093] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.720756] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.727505] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.734249] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.740937] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.747684] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.754451] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.761118] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.767872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.774609] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.781290] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.788028] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.794806] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.802047] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.808749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.815498] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.822255] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.828921] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.835668] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.842404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.849086] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.855860] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.862681] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.869319] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.876072] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.882822] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.889537] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.896319] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.903134] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.909790] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.916578] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.923346] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.930039] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.936829] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.943592] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.950276] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.957074] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.963862] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.970589] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.977367] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.984141] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 351.990871] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 351.997654] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.004949] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.011625] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.018355] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.025020] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.031767] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.038453] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.045198] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.051997] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.058630] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.065381] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.072117] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.078811] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.085573] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.092362] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.099031] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.105802] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.112550] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.119270] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.126030] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.132847] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.139591] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.146357] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.153078] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.159772] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.166526] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.173279] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.179958] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.186719] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.193499] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.200485] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.206936] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.213769] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.220431] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.227218] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.233922] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.240606] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.247605] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.254436] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.261047] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.267813] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.274595] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.281446] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.288149] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.294908] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.302140] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.308830] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.315577] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.322332] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.329000] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.335771] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.342516] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.349197] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.355940] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.362706] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.369366] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.376121] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.382857] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.389656] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.396355] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.403122] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.409794] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.416551] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.423289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.429983] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.436773] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.443556] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.450232] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.457061] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.463743] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.470423] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.477208] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.484001] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.490657] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.497405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.504380] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.511073] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.517844] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.524607] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.531281] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.538044] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.544777] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.551465] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.558213] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.564982] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.571724] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.578405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.585086] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.591858] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.598531] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.605278] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.612016] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.618717] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.625487] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.632304] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.638887] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.645639] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.652376] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.659068] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.665846] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.672604] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.679290] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.686031] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.692800] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.699483] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.706754] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.713523] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.720200] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.726951] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.733681] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.740388] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.747129] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.753945] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.760632] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.767521] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.774201] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.780877] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.787691] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.794439] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.801591] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.808379] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.815032] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.821819] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.828506] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.835299] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.842067] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.848773] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.855620] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.862375] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.869057] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.875851] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.882611] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.889313] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.896032] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.902804] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.909511] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.916246] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.922981] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.929675] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.936456] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.943201] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.949870] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.956615] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.963351] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.970098] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.976793] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.983547] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 352.990248] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 352.996974] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.003756] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.010407] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.017148] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.023930] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.030672] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.037433] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.044170] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.050872] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.057608] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.064368] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.071033] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.077800] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.084553] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.091227] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.097962] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.104748] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.111392] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.118178] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.124909] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.131603] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.138352] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.145038] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.151793] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.158491] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.165360] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.172100] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.178768] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.185518] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.192263] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.198946] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.205930] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.212685] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.219364] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.226165] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.232911] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.239595] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.246347] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.253119] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.259779] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.266573] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.273328] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.280043] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.286830] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.293646] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.300621] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.307409] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 353.314174] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.354715] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.361529] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.368528] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.375395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.382880] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 20:47:19 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) syz_open_pts(r1, 0x0) r2 = dup3(r0, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000340)={0x9, 0x4, 0x2, 0x3ff, 0x6, 0x3, 0x10000, 0x2, 0x81, 0xb99e}) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="080027bd7000fbdbdf250f000000280002000800030007000000080008000000000014000100ac1414bb0000000000000000000000000800040007000000380003001400060000000000000000000000ffff7f0000010800030002000000080001000300000008000500ac1414aa080008000000000008000400caffffff5400010008000800679300000c0006006c626c637200000008000b00736970000800050003000000080005000100000014000300e0000001000000000000000000000000080008000500000008000b0073697000"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c854) setsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000000280)="37b63af5f916539272589927da2f1f799224ada34b54d71614e91020c5a711649663fea8f8355dd5fe015a016a7876", 0x2f) eventfd2(0x7, 0x80801) 20:47:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x10, 0x0, &(0x7f0000000240)=[@free_buffer, @register_looper], 0x0, 0x0, 0x0}) [ 353.389724] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.396728] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.404124] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.410946] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 353.417887] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 20:47:22 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:22 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) [ 353.627469] binder: 8648:8651 BC_FREE_BUFFER u0000000000000000 no match [ 353.634743] binder: 8648:8651 ERROR: BC_REGISTER_LOOPER called without request [ 353.798581] program syz-executor1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.849997] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 353.909971] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 20:47:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:23 executing program 2: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mlock2(&(0x7f00001b9000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f00006f7fe8)=[{{}, 0x1, 0x400000000000049}], 0xfdd0) 20:47:23 executing program 1: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)="0b8493da69d419d3e5a313affec5c48780fa42c0606761a2404a9a6c5a567525af09b4ae9ae6a36177018ff55a012c3fa3d9a196466f930c37b676633bbcdd54ad15d1d19aa5b95e6b797acddbacf7ed0796c0f196dfbb8bbe0d57cab508ca10839a6750dab329b861c57d41508204309f85c612f8e5b88a528d442e05736cbb65dc347f371e3b617e807818682759751ae85a5f6de6d672fdf84dfe6317c6c4a7e11b8fd8babb2127430a3eb34f68c6487f", 0xb2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_dev$dmmidi(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0xfffffffffffffffe) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:47:23 executing program 4: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) mlock2(&(0x7f00001b9000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f00006f7fe8)=[{{}, 0x1, 0x400000000000049, 0x400000002}], 0xfdd0) 20:47:23 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) open(&(0x7f00000000c0)='./bus\x00', 0x4000, 0x0) [ 354.339099] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 20:47:23 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:23 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) io_setup(0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) sendfile(r1, r1, 0x0, 0x2000005) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) socket(0x0, 0x0, 0x10001) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) 20:47:23 executing program 5: clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2, @mcast2, @ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x800000000000011f}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:47:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer], 0x0, 0x0, 0x0}) gettid() 20:47:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)="230000005e0081aee4050c0000000000a30000ffffff9e76baf6b526776a6ec0ff0000", 0x23}], 0x1}, 0x0) 20:47:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x100000001}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) getgid() write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000340)='/dev/rfkill\x00', 0x0) preadv(0xffffffffffffffff, &(0x7f0000001140)=[{0x0}], 0x1, 0x0) 20:47:24 executing program 5: clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2, @mcast2, @ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x800000000000011f}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:47:24 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = socket(0x2000000011, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) sendto$inet6(r1, &(0x7f0000000180)="957a88cae59c5fd2c4b929f72305bc00f1ebb6e7", 0x14, 0x0, 0x0, 0x0) [ 355.581331] ptrace attach of "/root/syz-executor5"[8717] was attempted by "/root/syz-executor5"[8718] 20:47:24 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) write$binfmt_elf32(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) sendto(r1, &(0x7f0000000340)="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", 0x411, 0x0, 0x0, 0x0) 20:47:24 executing program 5: clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xe) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@mcast2, @mcast2, @ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x800000000000011f}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 20:47:24 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) 20:47:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x6, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 20:47:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_delete(r2) r3 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r4 = dup3(r0, r1, 0x0) r5 = syz_genetlink_get_family_id$ipvs(0x0) ioctl$TIOCLINUX6(r4, 0x541c, &(0x7f00000002c0)={0x6, 0xffffffffffffffff}) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000340)={0x9, 0x4, 0x2, 0x3ff, 0x6, 0x3, 0x10000, 0x2, 0x81, 0xb99e}) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="24ca8b9863c4634a7910389dc3e0643641eab8", @ANYRES16=r5], 0x2}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c854) setsockopt$inet6_buf(r4, 0x29, 0x0, &(0x7f0000000280)="37b63af5f916539272589927da2f1f799224ada34b54d71614e91020c5a711649663fea8f8355dd5fe015a016a7876", 0x2f) eventfd2(0x7, 0x80801) 20:47:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)}, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) 20:47:25 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000240)=[@register_looper], 0x0, 0x0, 0x0}) 20:47:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x1) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{&(0x7f0000000340)=@nfc, 0x80, &(0x7f0000001780)=[{&(0x7f00000002c0)=""/91, 0x5b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x4, 0x8, &(0x7f0000ffd000/0x1000)=nil, 0xef6}) preadv(r1, &(0x7f0000000140), 0x391, 0x51) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x103fd, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x0, 0x0) 20:47:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000340)=""/28, 0x21f) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000380)={0x51, @time}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40bc5311, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000240)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}}) r1 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 20:47:25 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) [ 356.837272] binder: 8756:8758 ERROR: BC_REGISTER_LOOPER called without request 20:47:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x6, 0x7, 0x6}, 0x1aa) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000180), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000180)}, 0x10) 20:47:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:47:26 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x41, 0x0) 20:47:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:26 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x1cb) 20:47:26 executing program 1: clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0, 0x23000000}, &(0x7f00000001c0)='.', &(0x7f0000000000)='udf\x00', 0x0, 0x0) 20:47:26 executing program 5: r0 = socket(0x10, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000000000002c0, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 20:47:26 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x375, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 20:47:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_delete(r2) r3 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r4 = dup3(r0, r1, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$TIOCLINUX6(r4, 0x541c, &(0x7f00000002c0)={0x6, 0xffffffffffffffff}) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000340)={0x9, 0x4, 0x2, 0x3ff, 0x6, 0x3, 0x0, 0x2, 0x81, 0xb99e}) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="080027bd7000fbdbdf250f000000280002000800030007000000080008000000000014000100ac1414bb0000000000000000000000000800040007000000380003001400060000000000000000000000ffff7f0000010800030002000000080001000300000008000500ac1414aa080008000000000008000400caffffff5400010008000800679300000c0006006c626c637200000008000b00736970000800050003000000080005000100000014000300e0000001000000000000000000000000080008000500000008000b0073697000"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c854) setsockopt$inet6_buf(r4, 0x29, 0x0, &(0x7f0000000280)="37b63af5f916539272589927da2f1f799224ada34b54d71614e91020c5a711649663fea8f8355dd5fe015a016a7876", 0x2f) eventfd2(0x7, 0x80801) 20:47:27 executing program 0: r0 = socket$kcm(0x2, 0x40000000000003, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0xda4fff08) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40002000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x660c, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x88, 0x0, &(0x7f0000000080)="72d049ec47bdc1b5ed1c49ea643bcebc148a2a03ea40da77564841e850ee6abb72db64cbef8564b4fc5efdf9f14944004216a4a3dca332e071c98fe4668ac2e4a5f7c1b0c07159ba0883c0753c5a5b0689204eed7623991f6ebd10d341fcdfd88f9c1c6cf15a0c5d3b7825350b2380053303a055526faf16aee100f95d181a941207a2945485f669", 0x0, 0xf9c9}, 0x28) 20:47:27 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f000001d000), 0x0, 0x0, 0x0, 0x0) listen(r1, 0x7) r2 = accept(r1, 0x0, &(0x7f0000000000)=0xe2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0xda, "968156425fc960775fe97f02dbc125f9a3bd39d1e5d697ef329ec92d76ca82d4e2ef73786f203ba2776b0194422dce54e73c6edbf3499b13011791cdba2b21ee23a0cc9f94c849f62ccf805718f8addc35e4910d8ed5fbde19e1aa6fc213489c5af7475fcc051a13593e122afde3828263bbb3f3d9ed5f9d047f3d201a6b0d116c5f6018ace216e318c6fa4e5acb2af799ef3e56c8a9a0d5d2adafdd280068436f3b5c872afd31f8e2749052a10f25f519a788fc53ce062d157688b3d4e3b44a8701eb2fb910c6ee5e4e31c15cdbbcd3c36140ec6ac06eabc8a7"}, 0x0) 20:47:27 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) 20:47:27 executing program 4: bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x375, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 20:47:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001d80)=[{{&(0x7f0000000a80)=@in6={0xa, 0x4e23, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x0) 20:47:28 executing program 3: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) 20:47:28 executing program 5: openat$rtc(0xffffffffffffff9c, 0x0, 0x18000, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001}, 0x1c) r0 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x182) io_setup(0x0, &(0x7f0000000540)) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) sendfile(r0, r0, 0x0, 0x2000005) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) socket(0x0, 0x0, 0x10001) 20:47:28 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_delete(r2) r3 = syz_open_pts(r1, 0x0) ioctl$TCXONC(r3, 0x540a, 0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r4 = dup3(r0, r1, 0x0) syz_genetlink_get_family_id$ipvs(0x0) ioctl$TIOCLINUX6(r4, 0x541c, &(0x7f00000002c0)={0x6, 0xffffffffffffffff}) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000340)={0x9, 0x4, 0x2, 0x3ff, 0x6, 0x3, 0x10000, 0x2, 0x81, 0xb99e}) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="080027bd7000fbdbdf250f000000280002000800030007000000080008000000000014000100ac1414bb0000000000000000000000000800040007000000380003001400060000000000000000000000ffff7f00000108000300020000000800010003000000080005"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c854) setsockopt$inet6_buf(r4, 0x29, 0x0, &(0x7f0000000280)="37b63af5f916539272589927da2f1f799224ada34b54d71614e91020c5a711649663fea8f8355dd5fe01", 0x2a) eventfd2(0x7, 0x80801) 20:47:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000240)=[@register_looper], 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, 0x0) 20:47:28 executing program 3: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) 20:47:28 executing program 2: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r0, r1, 0x0) [ 359.921092] binder: 8874:8879 ERROR: BC_REGISTER_LOOPER called without request [ 360.072351] binder: 8874:8879 ERROR: BC_REGISTER_LOOPER called without request 20:47:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000100)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) 20:47:29 executing program 3: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) 20:47:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x2000000011, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000180)="957a88ca", 0x4, 0x0, 0x0, 0x0) 20:47:29 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x10, 0x0, &(0x7f0000000240)=[@free_buffer, @register_looper], 0x0, 0x0, 0x0}) 20:47:29 executing program 2: 20:47:29 executing program 5: [ 360.625561] binder: 8896:8904 BC_FREE_BUFFER u0000000000000000 no match [ 360.632601] binder: 8896:8904 ERROR: BC_REGISTER_LOOPER called without request [ 360.682034] binder: 8896:8905 BC_FREE_BUFFER u0000000000000000 no match [ 360.688926] binder: 8896:8905 ERROR: BC_REGISTER_LOOPER called without request 20:47:29 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:29 executing program 2: 20:47:30 executing program 1: 20:47:30 executing program 0: 20:47:30 executing program 5: 20:47:30 executing program 4: 20:47:30 executing program 1: 20:47:30 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:30 executing program 2: 20:47:30 executing program 4: 20:47:30 executing program 0: 20:47:30 executing program 5: 20:47:30 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:31 executing program 1: 20:47:31 executing program 4: 20:47:31 executing program 0: 20:47:31 executing program 2: 20:47:31 executing program 5: 20:47:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:31 executing program 1: 20:47:31 executing program 4: 20:47:31 executing program 0: 20:47:31 executing program 4: 20:47:31 executing program 5: 20:47:31 executing program 2: 20:47:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:31 executing program 1: 20:47:32 executing program 4: 20:47:32 executing program 0: 20:47:32 executing program 2: 20:47:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:32 executing program 5: 20:47:32 executing program 0: 20:47:32 executing program 4: 20:47:32 executing program 1: 20:47:32 executing program 2: 20:47:32 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:33 executing program 0: 20:47:33 executing program 4: 20:47:33 executing program 5: 20:47:33 executing program 2: 20:47:33 executing program 1: 20:47:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:33 executing program 0: 20:47:33 executing program 4: 20:47:33 executing program 2: 20:47:33 executing program 1: 20:47:33 executing program 5: 20:47:33 executing program 0: 20:47:33 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:33 executing program 4: 20:47:34 executing program 5: 20:47:34 executing program 1: 20:47:34 executing program 0: 20:47:34 executing program 2: 20:47:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:34 executing program 4: 20:47:34 executing program 5: 20:47:34 executing program 0: 20:47:34 executing program 1: 20:47:34 executing program 4: 20:47:34 executing program 0: 20:47:34 executing program 2: 20:47:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:35 executing program 5: 20:47:35 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000100)=0x3, 0x4) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) ioctl$int_in(r0, 0x544e, &(0x7f0000000000)=0x7) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x100020000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x2) fchmod(r1, 0x70) ftruncate(r2, 0x7fff) 20:47:35 executing program 5: syz_emit_ethernet(0x8000, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d4b36b", 0x18, 0x11, 0x0, @local, @ipv4={[], [], @loopback}, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @mcast1}}}}}}, 0x0) 20:47:35 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)="230000005e0081aee4050c0000000000a30000ffffff9e76baf6b526776a6ec0ff0000", 0x23}], 0x1}, 0x0) [ 366.298001] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:47:35 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000540)={0x0, @loopback, @dev}, &(0x7f0000000580)=0xc) syz_open_pts(r0, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xfffffffffffffffa) unshare(0x8020000) restart_syscall() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x6, 0x7, 0x6}, 0x1aa) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000180), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000180)}, 0x10) 20:47:35 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) r2 = syz_open_dev$evdev(0x0, 0x0, 0x102) write$evdev(r2, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) munmap(&(0x7f0000591000/0x3000)=nil, 0x3000) ioctl$TUNGETSNDBUF(r1, 0x800454d3, 0x0) 20:47:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:35 executing program 5: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getcwd(&(0x7f0000000200)=""/165, 0xa5) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x7b, &(0x7f0000000040)={r1}, &(0x7f0000000100)=0x8) close(r2) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x8000}, 0x28, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f00000000c0)={r3}, &(0x7f00000001c0)=0x10) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f0000000180)=@in={0x4, 0x0, @rand_addr, [0x1fffff, 0x6]}, 0x10, &(0x7f0000000140), 0x7c, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x7c}}], 0x30}], 0x1, 0x0) 20:47:35 executing program 0: getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000040)='net/stat\x00') 20:47:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x17) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:36 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x3, 0xad) getsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000534000), &(0x7f0000000180)=0xfe9d) 20:47:36 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000540)={0x0, @loopback, @dev}, &(0x7f0000000580)=0xc) syz_open_pts(r0, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xfffffffffffffffa) unshare(0x8020000) restart_syscall() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x6, 0x7, 0x6}, 0x1aa) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000180), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000180)}, 0x10) 20:47:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x40400) getpeername(r0, 0xfffffffffffffffd, &(0x7f0000000000)=0x100000385) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000180), 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000200)=0x1a, 0x4) 20:47:36 executing program 0: unshare(0x2000400) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000140)={r1, &(0x7f00000000c0)=""/90}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0xc) 20:47:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x17) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:36 executing program 4: r0 = inotify_init() r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x80000002) read(r0, &(0x7f0000000000)=""/177, 0x10) write$selinux_attr(r1, &(0x7f00000001c0)='system_u:object_r:ssh_keysign_exec_t:s0\x00', 0x28) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)=0x0) stat(&(0x7f0000000380)='\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() r5 = getpgrp(0x0) r6 = getuid() r7 = getgid() r8 = gettid() fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() r11 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f00000005c0)=0xe8) getresgid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)=0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000006c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000700)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4}}, &(0x7f0000000800)=0xe8) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000003000)=[{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000200)="f14d1eeb179fbb2c3c756e7c44b3b1ee89345facde51e8e4cf7eaa738271fc3cf5d3a623b1c840165dc05eae39d4818f0decc5b7583804fcfc5da7f234a44eedd8b84be81e730adde25025dee97544339ff00956d47bff7b4c2f016b42866b3bdbba4427b47daebdb597f628d94da7ee99b27fa362f3016bb85006c9d760", 0x7e}, {&(0x7f00000002c0)="ef904dae776f14d621bfb066f6ce344b3b5c78ec468a5cc608bb162b01bf48c41d23026f28a365b4a6e4289313d190e6f4939d0f01cd90b85a4722f93429b2b8adad0c60768c44dfd373", 0x4a}], 0x2, &(0x7f0000000900)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}], 0xd8, 0x4000040}, {&(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002f40)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="66501bacb0034ea3a55d40881080acf682fb557754f5fbe505757e31e2de", 0x1e}, {&(0x7f0000001ac0)}, {&(0x7f0000001b00)="d3cf613c5be9238b12b47fc741f3eec815028cbbb2b567f37b73e4cac445a95f2857cd2a2687ca60cf0f6b72f69530e4caf5316b2d35c8fbef71633df5cf8390fc454757b228d6cf1cd840b6e202ab53b3d486c4fde3e159033f581f05ef8b7887ffa6e0a5bb4e6c263f7b5840cd1e65f47a0ac1cf70a3", 0x77}, {&(0x7f0000001b80)="5e7a42b1d950bcb36c4a9c8eefa340ea28afdb92ae914c98bd369ad3f59313352b44e41e5011b5cdeb78c5de0e44d3841de54e4e574a824e523c28f45128b1b5edf8b934e50c116dedc50026ddb01f9a9ee79168cbdd5b9e093b11e989fa6d5448209d78c70c46c8e7", 0x69}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000002c00)="93ea733501746392825b13a589564c8809b9b4383d55a585e904699e827bafb1b61932618da1f238720c2d81914f940ecfb835a7bcb574ef4dd409a3689bbaf805047eb46bf3c017159341c593fd3c0f369e30060d5afe6973a3c7c559b0b11071d29a6642a618f3fea929778d0b3ca6ff6dca1e166989ef67c4e5162cb60d53894afb594a40a1725c3840049eab901810de86c59a116eb6c856843509b9d2a79b50571b7e92ff4b16f478891b3030293b41f105a88de9850976ec46319c48b8241078b65a726bd8b0c469d15764a131a425fff08c5218b2132fba0ff630b03638e30d0ac2c4a481aa4f54b853", 0xed}, {&(0x7f0000002d00)="327117f22bd45ec03d222296a93623b06755b77fca236511bbc9f446aa5d6e8f87644282c794baf31829925ef8457abf690b4f4ce67449ad4ff27f2a99de7b7fe6e54c143b7b86f6ceec502d04d1d17dbc0be8141501842c75c9fbb40dbd6b96d86a5ec4c3b732246f8d11b864668ef582aeaee234f9ca3e03269491ba2d41d7a07e1c06177958c1bd8db3e45b6aa802a8cf5edaa56ac33b4903e3e8f408a8b00b6c1f27ca4e84a5c57867df", 0xac}, {&(0x7f0000002dc0)="552765e46fa5c1efe461d89ff62f46de603ccadda011a52535eb066265246c05665aef91c39ea60a31796372a8bf579e9e50c8b62cd6f086cdd75f3038e725b173545baeb21169a6a22034109380a63c29d29e2a0667666832ad41ab05602997db911f12c2627f918d47c4a1800602c33d7719c6178f42a4b6dbce07192a9f32f64306ebc80385d7708b5eb3232495a4ffd7fbc92c768dfeede5b7493bc2a387ec6407f10bec3d524646f3c6d6c5b9429c2edd71845659a76a8d6ed1cc7c5caafe814b9f6038264ab58083339b0fb1ee98ae36e6ec37d97fb3426dc5160c6adff7f1d3e0a9a80ab2cbceeb0f45", 0xed}, {&(0x7f0000002ec0)="77bbdd761a901a59110f53a74c84ae00adb58a218b1a8b669a39063efbdc44a524f3586bf1c9a42b6387299ef9a6e0564f33d7311f462a9824de147ef070601205d3240ea72d279572f65e799f5ecdaa27e94b21006d7862e2051763cee3783ec152da2149c47f206ff8a46a1a4d524dd77929b9a89866b27f", 0x79}], 0xa, 0x0, 0x0, 0x4000}], 0x2, 0x4008000) 20:47:36 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x17) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:39 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x100) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10102, 0x1}) socket$inet6_udplite(0xa, 0x2, 0x88) 20:47:39 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x10000000000004, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.mem_hardwall\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) sendfile(r2, r2, &(0x7f00000000c0), 0xf9f4) 20:47:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000640)={0x0, 0xfffffffffffffffe, 0xdf, 0xfffffffffffffffe, @scatter={0x5, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/26, 0x1a}, {&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000100)=""/156, 0x9c}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f0000000300)=""/123, 0x7b}]}, &(0x7f0000000400)="4afd8f69688a6f0de96aaaf1e55c3ca7bc6a633481b57b29eaeb3163c3ce67f5f31a62de12e12be08a7058a3fe83cc608187cfa6c2975ff588eac5dd3ee71c252e0180b71f191416066e3582a3f28c1c1547cfda0b08b409ef45d918144ee4424db0d6284bbfa2616b3927d2a23aa0eb93e22e891cbb5926e8b8f7ce4fdd49989eec56b292f9da5b1863bad431ffb411f163de76da466da7077eb6940973ec4ff21e275b6df66c64d1cd6527364ac60bb4648247979a99602bb38aa257c9cb4ebe9b9e86898aef333bf7adc2ad45c3605b7e7efe76dcca2abbee0ab0031ca5", &(0x7f0000000500)=""/199, 0x0, 0x36, 0x1, &(0x7f0000000600)}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="096a24689d841f9a1079e9"], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:47:39 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000006c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0xf}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="484000001400070000000000000000000aff00ed12279639a91d7b7f0000ab2f080495017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d00"], 0x48}}, 0x0) 20:47:39 executing program 5: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x40000008ec0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) 20:47:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x17) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:39 executing program 1: ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000100)={0x6, "e06872913b039aed14cefad8219fd8349ce54ceca8f362ddb97a1b095f2b8875", 0x0, 0x800, 0x8, 0x5b3, 0xe, 0x0, 0x0, 0x8}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f00000002c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffffffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfe86}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x11) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x800000000000, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [0x4b564d02, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20:47:39 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x17) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:39 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'ip6_vti0\x00'}}, 0x1e) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @broadcast, 'syz_tun\x00'}}) 20:47:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0xfffffffffffffffd) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)) 20:47:39 executing program 2: socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10f001, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x5, 0x14, 0x3, 0x7ff, 0x0, 0x3, 0xff, 0x5, r3}, 0x20) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000400)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) 20:47:39 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) move_pages(r2, 0x7, &(0x7f0000000040)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil], 0x0, &(0x7f0000000140)=[0x0], 0x6) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x0, [0x40000072]}) 20:47:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x17) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:40 executing program 1: socket$inet6(0xa, 0x3, 0x4) r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{&(0x7f0000000b80)=@sco, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2, &(0x7f0000000f00)=""/24, 0x18}}], 0x1, 0x0, &(0x7f0000003380)={0x77359400}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000000000)=""/5, 0x5}, {&(0x7f0000002080)=""/204, 0xcc}, {&(0x7f0000002180)=""/223, 0xdf}], 0x4, &(0x7f0000002340)=""/110, 0x6e}, 0x0) process_vm_writev(0x0, &(0x7f0000002800), 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xdb}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0xe2}], 0x10000000000001bd, &(0x7f0000002180), 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x1, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) clock_getres(0x4, &(0x7f0000000400)) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) 20:47:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000380)={0x10000, 0xb, 0x26, "8cca5996a5aa76c0dc5e8a608073e237044f6e1685d1a5bc3db438d36c51dad6f886b8700a9d617791bc18433eb45d319189ded3fa1d912fc460a501", 0x3b, "ce66fe41ed5fa0dcb9e7d451b344fa99e8d386a479312da0444caf1edaf382aba8a8bedca7bc31aadaba2d2af95b4924c174b32479720f07b77dd0bc", 0x80}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, &(0x7f0000000600), 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x80, 0x210400) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000080)={0x5, 0x401, 0x88c}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x94, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x11}, 0x400c000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20:47:40 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0xfffffffffffffffd) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)) 20:47:40 executing program 2: socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10f001, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x5, 0x14, 0x3, 0x7ff, 0x0, 0x3, 0xff, 0x5, r3}, 0x20) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000400)={0x5, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) 20:47:40 executing program 4: r0 = syz_open_dev$midi(&(0x7f00000008c0)='/dev/midi#\x00', 0x2, 0x1) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x3, @remote, 'bcsf0\x00'}}, 0x1e) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e23, 0x80000001, @empty, 0x100}}, 0x3, 0x100000001, 0x100000000, 0x1000, 0x8}, &(0x7f0000000740)=0x98) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYBLOB="db000000278bb5a4ed3bc93eea31c863f83313a74d65a108673effffe000000000000fafe23e940cacdfd114b20115fcd18567644ed4434e23e5bd42168b77e1c9be537c3c9a4e3aff84dd31cd2817c84a1a1f6eec84784d98242b52f4280bcf900004426f435ffd6da5e3af59c6d326a9c28be927210953542a07c1ce376977ee38e897ad8c569708591f47ec1164c86738a86aab7ed6b5c41e8c1bda2add7a17c6e9766027f494e5c851e53633114208248998f69c5ce8998e60d4ee19c74b7f5aaf1c779658eff0d3425c512c1ea117c50d37ddcab0737942484ce20cfc"], &(0x7f0000000880)=0xe3) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xfffffffffffffffc, 0x10000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000080)=""/73, 0x49, 0x43, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @empty}}}, &(0x7f0000000400)=0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=r3, &(0x7f0000000480)=0x4) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f00000003c0)={0x1}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000200)={'icmp6\x00'}, &(0x7f00000002c0)=0x1e) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000640)={0x3, 0x4186, 0x0, 0x81, 0x7fffffff, 0x8000, 0x2, 0x7, 0x9, 0x8}) clock_gettime(0x0, &(0x7f00000001c0)) getsockname(r0, &(0x7f0000000580)=@nfc, &(0x7f0000000600)=0x80) nanosleep(&(0x7f0000000280), 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) write$P9_RXATTRCREATE(r0, &(0x7f00000004c0)={0x7, 0x21, 0x2}, 0x7) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000500)=@assoc_id=r3, &(0x7f0000000540)=0x4) 20:47:40 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:40 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'ip_vti0\x00', 0x201e}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f00000004c0)={0x0, 0x2}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000700)=0x0) fcntl$setownex(r2, 0xf, &(0x7f0000000740)={0x1, r5}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@mcast1, 0x28, r6}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@local, 0x7a, r6}) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000140)) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@dev, r6}, 0x14) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x95) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, 0x0) epoll_create1(0x80000) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f00000000c0)=0x4006, 0x4) sendto$inet6(r9, &(0x7f0000000240)="0581c7000500000000000000ffa2ad88050000000000008c39160aaacb57a80000067d1a80e19e33e3c2e7725f4a5861153709000000f7402810247f0139d643ba0708e265756fe5eb8f5972eaecfffc2bd9e9aba5568a12843d4342277bd6adf74af03e90f5490f2a38ff07e4b0a084b53a683747f955a47ddc7100080000395da1a7ba8a7069cdb5f4eff4aae8b98ccd4245ad64ceaa7ad4974418b715a624f2cfdaf236512e17960229a1b3bc79b3603a800292fa7c36fb4f6c1342c60e17e6539f6bfeef0bae71fd57b9798d8b6370", 0xd1, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000000100)=[{{&(0x7f0000000580)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/246, 0xf6}], 0x1, &(0x7f0000000040)=""/52, 0x34}}], 0x286, 0x0, &(0x7f0000005880)={0x0, 0x1c9c380}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000600)={0x0, 0xfffffffffffffffe}, &(0x7f0000000640)=0x8) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f0000000440)={[{0x8000, 0x7, 0x4, 0x2, 0x0, 0x8, 0x4, 0x3f, 0x0, 0xfffffffffffffffb, 0xa60, 0xfffffffffffffff8, 0x6}, {0x9, 0x2, 0x8278, 0x18b, 0x4, 0x9, 0x5, 0x80000001, 0x400000000000, 0x0, 0x1ff, 0x7282}, {0x41, 0xff, 0x3f, 0x401, 0x5, 0x6, 0xf7, 0x6, 0x0, 0x100000001, 0x3691, 0x8}], 0x5}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000680)={0xbf04, 0x8000, 0x8, 0xc7, r10}, &(0x7f00000006c0)=0x10) r11 = socket(0x10, 0xffffffffffffffff, 0x8) write(r11, &(0x7f00000001c0)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000540)={0x4, &(0x7f0000000500)=[{0x200, 0x9, 0x0, 0x20}, {0xfffffffffffffff7, 0x8, 0x1f, 0x8}, {0x9, 0x100, 0x7f, 0x9bf}, {0x3, 0x800, 0x6, 0x5}]}, 0x10) 20:47:40 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = shmget$private(0x0, 0x2000, 0x202, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f00000010c0)=""/88) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)="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", 0x1000, 0xffffffffffffffff) keyctl$assume_authority(0x10, r3) setpgid(r1, 0x0) 20:47:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x8, 0x1008000040000001) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f00000000c0)={0x0, {{0x2, 0x1, @local}}}, 0x88) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x5bc) 20:47:41 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = dup2(r1, r1) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="0fc7193e660fee37f265f40fc76b000f235b0f0864660f383995cf00a7980f01df"}], 0xad, 0x0, &(0x7f0000000180)=[@dstype3={0x7, 0xa}], 0x0) 20:47:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:41 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = semget$private(0x0, 0x3, 0x80) semctl$SEM_STAT(r1, 0x3, 0x12, &(0x7f0000000080)=""/164) ioctl(r0, 0x20000000008912, &(0x7f0000000400)="0a5c2d0240316285717070") mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x88, 0xb, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x0, 0x288, 0x288, 0x1c8, 0x288, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, &(0x7f0000000000), {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'bcsh0\x00'}, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x98, 0xc0}, @inet=@TOS={0x28, 'TOS\x00'}}, {{@uncond, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'sit0\x00', 'team0\x00'}, 0x0, 0x98, 0xc0}, @common=@inet=@SET1={0x28, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) 20:47:41 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x8001004, 0x9, 0x3}) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000100)=0x6, 0x4) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xff, 0x200000) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18, 0x0, 0x3, {0xffffffff}}, 0x18) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) 20:47:41 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000400)={[], 0x9, 0x100000001, 0x1, 0x0, 0x1, 0x5000, 0x6000, [], 0x5}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000780)='/dev/qat_adf_ctl\x00', 0x8000000c03, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x14) r2 = socket$inet(0x10, 0x10000000003, 0xc) write$P9_RREAD(r1, &(0x7f00000007c0)=ANY=[@ANYRES32=r1], 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)=0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000380)) ptrace$peek(0x2, r3, &(0x7f0000000300)) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000640)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x4, 0x3}) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000680)=0x1) ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000100)=0x6) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f00000003c0)) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000340)) sendmsg(r2, &(0x7f00000002c0)={0x0, 0xfffffffffffffd5c, &(0x7f0000000280)=[{&(0x7f0000000000)="24000000100a07121dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x10000000000002f4, 0x0, 0x173}, 0x0) 20:47:41 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) [ 372.564033] QAT: Invalid ioctl [ 372.590166] QAT: Invalid ioctl [ 372.648895] QAT: Invalid ioctl 20:47:41 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='[loppp0-.ppp1cpuset\x00', 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x2, 0x7, 0x3, 0x3fa7, 0x0, 0x2, 0x6, 0x2, 0x40, 0x401}) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f000063e000), 0xfffffffffffffd8b) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000140), 0x4) [ 372.672435] QAT: Invalid ioctl 20:47:41 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = dup(r0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = signalfd(r3, &(0x7f0000000040)={0x81}, 0x8) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000200)) ioctl$sock_ifreq(r2, 0x89b9, &(0x7f0000000300)={'ip_vti0\x00', @ifru_ivalue}) 20:47:41 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000001200)='/dev/vcs#\x00', 0x9, 0x8000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x80, 0x202, 0xc, 0x7, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={r2, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5) syz_open_dev$vivid(&(0x7f0000001240)='/dev/video#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001280)={r3, @in6={{0xa, 0x4e24, 0xca9, @dev={0xfe, 0x80, [], 0xe}, 0x7f}}, 0x5901, 0x1, 0xffffffffffff0000, 0x7, 0xb717b40406a4d76d}, &(0x7f0000001340)=0x98) sysfs$1(0x1, &(0x7f0000000100)='wlan1cgroup\x00') 20:47:42 executing program 1: r0 = socket$inet6(0xa, 0x10010000000003, 0x23f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0xda, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x4}, {}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4000000, 0x0, 0x0, 0x2}, {{@in, 0x0, 0x3c}, 0x0, @in6=@local, 0x400000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xffffffffffffff89) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa05e58a1b1741e1ab2baa00000000000000000000000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d0fc26df2d544c23da20"], 0x0) 20:47:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:42 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000040)='[loppp0-.ppp1cpuset\x00', 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000100)={0x2, 0x7, 0x3, 0x3fa7, 0x0, 0x2, 0x6, 0x2, 0x40, 0x401}) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f000063e000), 0xfffffffffffffd8b) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000140), 0x4) 20:47:42 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x40100, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000300)=""/4096, 0x1000, 0x0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e) io_setup(0x0, &(0x7f00000002c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2}]) 20:47:42 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000440)={'nat\x00'}, &(0x7f00000004c0)=0x78) shutdown(r0, 0x1) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0x6d, "ca7137f9c427a3bd65bc30510ee910bc4cbc3f88af4167d144836d1f092ed91a71cc1b5199435f836bc4e0630f86c06558c099777f16393fd9e6043dbc7354283426d3d060837ac88b4e0321e49542400885b9a258856cdf8ca2ca659018664f7ee9ec0faac85e42298c0c5967"}, &(0x7f0000000140)=0x75) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={r1, @in={{0x2, 0x4e24, @multicast2}}, [0x3ff, 0xfffffffffffffff8, 0xabf, 0xd, 0x6, 0x3, 0x3, 0x3ff, 0x3, 0xd119, 0x48, 0x0, 0x6, 0x5, 0x7ff]}, &(0x7f0000000200)=0x100) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4}}}, &(0x7f0000000180)=0x100) 20:47:42 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = dup(r0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = signalfd(r3, &(0x7f0000000040)={0x81}, 0x8) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000200)) ioctl$sock_ifreq(r2, 0x89b9, &(0x7f0000000300)={'ip_vti0\x00', @ifru_ivalue}) 20:47:42 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:42 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r2, 0x2}}, 0x18) 20:47:42 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x80200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x200, 0x400) openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x8080, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000600)='/dev/usbmon#\x00', 0x100000001, 0x20000) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f00000005c0)={0x5, 0x9, 0xfa00, {&(0x7f0000000380), r1, 0x3}}, 0xffffffffffffff00) r3 = open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x40) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="85ab0100000032846934e100000000007a6175ff01000000eea9f1f413b5d6e8e8d551a3acd0303ff1b47f0ce79bcb61b2606d9505331363e1a000000000cd4be830c11b78bc3dc2500944ab2053f7b0e9e3a26463da4915ce1ae4b7d3c07bf9f5dd295386cc96ff1788518c904751706db210b57ad1c473b28652f3a972e34a"], &(0x7f0000f6bffb)='GPL\x00'}, 0x48) 20:47:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000300)={r2, 0x2}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000005c0)={0x0, 0x0, @pic={0x0, 0x7, 0x0, 0x1, 0x100000001}}) r5 = socket$inet6(0xa, 0x803, 0xfffffffffffffffc) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e23, 0x800, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1e}}, 0x4}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xa}, 0x5}, @in6={0xa, 0x4e23, 0x3, @empty, 0x5}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x7, @ipv4={[], [], @empty}, 0x3ff}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @remote}], 0xd0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xfffffffffffffffe}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f00000006c0)={0x0, 0x0, 0x2080}) 20:47:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x202, 0x0) r1 = memfd_create(&(0x7f00000000c0)="776c616e31dd6264657676626f786e6574316b657972696e676264657600", 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xf786) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) connect$unix(r0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) io_setup(0x8, &(0x7f0000000040)=0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0xbe) io_getevents(r3, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000)={0x77359400}) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x4, @random="bf76db14db09", 'veth1\x00'}}) socket$inet6(0xa, 0x1, 0x0) io_submit(r3, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r2, &(0x7f0000000140)}]) 20:47:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x1000000000002, 'bridge_slave_0\x00'}, 0x18) ioctl(r0, 0x800000000008982, &(0x7f0000000080)) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000180)) 20:47:43 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:43 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={0x0, 0xa78}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000300)={0x200, 0x2, 0x5, 0x7ff, r2}, 0x10) r3 = semget$private(0x0, 0x4, 0x588) r4 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xff, 0x4000002000) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f00000001c0)=[0x1f77, 0x9]) ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f0000000100)=0x1) ioctl$BLKRRPART(r4, 0x125f, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f00000000c0)=[0x1]) 20:47:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000616000)={0x2, 0x4e22}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22}, 0x10) [ 374.217028] *** Guest State *** [ 374.220529] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 374.229761] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 374.238772] CR3 = 0x0000000000000000 [ 374.242713] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 374.248883] RFLAGS=0xfffffffffffffffe DR7 = 0x0000000000000400 [ 374.255966] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 374.262950] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 374.271033] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 374.279304] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 374.288031] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 374.296287] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 374.304441] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 374.312679] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 374.320762] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 374.328994] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 374.337243] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 374.345413] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 374.352094] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 374.359599] Interruptibility = 00000000 ActivityState = 00000000 [ 374.366058] *** Host State *** [ 374.369330] RIP = 0xffffffff812ce0a8 RSP = 0xffff88811767f368 [ 374.375515] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 374.382725] FSBase=00007fb30d4d2700 GSBase=ffff88821fd00000 TRBase=fffffe000003d000 [ 374.390582] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000 [ 374.396696] CR0=0000000080050033 CR3=00000001155ae000 CR4=00000000001426e0 [ 374.403902] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8b001260 [ 374.410623] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 374.416835] *** Control State *** [ 374.420343] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c3 [ 374.427162] EntryControls=0000d1ff ExitControls=002fefff [ 374.432795] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 374.439795] VMEntry: intr_info=80000001 errcode=00000000 ilen=00000000 [ 374.446636] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 374.453461] reason=80000021 qualification=0000000000000000 [ 374.459853] IDTVectoring: info=00000000 errcode=00000000 [ 374.465459] TSC Offset = 0xffffff31e6233799 [ 374.469820] TPR Threshold = 0x00 [ 374.473342] EPT pointer = 0x0000000117cb601e 20:47:43 executing program 5: socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x7c}, {0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1000, 0x101200) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000040)={0x3, 0x8}) 20:47:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000209000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x9300) 20:47:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)="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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r0, 0x0, 0x6, &(0x7f0000000240)='wlan1\x00'}, 0x30) syz_open_procfs(r2, &(0x7f00000002c0)='net/sockstat6\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xfffffffffffffffe, 0x212, r0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) 20:47:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:44 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000780)=""/4096, 0x1000) r1 = socket$inet6(0xa, 0x2, 0x80) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 20:47:44 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r2 = semget$private(0x0, 0x3, 0x6) semctl$IPC_INFO(r2, 0x4, 0x3, &(0x7f0000000380)=""/248) r3 = semget$private(0x0, 0x6, 0x11) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000000280)=""/242) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x3df, &(0x7f0000000080)=0x4) ppoll(&(0x7f0000000140)=[{r0}], 0x1, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000240)={0x0, 0x1000000, 0x0, 0x0, 0x70e000}) 20:47:44 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0xa06, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x10}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x40}, &(0x7f00000001c0)=0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f79805854fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") r3 = socket$netlink(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2f, 'io'}, {0x2f, 'rdma'}, {0x2b, 'cpu'}]}, 0xf) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r2, &(0x7f0000000000)=0xff00, 0x2b428a52) 20:47:44 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080), 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)="73797a5f74756e00989b0000f200", 0xce) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'bcsh0\x00', 0x7ff}) write(r0, &(0x7f0000000080)="2e90f9a9aa05e253335652ea6829696c830b93dd8b89ea51aaf42846bcc6c02d2617665d66a44bf09ef9ecb684f4217bf8e8e6d8bbf6e527fb9267532e966d2eb5b587387c3754e06edadd293293b5c5d6523abf1fe31781", 0x3f) 20:47:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffdeb, 0x80900) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040), 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0200001900090a00000000000000007f000001000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000016000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c401050000000000000000000000000000000001000000000000000000000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000fe8000000000000000000000000000bb000000000000000000000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffac1414aa7862b69d4a8df74700000000000000000000000000000000000000000000ffffac1414000000000000000000000000000000000000000000ac1414aa0000000000000000000000eaffffffffffffff00000000007f0000010000000000000000000000000500000000000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000006a1f0000000000000000000000000000000000000000000000000000000000e0000001000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000fe8000000000000000000000000000bb000000000000000000000000000000000000a42700000000000000000000000000000000000000000000000000000000c3d2fb07976da5986783d1d5ff7c13603b8a54e234cef5939e417a6ff9eb86c3ddfd3daafefb8f4473a1f84f9c3f4185c06ef3ed277a9fbf21f404e04a38631ff85852bf17c1b0e70e894dabc1a4f4b20a55cc0d2024d51171c47b53"], 0x27c}}, 0x0) [ 375.454606] vhci_hcd: default hub control req: 0000 v0000 i0000 l256 20:47:44 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000200)={0x4, 0xb, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, "c888c2c2"}, 0x0, 0x0, @fd, 0x2}) 20:47:44 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3, 0x10502) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000900)='./bus\x00', &(0x7f0000000940)) getpeername$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0xfeaa) mount$fuse(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='fuse\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./bus\x00', r1}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x200, 0x0) 20:47:44 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x800100d, 0xb6, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$audio(0xffffffffffffff9c, &(0x7f0000000940)='/dev/audio\x00', 0x1486fafbdd006435, 0x0) 20:47:44 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:45 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWALK(r0, &(0x7f0000000240)={0x7e, 0x6f, 0x2, {0x9, [{0x80, 0x1, 0x3}, {0x80, 0x0, 0x2}, {0x2, 0x4, 0x2}, {0x0, 0x4, 0x2}, {0x81, 0x0, 0x4}, {0x81, 0x3, 0x6}, {0x46, 0x0, 0x3}, {0x82, 0x3, 0x8}, {0x8, 0x2, 0x2}]}}, 0x7e) socket$netlink(0x10, 0x3, 0x1f) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000002c0)={0x2, 0x0, [{0x8000000b, 0x101, 0x0, 0xfffffffffffffffb, 0xa3, 0x1, 0xd649}, {0x40000000, 0x1, 0x1, 0x79574fab, 0x564, 0x10000, 0x6}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x11, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0), 0x4) 20:47:45 executing program 4: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="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") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r1, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:47:45 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) r1 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_IOEVENTFD(r1, 0xc0386106, &(0x7f00000000c0)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0xc622, @ipv4={[], [], @remote}, 0x400}}}, &(0x7f0000000080)=0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000001c0)={r2, 0x6, 0x8001}, 0x8) r3 = gettid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x15) 20:47:45 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x3, 0x10502) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) lstat(&(0x7f0000000900)='./bus\x00', &(0x7f0000000940)) getpeername$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0xfeaa) mount$fuse(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='fuse\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./bus\x00', r1}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x200, 0x0) 20:47:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:45 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x3, 0xf0ffff00000004}]}}}]}, 0x3c}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x141000, 0x0) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000100)) 20:47:45 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vsock\x00', 0x101000, 0x0) r0 = syz_open_dev$adsp(0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040)={0x2, 0x8001}, 0x2) r2 = accept4(r0, 0x0, &(0x7f0000000180)=0xffffffffffffffad, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r2, r3, 0x0, 0x10000000000443) read(r2, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000140)=0x40) 20:47:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0xc0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) sendfile(0xffffffffffffffff, r1, &(0x7f0000000180), 0x10013c93e) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x9) syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, &(0x7f0000000100)={{0x2, 0x8, 0x3}, 'syz1\x00'}) 20:47:46 executing program 2: socketpair$unix(0x1, 0x804, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, &(0x7f0000000080), &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) 20:47:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x29, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) [ 377.301462] kernel msg: ebtables bug: please report to author: bad policy 20:47:46 executing program 5: ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000440)=0x2) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0xffffffffffffff19) sendto$inet(r0, &(0x7f0000000a80)="02a9c70d2b8019403ea0b856917714be167bbe22ae4aecd396730d0df7dd182ee0dfa7eb3ed06507f3979447544dbaf20a85dcc45287575bd726fd6004b1108efee753df07eb9268acbb707a7fa0215a5a5180f5d855a90e11c9c000362e0c6150175f9322c6db167ee6ee5d26ee2adc1c2548816213c7af9aa78e9a3147ea73a736709695ff236d9ebe173a696b9e9392004c4bf0765c6a7ae47f38e70780017325e9904a64e8369bcc6d99e4129ac9aaa2a2b28fa2255766caa232801a5a770add1b4d7d92b9a7fecc106512fc9df590ba40c54f284ad0b58d55afafd565cef33417fa6a076dc70000000000000000000000", 0x5d3, 0x20008005, 0x0, 0xffffffda) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000640)=r1) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x3fff800000, 0x40000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000680)=ANY=[@ANYBLOB="8a000000a6ce98341cb2ac8c7ddb619455a1695c93c1a0949c37f5c6a56bc4e08878523305c1795f259e7283b5e9384320e8973a29c0a75715aabb58206a6bfd4c9fff0cdc37dabc41e56c0245ed739e508669538a3ae4eb489f4f9c82ccc1c5f1ce11dc71f7dcc5a493a6ebdbd3550deb52d82620d5a6f212022472c2391135fe8505186e1a806bbc62ec5247f5de8499c72be2ad47676346b93c0120376be6f4dedf7525511715493d8e364ef1e2351b244b8b1ce04e6c6c52233740f88eec242e1964eae834a1"], 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739ddb, 0x700, 0x0, 0xffffffffffffff39) mknodat(r2, &(0x7f0000000300)='./file0\x00', 0x7928, 0x77) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x534efde5d2bae478) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000200)=""/215) ptrace$getsig(0x4202, r1, 0x1, &(0x7f0000000080)) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000340)=""/82) 20:47:46 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x80000000000001, 0x0, "4f580bcde099d06bfc252068a804b5f46b2e86a1168c191d856c604ec22d1ea3"}) sync_file_range(r0, 0x3ff, 0x7fff, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x4000) ioctl(r0, 0x6, &(0x7f00000000c0)="d56535ddb24c1b8cc55f1da71fc112b33a60b9128e00998889dd699c8698b5eb62881c0215afae806424bcfd995aadf9b3efab73fdebf3212a429ef8db614346ea0284943f424a392af9bb551a169b976b02ef517631ace0792997a5e7a654c49bcb492f643fc512504d82fa9ba89c4532ab22eac8c4b6797d539cd0423eb73beb8c9b8e945454dca6bd817c53adcb7bd359fd7e7f5dd1be2e8c405dcc88d4") 20:47:46 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:46 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) read(r0, &(0x7f0000000080)=""/227, 0xff85) close(r0) 20:47:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000002900010000000000000003000000000b00000000000014000000000000ffffac1414bb"], 0x2c}}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7f, 0x100) msgget(0x1, 0x400) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000000c0)={0x2, 0x9, 0x5, 0x40, 0x8000, 0x4}) 20:47:46 executing program 2: socketpair$unix(0x1, 0x804, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, &(0x7f0000000080), &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) [ 377.987612] kernel msg: ebtables bug: please report to author: bad policy 20:47:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:47 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x9) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast1}, 0x1c) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x42000, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x10, 0x4) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 20:47:47 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x1, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x88, r1, 0x808, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x77}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x88}}, 0x20044881) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000000000000000003000000003030000ff3f00000000000000000000020000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) 20:47:47 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400001, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x30000012}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80400000005, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000002c0)={0x5, 0x1ff, r4, 0x6, r5, 0x7fffffff, 0x2, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x80000000) recvfrom$unix(r3, &(0x7f00000011c0)=""/231, 0xe7, 0x143, &(0x7f00000012c0)=@abs, 0x6e) 20:47:47 executing program 1: syz_emit_ethernet(0x24, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @local, {[@timestamp={0x7, 0x4}]}}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, &(0x7f0000000100)) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r0) 20:47:47 executing program 2: socketpair$unix(0x1, 0x804, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, &(0x7f0000000080), &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) 20:47:47 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:47 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040)=""/6) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x6, 0x50000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000000c0)={0x0, 0x2, {0xffffffffffffffff, 0x0, 0x9, 0x2, 0x8}}) 20:47:47 executing program 1: pipe2(&(0x7f0000000000), 0x80000) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0, 0x0) unshare(0x40000110) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) [ 378.671340] kernel msg: ebtables bug: please report to author: bad policy 20:47:47 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x1, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10040000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x88, r1, 0x808, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x77}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x88}}, 0x20044881) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000000000000000003000000003030000ff3f00000000000000000000020000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) 20:47:48 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), &(0x7f0000012000)=0x4) close(r0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000080)=0x8) 20:47:48 executing program 2: socketpair$unix(0x1, 0x804, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, &(0x7f0000000080), &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) 20:47:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x10000) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getpeername$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14, 0x80800) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000580)={0x0, @multicast2, @loopback}, &(0x7f00000005c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@remote}}, &(0x7f0000000800)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@ipv4={[], [], @multicast2}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000940)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'bridge0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000d80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000804}, 0xc, &(0x7f0000000d40)={&(0x7f0000000a80)={0x284, r3, 0x210, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x80, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x20}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r8}, {0x198, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4c}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3f}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6f}}}]}}]}, 0x284}, 0x1, 0x0, 0x0, 0x94}, 0x80) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r12, 0x84, 0x8, &(0x7f0000013e95), 0x4) r13 = msgget$private(0x0, 0x0) msgctl$MSG_STAT(r13, 0xb, &(0x7f0000000dc0)=""/4096) ioctl$sock_SIOCETHTOOL(r12, 0x8932, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f00000000c0)=ANY=[]}) close(r12) close(r12) [ 379.199375] kernel msg: ebtables bug: please report to author: bad policy 20:47:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'ip6gre0\x00', @remote}) 20:47:48 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000040)={0x1, 0x0, @start}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000ff4fc8)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000000)=ANY=[@ANYBLOB="28010000170009050000000000000000ac14ffbb0000000000000000000000000000000000000000ac141400000000000000000000000000ff020000000000000000000000000001e000000200000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14ffaa0000000800d297000000006c2fbdb600000000020000ffffe0000001000000040000000000000000000000006b54b290dcb309898df9fc286ce4bd72aa98377e399b09c56f86809af8f93a07d309ff80fdf242e79126e8964acc3d9625891a63bfb76fcb5a60c3ad78020000007c33d86cdd5af6cdc197a1842abb18f2e77c7f0206c9fe1d42e8448c7f6604000000000000002d90dc7cfd4693a73ad28e6157d722a0786954b720dbc6732592442eee5795630000000000000000da01d17c32c53bfd2b4286dcc4a57a0bd6e68397a921cd5e7c5b079f1855d5fbaa58fbda5baf304f21a2d3fe5d7de8dec172149dd96cb3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x128}}, 0x0) 20:47:48 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x9, 0x0) r4 = request_key(&(0x7f0000000240)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0xfffffffffffffff9) r5 = request_key(&(0x7f0000000300)='id_resolver\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='/dev/adsp#\x00', 0xfffffffffffffffd) keyctl$link(0x8, r4, r4) keyctl$negate(0xd, r4, 0x0, r5) getsockopt$netlink(r3, 0x10e, 0xf, &(0x7f00000000c0)=""/154, &(0x7f00000001c0)=0x9a) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000440)={0xb, 0x10, 0xfa00, {0x0, r2}}, 0x18) 20:47:48 executing program 2: socketpair$unix(0x1, 0x804, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, &(0x7f0000000080), &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) 20:47:48 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f5010000000000"], 0x15) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:48 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000440)='security.ima\x00', &(0x7f0000000480)=@md5={0x1, "db40fb3248839f10288430c6ea272804"}, 0x11, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000180), 0x0) fcntl$setstatus(r1, 0x4, 0x80100000040c00) sendmmsg(r1, &(0x7f0000006f40)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)="45159feb0ff7bbe9b780b038343fdbf26ba52aa2f3a7badc", 0x18}, {&(0x7f00000001c0)="8b472bdf808265a5868c99457065d53802be3db5cf8a51b73d7e024f6a4ed0395912f1026059604ec56ed81182acfac9bab829d5fe2f5083c6f9d354805452872d395232ae703749ba4356e13e23f549969445043c8f8808e73c71589e428c819b", 0x61}, {&(0x7f0000000240)="e1a406d9c367526e95175727a755f237cc13c7f997f5d7dade92eb2581e9071dc3e434056f4f4cd285bead570dd41fd26923eaa3d8c329bf6a48d114977356559d91d8cffbdf4233f7f8b0c5c4d256500d21797ff237d3473904f0dfb9fa86bf77c4c31ac96f29ea4f739ec7e342c887c2ae60a3e5f581ef046667db43f9ec9f3890", 0x82}, {&(0x7f0000000300)="96b5cfc2f319d060bf3f6988fa98d4799abb01d5fc20a7e5091cdd4d07fe9118b289c9390edc031375fa778d8fd3b3df210f5ddf167d03d50ae032348cec569ef900c0ec0b16e73fbc121c8bc729e853191efc453154d9bfec4924e867969c44d4b140c16a244eeead9558dd8cd32e563dd4c0584a64a71813f98a3fbb318ee0b637beed4fbdc4035cfd8fe67f18ba46b23552c4f47cf2889256cd5f6323c5", 0x9f}, {&(0x7f0000000140)="1e135eb74445c3fc3ec627d1e2d6dc96936700b941", 0x15}], 0x5, &(0x7f0000002840)}}, {{&(0x7f0000001340)=@generic={0x9, "3ecc5f948e8f594eb0694ba09205e0ab37a93caad24e8fcc6659b1e3dbed3a1168f58d89495518482436c18b8ee03f093996f3b5c03c4f9f795d00649334f126b26ef1c516c2aa1775532cffa6eb55a7de70bc7439ffa9e73fcab653a3fa8520412dbe0c492b8fad1ef8c90f04f772a102282aa5d55654e69ebd879d9bba"}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000080)}}], 0x2, 0x0) [ 379.769454] ucma_write: process 366 (syz-executor5) changed security contexts after opening file descriptor, this is not allowed. 20:47:49 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0xfffffffffffffffe) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x47, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00') getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x1, @ipv4={[], [], @remote}, 0x3}}, 0x3, 0x7}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r1, @in={{0x2, 0x4e24, @local}}}, 0x84) 20:47:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f5010000000000"], 0x15) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:49 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x29, "1ec4b8febfbd37abb16855fcafe6eabf42f7957266e5e47e97f6abaefd718b252dbed5b65d494fd618"}, &(0x7f00000001c0)=0x31) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0xa6, 0x202, 0x3794, 0xfffffffffffffffd, r1}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xc, &(0x7f00000000c0)='security&A]\x00', 0xffffffffffffffff}, 0x30) r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/connector\x00') syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0xa97, 0x402102) fallocate(r3, 0x0, 0x0, 0xfff) write$FUSE_INTERRUPT(r3, &(0x7f0000000000)={0x8, 0xfffffffffffffffe, 0x1}, 0x10) 20:47:49 executing program 2: socketpair$unix(0x1, 0x804, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, &(0x7f0000000080), &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) 20:47:49 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, 0x29, 0x1, 0x70bd27, 0x0, {0x1}, [@nested={0x18, 0x0, [@typed={0x14, 0x0, @ipv6=@ipv4={[0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9effffff00000000], [], @remote}}]}]}, 0xffffff20}}, 0x4000000) 20:47:49 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, &(0x7f00000000c0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setgid(r2) 20:47:49 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f5010000000000"], 0x15) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:49 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0xfffffffffffffffe) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9a2, 0x46801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_pts(r0, 0x20000) ioctl$FS_IOC_FSGETXATTR(r1, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x5, 0x730000, 0xffffffff7ff0bdbe}) 20:47:49 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9, 0x600) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x6) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x303, 0x0, 0x0, 0xfffffffffffffd27) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000002c0)={0x7e, 0x0, [0x20000048e]}) 20:47:49 executing program 2: socketpair$unix(0x1, 0x804, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, &(0x7f0000000080), &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) 20:47:49 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00\x00t-\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r1 = geteuid() r2 = add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="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", 0xfa, 0xfffffffffffffff8) keyctl$get_persistent(0x16, r1, r2) 20:47:50 executing program 0: r0 = socket$inet6(0xa, 0x400000803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1ff, 0x4000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) eventfd2(0x9, 0x80801) ioperm(0x8, 0x7df, 0x2e) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x0, 0x0, 'none\x00', 0xa, 0xfffffffffffffffe}, 0x2c) 20:47:50 executing program 5: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x8e3, 0x490800) r1 = memfd_create(&(0x7f00000001c0)="657468312e706f7369785f61636c5f6163636573733a73656c66c373656c696e75782100", 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x3a}, &(0x7f0000000100)=0x8) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fdatasync(r0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x18980, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x0, 0x2000}) 20:47:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ff"], 0x20) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:50 executing program 2: socketpair$unix(0x1, 0x804, 0x0, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, &(0x7f0000000080), &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) [ 381.162546] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x221d/0x2b70 20:47:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x180) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f000000b040), 0x4000000000001c9, 0x0, &(0x7f000000b280)={0x77359400}) 20:47:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x3db, 0xfa00, {0x0, &(0x7f00000001c0)}}, 0xff5d) recvmmsg(0xffffffffffffffff, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f00000017c0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000600)=""/154, 0x9a}}], 0x1, 0x0, 0x0) [ 381.405153] kernel msg: ebtables bug: please report to author: bad policy 20:47:50 executing program 5: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, &(0x7f0000000080)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001500)={0x0, 0x0}, &(0x7f0000001540)=0xc) getgroups(0x2, &(0x7f0000001580)=[0x0, 0xee01]) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000015c0)=0x0) fstat(r1, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000001680)=[0x0]) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000001780)) sendmsg$unix(r3, &(0x7f0000001740)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000240)="31d946cf850938e4233f5509b784ed522174390c631b83dfb9e225cb93f5c0f45c237e7089a8d8150d4d19a2a5d739c7d947d70bbd1c1fd813e4e75515e87babab6e26e557b2e99b9e7e2c311763dc70b0008dd69e839b5a08a759918e9f41e89ecc1b73617f1723c73cd619956c4643f444cf36f40e92845ad54ea43bbfecca480525016a959d21ac7515ee71c19ccf7f3b7e786a61f7bc9446bd1abf484b1c1af975614e2f9ec6ce576b5fe6a6adb8554433c6f727f8a2cfbd99b78a0baca740eeed580e4626a0a6f18799933afee14da524ad5c139f9148c8f1de83", 0xdd}, {&(0x7f0000000100)="a1921b07710f419b5f18ccb66d893f7f3417c766144c38e706d6ef53aaff95bfcbf2a0c8deee271631734edb0e4b711d1ff474b06aabf280", 0x38}, {&(0x7f0000000340)="79fee6a2d619182b226662f6e8b33261b1fb09668f1531ab342d469116b43d2d075ffaabda653c58215efae9ba14376e09a2f9af4d84b2eb20619feb6e888a02e6f367f0e98c0b8c705b4904d7ad670d874b7ab4ec83c47135fb2e5c883c7af0373a6ad8386e8baecc1f3f1b524030d1f6e247b264374b9f92f7c31e1dad383dce5e5c38c0278c3458ff71f43c9148f79e4285d43035814c39b5a330fad13a257aabdc1cb76c819521d69112d83cce82ae7f350a096ad1dcbfc92cbfec2ab45b3315bdbdce05265bd168", 0xca}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="53b95ae21cda", 0x6}], 0x5, &(0x7f00000016c0)=[@cred={0x20, 0x1, 0x2, 0x0, r4, r5}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}], 0x58, 0x8000}, 0xc001) 20:47:50 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x10000, 0x4140) write$P9_RREMOVE(r1, &(0x7f0000000140)={0x7, 0x7b, 0x2}, 0x7) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/103, 0x67}, {&(0x7f0000000280)=""/141, 0x8d}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x3}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300000000000000000000", 0x23}], 0x1}, 0x0) 20:47:50 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ff"], 0x20) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, &(0x7f0000000080), &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) 20:47:50 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = socket(0x1a, 0x8000a, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='permhat 0x0000000000002000^'], 0x1b) 20:47:50 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x80) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") bind$vsock_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0x8000, @remote, 0xffffffff80000001}, 0x1c) clock_gettime(0xfffffffffffffff9, &(0x7f0000000000)) fstatfs(r0, &(0x7f0000000280)=""/250) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) write$P9_RGETLOCK(r1, &(0x7f00000001c0)={0x1f, 0x37, 0x2, {0x2, 0x2, 0x9, r2, 0x1, '%'}}, 0x1f) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000240)={0x7, 0x2, 0x7}) [ 381.914038] kernel msg: ebtables bug: please report to author: bad policy [ 382.048849] kauditd_printk_skb: 3 callbacks suppressed [ 382.048883] audit: type=1400 audit(1543697271.097:31): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9587 comm="syz-executor4" 20:47:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ff"], 0x20) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:51 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7ff, 0x400) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffb2, &(0x7f0000000000)) 20:47:51 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, &(0x7f0000000080), &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) 20:47:51 executing program 5: mkdir(&(0x7f0000554ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fdatasync(r0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040)=0x20, 0x4) 20:47:51 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0xa, @sliced}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x14) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000002c0)={0x0, 0x1000, "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"}, &(0x7f0000000140)=0x1008) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={r2, 0x6}, &(0x7f00000001c0)=0x8) 20:47:51 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x600, 0x0) recvfrom$unix(r2, &(0x7f0000000280)=""/41, 0x29, 0x40000102, &(0x7f0000000480), 0x6e) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000040)=0xfffffffffffffff9, 0x140) r3 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000000400)=0xe8) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000440)={r4, @local, @loopback}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @remote, 0x3}], 0xb) fremovexattr(r1, &(0x7f00000002c0)=@known='trusted.overlay.opaque\x00') clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f00000000c0)={r5, r6+30000000}, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d24000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in={0x2, 0x0, @multicast1}], 0x2c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x208040, 0x90) ioctl$EVIOCSREP(r7, 0x40084503, &(0x7f0000000180)=[0x38e7, 0x2]) socket$inet6(0xa, 0xf, 0x6) 20:47:51 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff000000"], 0x25) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:51 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, &(0x7f0000000080), &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) 20:47:51 executing program 0: socket(0x3, 0x4, 0xea2) getpid() r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x40045109, 0x313) 20:47:51 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x101100, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000100)=""/23) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000140)=0x14) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000000000000000000"], &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x5, 0x80000001, 0x1ff, 0x6, 0x3, 0x6, 0x7, {0x0, @in={{0x2, 0x4e22, @rand_addr=0x7}}, 0x5, 0x4cda000, 0xb29c, 0x1, 0x7f}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e21, 0x7f, @local, 0x10}}, 0x0, 0x6, 0x5, 0x0, 0x9}, &(0x7f00000003c0)=0x98) 20:47:51 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x1, {0x7fff, 0x1, 0x201d, 0x7, 0x0, 0xd, 0x3, 0x4}}) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, {0x3010}}) r1 = dup3(r0, r0, 0x80000) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000ac0)=""/4096) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000002b40)) [ 383.023223] QAT: Invalid ioctl [ 383.046275] QAT: Invalid ioctl 20:47:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff000000"], 0x25) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:52 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, &(0x7f0000000080), &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) 20:47:52 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) 20:47:52 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x3, @empty, "626f6e6430000000000600000800"}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'syz_tun\x00'}}, 0x1e) r2 = dup(r1) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000540)={0x6, 0x1, @stop_pts=0x536}) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000200)="42361b13729b231644ff6f33eb9d671c0cbd61723210d7f10fe23867fe1c70d666ab84c2a23f25e9f8fd3e80e6677385876d2329f3d1c34fe920ab0fe003bd6f8c", 0x41}, {&(0x7f0000000280)="1b604b6133e4af7e6d59479b8705201c542def76a75a4fa7226ad45bd8a6f00b2b9eb74270b2550b322ea849670654e9ba286d0947682f81411230ce78dd5883c3605a072f06cd0590d40a3153f2cdf9387a98d0c128e348dc9cdc5b31980267441691a460db753bf359d453ee1762716ab2d6be05efbbb2b8970fbdc140b802a66f4a2d6504f7d043cd70622f1465a8", 0x90}, {&(0x7f0000000000)="db8ea9960f68f68e76d5b9b1a0eada651c0825b7913166907544aacea05e1a9a", 0x20}, {&(0x7f0000000340)="92d1870d3bbca56749b510cb9a7732b637ac14b6e74d99aea70518a2cc63a71277523d2efdacfe8f87665abc921bdc3e502656018f431585ac298f9c5a9e8c7f7df5d7f0ca02a00533ff70c204f7ea90f991a4269c256a29c36eaf7562a34ddf226f30ff91136ed34a80896140012c51defb32e30e", 0x75}, {&(0x7f00000003c0)="caf09c6a6ea1338ac78b1847d07be5e03504ac0ae334d1ed7bd6c849d57c075f4293ce3c85c3c408a4632fbcabab460433fe6381ddcf25b144e57488f1aba9e84fb0c60664326f4581de2ea8a4d5d92f779ee78e13ffd3432c638ce5ae5bdaba2a1eaa648c36", 0x66}, {&(0x7f0000000440)="f86d69835c2894b679b1e14242c144e741743b25921d55b5ae24948134378c55648a3f46f45ba80df7198122b5bc4c0ed49dbc8a3b50072a1d9b8d31c52160811e68a20665038f6126d9b7c93af9", 0x4e}], 0x6, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000100)=""/54, &(0x7f00000005c0)=0x36) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8937, &(0x7f0000000080)={'bond0\x00', r4}) modify_ldt$read_default(0x2, &(0x7f0000000180)=""/127, 0x7f) 20:47:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x5, 0x6, 0xbe, 0x5}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)={0x0, 0x8000}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 20:47:52 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff000000"], 0x25) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:52 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f4634418dd25d766070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = msgget$private(0x0, 0x80) msgctl$MSG_STAT(r1, 0xb, &(0x7f00000002c0)=""/215) r2 = memfd_create(&(0x7f0000000100)='I\x00=', 0x0) write(r2, &(0x7f0000000180)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000025c0)=""/57, 0x39) connect$l2tp(r0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x2e) 20:47:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x200) 20:47:52 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) 20:47:53 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/217, 0xd9}], 0x1}}, {{&(0x7f00000006c0)=@rc, 0xa, &(0x7f0000000540), 0x303, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000080)={0xf000, 0x105000}) 20:47:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff000000000000"], 0x28) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:53 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) [ 384.166377] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:47:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x200) 20:47:53 executing program 5: r0 = semget$private(0x0, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000300)=0x5, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getpgrp(0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x1f, 0x200, 0x0, 0x5a5, 0x0, 0x100000001, 0x80400, 0xa, 0x5, 0x5, 0x0, 0x2, 0x2, 0x800, 0xffff, 0xfffffffffffffff7, 0x1, 0x0, 0x0, 0xffffffffffffff01, 0x101, 0x8, 0x1, 0x4a3a79bc, 0x3f, 0x3, 0x0, 0x6, 0x4, 0x0, 0xca6, 0x9, 0x3, 0x20, 0x0, 0x1, 0x0, 0xe270, 0x7, @perf_config_ext={0x0, 0x2}, 0x3, 0x9, 0x800, 0x0, 0x0, 0x1ff, 0x401}, 0x0, 0x7, r1, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x400}, &(0x7f00000000c0)=0x8) accept4$unix(r4, 0x0, &(0x7f00000001c0), 0x0) ioctl$NBD_SET_TIMEOUT(r5, 0xab09, 0x100000001) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000280)=0x2, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000004c0)) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) 20:47:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff000000000000"], 0x28) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x2400c1) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000000c0)={0x1, 0x4}, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @random="4f3e136a6abc"}, 0x10) close(r0) 20:47:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="220000002000070700be0000090007010200001e00003c0000fb0404050016008000", 0x22) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x191) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x12, 0x39, 0x4, 0xc, 0x3, 0x5934, 0x2, 0x142}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x375) 20:47:53 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) 20:47:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x200) 20:47:53 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff000000000000"], 0x28) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:54 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x11) 20:47:54 executing program 0: socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x18) r2 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x7, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0xd, @raw_data="079cd4a1576142d6e2ff4dade811ffaa38fc63384291b246b52f6f8a623eb7b777007fd26b3cd0c06702eb1306f5abeee299abdd6dbf57ef8b0ff022813d105de87416fcc38366b0f212158609ce97d379d26e55d40e21998570f45fe9cbc1b6c88741cdb587e307fe62bf8f819f92e337ce1762a2ea8254e1aa5075b0335f94cee2ad3715ac8de59ce8fd33384ceb83fd7a03b5d2b82ca056aa35538838fd940f1a7a8ea199bfd036b233eb9e4ee16458e657abedcc45c96192f582559cee6e404004599b59e163"}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x8, [0x1, 0x2, 0xc6, 0x5, 0x1, 0x16c8, 0x1d, 0xffffffffffffffff]}, &(0x7f0000000100)=0x14) 20:47:54 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x0, &(0x7f0000000580)="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") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"00ac720000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0xd8000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000080)={0x3, 0x3}) 20:47:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) 20:47:54 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) 20:47:54 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff00000000000000"], 0x29) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) [ 385.564943] kernel msg: ebtables bug: please report to author: bad policy 20:47:54 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x959, 0x80080) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x84100, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x12100) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000000)={0x7fffffff, 0x0, 'client1\x00', 0x0, "416263b1324b6e3e", "702159712578c0ca7bc19edecd6d664a2068e6d523557d36b58a4e7289f7efbd"}) 20:47:54 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket(0x10, 0x80002, 0x0) accept4(r0, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000100)=0x80, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x4}, [@RTA_GATEWAY={0x8, 0x5, @dev}]}, 0x24}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 20:47:54 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$smack_current(r1, &(0x7f0000000040)='em0\'{\\ppp1/trustedwlan1\x00', 0x18) fcntl$setpipe(r1, 0x407, 0xc) writev(r1, &(0x7f0000000000)=[{&(0x7f0000c01f96)="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", 0x1001}], 0x1) dup2(r1, r0) 20:47:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x0, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, 0x0}, 0x200) 20:47:54 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) 20:47:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff00000000000000"], 0x29) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) [ 385.957689] kernel msg: ebtables bug: please report to author: Wrong len argument 20:47:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x0, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, 0x0}, 0x200) 20:47:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) r1 = dup2(r0, r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0xfffffffd, 0x4) recvmmsg(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000002, 0x0) 20:47:55 executing program 0: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$smack_current(r1, &(0x7f0000000040)='em0\'{\\ppp1/trustedwlan1\x00', 0x18) fcntl$setpipe(r1, 0x407, 0xc) writev(r1, &(0x7f0000000000)=[{&(0x7f0000c01f96)="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", 0x1001}], 0x1) dup2(r1, r0) 20:47:55 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) 20:47:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff00000000000000"], 0x29) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) [ 386.416887] kernel msg: ebtables bug: please report to author: Wrong len argument 20:47:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="04d2743f8405a1c8bdfab9a2d65032e3ebae3df0b07fc15725740470593b4269990c9efa4a3e284d26221d0beb80604e5fe45391f6ebd92f3ec47f736e78b0a8e3081e678e1e357e8a72806d540e5856c8bcb84748588fc18f7ea7c3316cdeca5f167fc29203ffff4098af523e81c8f3e6b814f62c25cea3777cd329767e7137e488d30c28dd4e2e00000000000000000000000000000000000000000000"], 0x9e) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000440)={@ipv4={[], [], @local}, 0x0}, &(0x7f0000000c00)=0xa) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000c40)={r2, 0x1, 0x6, @local}, 0x10) r3 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000040)=0x7fff) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000140)={'icmp\x00'}, &(0x7f00000001c0)=0xfffffffffffffec0) r4 = dup(r3) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000240)=0x204, 0x107) time(&(0x7f0000000380)) setsockopt$inet6_int(r3, 0x29, 0x39, &(0x7f00000000c0)=0x6, 0x4) setns(r4, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000100)) sendto$inet6(r3, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) clock_gettime(0x0, &(0x7f0000000300)) utimensat(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', &(0x7f00000002c0)={{0x0, 0x2710}}, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x141042, 0x10) clock_nanosleep(0x6, 0x0, &(0x7f0000000280), &(0x7f0000000340)) ftruncate(r5, 0x7fbf) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) 20:47:55 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x800) read(r0, &(0x7f00000001c0)=""/56, 0x38) 20:47:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x0, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, 0x0}, 0x200) 20:47:55 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xf, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000240)={0xa0, 0x0, 0x2, {{0x5, 0x0, 0x3, 0x8, 0xb05d, 0x5, {0x5, 0x9, 0x9, 0x0, 0x1ff, 0x3, 0x8, 0x0, 0x1, 0x1, 0x3, r1, r2, 0x10000, 0x9}}, {0x0, 0x4}}}, 0xa0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000180)={0x80323}) 20:47:55 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000000000)) 20:47:56 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2000000040045730, &(0x7f0000000000)) [ 387.025377] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 387.061465] vhci_hcd: invalid port number 0 [ 387.103338] vhci_hcd: invalid port number 0 20:47:56 executing program 1: socketpair$inet6(0xa, 0x0, 0x4, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8040, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040)=0x8b, 0x4) getsockopt$inet6_dccp_buf(r0, 0x21, 0x8f, &(0x7f0000000300)=""/200, &(0x7f00000000c0)=0xc8) syslog(0x9, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000400)={0x6, 0x0, [{0x0, 0x4, 0xff, 0x800, 0x7}, {0x80000019, 0x0, 0x20, 0x1, 0x6}, {0xf, 0x400, 0x9, 0x6, 0x6}, {0x0, 0x5, 0x8, 0x7f, 0x80000000}, {0xc0000019, 0x9, 0x1061, 0x10001}, {0xc0000000, 0x2, 0x6, 0x1, 0x7}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000240)={0x4, 0x8a, "179cf96d3575b06653c6fd09cf6955138707cfb811b42a0a66f2d9276ab1145ccbadc5c08d78ad616f478b435755aae2b8141f112a01df7335b63d00efed3b4218b7be2730f94590556c3d7aabace23e6a0f2faeb12e4672f0fd5219d08bab551303615726a0e4edf88ca0d4587cef31764c15b79419966e5c53593094cdd50884c708625edd8098c14f"}) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) 20:47:56 executing program 0: unshare(0x28020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002300)='/dev/kvm\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000040)={0x0, r1, 0x800}) fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:usb_device_t:s0\x00', 0x22, 0x800000000001) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000002200)={0x6, 0x0, [{0x873, 0x0, 0x4}, {0xffe, 0x0, 0x1f}, {0x2d7, 0x0, 0x7ff}, {0xbff, 0x0, 0x80000001}, {0xb23, 0x0, 0x7}, {0x86d, 0x0, 0x5}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f00000022c0)={&(0x7f0000002280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f0000000180)={0x0, 0x0, 0x2080}) 20:47:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x90, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000500)=[{}, {}, {0x0, '\x00', 0x1}]}, 0x108) 20:47:56 executing program 4: r0 = syz_open_dev$dmmidi(0x0, 0x34, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) 20:47:56 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, 0x0) 20:47:56 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x42100, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f00000000c0)=0xff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000001c0)=""/239}) [ 387.649994] kernel msg: ebtables bug: please report to author: Valid hook without chain 20:47:56 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000280)=""/1, 0xfffffece) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000003900)=0x10000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)) close(r0) 20:47:56 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) 20:47:57 executing program 3 (fault-call:4 fault-nth:0): r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x90, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000500)=[{}, {}, {0x0, '\x00', 0x1}]}, 0x108) 20:47:57 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x80, 0x4) r2 = dup2(r1, r0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000000)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000000c0)={0x0, @src_change}) 20:47:57 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f00000004c0)=@in6={0xa, 0x2, 0x0, @mcast2}, 0x80, &(0x7f0000000380), 0x309, &(0x7f0000000480)=[{0x28, 0x29, 0x37, "2b02df2fd0846bc0964f4ffde3d917e30f"}], 0x28}, 0x10000000}], 0x1, 0x0) [ 388.252749] kernel msg: ebtables bug: please report to author: Valid hook without chain 20:47:57 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) 20:47:57 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000000c0)={0xfffffffffffffffd, "44c23e7e07243fcb2a8b0cc12cce079675614ab35512cc301cd44e7c67eb828d", 0x3, 0x200, 0x80000000, 0x8, 0x14, 0x0, 0x602, 0x9}) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:47:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x90, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000500)=[{}, {}, {0x0, '\x00', 0x1}]}, 0x108) 20:47:57 executing program 5: unshare(0x2000400) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vsock\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000100)=""/4096) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000000)=""/48) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 20:47:57 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) rt_sigqueueinfo(r1, 0x41, &(0x7f0000000140)={0x16, 0x1000, 0x3, 0xcd52}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$KVM_SET_CPUID(r0, 0x4004551e, &(0x7f0000000080)=ANY=[]) ioctl$sock_inet_SIOCRTMSG(r0, 0x80085504, &(0x7f00000000c0)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='ip6gre0\x00'}) [ 388.720780] kernel msg: ebtables bug: please report to author: Valid hook without chain 20:47:57 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0xffffffffffffffff) fcntl$lock(r0, 0x10000000000024, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, r1}) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000000)=""/11) [ 388.825989] Unknown ioctl -2143787981 [ 388.845930] Unknown ioctl -2143787981 [ 388.884926] Unknown ioctl -2143787981 [ 388.923528] usb usb3: usbfs: process 9856 (syz-executor0) did not claim interface 0 before use 20:47:58 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) [ 388.996498] usb usb3: usbfs: process 9862 (syz-executor0) did not claim interface 0 before use 20:47:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) 20:47:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000080)) 20:47:58 executing program 1: futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x40) ioctl$TCSBRK(r2, 0x5409, 0xfff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x41}, &(0x7f0000000040)) accept$unix(r2, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x6, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 20:47:58 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x5, 0x100, 0x400009}, 0x7f) fcntl$getownex(r0, 0x10, &(0x7f0000000480)) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000840)=0x0) r3 = getpgid(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000300)=0x81, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gre0\x00', 0x2}, 0xfffffffffffffda1) ioctl(r6, 0x800000000008982, &(0x7f0000000080)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="290000000600000000000002000000000400000000000000030000000000000000000000000000000069127fbcdab56d0f1f4cb25800000000000021b2c9e06ea050325f77726e71bff4c99eef500ade32c424020f322903f5bad93a"], 0x5c) mount(&(0x7f0000000a80)=ANY=[@ANYPTR64=&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYPTR64=&(0x7f0000000880)=ANY=[@ANYRESOCT=r3, @ANYRES32=r4, @ANYPTR, @ANYRESOCT=r5, @ANYRESOCT=0x0], @ANYRES64=r5, @ANYPTR64, @ANYRESHEX=r1], @ANYRES64=r6, @ANYRESOCT=r5, @ANYPTR64], &(0x7f0000000800)='./file0//ile0\x00', &(0x7f0000000200)='cgrQup2\x00', 0x2, 0x0) ioctl$TIOCNXCL(r4, 0x540d) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000640)='/dev/loop#\x00', 0x2, 0x40000000000efc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000003c0)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="770171579ca0d7de827dc314576870dcbe5a80"], &(0x7f00000007c0)=0xfffffffffffffdd3) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000002c0)={r9}, 0x8) ioctl$PERF_EVENT_IOC_RESET(r8, 0x2403, 0x2) r10 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x0, 0x400880) socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) io_submit(r11, 0x1, &(0x7f00000000c0)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x80000000000, r8, &(0x7f0000001000), 0x0, 0x5, 0x0, 0x0, r10}]) pwritev(r10, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) sendmsg(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000004c0)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0xa63bd3268fd06628, &(0x7f00000007c0), 0xffffffffffffeb5, &(0x7f0000000e00)=ANY=[], 0x0, 0x840}, 0x0) [ 389.243883] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 20:47:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000100)=@known='system.posix_acl_access\x00', &(0x7f0000000140)='\x00', 0x1, 0x0) 20:47:58 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) 20:47:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) 20:47:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setxattr$security_ima(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00003268c80f27b23e8cfb6a6bd5c1f7e0771d8e09f89ea1856f3664c9afcedf02ed6eccbd2e91f530497250438443e72e5eba6d9f4592e30c7a532e6fe463d304"], 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x40000) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000a40)={"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"}) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0x4400ae8f, &(0x7f0000000000)) 20:47:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x2, 0x0) write$9p(r1, &(0x7f0000000180)="5772c893f301ce1a4bd67b928374720c813809382ff8eceae2d4773303f258906b4438a1685f0b923f5b66e1243b53c649d4948f02403410e584a4f89693d0bafbee94d66da318240d15e39006464b7a7bc18fa7b4d6a42516b07ef48da2e7650bf1eeec86230a00e675c281071f0dea225f9cb235b92de0f6f56d97a2376ef0f2edac7db7", 0x85) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f501000000000000000000f0448410f0ffffff000000000002ca0000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) [ 390.043178] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 20:47:59 executing program 0: unshare(0x400) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x80000002) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x82, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e24, @broadcast}}, 0x36d40130, 0x8, 0x401, 0x81}, &(0x7f0000000180)=0x98) 20:47:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') r1 = accept4$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @empty}, &(0x7f0000000300)=0x10, 0x80800) sendmsg$inet_sctp(r1, &(0x7f0000001440)={&(0x7f0000000340)=@in6={0xa, 0x4e23, 0x400, @loopback, 0x400}, 0x1c, &(0x7f0000001400)=[{&(0x7f0000000380)="1538ba6b9cae796f6068be", 0xb}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="3207114bfc671f0f", 0x8}], 0x3, 0x0, 0x0, 0x4}, 0x800) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x326, 0x200) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000280)=0x4f, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0xc5, 0x69, &(0x7f0000000100)="b5847d5bbdcb034925a70580d76d1c66ea3884b3264049e75553adb45bd189a5bedbbe2fe2e2384b624617d145ef5759900eb6939940891615a07a11ba181421a21c94d929fd9933a36edf4d09f0d4d3f9e93622a6661a10e70df30412839fbf16fc9cd7f07ff966107480eefced18c59cc7c42f086c7b1d12cc00a032722c9bb266255095585cdacd16aa367b088eed77601b7da144b7fac017883d4d3c8595e7c1e045d2c46533837786d0a5f7d53ef4104142a4e52fa06284cd0a3188c7bf406dfed045", &(0x7f0000000200)=""/105, 0xa}, 0x28) 20:47:59 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) 20:47:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10, &(0x7f00000000c0), 0x4) accept4(r1, &(0x7f0000000040)=@generic, &(0x7f0000000100)=0x80, 0x80800) 20:47:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) 20:47:59 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) socketpair$packet(0x11, 0x2, 0x300, &(0x7f00000000c0)) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r1, 0x2285, 0x0) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff00000000000000004503143ecb881ada5c42955deb717b820b0174ad1e6e3abf68f83c4c7444260d0331403abf0175bf541c6df106fe9c9a36b9f731cf662acf958953621c0625984870213436806f4ac42de590ded4d36a7bdd48ebed20bc284419d1b4455f3111b5541cc6657b"], 0x2a) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000000)) [ 390.587713] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 20:47:59 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x460500, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1000, 0x6, [], &(0x7f0000000080)={0x990971, 0xffff, [], @ptr=0xffffffff80000001}}) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000000)={0x0, 0x8001, 0x101, 0x4, {0xfffffffffffffffd, 0x2, 0x5859b569, 0xfffffffffffffb43}}) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000280)={0x9, @vbi}) prctl$PR_GET_NO_NEW_PRIVS(0x27) 20:47:59 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x387}], 0x27f, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x6, &(0x7f00000012c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000280), &(0x7f00000002c0)}}, &(0x7f0000001340)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 20:47:59 executing program 5: r0 = socket$inet6(0xa, 0xfffffffffffffffb, 0x200000000000001) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x200000000, @mcast1, 0x3ed2}, 0x263) sendmsg$key(r0, &(0x7f0000000040)={0x20480, 0x1100000000000000, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x2, 0xffffff88, 0x80ff}, 0x10}}, 0x0) 20:47:59 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) 20:48:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x150, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0x70, 0xc0}}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x1c8) 20:48:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:48:00 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000000c0)=""/36, &(0x7f0000000180)=0x24) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) [ 391.207269] kernel msg: ebtables bug: please report to author: Valid hook without chain 20:48:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x2000, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0xf000, 0x0, 0x2, r2, 0x2}) 20:48:00 executing program 4: syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2000000040045730, &(0x7f0000000000)) [ 391.422518] IPVS: length: 36 != 24 [ 391.471234] IPVS: length: 36 != 24 20:48:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x150, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0x70, 0xc0}}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x1c8) 20:48:00 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0xde0, 0x80001) write$FUSE_OPEN(r1, &(0x7f00000001c0)={0x20, 0x0, 0x3, {0x0, 0x5}}, 0x20) syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0xffffffff, 0x80) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000440)) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) socket$inet6(0xa, 0x7, 0x7d22a01b) fcntl$notify(r0, 0x402, 0x4) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000200)={0x3, {0x80000000000400, 0x7e8}}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x8, &(0x7f0000000100)={0x2}, 0x8) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x101100, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) arch_prctl$ARCH_SET_GS(0x1001, 0x4) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000300)=""/33) readahead(r1, 0x3, 0x526d) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={0x0, 0x3}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000003c0)={r5, 0x7}, &(0x7f0000000400)=0x8) [ 391.716841] kernel msg: ebtables bug: please report to author: Valid hook without chain 20:48:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1f00, 0x3f00000000000000, 0x0, 0x1000000, 0x1103, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x6]}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000300)={@local, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@mcast2}}, {{@in6=@remote}}}, &(0x7f0000000080)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_GET_KEEPCAPS(0x7) r3 = memfd_create(&(0x7f0000000380)='*-(\x00', 0x7) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x6) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@loopback, @mcast1, @mcast1, 0x7, 0x6, 0x3, 0x400, 0x4, 0x800262, r1}) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000003c0)={0x9, 0xff, 0x3000}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000002c0)={0x7f, 0x7, 0x100000001, 0xfff, 0xfffffffffffff800, 0x2a7, 0x10000, 0x100, 0x8, 0x8, 0x93}, 0xb) 20:48:01 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x200301) write$FUSE_STATFS(r0, &(0x7f0000000340)={0x60, 0x0, 0x5, {{0x1, 0x3, 0x800, 0xdd6e, 0x4, 0x100, 0x7}}}, 0x60) execveat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000080)="2499656d30706f7369785f61636c5f6163636573732e657468306d696d655f747970652f5c294025757365726d696d655f747970652d2f00", &(0x7f00000000c0)='/\x00', &(0x7f0000000100)='}wlan1,vmnet1wlan0\x00', &(0x7f0000000140)='}vboxnet0\x00', &(0x7f0000000180)='/\x00', &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='-\x00', &(0x7f0000000240)='+\x00'], &(0x7f0000000300)=[&(0x7f00000002c0)='system\x00'], 0x100) socket$nl_generic(0x10, 0x3, 0x10) 20:48:01 executing program 1: r0 = socket$inet6(0xa, 0x8000e, 0x2000000000) ioctl(r0, 0x8912, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) unshare(0x40000000) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)={0x1, 0x6, 0x4, 0x3c, 0x0, 0x1, 0x200}, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000004c0)=0xa, 0x38) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x3, 0x10000001}, 0xc) statfs(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000240)=""/112) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0x0, 0x0, @remote}}, 0xb) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) close(r4) 20:48:01 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x0, &(0x7f0000000000)) 20:48:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x150, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0x70, 0xc0}}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x1c8) 20:48:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) [ 392.288574] kernel msg: ebtables bug: please report to author: Valid hook without chain [ 392.316600] IPVS: ftp: loaded support on port[0] = 21 20:48:01 executing program 0: r0 = open(&(0x7f0000000340)='./file0\x00', 0x1, 0x22) getpeername(r0, &(0x7f0000000380), &(0x7f0000000400)=0x80) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000000)='H', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x4000, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000200)) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) shutdown(r1, 0x20000000000001) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="00fb5a021f59f760bfb5a19fa2be8a7a3e6e111e76efbb9fbde274ec45c649f6caa3fc9b82373e1e373e88d90bf96773826eff12ccc21ca51eaca67c20d7309a3c4bbc73c506dc1149056c759a9cd98c73c9eb868e49a148a997"], 0x5a, 0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040), &(0x7f0000000080)=0x8) r4 = semget(0x2, 0x3, 0x4) semctl$SETVAL(r4, 0x3, 0x10, &(0x7f0000000440)=0x3) 20:48:01 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000040045730, 0x0) [ 392.524874] IPVS: ftp: loaded support on port[0] = 21 20:48:01 executing program 5: r0 = epoll_create1(0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x4}) read$FUSE(r1, &(0x7f00000002c0), 0x1000) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 20:48:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0023000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:48:01 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) [ 392.959618] FAULT_INJECTION: forcing a failure. [ 392.959618] name failslab, interval 1, probability 0, space 0, times 1 [ 392.971067] CPU: 0 PID: 10004 Comm: syz-executor2 Not tainted 4.20.0-rc3+ #101 [ 392.978474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.987882] Call Trace: [ 392.990548] dump_stack+0x32d/0x480 [ 392.994323] ? __should_failslab+0x278/0x2a0 [ 392.998819] should_fail+0x11e5/0x13c0 [ 393.002883] __should_failslab+0x278/0x2a0 20:48:02 executing program 1: prctl$PR_SET_ENDIAN(0x14, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x0, r0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) clone(0x8000802102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="5500000000000002000000"], &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)="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", 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000400)) fchmodat(r2, &(0x7f00000000c0)='./file0\x00', 0x10) [ 393.007210] should_failslab+0x29/0x70 [ 393.011215] __kmalloc_node+0x257/0x1520 [ 393.015350] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 393.020787] ? __get_vm_area_node+0x27b/0x7f0 [ 393.025443] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 393.030911] ? process_measurement+0x252e/0x2830 [ 393.035748] __get_vm_area_node+0x27b/0x7f0 [ 393.040194] __vmalloc_node_range+0x2a2/0x10f0 [ 393.044876] ? do_replace+0x344/0x730 [ 393.048799] ? INIT_BOOL+0x17/0x30 [ 393.052479] vmalloc+0xd8/0xf0 [ 393.055736] ? do_replace+0x344/0x730 [ 393.059600] do_replace+0x344/0x730 [ 393.063363] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 393.068862] do_ebt_set_ctl+0x23b/0x3f0 [ 393.072968] ? INIT_S64+0xd/0x30 [ 393.076442] ? mutex_unlock+0x21c/0x300 [ 393.080529] ? ebt_cleanup_entry+0xb50/0xb50 [ 393.085036] ? ebt_cleanup_entry+0xb50/0xb50 [ 393.089560] nf_setsockopt+0x47c/0x4e0 [ 393.093574] ip_setsockopt+0x24b/0x2b0 [ 393.097605] ? ipv4_pktinfo_prepare+0x6a0/0x6a0 [ 393.102379] tcp_setsockopt+0x1c0/0x1f0 [ 393.106441] ? tcp_disconnect+0x1a60/0x1a60 [ 393.110891] sock_common_setsockopt+0x13b/0x170 [ 393.115645] ? sock_common_recvmsg+0x290/0x290 [ 393.120321] __sys_setsockopt+0x493/0x540 [ 393.124552] __se_sys_setsockopt+0xdd/0x100 [ 393.128956] __x64_sys_setsockopt+0x62/0x80 [ 393.133341] do_syscall_64+0xcf/0x110 [ 393.137217] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 393.142502] RIP: 0033:0x457569 [ 393.145757] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 393.164711] RSP: 002b:00007fa8d70d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 393.172486] RAX: ffffffffffffffda RBX: 00007fa8d70d4c90 RCX: 0000000000457569 [ 393.179815] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 393.187146] RBP: 000000000072bf00 R08: 0000000000000200 R09: 0000000000000000 [ 393.194474] R10: 0000000020000300 R11: 0000000000000246 R12: 00007fa8d70d56d4 [ 393.201796] R13: 00000000004c4171 R14: 00000000004d6bb0 R15: 0000000000000004 20:48:02 executing program 5: clone(0x8000000000041fa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/ppp\x00', 0x88081, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000001740)='fou\x00') openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x20000, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x24, r2, 0x70e, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x1}]}, 0x24}}, 0x4040000) r3 = syz_open_procfs(r0, &(0x7f0000000000)='net/fib_trie\x00') setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000080)=0x3f, 0x8) rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace(0x8, r0) ptrace$setsig(0x4203, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x6}) [ 393.209632] syz-executor2: vmalloc: allocation failure: 256 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null) [ 393.219888] syz-executor2 cpuset=syz2 mems_allowed=0 [ 393.225273] CPU: 0 PID: 10004 Comm: syz-executor2 Not tainted 4.20.0-rc3+ #101 [ 393.232697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.242097] Call Trace: [ 393.244770] dump_stack+0x32d/0x480 [ 393.248734] warn_alloc+0x4e9/0x720 [ 393.252564] __vmalloc_node_range+0xd64/0x10f0 [ 393.257321] ? INIT_BOOL+0x17/0x30 [ 393.260998] vmalloc+0xd8/0xf0 [ 393.264272] ? do_replace+0x344/0x730 [ 393.268147] do_replace+0x344/0x730 [ 393.271913] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 393.277397] do_ebt_set_ctl+0x23b/0x3f0 [ 393.281507] ? INIT_S64+0xd/0x30 [ 393.284954] ? mutex_unlock+0x21c/0x300 [ 393.289030] ? ebt_cleanup_entry+0xb50/0xb50 [ 393.293544] ? ebt_cleanup_entry+0xb50/0xb50 [ 393.298057] nf_setsockopt+0x47c/0x4e0 [ 393.302071] ip_setsockopt+0x24b/0x2b0 [ 393.306059] ? ipv4_pktinfo_prepare+0x6a0/0x6a0 20:48:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000d38f2017fdb2ba323398027855a0002f5010000000700000000000000448410"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) [ 393.310794] tcp_setsockopt+0x1c0/0x1f0 [ 393.314844] ? tcp_disconnect+0x1a60/0x1a60 [ 393.319284] sock_common_setsockopt+0x13b/0x170 [ 393.324033] ? sock_common_recvmsg+0x290/0x290 [ 393.328692] __sys_setsockopt+0x493/0x540 [ 393.332990] __se_sys_setsockopt+0xdd/0x100 [ 393.337407] __x64_sys_setsockopt+0x62/0x80 [ 393.341793] do_syscall_64+0xcf/0x110 [ 393.345689] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 393.350940] RIP: 0033:0x457569 [ 393.354201] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 393.373177] RSP: 002b:00007fa8d70d4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 393.381392] RAX: ffffffffffffffda RBX: 00007fa8d70d4c90 RCX: 0000000000457569 [ 393.388723] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 393.396056] RBP: 000000000072bf00 R08: 0000000000000200 R09: 0000000000000000 [ 393.403445] R10: 0000000020000300 R11: 0000000000000246 R12: 00007fa8d70d56d4 20:48:02 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800ae523e16000000000000000000000000000061177800000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48) [ 393.410774] R13: 00000000004c4171 R14: 00000000004d6bb0 R15: 0000000000000004 [ 393.418330] Mem-Info: [ 393.420935] active_anon:91497 inactive_anon:186 isolated_anon:0 [ 393.420935] active_file:7505 inactive_file:35811 isolated_file:0 [ 393.420935] unevictable:0 dirty:55 writeback:0 unstable:0 [ 393.420935] slab_reclaimable:4047 slab_unreclaimable:11718 [ 393.420935] mapped:55013 shmem:244 pagetables:899 bounce:0 [ 393.420935] free:813768 free_pcp:742 free_cma:0 [ 393.454761] Node 0 active_anon:365988kB inactive_anon:744kB active_file:30020kB inactive_file:143244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220052kB dirty:220kB writeback:0kB shmem:976kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 299008kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 393.483506] Node 0 DMA free:15904kB min:144kB low:180kB high:216kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 393.510111] lowmem_reserve[]: 0 2796 7221 7221 [ 393.514933] Node 0 DMA32 free:2866340kB min:26108kB low:32632kB high:39156kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2867824kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1484kB local_pcp:1484kB free_cma:0kB [ 393.543169] lowmem_reserve[]: 0 0 4425 4425 [ 393.547620] Node 0 Normal free:371304kB min:41328kB low:51660kB high:61992kB active_anon:366104kB inactive_anon:744kB active_file:30020kB inactive_file:143244kB unevictable:0kB writepending:220kB present:4718592kB managed:4532172kB mlocked:0kB kernel_stack:14464kB pagetables:3768kB bounce:0kB free_pcp:1560kB local_pcp:984kB free_cma:0kB [ 393.577928] lowmem_reserve[]: 0 0 0 0 [ 393.581938] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15904kB [ 393.595600] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 4*16kB (M) 4*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 2*2048kB (M) 697*4096kB (M) = 2866340kB [ 393.611138] Node 0 Normal: 1567*4kB (UM) 1046*8kB (UME) 659*16kB (UME) 410*32kB (UME) 111*64kB (ME) 6*128kB (ME) 4*256kB (ME) 2*512kB (UE) 3*1024kB (UE) 1*2048kB (U) 76*4096kB (UM) = 364636kB [ 393.628841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 393.637887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 393.646735] 43559 total pagecache pages [ 393.650808] 0 pages in swap cache [ 393.654546] Swap cache stats: add 0, delete 0, find 0/0 [ 393.659959] Free swap = 0kB 20:48:02 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) [ 393.663231] Total swap = 0kB [ 393.666330] 1965979 pages RAM [ 393.669501] 0 pages HighMem/MovableOnly [ 393.673691] 112004 pages reserved [ 393.677189] 0 pages cma reserved [ 393.701149] program syz-executor3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.731222] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 20:48:02 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) close(r0) close(r1) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x17) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x13f) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e21, 0x80000001, @dev={0xfe, 0x80, [], 0xa}, 0x2}, {0xa, 0x4e20, 0x6, @mcast1, 0x2}, 0x911, [0x200, 0x400, 0x8, 0x0, 0x7, 0x90, 0x3, 0x4]}, 0x5c) close(r2) [ 393.879018] FAULT_INJECTION: forcing a failure. [ 393.879018] name failslab, interval 1, probability 0, space 0, times 0 [ 393.890848] CPU: 1 PID: 10024 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #101 [ 393.898969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.908382] Call Trace: [ 393.911081] dump_stack+0x32d/0x480 [ 393.914790] ? __should_failslab+0x278/0x2a0 [ 393.919322] should_fail+0x11e5/0x13c0 [ 393.923419] __should_failslab+0x278/0x2a0 [ 393.927804] should_failslab+0x29/0x70 [ 393.931823] kmem_cache_alloc+0x146/0xe20 [ 393.936045] ? __anon_vma_prepare+0x106/0xdd0 [ 393.940704] ? __msan_poison_alloca+0x1e0/0x270 [ 393.945469] __anon_vma_prepare+0x106/0xdd0 [ 393.949863] ? __msan_poison_alloca+0x1e0/0x270 [ 393.954619] ? do_huge_pmd_anonymous_page+0x147/0x32d0 [ 393.959990] do_huge_pmd_anonymous_page+0x4bd/0x32d0 [ 393.965176] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 393.970699] handle_mm_fault+0x5bf6/0xa8c0 [ 393.975129] __do_page_fault+0xdeb/0x1d90 [ 393.979422] ? __msan_poison_alloca+0x1e0/0x270 [ 393.984231] do_page_fault+0x98/0xd0 [ 393.988035] page_fault+0x1e/0x30 [ 393.991585] RIP: 0010:__get_user_4+0x21/0x30 [ 393.996601] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 00 fd 02 00 48 3b 82 58 1a 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 [ 394.015587] RSP: 0018:ffff8881143cfcb0 EFLAGS: 00010206 [ 394.021071] RAX: 0000000020000003 RBX: 0000000020000000 RCX: ffff88812523e4c8 [ 394.028421] RDX: ffffffffffffffff RSI: 0000000000000004 RDI: 0000000020000000 [ 394.035797] RBP: ffff8881143cfd58 R08: ffff888000000000 R09: 0000000000000002 [ 394.043127] R10: 0000000000000000 R11: ffffffff88852200 R12: 0000000000000000 [ 394.050463] R13: ffff8881246a4588 R14: ffff8881143cfcb8 R15: 0000000040045730 [ 394.057827] ? snd_rawmidi_poll+0x790/0x790 [ 394.062234] ? snd_rawmidi_ioctl+0x65c/0x13e0 [ 394.066848] ? do_vfs_ioctl+0x184/0x2ca0 [ 394.071021] ? snd_rawmidi_poll+0x790/0x790 [ 394.075422] do_vfs_ioctl+0xefc/0x2ca0 [ 394.079526] ? security_file_ioctl+0x92/0x200 [ 394.084174] __se_sys_ioctl+0x1da/0x270 [ 394.088227] __x64_sys_ioctl+0x4a/0x70 [ 394.092678] do_syscall_64+0xcf/0x110 [ 394.096580] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 394.101843] RIP: 0033:0x457569 [ 394.105124] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:48:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x4) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) [ 394.124100] RSP: 002b:00007f69749dbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.131889] RAX: ffffffffffffffda RBX: 00007f69749dbc90 RCX: 0000000000457569 [ 394.139220] RDX: 0000000020000000 RSI: 2000000040045730 RDI: 0000000000000003 [ 394.146550] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 394.153900] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f69749dc6d4 [ 394.161233] R13: 00000000004c21dd R14: 00000000004d3910 R15: 0000000000000004 [ 394.193133] ptrace attach of "/root/syz-executor5"[10009] was attempted by "/root/syz-executor5"[10037] 20:48:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") lseek(r0, 0x0, 0x0) r1 = gettid() r2 = fcntl$getown(r0, 0x9) kcmp(r1, r2, 0x3, r0, r0) 20:48:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f00000000c0)) getgroups(0x1, &(0x7f0000000000)=[0xffffffffffffffff]) setgroups(0x1, &(0x7f0000000100)=[r3]) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000180)=0x2) 20:48:03 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x80) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f00000000c0)={0x3, "d1a273e6711c3ce8486f1603b6ad23e88ff4a8cfe8935a57882160e85bd2a7a6", 0x2, 0x1}) 20:48:03 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=0x0, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="663b2cec99858c158357970ee0b3af436b5ffc8f8c1ce4a799cc465c52d32adf971e6ccc382d0cbd4146ac815972dc5e2662097611abbe1bed396bb6e7cb19b7338bd785105780ae34b3e80a35b1a936336bbf11505ba76047d31ef14d025e79a5c6f599ab3b8f847eb1c0b7d89c38a3faeebc68de2c53514c6ee3605e375d60af7df7b0006ca58c55f007decd416c1418b488deda7293342d1cb503294b326344515fd36b8a2748e92c1460bb9362adcfa4891e2ff28b91c9d869fcc5a4ce3a6d2c6559448bad7037837b560e468f8811f2", @ANYRESHEX=r0], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESHEX=r0], @ANYRESOCT=r0], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESHEX=r0, @ANYBLOB="72e81a2c2dfcd016af1980aeb86eaeaa3d2846bc9ac9b031f5a9db79217a1a633ae5c74016ce9e78a2ec31b27291ca77514f0c36b3930c1ce696c2e0b1f1bd3f3eec03dffb5385f5078fb7994752548f4197163cf44d534d20e55ebdb7bc2ccd74355e14c93e1560fa1d40c728079a1d0fde1dc7faee3fa01baf9077e173c7cea330791e26cc9abe5c70850dd301c7c6fd05273129eef52acb0e8fe77599760ea48ef36d4de93e162233242bdb1b58d6f7a3e9bb3e8135db1cc689dbc837512d0255d51788e7d9841f6af839f3ac8e1f", @ANYRESOCT=r0, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB], @ANYRES64], 0xffffffffffffff08) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x410) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x14) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000000c0)) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) 20:48:03 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000280)=0x81, 0x4) setsockopt$inet6_int(r0, 0x29, 0x7f, &(0x7f0000000000)=0x80000001, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f00000004c0)=0xfffffffffffffd7b) sendmsg(r0, &(0x7f0000001880)={&(0x7f0000000080)=@rc={0x1f, {0x5, 0xf3, 0x2, 0xa00000000000000, 0x2, 0xd88f}, 0xfb}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000100)="543586f68ee24a26989ebb41703b616fbc92b027cd723112f696e507c25c39a7bd2c0c00139592e9b369752414a7135c089cf4670b7638149e078501c9d3139b329358157d305d725355e507b9fea32f", 0x50}, {&(0x7f0000000180)="e696f5afd8c6a35b05ce6137db86245bf88cae332b74ae5742382ec6c4aafdfedea74cc2ed75417a6f7424f723fe673434da8cfb355085b096d48c20a5bf1fcab378e21509d1aafa0d6e5a87113b549b12c40f9b15752a68e0dd07db4b401e44e7b98dbab16f66558efbb6fff97f31ab277c4ff958fc9e5b4319b3d269510a59fa4b0017ef94ac62a16fe9dc03429a8748dfde0dbdaded2695ed6b24e2729b5c63368ef2f596714a93cabd0822056c71322c585191e74038cd10467180b323a6a7971e18e7e956b7b46be421d7ed19b29a2014ac", 0xd4}, {&(0x7f00000002c0)="c141f9383c7784d2184688795cc0f76b7188f017075499bd23b5eac18a992f87e80c3e99630d1f8f88af5695869d2e804ecd", 0x32}, {&(0x7f0000000300)="e4e2d93b95e85f1b2f019f20eed768753bc292", 0x13}, {&(0x7f0000000340)="7383e9d9c5c1254ce9dbc568b435fd90772dddd2fb657c1ec6620d3d7fdcf008e5eddc3529aae5b40176475e967c326e5219fa6d6919e5382f411dae90d89554a0acf382f0290a6459ca6d8e5ec28f9520b7cae82725be8accf040c1a0aa59114c02c5df069d39e727a0af14d750539bdb90d52951d8", 0x76}, {&(0x7f00000003c0)="7d9658bbd40473f95bd944672a40b134998087215db128c4bfff52c4ac4af0239a7c43b2aa521b66dee7a83b9e4ce297228f94e825b0f4e2b629c752888258319de2523c921d256fc287277b0387472fc45bb410f90cfc32525a4484591d470db0fe2a2f10ef93b2bd4442b3f5e5d427", 0x70}], 0x6, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x13a0, 0x80}, 0x8000) 20:48:03 executing program 4 (fault-call:2 fault-nth:1): r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) [ 394.843660] FAULT_INJECTION: forcing a failure. [ 394.843660] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 394.855833] CPU: 0 PID: 10066 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #101 [ 394.863254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.872668] Call Trace: [ 394.875344] dump_stack+0x32d/0x480 [ 394.879232] ? __alloc_pages_nodemask+0x73f/0x63e0 [ 394.884310] should_fail+0x11e5/0x13c0 [ 394.888309] __alloc_pages_nodemask+0x73f/0x63e0 [ 394.893248] ? get_mem_cgroup_from_mm+0x4d/0x480 [ 394.898112] ? __msan_poison_alloca+0x1e0/0x270 [ 394.902864] ? memcg_kmem_put_cache+0x73/0x460 [ 394.907562] ? kmem_cache_alloc+0xc7a/0xe20 [ 394.912028] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 394.917519] ? __rb_insert_augmented+0x143/0x12f0 [ 394.922499] alloc_pages_current+0x55d/0x7d0 [ 394.927079] pte_alloc_one+0x5a/0x1a0 [ 394.930966] do_huge_pmd_anonymous_page+0x1c2a/0x32d0 [ 394.936259] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 394.941785] handle_mm_fault+0x5bf6/0xa8c0 [ 394.946181] __do_page_fault+0xdeb/0x1d90 [ 394.950434] ? __msan_poison_alloca+0x1e0/0x270 [ 394.955241] do_page_fault+0x98/0xd0 [ 394.959044] page_fault+0x1e/0x30 [ 394.962582] RIP: 0010:__get_user_4+0x21/0x30 [ 394.967068] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 00 fd 02 00 48 3b 82 58 1a 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 [ 394.986050] RSP: 0018:ffff8881143cfcb0 EFLAGS: 00010206 [ 394.991493] RAX: 0000000020000003 RBX: 0000000020000000 RCX: ffff88817a0edfc8 [ 394.998836] RDX: ffffffffffffffff RSI: 0000000000000004 RDI: 0000000020000000 [ 395.006193] RBP: ffff8881143cfd58 R08: ffff888000000000 R09: 0000000000000002 [ 395.013530] R10: 0000000000000000 R11: ffffffff88852200 R12: 0000000000000000 [ 395.020870] R13: ffff88812540a788 R14: ffff8881143cfcb8 R15: 0000000040045730 [ 395.028281] ? snd_rawmidi_poll+0x790/0x790 [ 395.032693] ? snd_rawmidi_ioctl+0x65c/0x13e0 [ 395.037309] ? do_vfs_ioctl+0x184/0x2ca0 [ 395.041481] ? snd_rawmidi_poll+0x790/0x790 [ 395.045873] do_vfs_ioctl+0xefc/0x2ca0 [ 395.049933] ? security_file_ioctl+0x92/0x200 [ 395.054504] __se_sys_ioctl+0x1da/0x270 [ 395.058576] __x64_sys_ioctl+0x4a/0x70 [ 395.062572] do_syscall_64+0xcf/0x110 [ 395.066467] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 395.071737] RIP: 0033:0x457569 [ 395.075002] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:48:04 executing program 5: r0 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg(r0, &(0x7f0000001c00)={&(0x7f0000001500)=@in6={0xa, 0x8847, 0x8, @local}, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001840)}, 0x0) 20:48:04 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x27) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x100, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f0000000140)=0xffffffffffffff38) sendto$inet6(r1, 0x0, 0x0, 0x8001, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0xffdc) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) [ 395.094008] RSP: 002b:00007f69749dbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.101802] RAX: ffffffffffffffda RBX: 00007f69749dbc90 RCX: 0000000000457569 [ 395.109173] RDX: 0000000020000000 RSI: 2000000040045730 RDI: 0000000000000003 [ 395.116512] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 395.123856] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f69749dc6d4 [ 395.131190] R13: 00000000004c21dd R14: 00000000004d3910 R15: 0000000000000004 20:48:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000100)=0xfffffffffffffc00, 0x4) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000000)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={@remote, 0x78, r2}) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739e7d, 0x120, 0x0, 0x4f) ioctl(r0, 0x820000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") 20:48:04 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0xffffffffffffff55) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f00000000c0)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x301200, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000080)={0x9, 0x8, 0x2, 0x7, 0x11, 0x4}) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 395.456687] kernel msg: ebtables bug: please report to author: bad policy 20:48:04 executing program 2: getrusage(0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) 20:48:04 executing program 5: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000002400)=""/8, 0x8}, {&(0x7f00000000c0)=""/48, 0x30}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000001280)=""/185, 0xb9}, {&(0x7f0000000180)=""/5, 0x5}], 0x5, &(0x7f00000001c0)=""/56, 0x38, 0x4ae35eae}, 0x8}], 0x1, 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="000100080000000000ebffffff0000000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) 20:48:04 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000100)="6d696d655f74797065dd00", 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @multicast1}], 0x10) r2 = socket(0x40000000015, 0x5, 0x0) accept$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10) sendto$inet6(r2, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) 20:48:05 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) mmap(&(0x7f00002ff000/0x2000)=nil, 0x2000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x841, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x2, 0x8001}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r2, 0x200, 0xd8}, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={r2, 0x169770e9}, &(0x7f0000000340)=0x583) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={r3, 0x3f, "cb9a44c6ec1ad50de62a913d64ea8fb5e8baf9759a7aafc1e4922b5f8c887d5a0d5999eac5532b94c16bdccbb55e02a902e9ef6c38608115751d485d6f7ea5"}, &(0x7f00000001c0)=0x47) 20:48:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x400000) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x2, 0x8000) write$P9_RWALK(r1, &(0x7f0000000200)={0x7e, 0x6f, 0x2, {0x9, [{0x8c, 0x0, 0x6}, {0x2, 0x2, 0x6}, {0x14, 0x0, 0x3}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x2}, {0x2, 0x0, 0x1}, {0x42, 0x2, 0x4}, {0x1a, 0x2, 0x8}, {0x80, 0x0, 0x1}]}}, 0x7e) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000ff000000000000000000000000000000000000000000450b0cbb5c3dd542cc4325f45297472733766ba8901484b61e44f281df941c277b2781ef6fcb6e38f7355b81b0da08aa26000071143cfc471335ba1084b89924760752139c9730e86dbc0b93221225eb3a2546e48d2c93a18d34e7d0b28307f934ae30e06c5f38fe07cb1acfc455e31979c791160886056c65bbdd68b55f54d88a2365978351d03c116f781375e19988076f33c729f4e8afabfc52e32361d1011dbaad80a65044b9208fa626"], 0x2a) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x4, 0x6, [0xffffffff, 0x342c, 0x8, 0x6, 0x2, 0x729]}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={r2, 0x5, 0x7, 0xfffffffffffffffe}, &(0x7f0000000340)=0x220) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) [ 396.281908] kernel msg: ebtables bug: please report to author: bad policy 20:48:05 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x42000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x57ced2c4) r2 = socket$netlink(0x10, 0x3, 0x1000000000004) socket$vsock_dgram(0x28, 0x2, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001400192300bb4b80040d8c562806f0ffffff04106a9643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) recvmmsg(r2, &(0x7f0000009300)=[{{&(0x7f0000000040)=@ax25, 0x80, &(0x7f00000000c0), 0x26f, &(0x7f0000001340)=""/72, 0x2b9}}], 0x400000000000002, 0x0, 0x0) 20:48:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f00000000c0)=0x2e4, 0x0) recvfrom$inet(r1, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x2, 0x0) write$P9_RMKNOD(r2, &(0x7f00000001c0)={0x14, 0x13, 0x1, {0x0, 0x0, 0x6}}, 0x14) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10) ioctl$VT_RELDISP(r2, 0x5605) 20:48:05 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) r1 = dup(r0) setsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f00000006c0)=0x100, 0x4) 20:48:05 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, &(0x7f0000000000), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x88}, {}, {}]}, 0x108) 20:48:05 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x465) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000040045720, &(0x7f0000000000)) 20:48:05 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x9) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) [ 396.808754] kernel msg: ebtables bug: please report to author: bad policy [ 396.844602] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain [ 396.871465] kernel msg: ebtables bug: please report to author: bad policy [ 396.936291] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain 20:48:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='clear_refs\x00') write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x1, {{0x40, 0x1, 0x7}, 0x7}}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x84002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000ff7000/0x2000)=nil}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000140)={0xac, 0x65d, 0x8, 0x2, 0x3475}) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz0', "7142b20a1531cece230ef348edc9ace543f09656113fe0c90acde9e7c6e20bcaf093f1fb22cf1fb7a8c011ce575c6ad48fa85f2bcfef5c88512af185c042fa952544acbf382b2a44a41b2f9204078136bbfbf2728f357b90d0c8a9a94d33818a20ca59653f3c2335c5a3f94d2dedea9751466be7eb3fa8e483d792204aeb"}, 0x82) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000080)={0x0, 0x8000}) ioctl$KVM_NMI(r4, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0xfffffffbfffffffc, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="9808e51ee3"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:48:06 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x80000, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x4e24, 0xbc5, @loopback, 0xa64}}, 0x6, 0x1, 0x0, "34cdef7275ad6c2af2833904a1d6bedaa1670558efff7bfeb75ba12d1c4a9a23a58e3bdd8d8c94ab0c611e66cea979f0d171f724088a698d3dcae5d5601ae578c502351b2119f208d9629b3bc42121e2"}, 0xd8) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) getpid() setpriority(0x0, r1, 0x5) r2 = getpgid(0xffffffffffffffff) open_by_handle_at(r0, &(0x7f0000000480)={0x30, 0xfffffffffffffffb, "5253f37899afda590dd6613f67639d0a1c6d45fd9fd5cfb3da6d579a8cb003fb6c35b735279f0769"}, 0x402201) r3 = syz_open_procfs(r2, &(0x7f0000000500)="6e65742f6e65746c69f7c26e0eccdefd6ef524dfbd5fe86b00c5fe93217a42b5025fae69f3a0f1f7acc1ed0700000000000000d14dcad700000000000000") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x12, r3, 0x0) open_by_handle_at(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="930000002b0000009e3f7d1302e50af11cc02879561d572a51ad3865ad5bc4ae1decae345c1057d49c9e02173bda3741414d69d57765ad97e0996534d75cedcb9979099d6b9616cb1960c878acb543322420e401deb7eb14ee5813a70c90699b9ccc1c08e0cd5a7aefa35f7ef022bf97e72792ffd9a8abc14b5db37d904d580d5f65bb408fc75c260d4dcb458b0e8915f50000"], 0x180) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0x2000000e3, &(0x7f0000000000), &(0x7f0000000240)=0xffffffffffffff5f) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000140)={0x0}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x6a727505) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x12c, 0x0, &(0x7f00000002c0)=[@clear_death, @clear_death={0x400c630f, 0x1, 0x1}, @reply_sg={0x40486312, {{0x3, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000080)=[@fda={0x66646185, 0x4, 0x3, 0x17}], &(0x7f00000000c0)=[0x68]}, 0x9}}, @increfs={0x40046304, 0x2}, @acquire={0x40046305, 0x3}, @increfs_done={0x40106308, r5, 0x2}, @reply_sg={0x40486312, {{0x4, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x30, 0x28, &(0x7f0000000180)=[@flat={0x77682a85, 0xa, r6, 0x3}, @fd={0x66642a85, 0x0, r3, 0x0, 0x3}], &(0x7f00000001c0)=[0x38, 0x28, 0x20, 0x38, 0x38]}, 0x6}}, @register_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000200), &(0x7f0000000280)=[0x20, 0x38, 0x18, 0x38, 0x48]}}, @acquire={0x40046305, 0x3}], 0x19, 0x0, &(0x7f0000000400)="cc7f18a927f6f21d86353710f298f8a25e0682c806b37f3e1b"}) ioctl$TCSBRK(r3, 0x5409, 0x9) 20:48:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x3b, 0x0, @tid=r1}, &(0x7f0000000100)) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 20:48:06 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000500)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'vcan0\x00', 'ip_vti0\x00', 'lo\x00', 'syz_tun\x00', @link_local, [], @empty, [], 0x70, 0xa8, 0xf8}, [@common=@mark={'mark\x00', 0x10}]}, @common=@log={'log\x00', 0x28, {{0x0, "3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba626"}}}}]}, {0x0, '\x00', 0x1}]}, 0x200) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x189400) connect$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 20:48:06 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, r0, 0x0) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) [ 397.493023] kernel msg: ebtables bug: please report to author: bad policy [ 397.542917] kernel msg: ebtables bug: please report to author: bad policy 20:48:06 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x2aff, 0x482000) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000140)=0x3) unshare(0x8000400) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x5, 0x100, 0x204, 0x9, 0x8, 0x2, 0x3ff8, 0x6552, 0x0}, &(0x7f00000001c0)=0x20) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x100000000, @dev={0xfe, 0x80, [], 0x1b}, 0xff}}}, 0x84) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af13, &(0x7f0000000500)={0x0, 0x31}) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x801, 0x0) r5 = getpgrp(0x0) sched_rr_get_interval(r5, &(0x7f00000002c0)) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000080)={0xd, 0xfe3, {0x57, 0x0, 0x1, {0x5d9d, 0x2b29}, {0x4, 0x1}, @const={0xff, {0x4, 0x0, 0x2, 0x9}}}, {0x57, 0xa2, 0x80000000, {0x100000001, 0x7}, {0xfffffffffffff368, 0x80000001}, @period={0x0, 0xffff, 0x3, 0x200, 0x7, {0x8398, 0x100, 0x9b89, 0x6}, 0x6, &(0x7f0000000040)=[0xf7, 0x6, 0x1ff, 0x9, 0x1000, 0x100000001]}}}) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r3, &(0x7f0000000400)={r0, r3, 0xe98b}) syz_open_dev$amidi(&(0x7f0000000300)='/dev/amidi#\x00', 0x7, 0x0) 20:48:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000080)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000180)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm-control\x00', 0x185000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) write$P9_RSTATu(r1, &(0x7f00000004c0)={0x79, 0x7d, 0x1, {{0x0, 0x61, 0x12, 0x95e0, {0x10, 0x3, 0x8}, 0x0, 0x4, 0xffffffffffffffa8, 0x400, 0x4, "47504cda", 0x18, "25282c76626f786e657430656d3075736572286264657619", 0x9, '/dev/sg#\x00', 0x9, '/dev/sg#\x00'}, 0x3, '7\'-', r2, r3, r5}}, 0x79) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000580)=0x0) sched_getparam(r6, &(0x7f00000005c0)) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000440)=@generic={0x3, 0x1000, 0x64}) 20:48:07 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='8:2\t'], 0x4) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000100)='\x00', 0x1, 0x3) 20:48:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) prctl$PR_GET_SECCOMP(0x15) 20:48:07 executing program 4: mmap(&(0x7f0000a78000/0x1000)=nil, 0x1000, 0x2000000, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2000000040045730, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20080, 0x0) fcntl$setsig(r0, 0xa, 0x29) 20:48:07 executing program 2: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000940)='/dev/rfkill\x00', 0x40, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000980)="dd87a559de1d9e311cb5d697a66f18f59c80c77c98ce1f2f2a8bcf2a28e5f442b385c7c5d8d2280955af760aae54e40875883774704c1194f3a7", 0x3a) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x440000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xde, 0xf7, &(0x7f0000000140)="bcfdd0fdd67f5e7f52d0bb3f50dff3d80aacd3bd13c0fc9bb64bbf519ac2aaadb150e8d60600687827278a2a95136f051a882e82beebb00d84c82e9e8d8827fdd9b254105479a10604a93b09d7b5ec021ddca3c64a86454b4645b172eb348e9548823f7e7b3a2d10a5fce6bcb01d320be14c9964961fe0103105c00590980f56eb6b11f2d6e348e387cdc06715d18f03475c25800a56c6a5c9d133fd4436b70e0a2ae6d2142e42decffa6e3b7ecc7d4c77a240f9b9e35d902b059a9376134a192079e1147fba4d2cdc7f1e8252289beb57d3a56ba4c22fd75736400ed051", &(0x7f0000000380)=""/247, 0xfffffffffffffe00}, 0x28) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = add_key(&(0x7f0000000480)='rxrpc_s\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000800)="bdbafbed609ceee70051bd25caa2a1a1e2f830007d2f10be3d34aea4929217a401a38354f2c5478822c653b49dcbb60db94304480f31a2e3a5d7979da2c6098abaebddf7b91337c4923a29fbddac82f8175c65ebd28093c38dada571dff1bb11de8e3d8c8c4a052df2c9bad6d4ad1ba18e3198758d45f4a5f14bd7c572f964634978319ddd4d92de46cd6235fa31f1767a30e683ddfd2d905b83ce745b4949aab9e1a846f7fc64e934f8244b01984469c77f3a0beb45c45991ef26a88a2162132e4c86d27de6", 0xc6, 0xfffffffffffffffc) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000a80)) r5 = request_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000009c0)={'syz', 0x0}, &(0x7f0000000100)='\x00', r4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x80000005, 0x1, 0x6, 0x5, 0x0}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000006c0)=ANY=[@ANYRES32=r6, @ANYBLOB="05001700b05ad1f6a55dcc4a6d119eb4903ed521c24149b824613411bfaac4bb86ca2203b02d0f022b3d52a06c3df49ca0386ad00876529afd4e3719257502002bf3f3"], 0x1f) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) keyctl$assume_authority(0x10, r5) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aadf1b901b8c4097d6e7000000000000000000000000000000000000000000000001000000110000000000000000007663616e30000000000000000000000069705f767469300000000000000000006c6f000000000000000000000000000073797a5f74756e0000000000000000001780c2000000000000000000000000000000000000000000000070000000a8000000f80000006d61726b000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000006c6f6700000000000000000000000000000000000000000000000000000000002800000000fdffffff3643398478e3faccb16212322238e5f17050f5379caf7076f10f0e3ba62600000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000100"]}, 0x200) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000740)={{0x7, 0x6, 0x4, 0x8000, 0x7f, 0x8}, 0xffff, 0x4, 0x2, 0x0, 0x1, "a0f2ef0e9ca3af6069df095b2638c2374e281cc2339c61ec14a27e60130f0c2b34628f654d29b6a3ab6385509e1ad7ab6aec18891c9aa2baed68f39cbda69853031e7d9fe356f54f926e151357a69b2632f498d3049c6f83c1f50beca33b4ee9540358a3549b9e9622b97d440fcfe10c492c13618bd93df182eba478573d6efa"}) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000900)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a00)={0xffffffffffffffff, r1, 0x0, 0xa, &(0x7f00000000c0)='blacklist\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r7, 0x8, &(0x7f0000000a40)=0x3f) 20:48:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0) dup3(r0, r1, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x2d}}, &(0x7f0000000080)="47504c049c3514bf772da07ae82e76590a36f6493ec1ab91b397e42abf1ea6cd8cd77427fc9a9e2b7165f52b4107bf0850d899dc52d013175ddb1b2f46203c2a05b722e33e556fb2e3f39a3cde1fca53640337ec956146bdbfcb115070195631de5d21a5ea9e638c2bdb78a501ca4b6ea313d82568f9382c2c3f6faba6b4ee54793b4ed26dae3e52225029bb2ac0007f77754c3f23ceda9809b9a9684a940abcaa8cfcc7133ec422e9c83888318d41e9a493f0195fe2599651b89504f5dba14625ce2366f33d95dba92f867279cabf4aceddc85a8af7a0fa68d767ce5136b9d0d1966c499cb6bf34c2988666970000000000000000000000"}, 0x48) 20:48:07 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) set_thread_area(&(0x7f00000000c0)={0x9, 0x0, 0xffffffffffffffff, 0x3f, 0x7, 0xde, 0x7, 0x9, 0x3, 0x1}) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0], 0xfffffd4f) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000000006800ff7e8027855a0000f50100000000000000000000f0448410f0ffffff0000000000000000"], 0x2a) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)) 20:48:07 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000042045730, &(0x7f0000000040)) [ 398.524040] kernel msg: ebtables bug: please report to author: entries_size too small 20:48:07 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x100) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000080)={0x80000001, 0x9, 0x7ff}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000001280)=0x3) ioctl$int_in(r1, 0x800000c0045002, &(0x7f00000000c0)=0x10002) read$FUSE(r1, &(0x7f0000002180), 0x184) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000000)=r1) read$FUSE(r1, &(0x7f0000000180), 0x1000) 20:48:07 executing program 0: r0 = socket(0x10, 0x80002, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22, 0x8e, @mcast2, 0x8bf}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_getaddr={0x18, 0x16, 0x1}, 0x18}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000004c0)={0x7, 0x10001, 0x400, 0x6a714e33, 0x1}, 0x14) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd4, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbce}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9ad}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x58}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000440), &(0x7f0000000480)=0x4) [ 398.601519] sg_write: data in/out 808464396/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 398.601519] program syz-executor3 not setting count and/or reply_len properly [ 398.693434] kernel msg: ebtables bug: please report to author: entries_size too small [ 398.726343] sg_write: data in/out 808464396/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 398.726343] program syz-executor3 not setting count and/or reply_len properly 20:48:08 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x34, 0x801) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_out(r0, 0x2000000040045730, &(0x7f0000000000)) sendfile(r0, r0, 0x0, 0xa2) 20:48:08 executing program 5: r0 = socket(0x11, 0x40000000000003, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@nfc={0x27, 0x2}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000002500000000000000119777dd7911b3f1f205cff03f8d236fdc2b677f"], 0x28}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @dev}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000240)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@broadcast, @in6=@mcast2, 0x4e21, 0x0, 0x4e23, 0x0, 0x2, 0x80, 0x0, 0x16, r1, r2}, {0x1, 0x8001, 0x9698, 0xffffffffffff22bf, 0x7ff, 0xffffffffffff8000, 0xe000000000000000}, {0x10001, 0xf95, 0x1}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x3, 0x3}, {{@in=@empty, 0x4d6}, 0xa, @in6=@local, 0x3504, 0x4, 0x3, 0x2400000000000, 0x3, 0x100000001}}, 0xe8) [ 399.107043] ================================================================== [ 399.114475] BUG: KMSAN: uninit-value in linear_transfer+0x92d/0xca0 [ 399.120911] CPU: 0 PID: 10198 Comm: syz-executor1 Not tainted 4.20.0-rc3+ #101 [ 399.128288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.137698] Call Trace: [ 399.140319] dump_stack+0x32d/0x480 [ 399.143992] ? linear_transfer+0x92d/0xca0 [ 399.148274] kmsan_report+0x12c/0x290 [ 399.152113] __msan_warning+0x76/0xc0 [ 399.155953] linear_transfer+0x92d/0xca0 [ 399.160109] ? snd_pcm_plugin_build_linear+0xc40/0xc40 [ 399.165415] snd_pcm_plug_read_transfer+0x3bf/0x590 [ 399.170483] snd_pcm_oss_read+0xeb2/0x1ca0 [ 399.174782] ? snd_pcm_oss_unregister_minor+0x4b0/0x4b0 [ 399.180203] __vfs_read+0x1e2/0xb00 [ 399.183917] ? rw_verify_area+0x35e/0x580 [ 399.188143] vfs_read+0x380/0x6b0 [ 399.191659] __se_sys_read+0x17a/0x370 [ 399.195696] __x64_sys_read+0x4a/0x70 [ 399.199525] do_syscall_64+0xcf/0x110 [ 399.203363] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.208585] RIP: 0033:0x457569 [ 399.211820] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 399.230746] RSP: 002b:00007f5b5a1bbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 399.238486] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 399.245792] RDX: 0000000000000184 RSI: 0000000020002180 RDI: 0000000000000004 [ 399.253087] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 399.260391] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5b5a1bc6d4 [ 399.267698] R13: 00000000004c38f5 R14: 00000000004d5dd0 R15: 00000000ffffffff [ 399.275007] [ 399.276655] Uninit was stored to memory at: [ 399.281019] kmsan_internal_chain_origin+0x13d/0x240 [ 399.286158] kmsan_memcpy_memmove_metadata+0x1a9/0xf70 [ 399.291501] kmsan_memcpy_metadata+0xb/0x10 [ 399.295852] __msan_memcpy+0x61/0x70 [ 399.299604] linear_transfer+0x74c/0xca0 [ 399.303701] snd_pcm_plug_read_transfer+0x3bf/0x590 [ 399.308737] snd_pcm_oss_read+0xeb2/0x1ca0 [ 399.313002] __vfs_read+0x1e2/0xb00 [ 399.316662] vfs_read+0x380/0x6b0 [ 399.320142] __se_sys_read+0x17a/0x370 [ 399.324060] __x64_sys_read+0x4a/0x70 [ 399.327904] do_syscall_64+0xcf/0x110 [ 399.331739] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.336937] [ 399.338575] Uninit was created at: [ 399.342150] kmsan_save_stack_with_flags+0x51/0x100 [ 399.347288] kmsan_internal_alloc_meta_for_pages+0x10e/0x640 [ 399.353120] kmsan_alloc_page+0x77/0xc0 [ 399.357126] __alloc_pages_nodemask+0x175b/0x63e0 [ 399.362042] alloc_pages_current+0x55d/0x7d0 [ 399.366481] __vmalloc_node_range+0x88b/0x10f0 [ 399.371090] vmalloc+0xd8/0xf0 [ 399.374307] snd_pcm_plugin_alloc+0x255/0xc80 [ 399.379063] snd_pcm_plug_alloc+0x261/0x5f0 [ 399.383412] snd_pcm_oss_change_params_locked+0x5e40/0x6e30 [ 399.389151] snd_pcm_oss_get_active_substream+0x4f7/0x5a0 [ 399.394709] snd_pcm_oss_ioctl+0x4abf/0x8800 [ 399.399138] do_vfs_ioctl+0xefc/0x2ca0 [ 399.403047] __se_sys_ioctl+0x1da/0x270 20:48:08 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x2201, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000280)='(\x00') setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x25, 0x1, 0x188, [0x20000500, 0x0, 0x20000530, 0x0, 0x0, 0x20000658], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]}, 0x249) 20:48:08 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x2e) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32=r0], @ANYRES32, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYBLOB="85146dac64f700f216681b14f79f5446665ab877f92c07df3360743002cd6c4c8237ccabbd6fdc19d4f15f570e0e7ca73b38064933d1641d3a8f1f45c1854f218e551bf2fd6d7072e576613cf71cce01d86afe13f6ad1e80760f4645d09503deb803b2ab20148ff16661d4f0ccc0568b3c5b36f2dfca9b7ab48112eae1c5db0369b6509f5d01cf9648b07ca70433a4a368148eacff80b4f6c092fee409b6afb7393fc615eb49e39fac5a2d216f77931833371f3c777f59035cf472307435c0498326bd3d400d971e4f6ea89ff23f01ee23bb6c5dc818d01f528b9c81ff8b474fa8da4188da71", @ANYPTR, @ANYRES32=r0]]], 0xfffffffffffffe91) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x5, 0x4000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x3ff}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000340)={r2, 0x2b, "f847c228155a05aaf869644a30f879fff84c4da3911c28dae754cc63ac92d4b2514f82effad4cc47728f1f"}, &(0x7f0000000380)=0x33) socket$inet_sctp(0x2, 0x1, 0x84) 20:48:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='eql\x00', 0x401}) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) dup3(r1, r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000fb6ffc)=0x1, 0x4) [ 399.407048] __x64_sys_ioctl+0x4a/0x70 [ 399.410965] do_syscall_64+0xcf/0x110 [ 399.414794] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.419991] ================================================================== [ 399.427364] Disabling lock debugging due to kernel taint [ 399.432848] Kernel panic - not syncing: panic_on_warn set ... [ 399.438834] CPU: 0 PID: 10198 Comm: syz-executor1 Tainted: G B 4.20.0-rc3+ #101 [ 399.447643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.457015] Call Trace: [ 399.459669] dump_stack+0x32d/0x480 [ 399.463344] panic+0x624/0xc08 [ 399.466613] kmsan_report+0x28a/0x290 [ 399.470469] __msan_warning+0x76/0xc0 [ 399.474357] linear_transfer+0x92d/0xca0 [ 399.478500] ? snd_pcm_plugin_build_linear+0xc40/0xc40 [ 399.483806] snd_pcm_plug_read_transfer+0x3bf/0x590 [ 399.488879] snd_pcm_oss_read+0xeb2/0x1ca0 [ 399.493288] ? snd_pcm_oss_unregister_minor+0x4b0/0x4b0 [ 399.498703] __vfs_read+0x1e2/0xb00 [ 399.502374] ? rw_verify_area+0x35e/0x580 [ 399.506563] vfs_read+0x380/0x6b0 [ 399.510073] __se_sys_read+0x17a/0x370 [ 399.514010] __x64_sys_read+0x4a/0x70 [ 399.517844] do_syscall_64+0xcf/0x110 [ 399.521694] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 399.526927] RIP: 0033:0x457569 [ 399.530149] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 399.549080] RSP: 002b:00007f5b5a1bbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 399.556830] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 399.564125] RDX: 0000000000000184 RSI: 0000000020002180 RDI: 0000000000000004 [ 399.571416] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 399.578710] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5b5a1bc6d4 [ 399.586005] R13: 00000000004c38f5 R14: 00000000004d5dd0 R15: 00000000ffffffff [ 399.594325] Kernel Offset: disabled [ 399.597965] Rebooting in 86400 seconds..