[ 94.385829] audit: type=1800 audit(1550397095.430:25): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 94.405033] audit: type=1800 audit(1550397095.440:26): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 94.424463] audit: type=1800 audit(1550397095.450:27): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 95.680227] sshd (10426) used greatest stack depth: 54176 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.20' (ECDSA) to the list of known hosts. 2019/02/17 09:51:49 fuzzer started 2019/02/17 09:51:54 dialing manager at 10.128.0.26:39065 2019/02/17 09:51:54 syscalls: 1 2019/02/17 09:51:54 code coverage: enabled 2019/02/17 09:51:54 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/02/17 09:51:54 extra coverage: extra coverage is not supported by the kernel 2019/02/17 09:51:54 setuid sandbox: enabled 2019/02/17 09:51:54 namespace sandbox: enabled 2019/02/17 09:51:54 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/17 09:51:54 fault injection: enabled 2019/02/17 09:51:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/17 09:51:54 net packet injection: enabled 2019/02/17 09:51:54 net device setup: enabled 09:55:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000fd0ffc)=0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x11e, 0x0, 0x0, 0x0}, 0x28) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x7e}) syzkaller login: [ 315.204096] IPVS: ftp: loaded support on port[0] = 21 [ 315.371421] chnl_net:caif_netlink_parms(): no params data found [ 315.449769] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.456395] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.464823] device bridge_slave_0 entered promiscuous mode [ 315.474719] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.481229] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.489958] device bridge_slave_1 entered promiscuous mode [ 315.526878] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 315.538450] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 315.572741] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 315.581474] team0: Port device team_slave_0 added [ 315.588673] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 315.597510] team0: Port device team_slave_1 added [ 315.604413] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 315.613681] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 315.777666] device hsr_slave_0 entered promiscuous mode [ 316.042990] device hsr_slave_1 entered promiscuous mode [ 316.163450] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 316.171088] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 316.203537] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.210107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.217494] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.224112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.320732] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 316.327380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.342038] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 316.355574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.368073] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.377305] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.389380] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 316.408639] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 316.415327] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.432679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 316.439897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 316.449090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.459877] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.466475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.482308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 316.489486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 316.498798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.507658] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.514255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.530726] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 316.543852] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 316.556396] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 316.570205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 316.578202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.587717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 316.597259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 316.606854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 316.615953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 316.625528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 316.637879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 316.650916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 316.658568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 316.667127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 316.683890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 316.693806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 316.702446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 316.716211] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 316.722871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 316.754813] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 316.774928] 8021q: adding VLAN 0 to HW filter on device batadv0 09:55:18 executing program 0: gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180), 0x1000) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x10010009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80140, 0x0) fchmodat(r0, 0x0, 0xc0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x507000, 0x0, 0x811, r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x0, 0x0, 0x4, 0x78}, 0x2c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 317.183321] hrtimer: interrupt took 33604 ns 09:55:19 executing program 0: gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180), 0x1000) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x10010009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80140, 0x0) fchmodat(r0, 0x0, 0xc0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x507000, 0x0, 0x811, r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x0, 0x0, 0x4, 0x78}, 0x2c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:55:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x8240}, {r0, 0x8}, {r0, 0x200}, {r0, 0x8051}, {r0}], 0x5, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000000c0)={0x4}, 0x8) 09:55:20 executing program 0: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) write$P9_RREADDIR(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0) close(r1) syz_open_procfs(0x0, 0x0) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000500)='mqueue\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x54) mkdir(0x0, 0x0) [ 319.802659] IPVS: ftp: loaded support on port[0] = 21 09:55:21 executing program 0: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) write$P9_RREADDIR(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0) close(r1) syz_open_procfs(0x0, 0x0) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000500)='mqueue\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x54) mkdir(0x0, 0x0) [ 320.207923] chnl_net:caif_netlink_parms(): no params data found [ 320.327621] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.334286] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.342891] device bridge_slave_0 entered promiscuous mode [ 320.398113] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.404766] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.413377] device bridge_slave_1 entered promiscuous mode [ 320.447490] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 320.459266] bond0: Enslaving bond_slave_1 as an active interface with an up link 09:55:21 executing program 0: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) write$P9_RREADDIR(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0) close(r1) syz_open_procfs(0x0, 0x0) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000500)='mqueue\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x54) mkdir(0x0, 0x0) [ 320.491014] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 320.499941] team0: Port device team_slave_0 added [ 320.507109] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 320.515932] team0: Port device team_slave_1 added [ 320.522408] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 320.531500] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 320.757829] device hsr_slave_0 entered promiscuous mode [ 320.893195] device hsr_slave_1 entered promiscuous mode [ 321.014066] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 321.021735] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 321.083532] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.090110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.097390] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.103999] bridge0: port 1(bridge_slave_0) entered forwarding state 09:55:22 executing program 0: r0 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x20601, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/userio\x00', 0x0, 0x0) memfd_create(&(0x7f00000000c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) write$P9_RREADDIR(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0) close(r1) syz_open_procfs(0x0, 0x0) mount(&(0x7f00000003c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000500)='mqueue\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000140)=0x54) mkdir(0x0, 0x0) [ 321.134592] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.160104] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.310882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.325537] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 321.338977] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 321.347136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.355139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.375546] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 321.381739] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.397689] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 321.405903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.414814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.423176] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.429673] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.447052] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 09:55:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x40000000f) read(r0, 0x0, 0x0) [ 321.461155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 321.470079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.478803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.487647] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.494198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.502037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.520631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 321.540501] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 321.562619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.572718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.582106] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.599729] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 321.612436] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 09:55:22 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x3, @empty, 'bond0\x00\x00\x00\x00\x06\x00\x00\b\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000080)={'bond0\x00', r2}) [ 321.624917] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 321.633240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.641463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.650660] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.659617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 321.668119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.676580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 321.685263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 321.724151] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 321.730275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 321.771122] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 321.792588] 8021q: adding VLAN 0 to HW filter on device batadv0 09:55:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8995, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}) close(r2) close(r1) 09:55:23 executing program 1: socketpair(0x1e, 0xa, 0x40000000, &(0x7f0000000040)={0x0, 0x0}) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140), 0x4) sendmsg$kcm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="b0", 0x1}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x97}], 0x1}, 0xd15ba9f05b9813e9) 09:55:23 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x0, 0x0) unshare(0x8000400) fcntl$setsig(r0, 0xa, 0xf) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={r0}) 09:55:23 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9, 0x3}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r1, 0x100}, &(0x7f00000001c0)=0x8) r2 = socket$inet(0x2, 0x3, 0x2) recvfrom$inet(r2, &(0x7f0000000200)=""/112, 0x70, 0x10000, &(0x7f0000000280)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_int(r2, 0x0, 0xd1, &(0x7f0000000000)=0xffc99a3b, 0x4) 09:55:23 executing program 0: r0 = socket$kcm(0xa, 0x400000005, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000c40), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="fa", 0x1}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x81) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x9, 0xe1d, 0x0, 0xc0b9}, {0x2, 0x4, 0x1, 0x80}, {0x8, 0x10001, 0x3ff, 0x8}, {0x1000, 0x2, 0xbc44, 0x7}]}, 0x10) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)=0xfffffffffffff001) 09:55:23 executing program 0: r0 = socket$kcm(0xa, 0x400000005, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000c40), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="fa", 0x1}], 0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x81) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x9, 0xe1d, 0x0, 0xc0b9}, {0x2, 0x4, 0x1, 0x80}, {0x8, 0x10001, 0x3ff, 0x8}, {0x1000, 0x2, 0xbc44, 0x7}]}, 0x10) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)=0xfffffffffffff001) 09:55:23 executing program 0: r0 = socket$inet(0x2, 0x3, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f00006ed000), &(0x7f0000000080)=0x4) 09:55:23 executing program 0: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5961, 0x80) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) 09:55:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000040)={0x5, 0x3ff, 0x100, 0x0, 0x0, [], [], [], 0xfffffffffffffffc, 0x6}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000200)={r3, 0x1, 0x6, @local}, 0x10) [ 323.105228] binder: 10618:10619 tried to acquire reference to desc 0, got 1 instead 09:55:24 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x2800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @multicast1}], 0x10) read(r0, &(0x7f0000000080)=""/83, 0x53) 09:55:24 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_dccp_buf(r1, 0x21, 0xd, &(0x7f0000000240)=""/129, &(0x7f0000000040)=0x81) socket$inet6(0xa, 0x5, 0x9) getsockopt$inet6_buf(r1, 0x29, 0x2c, &(0x7f0000000180)=""/79, &(0x7f0000000200)=0x4f) sendmsg$inet_sctp(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000080)='x', 0x1}], 0x1, &(0x7f00000016c0)=[@prinfo={0x18}, @dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x30, 0x4000}, 0x4000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f00000000c0)={0x0, 0x7}) 09:55:24 executing program 0: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/14, 0xe}], 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f00000000c0)={0x6, 0xe55a}) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000080)={0x0, 0x4, 0x3, 0x66}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80000003, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000140)={'icmp6\x00'}, &(0x7f0000000180)=0x1e) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000001c0)) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x24) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000240)={0x0, 0xffffffffffff0000}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000003c0)={r3, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB='\f\x00\x00\x00'], 0x4) pkey_alloc(0x0, 0x0) 09:55:24 executing program 1: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000001fc0)={0x400000000007a, 0x7a000000, [], [0xc1]}) [ 323.554272] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 09:55:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = msgget(0x2, 0x400) r3 = geteuid() r4 = getgid() r5 = geteuid() r6 = getegid() r7 = getpgid(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000080)={{0x4, r3, r4, r5, r6, 0x8, 0x2}, 0x2, 0x7ff, 0x401, 0x6, 0x40, 0xf1, r7, r8}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @ioapic={0x7004}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @pic={0x0, 0x7fff}}) getpid() 09:55:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = msgget(0x2, 0x400) r3 = geteuid() r4 = getgid() r5 = geteuid() r6 = getegid() r7 = getpgid(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000080)={{0x4, r3, r4, r5, r6, 0x8, 0x2}, 0x2, 0x7ff, 0x401, 0x6, 0x40, 0xf1, r7, r8}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @ioapic={0x7004}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @pic={0x0, 0x7fff}}) getpid() 09:55:25 executing program 1: r0 = socket$inet(0x2, 0x0, 0x22) sendto$inet(r0, 0x0, 0x2f5, 0x200007fc, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) shutdown(r0, 0x0) connect(r0, &(0x7f0000000040)=@nl=@proc, 0x80) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000180)) 09:55:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x0, "92a98d0b98075a31"}) getsockopt$inet_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)=0xfd92) 09:55:25 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0x0, 0x31324d59}}) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2006, 0x2) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000080)) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, 0x41, 0x0, 0x0, 0x0, 0xffff, &(0x7f00000000c0)='irlan0\x00', 0xd89, 0x8, 0x7}) 09:55:25 executing program 0: r0 = socket(0x1e, 0x1, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x6}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f0000000040)={0x7fffffe}) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/137) r2 = fcntl$getown(r1, 0x9) ptrace$setsig(0x4203, r2, 0x401, &(0x7f00000000c0)={0x9, 0x6, 0x1f}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 09:55:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x1ffffffffffffd) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f00000000c0)={0x4, "6e59cf0f865bbad4b666d332fd58758f2c42ffe3b7ade5ab3058dd2652989038", 0x2, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x1) 09:55:26 executing program 0: openat$capi20(0xffffffffffffff9c, &(0x7f0000000540)='/dev/capi20\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) 09:55:26 executing program 1: r0 = memfd_create(&(0x7f0000000200)='aegis128l-generic\x00\x87\v\xf6\xda.\xa7\xd7Yn\x16\xf1L\x1b7\xe0\xa1f\x19\xa0x\xd8\xc0\b\x0fZ\xe0tA\xe8\xc0\xefL\xf1\x99\x9b\xca\xdd\xa0\x8b\x00\x00\xa2$\xc0\x04\xdaTi5\x9e\xbd\x19', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x200000) write$sndseq(r0, &(0x7f0000000000), 0xc3f4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000000)={0xff, 'syz0\x00'}) sendfile(r1, r0, &(0x7f0000000040)=0x500, 0x800) 09:55:26 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x1000004, 0x10000032, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000004ffc)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="e584de7953d1ef3ae73e2bf691e8817053b3d1cfc218590040d16d660d863d7371e71da61974bb0cc74ec9896b4b8844b2772fd454bed7c505c1ff9c4ce5f1e179dc44533cf6d665296e3b7d8feab38bf8fb83a3212602884b3486b9f14fef83da14153115676f2fa1cbbe1f91aede509c18f1f78b284c2fe1c73540c2ab2cb7815080da09c1aa1e94552b107181e233c45474f8c43fd0ca2a07dee45bf4aa1a05c96e32be0650b06fcd11897f07975983a0fd9b26e1912ea166aba5ef22279f860b10518c9516095cf0d706f1e2879b9c1113b838a60049239b81ec11069dbf78f0eae2b848b3908e0db7f8982993c4292bf1239596", 0xf6}], 0x1, &(0x7f0000000180)=[@iv={0x90, 0x117, 0x2, 0x7c, "2f12688da2c864a998153a0c8dc17f4fa91f1bcf912322b854a01e8e3c60b8f419fc32cf22f688bea00618c1d0ce941624ff587dbc6ac67fb20569ae8d9a4701d5adfa2185ce2240262a08aa094bcb162f9947c63e2f80f10ae38129bfed08a7154de79b98d65ee7029e9d040f7d57dbc77ea19957dd5787a63678d5"}, @op={0x18, 0x117, 0x3, 0x1}], 0xa8, 0x4000000}, 0x20000000) 09:55:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200408d6, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="9d", 0x1, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)='+', 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0x1f, 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x84400, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x7, 0x4) 09:55:26 executing program 0: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x109000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x80000001}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x3, 0xf, 0x5d2fc4d2, 0x0, r1}, &(0x7f00000001c0)=0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f000080e000)={0x2, 0xe, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, @in=@dev}}, @sadb_address={0x5, 0x5, 0x0, 0xffffff80, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa0}}, 0x0) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 09:55:26 executing program 1: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) tkill(r0, 0x2e) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) tkill(r1, 0x9) 09:55:26 executing program 1: capset(&(0x7f0000f0fffa)={0x19980330}, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}) setgroups(0x0, 0x0) [ 325.764320] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 09:55:26 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00\f\r\xba\xd9\x84sD\x82H6w[\xa3&Y\xc5\x04\xcbz}\xc4w\xc9\xe9\x0e\xd9{\x9f|\xaal\xfc\xa3U[\xd3\xa9\xc6', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup(r0) ioctl$NBD_SET_SIZE(r2, 0xab02, 0xfffffffffffffffb) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00\xb0\x90Z.\xa4I\xdarKN\xf3\xd1\x81Z\x01E\xd4\vu\xf5|.|\xddM`\xcfS\x14\a\x18\x8fC\x84,\xad\x96\f_\xcd\xe0-k\xaa\x02\x8f\x9b\x1d\xad)\xe7\x1eH)\xb5\xf8\xa7\xaf\xe9\x11\xdd\xe9\b\x1b8n\xaf\xd4\xa2j5\x04K\x01\'6^k\xe8\"td\xa4\x14\xf4\x01\xf6\xfc\x93\x9aX\x9c\xf6\xfc\xfcB\x93\x16\x93\x16l\x8eE\x12*\xddM\xd78\xea\x9e\xcaE\"$r*\x01\xcc\x981', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) getegid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$cgroup_pid(r1, &(0x7f0000000280), 0x8) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) write$P9_RREADLINK(r2, &(0x7f00000002c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 09:55:27 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r1 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f00000002c0)) socket(0x19, 0x80000, 0x8) splice(r1, 0x0, r1, 0x0, 0xdd, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000280)) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @ipv4={[], [], @remote}, 0x20}, 0x1c) socket$pppoe(0x18, 0x1, 0x0) accept$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000200)=r2) 09:55:27 executing program 1: r0 = gettid() r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000680)=0x1000000008004) read(r1, &(0x7f0000000000)=""/143, 0xfffffe5e) r3 = dup3(r2, r1, 0x80000) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x4001004000000016) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000000c0)=0x8, 0x4) ioctl$KDDELIO(r3, 0x4b35, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000100)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) 09:55:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x8, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) 09:55:27 executing program 0: unshare(0x2000000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200) getsockname$tipc(r1, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10) 09:55:27 executing program 1: mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) modify_ldt$read(0x0, &(0x7f0000000000)=""/91, 0x5b) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0}) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x9, 0x8000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={r1, 0x80000, r2}) [ 326.499534] Unknown ioctl -1072929747 09:55:27 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x201, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x12) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x140, r3, 0x101, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x12c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9f72, @remote, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @empty, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x46d3a831, @empty, 0x8001}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x9}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffa}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000340)={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, 0xc) recvfrom$inet6(r0, &(0x7f0000000380)=""/253, 0xfd, 0x2022, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000480)=0x40, 0x8) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000004c0), &(0x7f0000000500)=0x4) getsockopt$netlink(r1, 0x10e, 0x7, &(0x7f0000000540)=""/4096, &(0x7f0000001540)=0x1000) prctl$PR_SET_SECUREBITS(0x1c, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000001640)={&(0x7f0000001580), 0xc, &(0x7f0000001600)={&(0x7f00000015c0)=@newspdinfo={0x1c, 0x24, 0x400, 0x70bd2c, 0x25dfdbff, 0x3, [@ipv6_hthresh={0x8, 0x4, {0x33, 0x4c}}]}, 0x1c}}, 0x10) getsockopt$inet_buf(r1, 0x0, 0x26, &(0x7f0000001680)=""/200, &(0x7f0000001780)=0xc8) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001800)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x24, r4, 0xb4296b514207f85b, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x1ff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000001900)={0x0, @reserved}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f00000019c0)={{0x0, 0x1, 0x5, 0x3, 0x8}, 0x8, 0x1, 'id0\x00', 'timer0\x00', 0x0, 0xd168, 0x9, 0x5, 0x1ff}) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000001ac0)={0x6, 0x102, 0x6, {0x3, 0xffff, 0x1, 0xffff}}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000001b00)={0x4, 0x8, 0x5, 0x991, 0x4, [{0x5, 0xff, 0x7, 0x0, 0x0, 0x800}, {0x2, 0x3ff, 0xfaf, 0x0, 0x0, 0x800}, {0x0, 0x9, 0xa1, 0x0, 0x0, 0x3081}, {0x0, 0x4, 0x6a}]}) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000001c00)=0x8001) prctl$PR_SET_FPEMU(0xa, 0x2) write$P9_RMKDIR(r0, &(0x7f0000001c40)={0x14, 0x49, 0x1, {0x2, 0x4, 0x4}}, 0x14) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000001ec0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001cc0)={0x194, r3, 0x700, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8a3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x76ae}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x35f800000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffbff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5bea}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e5}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1112}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001f00), &(0x7f0000001f40)=0xc) syz_open_dev$video(&(0x7f0000001f80)='/dev/video#\x00', 0x9, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001fc0)={0x2, [0x8, 0x5]}, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000002040), &(0x7f0000002080)=0x4) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 09:55:27 executing program 1: r0 = socket$inet(0x2b, 0x6, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000081) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, 0x0) 09:55:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000000)=0xfffffffffffffffc) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f0000000240), 0x1247e9da73b42995, 0x0, 0x0, 0xfffffffffffffd57) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x9, 0x1, 0x1, 0x9, 0xfffffffffffffe00, 0x1, 0x8ed, {0x0, @in={{0x2, 0x4e24}}, 0xfffffffffffffffa, 0x8, 0xffffffffffffffff, 0x0, 0x3}}, &(0x7f0000000040)=0xb0) fcntl$getflags(r0, 0x3) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000240)=""/4096) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000000c0)={r3, 0x20}, 0x8) 09:55:27 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2401c0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x25) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, 0x0, 0xfd86) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0x0, 0x7, 0x3, 0x2, 0x6419}) 09:55:28 executing program 0: r0 = socket$inet6(0x10, 0x80000000000006, 0x1) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl, 0x80, 0x0, 0x0, &(0x7f0000000080)=[{0x10}], 0x10}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) 09:55:28 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x44000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@empty, 0x0}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @local}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000200)={@dev, @remote, 0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'eql\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000440)={@mcast1, 0x0}, &(0x7f0000000480)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000004c0)={@loopback, @rand_addr, 0x0}, &(0x7f0000000500)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={@rand_addr, @rand_addr, 0x0}, &(0x7f00000005c0)=0xc) accept4$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000680)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005bc0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000005c00)={0x0, @multicast1, @local}, &(0x7f0000005c40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005c80)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000005d80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005dc0)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000005e00)={@remote, 0x0}, &(0x7f0000005e40)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000005e80)={@empty, 0x0}, &(0x7f0000005ec0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005f00)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000005f80)={0x0, @multicast2, @broadcast}, &(0x7f0000005fc0)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000006000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000006040)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006080)={'eql\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000060c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000061c0)={'batadv0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f00000062c0)={@mcast1, 0x0}, &(0x7f0000006300)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000000c580)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f000000c680)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f000000c6c0)={{{@in6, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f000000c7c0)=0xe8) getpeername$packet(0xffffffffffffff9c, &(0x7f000000cdc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000ce00)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f000000ce40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000ce80)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f000000cec0)={@loopback, 0x0}, &(0x7f000000cf00)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000f3c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f000000f400)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f000000f440)={0x0, @dev, @loopback}, &(0x7f000000f480)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f000000ff00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f000000fec0)={&(0x7f000000f4c0)={0x9c4, r2, 0x302, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0xdc, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x1fc, 0x2, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x9, 0x8, 0x1, 0x100000001}, {0xfc40, 0x3, 0x800, 0xffffffffffffffff}, {0x4, 0x1, 0x3, 0x3ad04d9c}, {0x7, 0x3f, 0xd0d, 0x200}, {0x7ff, 0xbd7b, 0x1, 0x1000}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x1f0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r18}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x120, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r21}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x1114, 0x1, 0x1, 0x3}, {0x1, 0x9, 0x9, 0xe893}, {0x7, 0xfffffffffffffff8, 0xfffffffffffff800, 0x6}, {0x1, 0x0, 0x4, 0x9}, {0x2, 0x8, 0x2, 0xfffffffffffffe00}, {0xe3a, 0x1, 0x8, 0x4}, {0x79bf5496, 0x7fffffff, 0x0, 0x3}, {0x4fe0000000000000, 0x7, 0x5, 0x9}]}}}]}}, {{0x8, 0x1, r22}, {0x84, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r23}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r24}}}]}}, {{0x8, 0x1, r25}, {0x144, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x0, 0x1, 0x8}, {0x2, 0x5a, 0x4, 0x2}, {0xffffffffffffffff, 0x10000, 0x8, 0x5}, {0x81, 0x100000000, 0x570, 0x5}, {0xdd4400000, 0x10001, 0x0, 0x3}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r27}, {0xc8, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r28}}, {0x8}}}]}}, {{0x8, 0x1, r29}, {0xf8, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r30}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r31}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r32}}}]}}]}, 0x9c4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r33 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r33, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x48000) accept4$packet(r33, 0x0, 0x0, 0x0) accept4$packet(r33, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000940)=0x14, 0x80000) ioctl$sock_inet6_SIOCDIFADDR(r33, 0x8936, &(0x7f0000000980)={@mcast2, 0x67, r34}) 09:55:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xfffffffffffffffb) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f00005f8ffe)='#}\x00', 0x0) ftruncate(r2, 0x40001) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x4) prctl$PR_CAPBSET_READ(0x17, 0xa) sendfile(r0, r2, 0x0, 0x100000000002) 09:55:28 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_pts(0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) open_by_handle_at(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="290000000200000001dd5fc81e9875caaec26f005444e4441a6524e137334013a4484017782c5f61a8d871f838927b1a83aa0ba4f9ad3211a5e8da"], 0x10000) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x10000, 0x100000000, 0x3, 0x1, 0x18, 0x6, 0x6, 0x3, 0x100, 0xd25, 0x80000000, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) fchdir(r3) [ 327.603675] IPVS: ftp: loaded support on port[0] = 21 09:55:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="f0ffff6f9e5f37c863613f000000000000f0000000000000371a735ec65d65dd098b31ce0c209c5b7fea9b6b0de8826a2474d3d9c927f5f460ccea01a9837fe1915f0d26eb8b0a9f283d58f9bc6b7b2d608b46c16b6bb6b9605fb752f438e2adbfe011e1b809d02c1318ca264f929e425370e4"]) 09:55:28 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x3) getresgid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)) [ 327.879766] chnl_net:caif_netlink_parms(): no params data found [ 328.014813] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.021409] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.029927] device bridge_slave_0 entered promiscuous mode [ 328.045907] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.052560] bridge0: port 2(bridge_slave_1) entered disabled state 09:55:29 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000040)=ANY=[@ANYBLOB="6e61740000000000000000000000000069d50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x88) [ 328.060838] device bridge_slave_1 entered promiscuous mode 09:55:29 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x40) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000600)={@in6={{0xa, 0x4e24, 0x6, @local, 0x101}}, 0x0, 0x2, 0x0, "51d29d40f8128fd561fc1544a5ff9db5516d39876b0087ebd969fdd372d9ea0a4ec20ab6b8aee483c3c25cbee3b61fa3c34c68f237460d563d4ad7fe8b190eb572ac454b89e64bc000debd0e5f1a5bc9"}, 0xd8) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000100)={{0x2}}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'tunl0\x00', 0x400}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) [ 328.148356] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 328.202895] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 328.273445] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 328.282627] team0: Port device team_slave_0 added [ 328.304940] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 328.313783] team0: Port device team_slave_1 added [ 328.320865] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 328.355600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 328.568348] device hsr_slave_0 entered promiscuous mode [ 328.672971] device hsr_slave_1 entered promiscuous mode [ 328.833345] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 328.855875] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 328.887440] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 328.973766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.990374] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 329.003729] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 329.011383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.019751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.037088] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 329.043494] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.059650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 329.068676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.077490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.085895] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.092520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.106234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.120482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 329.142400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.151137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.159553] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.166613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.183424] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 329.198059] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 329.210573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 329.219526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.229044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.238489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.247766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.260415] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.274277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 329.282773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.291794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.305972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 329.318820] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 329.326177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.334887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.343388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.352036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.364967] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 329.371049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.399433] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 329.418792] 8021q: adding VLAN 0 to HW filter on device batadv0 09:55:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = semget(0x3, 0x1, 0x0) semctl$GETVAL(r1, 0x1, 0xc, &(0x7f0000000080)=""/211) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet6(0xa, 0x80005, 0x6) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000340)={0x7b, 0x0, [0x0, 0x0, 0x4000009f]}) 09:55:30 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x8, 0x100000008, 0x207}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x4, 0x80000000, 0x58, 0x12, 0x1, 0x2}, 0x2c) 09:55:30 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000440)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = userfaultfd(0x3) r2 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffff9c, 0x50, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r4 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x4, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)=r3, 0x4) process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x32f, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000200)={r6, @in6={{0xa, 0x4e20, 0x9, @mcast2, 0x7}}, [0x101, 0x377, 0x4, 0x418a, 0x7f40000, 0x20, 0x6, 0xcf0, 0x3f, 0x3ff, 0x401, 0x101, 0x1, 0x1, 0x4]}, &(0x7f0000000300)=0x100) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000340)={0x10001, 0xcc, 0x1f, 'queue1\x00', 0x4}) fcntl$notify(r5, 0x402, 0x10) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000400)={0x0, 0x2}) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) close(r1) 09:55:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x9, 0x3, 0x0, 0x0, @irqchip={0x0, 0x4}}]}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x501200, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000080)=""/230) ioctl$RTC_WIE_ON(r2, 0x700f) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) 09:55:31 executing program 0: capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x64, "4033298381069f52aa8f0157d09e3bb453cee1ba615dd51b6020c13fde0047c7108e7b139debee7f1a0fd68b56db18a38e7c2ad0a1a753f6b81de8b90a3d7dda8bf1d52b36e00c8e151c6eb95e6d97cf15c28c9ff01ddce20eb22e1638988f5f6432142b"}, &(0x7f0000000000)=0x88) 09:55:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="390000001300090468fe000081000000e800ff3f03000000450001070000001419001a00040002000700020002000004a9ff4ba8249905d62a", 0x39}], 0x1) socket$nl_route(0x10, 0x3, 0x0) [ 330.159870] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 09:55:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3f, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") poll(&(0x7f0000000080)=[{}], 0xff, 0x0) 09:55:31 executing program 0: clock_gettime(0xfffffffffffffff9, &(0x7f00000000c0)) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x1, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x5) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000080)={0x1f, 0x7, 0x1, 0x1}) 09:55:31 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x101000, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f00000002c0)={0x3, 'syz0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000dddfc8)={&(0x7f0000000000), 0xc, &(0x7f00008a7000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000001040501ff0080fffdffff2e0a0000000c000100010000007f0000010c000600000022ff02f10000"], 0x2c}}, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x8) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000140)={0x0, 0x0, [], @raw_data=[0x7, 0x1, 0x9, 0x100000001, 0x6716, 0x40, 0x7, 0xca, 0x1, 0x2, 0x6, 0x9, 0x2, 0x3, 0xffffffff, 0x1380, 0x40, 0x2, 0x3f, 0xf9, 0x5, 0x8, 0x3f, 0x8, 0x100000000, 0x6, 0x0, 0xb0b, 0x7, 0x2]}) 09:55:31 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x102, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000081) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000200), &(0x7f0000000240)=0x30) 09:55:31 executing program 2: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'bond_slave_1\x00', @dev={[], 0xe}}) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000001540)=0x7f05, 0x20, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8003, &(0x7f0000000000)=0xfffffffffffffffd, 0x2, 0x0) [ 330.673362] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 330.716397] netlink: 'syz-executor.1': attribute type 6 has an invalid length. 09:55:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@rand_addr="32e80d48e72c06f5af6745d0b770823b", 0x0, 0x2, 0x1, 0x1, 0x10001, 0x400}, &(0x7f0000000180)=0x20) shutdown(r2, 0x1) recvfrom$inet6(r2, &(0x7f0000000000)=""/31, 0xfffffeb2, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x800, @ipv4={[], [], @broadcast}}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000000c0)='A', 0x1, 0x0, 0x0, 0x0) dup2(r0, r2) 09:55:31 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x101, 0x10000025e) r1 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffffffffffe, @ipv4={[], [], @local}}, 0x1c) bind$inet6(r1, &(0x7f0000cb8fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x47) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000180)=0x7f, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) ptrace$setopts(0xffffffffffffffff, r2, 0x100000001, 0x10) getgroups(0x5, &(0x7f0000000140)=[0x0, 0xee00, 0xee00, 0x0, 0x0]) getgroups(0x1, &(0x7f00000001c0)=[r3]) listen(r1, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0xfffffffffffff9f2, 0x1, 0x6, 0x9, 0x80000001}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) listen(r0, 0x0) 09:55:32 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100), 0x11) [ 331.023360] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:55:32 executing program 2: fcntl$getown(0xffffffffffffffff, 0x9) timer_create(0x3, &(0x7f0000000480)={0x0, 0x6, 0x3, @thr={&(0x7f00000003c0)="48d819f8a06555dd21fe57ba14cf8f24f5d9fb947bb3e456cc6dd8840f4688cdc3b2bad07c92e980432fcb3588d7fab53c8d58f44ea2033f4dbf44b9026651b7fd4cc922f9b09216ff4f69e227f208833a58ac49d0579fe90e52d692b3e7d69084f80cbc138ea4ea3625", &(0x7f0000000440)="3211e374e48c3c3cb5ce8666649f30f5fd4ee313d8106b849484dce3d972f406979e252c1216086f8e0448b75e5a66eb473753440d04c1"}}, &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000380)={{r1, r2+10000000}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5c9b, 0x2000) connect$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x3, 0x4}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000106000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00400000863d80001c0012000c000100626f6e64000000000c000200080005000000000042accc9852b4cc5c5aa3991229fd1624cf744a657a0041df0edc905703f0f2d03d360a52d3f62325f6fb10720806eec12c4b03cad48fdf3fb21e0d56de34a86ac1996624593296a679b9"], 0x3c}}, 0x0) 09:55:32 executing program 1: unshare(0x2000400) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200000, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 331.253457] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled 09:55:32 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000240)=""/28, 0x37e) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, '\nL\xea\xa0]\x9a\x00\x00\x00\x00\x00\x00\x00\x03\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xf3vX\x97\x01\xa4', 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0xc1, @time}) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, &(0x7f00000001c0)=0x401) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) r2 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x7, 0x80201) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @broadcast}}, [0xde0c, 0xffffffffffff8000, 0x0, 0x9, 0x2, 0x2af7, 0xa59, 0x8, 0xed, 0x1, 0x9, 0x25e, 0x3a0, 0x3, 0x605]}, &(0x7f0000000200)=0x100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000380)={r3, 0x40}, &(0x7f00000003c0)=0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40a85323, &(0x7f0000000080)={0x80}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000000)=r4) 09:55:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xf}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x20, 0x22, 0x1, 0x0, 0x0, {0x3005}, [@typed={0xc, 0xa, @u64}]}, 0x20}}, 0x0) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x200001, 0x21) syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x39, 0x100) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'ib', 0x3a, 'vxcan1\x00'}}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4010) sendmsg$nl_crypto(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40002}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f00000001100000427bd7000fbdbdf257368613232342d73737365330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008195f5ca000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240000002000000000000000000000080001000000008008000100ffffffff"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x40) 09:55:32 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_flowlabel\x00') sendfile(r2, r3, 0x0, 0x50000000000443) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 331.591327] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 331.613428] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 09:55:32 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000240)) 09:55:32 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) sendmsg$xdp(r1, &(0x7f0000001600)={&(0x7f0000000200)={0x2c, 0x4, r2, 0xf}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="a6fb", 0x2}, {&(0x7f0000001280)="7dc301f31abdab0ed046e9ee9d7745963d2df4f12e3bcac24de2d0809d9331a5c53bca040b32a5582186894976aa433b4d766aa7230faa442b07fe0ca5b40ba914939832a058967fc33f9bdc1ca3373c8d6fb20bac3f19420f1391e69363a1f289a4c64baf3e3e28131b09ce314f84758001550a78189c4380ca145da42846c91ac9ad12da10c127b6f6a2a7b702ebf064e8216d6d1a6684a8194689dfa4b7706d631f1e98c2900098b19545c60121a4998bdd67a73f10a8b88279a455c9c6dffe9347dbadb3955b99d2ae7d87ad641f0c6c83fd59", 0xd5}, {&(0x7f0000001380)="a13afd2c2b4b8e6ca127162d378175351c1ffaffc1ec8ca5bb895ff16d9bfc2e252b683e352bfc0ae044ffebf620bec6c0ec35491f9c36bccc0583226ea396e4c97ec2b0c04292732066eee453704ed25039bd6b9af1f61baa", 0x59}, {&(0x7f0000001400)="ed46a197b6b5251ab9857b691e7e5c7cfbe918c9df5510558fac5b95170ec2924720feb6e92eff2154802757cca775dee17544a0de36677d5026154fb0b043afa2a68ebe2391b306315f70c50b9780e344942b676a7da2c63af893c616ad5dafbcd6c52e304cd8769206242cd19e1aae6b1348fcbcbca226b18750afd89bb2f249aff94a9c568d5dbfccb39aaf487be0a0a77221e71fe5365c827b8713f58cf8ae", 0xa1}, {&(0x7f00000014c0)="da66f292df37e316f5d41a7938c9cc9bfe32d8a449d94b97670806908b2cf87d419b38f74b89b790964eed6f37521788fdf2c37bec54ab2cc5c2ef6f3531d1f63ac2ba5578900ce1eca5cbcead052a655135048bb101121b86d1dc1b49cac6faf63e5d081c7955a034e3b40f414768e3c33b4c333fa2fac4d98d1b3924f2ed34dbe2fc0ba1d481d8581801dc4ff32ecefdd31c9d9999166485c098a31aac389182afb6051182cbda8b7ab44ee147ffb044acda29b075", 0xb6}], 0x6, 0x0, 0x0, 0x10}, 0x1) ioctl$TIOCNXCL(r1, 0x540d) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000001640)={0x6, 0x0, [{0x7, 0x0, 0x3ff}, {0x3459, 0x0, 0xb905}, {0xebe, 0x0, 0x6410}, {0x1, 0x0, 0x1000}, {0xfffffffffffffffa, 0x0, 0x3d}, {0x0, 0x0, 0x9}]}) rt_tgsigqueueinfo(r0, r0, 0xd, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) wait4(r0, 0x0, 0x40000002, 0x0) 09:55:32 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x6000) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x6, 0x1f, 0x1ff}}, 0x30) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000013ff1)={&(0x7f0000000140)={0x20, 0x18, 0x1, 0x0, 0x0, {0x1}, [@typed={0xc, 0x3, @u64}]}, 0x20}}, 0x0) 09:55:33 executing program 0: unshare(0x24020401) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000180)) [ 331.978493] netlink: 'syz-executor.2': attribute type 3 has an invalid length. 09:55:33 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x8000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @broadcast}], 0x10) r2 = accept(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000b40)=""/4096, 0x5f4}], 0x1}}], 0x2, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x1ff}, 0x8) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="73797a300b77961944b333aabf0c9d9d22cb8c6ac8e93f4203ddb0194d6fa224223e5fcb9f4e612fd73f6eb3429dff149cbf00e21af03d1ef5a81e112a94d422ab3e36a25a334026af2dacda08d8791259e2b9ae20102b1ba7d8914ededc3b707fe6d8f74dc083dde02c0d36ca73a5eb14687e89cb401a50f6089d76fc691ca29483deb5666ac794af2cdeb83b98f1398d0bb8b8ac7ebe19f4d6dab9b61b41"], 0x10048) 09:55:33 executing program 2: r0 = semget$private(0x0, 0x1, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) semtimedop(r0, &(0x7f000001dfd6)=[{0x0, 0xfffffffffffffff7}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000fbd000)=[0x7fff]) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400000, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000080)={0x7, 0x1, [{0x5, 0x0, 0x3e}, {0x401, 0x0, 0xd2}, {0x5, 0x0, 0x7}, {0x1000, 0x0, 0x4}, {0x10000, 0x0, 0xfff}, {0x8, 0x0, 0x3}, {0x2, 0x0, 0x5}]}) 09:55:33 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mkdir(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 09:55:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/28, 0xfe91) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0x40bc5311, &(0x7f0000000100)) prctl$PR_GET_KEEPCAPS(0x7) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0bc5351, &(0x7f0000000300)) r1 = gettid() r2 = syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0xffffffffffffffff, 0x204200) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000440)) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0)) r3 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x40180) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=0x18) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8800, 0x0) openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 09:55:33 executing program 2: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xefe6, 0x2000) fchdir(r0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000200)={{0x2, 0x4e20, @rand_addr=0x6}, {0x1, @link_local}, 0x6c, {0x2, 0x4e22, @multicast2}, 'veth1_to_hsr\x00'}) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x7, 0x7, 0x2, 0x6, 0x0, 0xc4, 0x800, 0x8, 0x10001, 0x0, 0xba, 0x80000001, 0x3, 0x57c, 0x800, 0x0, 0x5, 0x4, 0x7fff, 0x2, 0xfff, 0xffffffffffffffc1, 0x3, 0xb2, 0x200, 0x4, 0x6, 0x2, 0x80000001, 0x5, 0x100000001, 0x4, 0x80000001, 0x775c, 0x8, 0x4, 0x0, 0x2694, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0x800, 0x3f, 0xfffffffffffff3e8, 0x3, 0xee50, 0x81, 0x7}, r2, 0x0, r1, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffbfffffffd, 0x11, r1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000000)={0x0, {0x7, 0x3f}}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x3, 0x8, 0x1, 0xffffffff, 0x1}, 0x14) 09:55:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000000c0), 0xc, &(0x7f0000000540)={&(0x7f00000015c0)=@ipv4_newroute={0x2c, 0x18, 0x331, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @dev}]}, 0x2c}}, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'erspan0\x00', 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) 09:55:33 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) close(r0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4001, 0x20) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000000c0)=0x64e0) socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x64, &(0x7f00000001c0)=r0, 0xfeb8) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x501000, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x6) close(r0) 09:55:34 executing program 2: socketpair$unix(0x1, 0x80000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/97, 0x0}) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000380)=""/181, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x6000, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000680)={@remote, @broadcast, 0x0}, &(0x7f0000000800)=0xc) setsockopt$inet6_mreq(r3, 0x29, 0x1f, &(0x7f0000000840)={@empty, r4}, 0x14) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$CAPI_REGISTER(r3, 0x400c4301, &(0x7f0000000200)={0x2, 0x1000, 0x8}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000000000000000000000000000000faf40000002bb6fd62a0"]) 09:55:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x40000003) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fffffe181004e22000075a9bdee0521d283945f64009400050028925aa8000000000000ff7f00f0fffeffe809000000fff5dd001b2f0f000100070abd00000078b75bff3ec6", 0x58}], 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202, 0x0) write$capi20_data(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000737f8080010081000000000000002c004b66c9e8bd34a1ccac07de999755553c2169e2f0f1adf29bc03a47a04c044c32198167d0bb7c1e79e6f3a5ee67e9dbedefd95efe78f2ab0922d7d5bc492d8a40063d427e53e889a8ad38b55f1704"], 0x60) 09:55:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/psched\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f0000000300), 0x0) write(r2, &(0x7f0000000540)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) close(r0) sendmmsg$inet_sctp(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=@in6={0xa, 0x4e24, 0x2, @remote}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000180)="b55d7d23884ecda74b188f29bc9f5a5cdf75042b7eec11f54d18af4cb1ecb2fd62a59ac1fb138c0c88a581f0e0bab4dc89ad64e8ad71bbd53e8a6bc107dc1a816cd584ac5a927dc3f96bda9769d6f3243971f121dae3c5cf320b21f5314eb5be49168ce8067e14d96c1e115312a0ebe9513069248dc95b5a3bab5f58433086291240153b211303306471aa73d47de7b5659a5193ec805027bc29f6b7d728cdc9379071549d52d112d1e61d91c0063baef48a24e2dfe4a4a320d2fe5b4bba583944276d8a31968589151f3645", 0xcc}], 0x1}], 0x1, 0x4044051) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000300)) 09:55:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'security.', '/dev/sg#\x00'}, &(0x7f0000000240)=""/95, 0x5f) connect$inet6(r0, &(0x7f0000000080), 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @mcast2, 0x10000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfffffffffffffffb, 0x200) sendmmsg(r0, &(0x7f0000005f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x11a, 0x1, '}'}], 0x18}}], 0x1, 0x8000) 09:55:34 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x9, 0x408000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r1}}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000180)="34ff60fd54109f751c6f89dadfe5e1d027e28fc548abb786fbda146d9973d5b5593b90683532b024e3e1fe411bff4a521fdcb7c343ed2c18e40d49e14800cc2ea3723490") ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'bcsf0\x00', 0x401}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'tunl0\x00', 0x5fd}) fcntl$setsig(r0, 0xa, 0x14) 09:55:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl(r1, 0x3, &(0x7f0000000000)="8ba5a6d1f2b57c3775c3a8e4457ddd75287a2da43fe6") getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x12, &(0x7f000095dff8), &(0x7f0000000040)=0x4) 09:55:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4(r1, &(0x7f0000000140)=@can, &(0x7f0000000200)=0x80, 0x80000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x321}, {0xa, 0x4e23, 0x3771, @loopback, 0x8}, 0x80000001, [0x2357, 0x2, 0xffffffffffffff00, 0x7, 0xffffffffffffff48, 0x81, 0x20]}, 0x5c) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x800000000003, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept(r1, &(0x7f00000000c0)=@nfc, &(0x7f0000000040)=0x80) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='%'], 0x1) splice(r3, 0x0, r0, 0x0, 0x862, 0x80000000f) 09:55:34 executing program 1: socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r1 = socket$kcm(0x29, 0x2, 0x0) write$P9_RSETATTR(r1, &(0x7f0000000080)={0x7}, 0x7) renameat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x1f, 0x0, 0x10003, 0x9}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x400000004006, r2}) sendfile(r1, r0, &(0x7f0000000040), 0x36a44c91) 09:55:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) write$sndseq(r0, &(0x7f0000000180)=[{0x3ff, 0x0, 0x0, 0x100000000000000, @time, {0x0, 0x36d}, {0x0, 0xfff}}, {0x0, 0xef, 0x0, 0x0, @tick, {}, {0x0, 0xfffffffffffffffd}, @result}], 0x60) 09:55:34 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10040, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='io.max\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x50, 0xf0e0) 09:55:35 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x2, 0x28002) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TIOCNXCL(r1, 0x540d) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x38, 0x200000000000002}], 0x96) 09:55:35 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x10) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) mlock(&(0x7f0000009000/0x1000)=nil, 0x1000) 09:55:35 executing program 2: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') clone(0x2a4500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x40000, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000100)=r1) [ 334.206712] mmap: syz-executor.0 (10989) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 09:55:35 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, &(0x7f0000000100)=""/50, 0x0, 0x2402}}, 0x68) write$vnet(r0, &(0x7f0000000440)={0x1, {&(0x7f0000000040)=""/80, 0x50, &(0x7f00000001c0)=""/142, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000000280)=""/24, 0x18, &(0x7f0000000540)=""/101, 0x0, 0x2}}, 0x56) write$vnet(r0, &(0x7f0000000140)={0x1, {&(0x7f00000000c0)=""/28, 0x1c, &(0x7f0000e9afb7)=""/73, 0x0, 0x3}}, 0x68) 09:55:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800100000003) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000b00)={0x4, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20100, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 09:55:35 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x205, 0x23ff) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x101000, 0x0) sendmsg$tipc(r1, &(0x7f0000001440)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="59b5a941b4491aaaf5a507a8e65f62820d8c5f8cff537eaaec464140801e17aff96080bfb1a18851969196919001536484a3eef4d3eebe4318968cb2b490e8f206fab86cde03c9019d3c6765c1c32e77299d360b2b7c2ae317748e63f55594c7b785a32b442967c7a5b958a5d7868b47273f42c645e0c3d3b71aed823ffe0c991a576c1f445eb4dcc374bdbd47bce70534014c7328369a0e30538984f0a29df79f3776fed883de46088e2d561544", 0xae}, {&(0x7f00000001c0)="c41012fb745888dcaa18fbf8f02e5b5916015285b5b4a67d2fd9cc9b9b5fb03b845492747122cbaa70196639113119bed6be9604a035f311568e907430cbacbfa9fa6e2cd390e7b4cff70f89a29459488383ac1821aac632f020e66535fbca27c22fdf2d14da94e4004d29260bf9bafd369a388855aaabae9e3a8574807f15030900f5dc212a62317c7266b8739018ad305b74f0ad032cdc8b6b410cf0205028", 0xa0}, {&(0x7f0000000280)="4fc0020b1c9d87b9859e7af1bb16ca4ef039c60b2b1740bd07688a24816e4b55e7e1627b39aefc8c50f0f39f0c5f73d629a9825534ebe36b76e4ec5706d549beece25657822d22f3df3640034b5f7214c1829fa9b5e6d6234279cfb7d9c39f85e4335313f252d3361d6300b2b8fd33fdb095ba8154840651395eff63d2470cab4818619c7b34f781da34b14fa99d0c9e4232710c2fa19760a9f5040937797fbb4b3768aee54658cfac1d5fe64afd2787114e15e96cc446971627d3b3a4c3e06b97880e684a6139ea33448a618cf8316554043326cb6b54b9b71ff8d1", 0xdc}, {&(0x7f0000000380)="e335373f93af0c7ce5c70a20f2c94abfe48e12970f344a2dc1ee7bd2b48f9aafa769c03ff91c49ef1b84f39f7905d17b5f266a6af7b123456d19e720877e1aa2c9a16ee4b2516c57c1dc1f178385012dfdf77033f90cd0408d8da3557742fa5446c5e8ec9bebc19d97fc5ed7f251bf4128c1b6e4f494e992e4b60eae6aa0816b", 0x80}], 0x4, &(0x7f0000000440)="b71d4349cc79d641873c7cefe4ae4cfaf9cd4bf7abbda8aa28f1fac378dd7368729c4207455045f81abb3e675009fdf4251038f23e3ec13ae550f51135d4dc41a160b825870346eca340ad78573f297d703c139c6e14f92bffab5a0f22fb69d7f29385c03e8844832cc9a61665204c2e8b97232ed58593f4c6e5e08aa5d776cfde97e5d18ecae838b6a8dbdf85846a2a51e93d9cf11593b7e09cc4b9ebb81efa4cde2c5ab66482d41b371247c8c9148772ea3c2f54517fbdc63c35b1a87300fe4ff8fe4d6c7912a11ebe18532a1e4c1a92518bf2cc415b341b8d86f70a1e21d265757e36f9001dbc02a89e6f44f3c814c9265702a9881cafff2cfc9c91e8c3c100911ba31782310069806bcf5bd757f690ce5e01503403fbc2f688d2d7c511c734a7cad7479cb047b78764d0ed2260c99d5e7fae7d293c9dfef005fd53335f557652332cd2757fc58545c30ad2b77486f68736db6801d3fec567e0325d8b923d70c3104ab9d115abe3fcdf58c0b7b6eb2b7699d6f99d88a85574d6515f7d82e8aac08fa5080937e29e64f17fcdd74883fe7f2e467b83cff16f3027972abded181097410d480e757a01ddc34bca3ace07671025c470de373678df187ddf50d77cd1d423266399dce14abf6d9b05aca727caba4db7048b72e4be663ffc88625edfc99ecd71b9d7614efe654d6a851db63107afa2402574d3d24b9d5745d80433c130131672879d2796b5d1a75bc2fc52bb7323d789bcffa3b97e84233471c9bc0a47fd2620dd6f4c8780c42385c947f80ad304e85765ebf1288ab1dbab96d50ffbb45efb17aadc012feebe322dbe0a1753e960e417e3e023e96607b0619cbe1c2ba33ad003553f425a3a4256c4e1a9858c0bbbbabb07617c3d9ddec05836341f28886e7edf273f96a36494db265a5d72a7f9e2b2cee4ca431c3394752654a918eae3b7a5b549c16f73321da87fd6543a5e552433af22423a74265cede5463411c09becd0644cb56164001ff57e9e2b7f6314f502f8abf78ea3c72a4912737c7c85bfaf8cdb82ecc4288c9a46c480f28cafc9073bbe874d8e41eac21e3922a3170210330958a5a849ee0a5de5200eec8ba6ac6d436bc4075beed2ea834fcfc3fba2b371704303cfa0c17797d74e53bde44e5bd3eff26138a4671506bb2ea4eb195d7f523ae15883a7f4d028201f9e5ee9d9220c61a59fc78b015beb5ac41582cb18e50403fc9914e18d6ad1d70b39f3b4adfa023b2137583a0550c2152d8af271ba34d5930257b8a933c402afad7a97fdbd86071cfb0964dc959369912f5ab9b2e9fa2d0e8443648fc961f69e48dec92f0f7119930eb61cc035da124f060a6991ab21656eed8137ee1e7005b4ad9cfd203d3735c3ca02d55db6d8d67055fc21142923a49b0b02e3d92c07b9a917eabbff7b05edf5075e52de3359b43170816d0b9d470a1584cdfcc88f1fad0de974f1ab7e1335f87a37dddec2cd22dbc470e6695d7acf93a704a1e8a5ad408688fc76ebc55c002975cf75b45f27b7935fb0b19daded2845a9c9c386a2cd6271404b5a1c210d219260562b56f391286df924d2201aec397fe843c75d40d202461cc0683d3e3cbc8dc0fb3ccd5f118d0548d5f5fefcab2122189183e0bac97448de7583fc44be1c2cf9ee48e033e5a0ad45828993b21b821fc6d80a94cb53c5964f39720d9b4ade44f165674ef5d012573a06fbf5d349421de84df977fa7731d631af90f59c66dc20764ffd748bfc315debe2bc25a8abb515eb099878c14ab4fdcab36ec90e0cd5727fd545ff0cc07de0fec003a6e232aba33fc9cec51050023308c5bccc61c17bba37c60870eeec0c93541e85b1466be49a452f9841dee1c3a079f0f0497e537dc83f9e9344afd0f753f90478fcaa75e8dcab62939d40fa6d7c14523c6166b529e7ccf658057064eb9c94e3635d2d54177a37089f1a605176487ce6b078cc872fa443ef9fb5302b565215dfbc0af1b0ad0090909cfe45f7e9db5805b94459d09a14845035ebf6c184a3ecca8ee17c96f9fe847d953cb15b05c04ca36c63b5be7d28bf8d630cefb6ad8aacd1058af29f4ddade0546f5b8c6a71d912ebba8efd68463544187ffc8bd8c5f6124204a2971fadf782ef831398eabded882df7aabb0c8b11e4fe62e0b2bdbe358846558c33b1a5ab6e4650e61025fc5bec7ef1217fcc5b95a5b8903a022a0083e715667edc72f683b6eb426e1f3a0ba30513fc3e87c2eae9c1a8d4f1ab551199d9b05196c22ee89cb2277bf4b697a0e3db504f302986bf03afd40c7f6f42cdefd825edaa971caadb5c8bee8241e72d510858fe270624d91b114e761e8832c3bb9634f0ef39c1bd6a9e4d8446270b1de4e8cca8166f1d922cf0544fb25fc8a488c0aa36732821643de47d7d7b85932c5ef46e7afee9e295954b0d389ced9c9ffe41fc4864fee3d656b86eba4def2fdca4a140f44c6af2d0ed61bd3a60746cceff3862cb85311f89cf5d82142c83d056bd4e4216509469ef3cdc00f2b16d93cf161621592952ecf8e8929e3b281d1c22b1dca9101a2a17f0cbf1d325bdf745a9accb9bcc35b5a19ad0654d3847bd2f9d2b7cf67f3cecae7a6b739e3402212518c9ced77e76f9e911ab735924f9aceb31ccc0b64132542946e5f10228480c94978ce405be625ad3caab908c35118f82834a3ba4ebf9b242b0174bd39add430b2c7f49636d64d54fc92c14a56c643ac24a62ca9acce6171655b743c2988155ac4abe3c78975f74fcd858463a385f693789f9bc86b091d5b6ae23a364c483ca4f5c6a852a3140405186162f3cb33da452245e59598900e7f9381550a3c1cd0344513aa071f00f473afbe9f7219189df02124f5adca8689ee257ced2ac317034de0f13563c59dfc0244237063fdc0871c998895cdc5cb5113568e1ced35d3682f5b6efd225483a0f07c5e120613ea218691ebc88862ac99e0be6dee8e539b4107315af6d81a9165c8a95fd4b06b1ccecef12a0f7c672397374faf699e639e7a75b20ba03163274f409c4a52c41f8487df8e083fbe5372e2ea679605420c6373b90167a6fa223c86cb8c677028e31ba175ebe21933591f527c0299ac4e99717c95c5c14131c319f050fa307decfc75f18f680160e7ba8b0d623f0883c52a9a7a22727621f9a3147ae7091fabf91e7067af79054c383413765297ca764a55b3b60681dba935a38c2d29553d662e4f9f8d8213939f758986f2ce967fc3e36e3f142838ad2e9815fc089f3203c4c4017b703612d0381c13b43b255c98d444eccc9a501b7ea8595415ba8e79c215089214c666faa6830c671b33cefe5279e5ad1a30ee768572f541b6bd927cb34610d01bd94773063e173e23d703bc7620e4dc81f60bc0528c250ffd5167c6d9d94d50e4703da1cfd5323305c9ce4d5c68851ffef8e1795bc1fc82aecdfb986debd9c787356d8bb9360dedf0066e7144a15369062ef20187d0901bc9bee396bace3e9e333f2fb192cca545e95b85be5941a0707d3e3b083742bbcee038490cf91147164393a357163070b93e39a6e97ddce5a7f3a119766e9c830e826873e45814cc10995fdbacad85550304fd9284ca798fb664f9512df75a28ea80d5c0541be3676964d28cc7d4769aa2325872826d39100c3e2066fdbb22dc3018ba5487be8c9f78c611bc96011340ea62944e10cecd512462490b79a4ada20d5b8fe28c9dc592fd4a0a52126c323c7bcaa4e20f6add0928d469ba39a96904b53a251c272dda1ea4639d9093551f52f16010a8f6e2c70e20b914ccab9ef22ab6d3f6462c5f637b6f41858acd42e324a81b8f8b6986fc3e74088f67c78191509f52b9b0ce46f50c7038d51f1d110437b3b3000d93005831dd19a9f23a52c430cd942af8d0111e6125f75dcd4347f6962eb0cba0e0123b1dab8afc940afd1052ac400ac50d5aa6c00048688cfc8fa1f5a361ff6a0d90a7ae3d8c2e259ceede496ff454f8c202b77605a8f462538ddf15b4f8e215c8d7e00e01e3874502e9cd1aaf1c1a61922d67588173ed996b49f357f0a76a511efd08e2522ecd92983f36b7cc178cea8b76fd1df0b2e55c9f19193728ff2a2562508133d11273430041044839846ad6e6d32edf85980a7b8a72c57db8f16082b5fb71c6ea3fb4b90f3baf7367abee896b0beb5923e61f0e732eab5946e9a2f499a6451096a02ffb0f3f3725da65ad0b3eaf96cc5a4e50026d0699cf7377567627ef2ad18d66439571aa361334051ac6e76d4da9164d564ac20f84f7369762775538963d5f1dd9d72805437845fbac630dcceb02a4e0f7874d400bfe43b3ae7b0aaead0fc62e3b6a14cc1fbdbf61459625dbcf45e27dbbe0b769932332ca79135104a328f343e3fc999548adf5ed42ee0eda1ff7519486de5b33598758e8c204de6e130e4b238d640807cd02da581b4ea933ca197bb20a79401e953abcc9aa11b40505b382ea031354fa4204b7febf7e4046b7eb98a49f3b1777dca77a91f7ed4320e33b1ea5ff0737ac4ef6957345e740419be98cfcfc4abb227c9ad6fbfafe58385d10bc6cf299b321d0b8b5d5cc2f925e38435aa0f34267427cb3f07e48bc761cb9bea0c3088aabd70a4e0a99937ea3010dce342bf7d7eb90fc277345ad10a9ae7c6e622b1901e9b53a3bcb2cdd8fd7b8b4067fe5a8a6190c2aec94d48615ea0a0a600b3348bf09df90aa50fd637dc1ffbb1d479c4d587b1904d370bf6fd9977e0cad5e8b70f5327b9a61b75dc34a256f65c820501027448f2b775ec18d22014af7ca814d2990db6b8605c763aed05e842f1356b4b08af3a9fd7063dac328df50e108a5aad8a6671e67042f11c16d136c7b0a5b764c56a0330ff7fd991388562154b9ce1fe9a124e5918cc495f3891baa7865af0b3f6b512a043e9effc463e54924ee185a8f948af2d948b162e5857555554dc2a2c991b3cd58f9b8dffb2f7f14920a55cee3f3846c8ab5385a552e90a5fb3f57ab3f92fc7154c33f6b1b487915c7f80ee8e506139b0464d362cf181c94089f5482398c30950e80246d2176351cc84aa6aee0b7e65131045142dfc5c581d665ae5c36b6c5a2af0421a7738a6cebd148848b32be02b12c39d88b865646e42723fab5d63205b772d0f81ad41883bbadc5e6f927392d880870720a249befec4d9caa79d476d1e769c9b976deb97f0b94f642911ec5561367bdd1a870e804ae96c386618a8f0ffb419acfa9241371b7946e4e3f73e5ece9e105e43f8822627518a54e55fd44d57e6cea748799d1f82eb9c4883d6f47731e2dde97ba4d6e97b063a0a022d3cfb31f2c95125b739a8a7b09d737c5b51d8bf6d20ff7775e3c7537ff2aaef409fb6b601305472f47994e74e019e557b3763f4b67e93685535c8a15ff54f40a33a0298f35da5fcd61275179a4c50b471cedae014ec455f19cb4d56e5f23eb99f048fa6205218399fe55e17f3f7729b6e7e18ed0f1b99db525178b79ba06747b621e4fffd99f7e869c3005c252894e14b7c0e73ff33dfdd6aaacd038c12caa8ea0404657749c44f9200ea5f94c59d0f339de556291bac61cf3a0b93a29dc928fea99de5ae6d77d40810767105cf54ff657bd0baa5df9f792f34983d67fb4be5f67b77517613fc671628a6d593f9af277e6d9b05b84334d2357f75627410f7939c763f1718f90b85ae32cbf78b8094a78c93bee1a235ca6d4c887060586654e831c56519bedcfa90b00b45dc9f0ce4a97962ee0fcecd89a3ab96244c7d9902525c204a1438906e9fbe938a6ae0318ae849ebd9203d8e73d4553", 0x1000, 0x40}, 0x4000005) sync_file_range(r0, 0xffffffffe4031744, 0x3, 0x1) ioctl$RTC_EPOCH_READ(r0, 0x8004551a, &(0x7f00000000c0)) 09:55:35 executing program 3: prctl$PR_SET_FP_MODE(0x2d, 0x2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x401, 0x3, 0x80000001, 0x9}]}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0)=0x2, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000100)={0x7, {{0xa, 0x4e20, 0x5dd, @rand_addr="0793e6f719d569201ea86255dc3310cb", 0x5}}, {{0xa, 0x4e22, 0x6, @mcast2}}}, 0x108) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)=0x0) fcntl$lock(r0, 0x27, &(0x7f0000000280)={0x1, 0x3, 0xff, 0x4, r2}) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x4000)=nil) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) write$evdev(r0, &(0x7f00000003c0)=[{{r3, r4/1000+10000}, 0x17, 0x1bd5, 0x2e75}, {{r5, r6/1000+30000}, 0x4, 0x0, 0x101}, {{}, 0x1f, 0x3, 0x5}, {{r7, r8/1000+10000}, 0x0, 0x230, 0x8000}, {{r9, r10/1000+30000}, 0x17, 0x4, 0x10000}], 0x78) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000440)={@broadcast, @initdev, 0x0}, &(0x7f0000000480)=0xc) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x100000001, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x23}}}}, 0x88) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000580)={0x9, 0x7, 0x401, 0x2, 0x4, 0x5}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000005c0)={0x0, 0x3, 0x2, [0x4, 0xba1]}, &(0x7f0000000600)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000640)={r12, 0x8}, &(0x7f0000000680)=0x8) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000740)=r11) r13 = request_key(&(0x7f0000000780)='dns_resolver\x00', &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000800)='\x00', 0xfffffffffffffffa) keyctl$revoke(0x3, r13) flock(r0, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={r1, r0, 0x0, 0x2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000880)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) pipe2(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r15 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r14, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r15, 0x202, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x1ec8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8805) 09:55:35 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000080)="1203ce", 0x3}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) 09:55:35 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002000)="24000000020207031dfffd946fa2830020200a0009000b00031d8508000000a20400ff7e", 0x24}], 0x1}, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x3) sync_file_range(r0, 0x1, 0x2, 0x4) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x6c41, 0x4) 09:55:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r3 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x6, 0x200) r4 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x384e55f7, 0x400) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x4040, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000480)='/dev/swradio#\x00', 0x0, 0x2) r7 = openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) r8 = syz_open_dev$media(&(0x7f0000000e80)='/dev/media#\x00', 0x8, 0x111800) r9 = syz_open_dev$swradio(&(0x7f0000000ec0)='/dev/swradio#\x00', 0x1, 0x2) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/audio\x00', 0x20000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000001000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x7c, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x400}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) unshare(0x600) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r11, 0xc018aec0, 0x0) 09:55:35 executing program 2: r0 = socket$kcm(0xa, 0x3, 0x11) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x8) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000100)={0x7fffffff, 0x6, 0x9}) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000000000000290000003e00000000000000"], 0x14}, 0xfc00) 09:55:36 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x101800, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0x8) r1 = socket$unix(0x1, 0x8, 0x0) r2 = socket(0x14, 0x804, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) getpeername$unix(r1, 0x0, 0x0) 09:55:36 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_type(r0, &(0x7f0000000300)='cgroup.type\x00', 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe}) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0), 0x1000) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x9, 0xd94e, 0x800, 0x8d9, 0x100, 0x81}) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4008550d, &(0x7f0000000100)) 09:55:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x2e, &(0x7f0000000040)={@empty, @loopback, @broadcast}, 0xfffffffffffffe9b) [ 335.368918] vhci_hcd: invalid port number 255 [ 335.373786] vhci_hcd: default hub control req: feff vffff i00ff l65535 09:55:36 executing program 1: clock_getres(0x3, 0x0) 09:55:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000280)={0x0, 0x0, [], {0x0, @reserved}}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x800, 0x200) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x3, r2}) 09:55:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000cea1c5950000000000000000"]}) 09:55:36 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf8, r1, 0x708, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x222c}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}]}, 0xf8}}, 0x4) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x208000) fcntl$setflags(r0, 0x2, 0x1) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x10) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000440), 0x4) [ 335.807952] IPVS: ftp: loaded support on port[0] = 21 [ 336.139292] chnl_net:caif_netlink_parms(): no params data found [ 336.220427] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.227216] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.235791] device bridge_slave_0 entered promiscuous mode [ 336.248165] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.254815] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.263448] device bridge_slave_1 entered promiscuous mode [ 336.306262] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 336.320312] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 336.357854] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 336.366729] team0: Port device team_slave_0 added [ 336.375975] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 336.384955] team0: Port device team_slave_1 added [ 336.391392] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 336.403217] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 336.597756] device hsr_slave_0 entered promiscuous mode [ 336.752760] device hsr_slave_1 entered promiscuous mode [ 336.993608] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 337.001269] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 337.037028] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.043625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.050834] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.057586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.134059] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.142996] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.192373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.208284] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 337.221767] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 337.228840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 337.236999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 337.252380] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 337.258498] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.273494] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 337.280704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 337.290022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 337.300624] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.307182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.324375] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 337.338029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 337.346863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 337.356118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 337.364529] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.371031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.378897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 337.394579] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 337.401640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 337.428800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 337.437398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 337.446734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 337.464092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 337.473624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 337.482133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 337.491355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 337.506735] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 337.515444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 337.524072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 337.539544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 337.550085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.562385] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 337.568474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 337.577180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 337.585904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 337.625422] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 337.653758] 8021q: adding VLAN 0 to HW filter on device batadv0 09:55:38 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000001c0)='logon\x00', &(0x7f0000000180)=@chain={'key_or_keyring:', r0, ':chain\x00'}) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000080)='builtin_trusted\x00') 09:55:38 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000008024, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x2}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = creat(&(0x7f0000000180)='./file0\x00', 0xcc) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x40) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) close(r1) close(r0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x120, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 09:55:38 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc)) clock_gettime(0x0, &(0x7f0000000300)) clock_nanosleep(0x2, 0x40000000000000, &(0x7f0000000100), 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x84000, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000140)={0x9, 0x5, {0x51, 0xffffffff, 0x8000, {0x2, 0xdf10}, {0xbe, 0xa99a}, @ramp={0xffffffffffff80a6, 0x1, {0x6, 0x0, 0x8cb, 0x6}}}, {0x52, 0x4, 0x1f, {0x7}, {0x401, 0x3f}, @ramp={0x0, 0x2, {0xffffffff, 0x8, 0x8, 0x3}}}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @local}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r0, 0x16) 09:55:38 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6af50)={{0x80, 0x3}, 'port0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00\x00b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\b\x00', 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x20000000000080}, '\nL\xea\xa0]\xad\x12n\x00\x00\x00\x02\xa1V\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xd5vX\x97\x01\xa4', 0x77, 0x10000a}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r1, r0) 09:55:39 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x4, @dev, 0x4}, 0x1c) rt_sigqueueinfo(0x0, 0x9, &(0x7f0000000100)={0x35, 0x6, 0x1ff}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000500)={0x1, "b97d656ee7ad256aa5ab56abf24753fc66c5f15a7a79540d985dda7f31df29ca", 0x3, 0xfff, 0x3, 0x40f900, 0x40632}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)={0xd46, 0x5, 0x5, 0x6ce2, 0x9, [{0x8, 0x4, 0x81, 0x0, 0x0, 0xa}, {0x8, 0x3, 0x5, 0x0, 0x0, 0xa}, {0x5, 0x5, 0x6, 0x0, 0x0, 0x400}, {0x2, 0x9, 0x2, 0x0, 0x0, 0x400}, {0x5, 0xbf, 0x9}, {0x0, 0x2, 0x4, 0x0, 0x0, 0x400}, {0x4725, 0xfff, 0x4}, {0x4, 0xffff, 0x7, 0x0, 0x0, 0x2006}, {0x6, 0x1, 0x80, 0x0, 0x0, 0x2000}]}) prctl$PR_SET_TIMERSLACK(0x1d, 0x201) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x4, 0x6, "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", 0xdc, 0x80000000, 0x8, 0x4, 0x8000, 0x8, 0x80}, r1}}, 0x120) 09:55:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f00000000c0), 0x800) r1 = dup2(r0, r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$setlease(r0, 0x400, 0x1) pipe(&(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0xd, &(0x7f0000000080)={0x4000000000000000, 0x3}) socket$packet(0x11, 0x3, 0x300) write$P9_RREADLINK(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000), 0x4) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000100)=""/4096) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1, 0x1, [@dev={0xac, 0x14, 0x14, 0x11}]}, 0x14) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000001180)=0x8000) r3 = syz_open_dev$amidi(&(0x7f0000001100)='/dev/amidi#\x00', 0x100, 0x20000) ioctl$RTC_AIE_OFF(r3, 0x7002) 09:55:39 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x140, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180), 0x4) r2 = accept$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) connect(r2, &(0x7f0000000100)=@nfc={0x27, 0x0, 0x0, 0x2}, 0xfffffffffffffee0) 09:55:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000040)="0f20e035000002000f22e02626400f08b8010000000f01c10f09400f080f1815d01a000066b80d010f00d0410f01cf0f01cf0f07", 0x34}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x4040, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000200)={r3, 0xffffffff, 0x4, r0}) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000140)=""/172) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000017000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000080)={r5, r6/1000+10000}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:55:39 executing program 2: socket(0x5, 0x8000a, 0x8) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x81, 0x268000) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000000)=""/143) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r0}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x7fc0, 0x0, 0x4000000000401, 0x2}, {0x0, 0x0, 0x0, 0x3}, {0x3a98}]}, 0x10) 09:55:39 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'gre0\x00'}}, 0x1e) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/packet\x00') sendfile(r1, r1, 0x0, 0x5b) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000000)={0x100000001, 0x0, 0xffffffff}) 09:55:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@srh, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x1b6) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x9, 0x400, 0x16b, 0x0, 0x3ff, 0x9, 0x9, {0x0, @in6={{0xa, 0x4e22, 0xff, @ipv4={[], [], @loopback}, 0x4}}, 0x401, 0x2, 0x8, 0xfff, 0x5}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB="560000002dbc114269144754e450c8e5b654cd1119efc45fcf7066c5c7883455eec0be451ba80d14fc3a807e8dffe5574964d19501469d96de5bee5a2de7db4bb56046201eff0fd998eeca9863794067cde6833592308ec184e103350482bdceef074a"], &(0x7f0000000040)=0x5e) 09:55:39 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x80, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02000007ba4b72bbdc8aa3507942ea157d6c69eb6238050dd564ea842eaa0579ae41a422efc8b4b716502ce7cadfa220cd50939750ee1e1ca56dce81ff8dbc6ee90a1cd35c953dd249a71e413f695a6190bdb4a13d7a4fafaa6918854651849cac364dd2a665db21a69c15c7e122d072a3905f4d622727173314c221d3b90a576088bb428b7822ee5e29557fe297c9a9dbd53d88cba23606c2c5b020eb3e2ff21f074396f53682ff86ad8e06d06386ab0596c743d566d1"]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000008020000627c05000500000000000a00000000000000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x400000000000003, 0x0) 09:55:39 executing program 2: r0 = gettid() openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) shutdown(r2, 0x0) tkill(r0, 0x1004000000016) 09:55:39 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000180)) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x501042, 0x0) execveat(r2, &(0x7f0000000080)='./file0\x00', &(0x7f0000000ac0)=[&(0x7f00000000c0)='syz0\x00', &(0x7f0000000100)='/dev/uinput\x00', &(0x7f0000000140)='syz0\x00'], &(0x7f0000000b80)=[&(0x7f0000000b00)=')\\GPL\x00', &(0x7f0000000b40)='/dev/uinput\x00'], 0x500) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz0\x00', {}, 0x0, [], [], [0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) 09:55:39 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7fffffff, 0x80) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x3, @remote}}, 0x1e) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={0xffffffffffffffff}, 0x8) unshare(0x10000000) fcntl$getflags(r1, 0x408) [ 339.005012] input: syz0 as /devices/virtual/input/input5 [ 339.056875] input: syz0 as /devices/virtual/input/input6 09:55:40 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x82200, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x83, 0x6c, 0x7fffffff, "be921c734a4d3af0eb161b6b325d3654ed00a8d472d4614f8a949b10854e46bb264d4d018e06f1510d37d29ec9e4d51c5ae2420dd264c7d26121e34b25673d3337506d3638c9874ae38a63d2dfd42e3c1df22e98d512383fca563b7ebd3fca0d6d721053c7f3d6543f0ab71b95499bfb4b93d9b42463bdf8a0f74027f5392f24346955"}) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x1, 0x0, {0x22, 0x10, 0xc, 0x7, 0x7, 0x400, 0x6, 0x12b, 0xffffffffffffffff}}) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000140)={0xf010002, 0x0, 0x0, [0x40000], &(0x7f00000000c0)={0x0, 0x0, [], @string=&(0x7f0000000080)}}) 09:55:40 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67036f75705f69643da00d2eeb12dca7e5700ce95976dd663fc7d923eaef3e2ebfa58cbd32d0e751ce1d4817299485702c271405d1173b8edb5c3df636facd2a142300", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) umount2(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x2002}) 09:55:40 executing program 2: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x1000000000003, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e23, @remote}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x4, 0x0, 0x0, 0x0, 0x8001, &(0x7f00000000c0)='veth0_to_hsr\x00', 0x4, 0x1, 0x5}) fgetxattr(r2, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000001040)=""/4096, 0x1184) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0xb29f) 09:55:40 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) move_pages(r1, 0x0, &(0x7f00000001c0), &(0x7f00000000c0), &(0x7f00000000c0), 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40100, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000180)) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f0000000080)}) 09:55:40 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000100)={{0x7ff}, {0xffffffe0}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x220000, 0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x2, &(0x7f0000000040)={0x1}, 0x8) getpeername(r0, &(0x7f0000000180)=@caif=@util, &(0x7f0000000200)=0x80) chdir(&(0x7f0000000080)='./file0\x00') readlinkat(r0, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)=""/4096, 0x1000) fchdir(r0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000440)="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") r1 = request_key(&(0x7f0000000280)='rxrpc_s\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='/dev/snapshot\x00', 0xfffffffffffffffc) keyctl$get_security(0x11, r1, &(0x7f0000000340)=""/214, 0xd6) 09:55:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000380)={0x2, 0x0, [0x40000022]}) 09:55:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000000)) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000000080)="5295da5dcece6fb69449b0560c0aa8a939a1406da5fdcd4ee7d87fedeae9711a343f1db9222756") 09:55:40 executing program 0: io_setup(0x2, &(0x7f0000000040)=0x0) io_destroy(r0) syz_emit_ethernet(0xffffffffffffff73, &(0x7f0000000000)={@random="03cfe6737dde", @local, [{[], {0x8100, 0xb0, 0xe191, 0x2}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x73, 0x0, @initdev, @local}, @igmp}}}}, 0x0) 09:55:41 executing program 3: r0 = socket$inet6(0xa, 0x80000, 0x1f) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x400, 0x4) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x5, 0x252) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000240)=""/130, &(0x7f0000000040)=0xfffffffffffffe32) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000080)="82693a3e1ebfa27e6159e872ab82c0410602718387696e2be0e0aa4fd04f643849220bef146f42a8c22a8b431269b9614f5325319bb4da0cb755df465f2c75a0f0958b637b2eccfff8a3dac0bf36799544677c3de40079") sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @mcast2, 0x8}, 0x1c) accept(r0, &(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f00000003c0)=0xffffffb5) 09:55:41 executing program 2: ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f905, 0xfffffffffffffffd, [], @ptr=0x70f000}}) r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000280)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xfffffffffffffffa, 0x7fff, 0xffffffff80000001, 0x3, 0x9}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r2, 0xfffffffffffffff7, 0x1, 0x0, 0x2a, 0x3}, &(0x7f0000000240)=0x14) ioctl$TIOCGPTPEER(r1, 0x5441, 0x10000007) 09:55:41 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000100)={0x0, 0xcca3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000001c0)={r3, 0x0, 0xfffffffffffffeff, 0x10001, 0x7f, 0x8, 0x20, 0xffff, {r4, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xda}}, 0x6, 0xfffffffffffffeff, 0x4, 0x2, 0x1}}, &(0x7f0000000280)=0xb0) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="b7d9288a911993f0265df5d11cddff9f538b55b062950be053364b9def11d0012303e7", 0x21d) 09:55:41 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000), 0x2) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @loopback}, {0x2, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x200, 0x0, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x2}) 09:55:41 executing program 0: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000f00f88)) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='w'], 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x62042, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000240)={0x1f, 0x3, 0x4, 0x28000000000000}, 0x8) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000480)={{0x6, 0x0, r2}, 0x1, 0x8}) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x400) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x44) 09:55:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x200000000000081, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)={0x0, 0xf00, @ioapic}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:55:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x20400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x401, 0x400080) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="b8010000000f01d9b8004800000f23c00f21f835010006000f23f8b9800000c00f3235010000000f30650f22d8b8010000000f01c1ad0f01cfc4e2052e9a050000000fc76a00c744240000000000c7442402897c0000c7442406000000000f011424", 0x62}], 0x1, 0x1, 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) accept4(r4, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000100)=0x80, 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 340.801067] QAT: Invalid ioctl 09:55:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x100000000) getpeername$unix(r0, &(0x7f0000000000), &(0x7f0000000100)=0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000003, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendto$inet6(r2, &(0x7f0000000000), 0xfffffffffffffe75, 0x4040, 0x0, 0xfffffffffffffe25) [ 340.870080] QAT: Invalid ioctl [ 341.009619] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:55:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x7ff, 0x1, [0x88]}, &(0x7f0000000040)=0xa) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r1, 0x0, 0x0, 0xff}, &(0x7f00000001c0)=0x18) r2 = socket$inet6_sctp(0xa, 0x200000000000005, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000000000), 0x1, &(0x7f0000001200)=ANY=[], 0x178}, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x3da, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x492492492492523, 0x0) listen(r2, 0x1) r3 = dup(r0) write$vhci(r3, &(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, "f5aba6e5571112b6b95ee223822cda94488e1242aad657ed6f8c51809eced38a2a5efd75cc1b4fc95edaf13d641614710fd8871b4b32054aab79ce056825eafa6544834cf4898d466300ed"}, 0x4c) 09:55:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000968ff6)=@file={0x1, './file0\x00'}, 0xa) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200000, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000002c0)=""/248, 0xf8}}], 0x1, 0x0, &(0x7f00000001c0)) sendmmsg$unix(r1, &(0x7f00000034c0)=[{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)="e69938f7b1ad718abca0b897506da0eb827176aa195640dbf860047260c6bec70eb38823e37766625aac3e7e6218b10d106733fd8456142971ee2e7186e13ab21942c53877758f4bdb57337f11b875876537060a1d544c25bb6025837fac5c6aa5d0ec63206093c1160addc487cd1eaf4050217a5310d7fc797c412f4b2abcef03de932639cbddfd884851b788d40863d5618fc9f31a99a750413b6d346888033d67a1158ff6cdf3f6fa62"}, {&(0x7f00000003c0)="8b3d31a259d09cb9b6494ef5dd4ce27da11122e035f8a24af83be94839f2e5e3594a13c9b951892dc961cc8f343ef5868bb96c4459cfb96fd33747334a6440688098b4d4c5be95df4145bc0438193ed4639f89ad4a8149b1e93b458fbd4ddbd23cadefdb2e1ab0e55fbd62d542726f334daa"}], 0x0, &(0x7f0000000580), 0x152}], 0x1, 0xfffffffffffffffd) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000640)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000c0}, 0x6, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20062bbd7000ffdbdf25160000001c0007000c0004003a040000000000000c00030003000000000000002c0006000800010000000000080001000000000004000200080001000900000008000100ffffff7f040002000c00070008000100001000002c0001001800010069623a76657468315f746f5f6272696467650000100001007564703a73797a3100000000040009000c0005000800010069620000240004000c00010073797a31000000001400010062726f6164636173742d6c696e6b0000140002000800010008000000080001002aa30000480004000c00010073797a30000000001c0007000800040009000000080002000700000008000300890400001c0007000800030001800000080003002000000008000200f9030000"], 0x3}, 0x1, 0x0, 0x0, 0x200000020008884}, 0x0) 09:55:42 executing program 1: uname(&(0x7f00000006c0)=""/210) r0 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x20000) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x2, 0x1000ec}) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000400), 0x4) ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000280)={0x1, 0x2fb08, "235ccabfc6e4a37cdbe3832fd1203631f58f4215897b509b", {0x796e, 0x1ff}, 0x4}) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000003c0)={0x980000, 0x80000000, 0x400, [], &(0x7f0000000380)={0x0, 0x5, [], @p_u32=&(0x7f0000000200)=0x9}}) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xb80) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000480)) 09:55:42 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x5}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={r1, 0x6}, &(0x7f0000000480)=0x8) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = epoll_create1(0x0) r5 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000d36ff4)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000000)=0x4, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000021ff4)) 09:55:42 executing program 1: r0 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000080)={@multicast2, @rand_addr, @loopback}, &(0x7f00000000c0)=0xc) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x80000, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$poke(0x5, r2, &(0x7f0000000180), 0x4) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 09:55:42 executing program 0: mkdir(&(0x7f0000000480)='./file0\x00', 0x0) getxattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00', &(0x7f00000000c0)=""/22, 0x16) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101020, 0x0) 09:55:42 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000180)=0x3, 0xa139) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) 09:55:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001200add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f6400940005002825fda48c00000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') openat$sequencer(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000180)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="14010000", @ANYRES16=r1, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x800}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0xffffffff, 0x8, 0x7, 0x9, 0x7, 0x0, 0x8000, r3}, 0x20) 09:55:42 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000002440)='/dev/snd/pcmC#D#p\x00', 0x1, 0x80) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000002480)={0x1f}, 0x4) [ 341.805791] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 341.866521] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 341.901614] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 09:55:43 executing program 0: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000040)=[{r2}], 0x1, 0x0, &(0x7f0000000240), 0x8) r3 = dup2(r1, r2) poll(&(0x7f0000000000)=[{r1, 0x8028}, {r2, 0x1}, {r1, 0x201}, {r3, 0xa0a5}, {r1, 0x2402}, {r3}, {r3, 0x40}, {r3, 0xc004}], 0x8, 0x6) tkill(r0, 0x15) 09:55:43 executing program 1: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0xaf, 0x0, &(0x7f0000000280)=""/175}, 0x28) r0 = socket$kcm(0x2, 0x6, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syncfs(r0) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000100)={0x6, 0x0, 0x7, 0x8, 0xff, 0x8}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x890c, &(0x7f0000000000)) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0), 0x4) write$FUSE_LSEEK(r1, &(0x7f0000000180)={0x18, 0xffffffffffffffff, 0x3}, 0x18) 09:55:43 executing program 3: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000180)="2200000021000707000000000900e4010a00001e00000000ff080400050015800341", 0x22) setsockopt$inet_tcp_buf(r0, 0x6, 0x2f, &(0x7f0000000000)="69e086d5833be8bf3232dfeef1", 0xd) 09:55:43 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x1, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000001c0)={0x41000000, 0x0, "b9aa87bcdbe4259a88baa6e963e73ae904f100000000be0500000200"}) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x2, 0x9, 0x20, 0x7f}}) 09:55:43 executing program 1: r0 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) unshare(0x400) write$P9_RMKDIR(r0, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x0, 0x2, 0x3}}, 0x14) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f0000000000)) 09:55:43 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f0000000000)=@in, 0x80, 0x0}}, {{&(0x7f00000002c0)=@in={0x2, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='smaps_rollup\x00') ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000001c0)={0x2, 0x9, 0x40, 0xffffffffffff8001}) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x7) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f00000000c0)={0x7fffffff, 0x8, 0x27, "9ff35d8e74195ba906aaf7e1495d722b2b1c78f74e9b5fb2dad372d6704534b8e19667f07ca7e575c98579d66c2b07105f4057187aa8e0fdbf5ab337", 0x2c, "4cf94bd2cf70233fe523378016c53e8afcb37c9abfebcad7a37426a5406828f7ff09ef404d35e3a0502e56b4a8d9fbea9a08d00408bb24c19aee92fe", 0x8}) 09:55:43 executing program 2: r0 = socket$inet6_sctp(0xa, 0x7, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x4e22, @loopback}], 0x20) 09:55:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8000000000b, 0x5) ioctl$FS_IOC_FSGETXATTR(r1, 0xc00c5512, 0x0) 09:55:43 executing program 3: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x800) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x2a0, r4, 0x500, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20cca4e3}]}, @TIPC_NLA_LINK={0xdc, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xab71}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3fae}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200000000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfb2b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x20000001}, 0x24044800) read$eventfd(r2, &(0x7f0000000100), 0x8) read(r2, &(0x7f0000000040)=""/113, 0x71) close(r1) 09:55:43 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x841, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/208) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80100, 0x40) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) setsockopt(r1, 0x5, 0xed8, &(0x7f0000000040)="90574f2220dc5350ccae6170cc5a90e125d1f5da66a1abd3b7544cffcb2e5708b7a93341e8bb5020418460e09d4cc72e1764df3904ac5874cfd0", 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0xa) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000240)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0xa}, 0x5}}, 0x24) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0xd4) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x14e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 09:55:43 executing program 1: mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x1000004, 0x10000032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9cb, 0x40001) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1, 0xffffffff, 0x8, 0x2, 0x2, 0x7fff, 0x4}, 0x1c) futex(&(0x7f0000001000), 0x8c, 0x1, 0x0, 0x0, 0x0) 09:55:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x2}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="5a5792dc8102f390d97297357a6bdb502385a95e96f6b59771569c9950df427e37b91a0c852d0e776dffb702a454e72bdac4471835f21f83aa7b58dc2d17180af4d225be36f306e52d04d68661c3620c21b9e864d4764e0bd3ee4cfda0767c69df2805528840fd7ff489e02ae625f7cb84", 0x71}, {&(0x7f0000000280)="c8096ca0c952b713befb6c1651a411ddb947e5ea26a3b86ebc2bbb1a939ab70295ec582a5fc065e30a2f350772510ab6d6e793516dee496b64f34b497dd8f9bc6ecfe0d3da24fa882646ad54d0861a772d94da62066390b047cdfa4527745fa715d1e1e5dea4ce50ea6a774203f14ebf14b9ef8365448cb238f4ff059f6db655482040ec785bb5f5a445847082f0ede11cb08566ad09d469a110957f78e976533d27b7e7194088340a73ba1abd16ff47f73d615905a3ac893ca07eef0be0c3d98d1fa2fd58fa143caa42fc26ef4a26c5546a209b30fab14f", 0xd8}], 0x2, &(0x7f0000000380)=[{0x40, 0x119, 0x5, "017a0f486a3acaefe99518978d77560667c1d3f47967f661b69dbc1d2fae5e7f69c8d730ef189a7c01"}], 0x40}, 0x4) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030807031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x404000, 0x100) ioctl$BLKGETSIZE64(r3, 0x80081272, &(0x7f00000000c0)) 09:55:46 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0x4008af25, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000100)=""/237) 09:55:46 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x841, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/208) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80100, 0x40) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) setsockopt(r1, 0x5, 0xed8, &(0x7f0000000040)="90574f2220dc5350ccae6170cc5a90e125d1f5da66a1abd3b7544cffcb2e5708b7a93341e8bb5020418460e09d4cc72e1764df3904ac5874cfd0", 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0xa) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000240)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0xa}, 0x5}}, 0x24) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0xd4) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x14e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 09:55:46 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x100) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)}}) 09:55:46 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xc1, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x6, 0xffff, [], &(0x7f0000000000)=0xfffffffffffffffc}) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000140)={0x0, 0x6, 0x401, [], &(0x7f00000000c0)=0x2}) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000240)={0x0, 0x9, 0x7fffffff, [], &(0x7f0000000200)=0x8}) 09:55:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x1, 0x800}, {0x5c8087e8, 0x3}, 0x0, 0x4, 0x2}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f0000000180)=0x54) r2 = dup(r0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x4, 0x1, 0x3f, 0xb74}, {0xab8, 0x1ff, 0x1, 0xc1b}]}) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000240)=""/112) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, r3, 0x601, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}]}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000000) setsockopt$inet_dccp_buf(r0, 0x21, 0x0, &(0x7f00000004c0)="97de2c5e929b3371c11749a2733e7c5c6342f85c97ade64462116cc76bf080ee20c3bd7fb01ba68060ca6d78004fdcc9e2a44920e42b49ffd9f147d2f3fbb40da5475f6d4ead6b5e0462711aecc4a51111abae19168db39824269856f8c080d19e4d8344c3b8b6302ff58c23e8dcb01bdb9abfc22893f480a2d842a97ee3c60a7c0fd3aa2d40901797eee3e2cb8e4328c4187acf8ff9", 0x96) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}}, &(0x7f0000000640)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000680)={r4, @in={{0x2, 0x4e22, @rand_addr=0x4}}, 0xbfd, 0xffffffff}, &(0x7f0000000740)=0x90) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000780)) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000007c0)=0x7, 0x1) recvmsg$kcm(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000800)=""/191, 0xbf}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001900)=""/103, 0x67}, 0x10001) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000019c0)='\x00') setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000001a00), 0x4) sendmsg$nl_generic(r2, &(0x7f0000001c40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a80)={0x144, 0x14, 0xde3f9720567c5011, 0x70bd25, 0x25dfdbfd, {0x13}, [@typed={0x8, 0x6, @ipv4=@rand_addr=0x3}, @generic="bb910b64e70dcb2d0c904ee93e7e61fdf594cd105f162733c56f842206eb856b0ed3fa49a1758a28cc95263060c751b79de8251cbbcdc06d0570d3269a4fb559bb636b38da5257d445ee8440bf5b54ac470dcab90a834b8c5641c714b1b929c75e4c49f163a0e2e788df2cb6f5c5b6e2538133411c9901c14e97ae31631cd7152dbfe097b819d793e8ffa9487fc0de99af32aa41f47c68b0200ffa82ecab2cbfb01f167245c7bd14fb5355934c4addb2a113c59e2c97318d72a268601c147c362e52ef00f27643", @generic="bc3c1b1f321d8173c0a5fcb744e7d7cd678385a5dca167ab6379bf13f5fa32c9d8568c2a12fd16a90859a6e538d435b4a7176f141d529068c728767445dce49db6dd0c2e3501aefff31cd1af78bbadfab112a7bd2e7ca476", @typed={0x8, 0x75, @ipv4=@multicast2}, @generic]}, 0x144}}, 0x4004) getuid() ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000001c80)) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000001cc0)) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000001d00), &(0x7f0000001d40)=0x4) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000001d80)={0x0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000001ec0)={r5, 0x6, &(0x7f0000001dc0)=[0x0, 0x15e6, 0x1, 0x29985ac2, 0x5, 0x5], &(0x7f0000001e00)=[0x0, 0x1, 0x304, 0xffff], 0x24, 0x6, 0x8, &(0x7f0000001e40)=[0x2, 0x7e, 0x7fff, 0x4, 0x1f, 0x80000000], &(0x7f0000001e80)=[0x3, 0x496]}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000001f00)) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000001f40)=""/4096) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000002f80)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x2222008}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x1c, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) 09:55:46 executing program 1: r0 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x200, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000003c0)={0x0, 0x6a, 0x8}) keyctl$dh_compute(0x17, &(0x7f0000000440)={r1, r0, r1}, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x40) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f0000000300)={0x3, &(0x7f0000000240)=""/149, &(0x7f0000000180)=[{0x2, 0x17, 0xe7, &(0x7f00000000c0)=""/23}, {0x8001, 0x22, 0x40, &(0x7f0000000100)=""/34}, {0x0, 0x1000, 0xaf, &(0x7f0000000600)=""/4096}]}) 09:55:46 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = fcntl$dupfd(r1, 0x0, r2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000280)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @local}}}, 0x108) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newsa={0xf0, 0x10, 0x721, 0x0, 0x0, {{@in, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x500]}}, {@in=@broadcast, 0x0, 0x833}, @in6=@empty={[0xa]}, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 09:55:46 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x841, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/208) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80100, 0x40) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) setsockopt(r1, 0x5, 0xed8, &(0x7f0000000040)="90574f2220dc5350ccae6170cc5a90e125d1f5da66a1abd3b7544cffcb2e5708b7a93341e8bb5020418460e09d4cc72e1764df3904ac5874cfd0", 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0xa) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000240)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0xa}, 0x5}}, 0x24) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0xd4) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x14e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 09:55:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nullb0\x00', 0x0, 0x0) dup2(r1, r0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x7) pread64(r0, 0x0, 0x0, 0x0) 09:55:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x26d) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xd, 0x23, 0x4, 0x1, 0x0, r0}, 0x2c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0xa2) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)={0x37, 0x6, 0x0, {0x0, 0x4, 0xe, 0x0, '/dev/snapshot\x00'}}, 0x37) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) 09:55:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000400)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xee01, 0x0, 0xee00]) r5 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0xe4b91968054cbd9) r6 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, &(0x7f0000000600)=0xc) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000700)=0x0) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000800)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000840)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000940)=0xe8) fstat(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getpid() r16 = getuid() stat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000013c0)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000014c0)=0xe8) r20 = getgid() fcntl$getownex(r0, 0x10, &(0x7f0000001500)={0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0}, &(0x7f0000001580)=0xc) lstat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001680)=0x0) fstat(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001740)={0x0, 0x0, 0x0}, &(0x7f0000001780)=0xc) r27 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000017c0)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f00000018c0)=0xe8) lstat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000003240)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003280)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000003380)=0xe8) getgroups(0x6, &(0x7f00000033c0)=[0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000035c0)=0x0) fstat(r0, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x0}) r35 = getgid() fcntl$getownex(r0, 0x10, &(0x7f0000003680)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000036c0)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f00000037c0)=0xe8) r38 = getegid() r39 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003800)={0x0, 0xdaf, 0x10}, 0xc) sendmmsg$unix(r1, &(0x7f00000038c0)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000000c0)="4f42ed1fa9a43cfe41", 0x9}, {&(0x7f0000000100)="6bc6013393d3f48203411b2ac48034293de19e3ccad97b5ed0137e076b4b103807a11798685763d2964308", 0x2b}, {&(0x7f0000000140)="e531632d2e460cf2770adcb94ad27f93819baf8ddca40f3bfd227abc9711ef202d72d9d8dec5caac428fb99b3e2d4a7ec58997b6efadd81431d84d241e494c8d57304e4be8d1ff869eaf641f2f526b76e493c3bcec17b46381ecd80961d348ccf8e985636239a2", 0x67}, {&(0x7f00000001c0)="3c41ccdc877f7da2633992afeaffc0138bf23660cc2da33fade174182b9157e8dbb7601903c8cb0e2990f90d833405995aa34343fc5febf4280743fb0fc8a096872e24eaec62e47d7568188c48ebc4089b494f0a60e8627bec3dc58812d26ca6d660c8de2a910daacd802f5dd7f773d9c5c1f29a620c805590ee9f7b094036b4bb0c75e3604f185683d3c2438cf7e1ee4cd88bc4df289c0bee28cb5918d664dfcf2f12aa807d76ad197f971f2f0484f73d67b70cd800b8342683341077c9e011cb87c844333971fefb230e21ea2138134b5690c9f146c1", 0xd7}], 0x4, &(0x7f0000000a00)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x28, 0x1, 0x1, [r0, r5, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x18, 0x1, 0x1, [r0]}], 0xf0, 0x4}, {&(0x7f0000000b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000b80)="0258c6d83ab89ac1c9d6c68ae28b19d38047447a0ac5144a18d5ef6d612342bdabc16d93cdcf6b2089e7621d232d9b7965f9a7612b24fb28b6c8e46c4be453e6b28dc56863afe09960d9fa65800827c95dfc14017fc91bd888addf6242bec9716b456684afad97a7901a1480ecafb33bc70fab0077a266811aa793818c32afa20a7d414d35004c11345e91aa066bf9591ed62d8ec12e1e7cb2c6fe826f0e76eaab5e00792be8e07ce5f2b318d4fed0fc477b5e6234f81381953b4be99b37bfc9d032780720e0311141ea2663bfc1922ce9f3fb78ed6c", 0xd6}, {&(0x7f0000000c80)="0b2de9e3319998dc0c55d931bd1069174f1614d89bbcf22998f5fd0d87857f5ccb91f8222eac789645f4178e31cc7ef9203ee40f3f7c49c0eebaaa55b020b34e12c18b937dd568dee12fa7f5f703d9d32ba85c1437840a9bd6527b3d9a4f9b7e61dfd6f7e8ee8e13c80527b6bc129aa3c0081a2006f0c8ca12dcdebfe782a2dcecd1db53cce1b28e3d24b10c6df1e732a083434211eedc1bebc3dd31c92d2fc7c01e987729176b489f0f63349d259a919270749358ba77e73e", 0xb9}, {&(0x7f0000000d40)}], 0x3, &(0x7f0000000dc0)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0x58, 0x4}, {&(0x7f0000000e40)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000ec0)="acd919a404dba5314de9f0f59f7a534fc6f6a961d7c1dbb21ddbb22c93e07a7105fe09a2ee3baf94ab0bfd07ef6fc6d203969174b0c5a690ccdaa7392a54a3050c67c47af0ae8a2b9624a57c4fe53d3914bb4009c3346f4ce8c5bb39c488d7b941e077e26732f5f9159114d43fd5", 0x6e}, {&(0x7f0000000f40)="5f8f1b6860a6471938cdd5b16fc3ea97f871e9b2de2b3b372340630eecf1ba2310e739c06846", 0x26}, {&(0x7f0000000f80)="90ea17975aa84c79a376b3676d9f62f9d2b82f7721b809bc220ee56784ce999e", 0x20}, {&(0x7f0000000fc0)="ac9ce9b61729dd41c613a37d64ef013b882fc6dc6375febc58e63e6c04aca71a612cc984342d8400d2e51b1f8737119cb8235ba70fe31478e4d24a78d850ce8cf77b4dc308b36fc035c600ba6fc0c6cef3a15a89536d9a31378a473ccb2a3e2aa0c764832587536742bb34d0f40941eec2fef724ccfc8c11fcb19940090b7632d84f42b7f54aa949af95a3d74738096d", 0x90}, {&(0x7f0000001080)="9b47b3ae15276d53fcc89dad9c2f174e7bfee1a4c985c69b36dcc13327309feb734d0e60", 0x24}, {&(0x7f00000010c0)="8ed521e7ee06fde6550d7575a4f4041c9971b22ecbe338f44346638a690ce18ba3d17c1857f23fb870b3444fcb4800e4909de0db3b40c7b80df75f3a2e0a313dd57d43297aad267afa8b35657e221ceb8f6a70f004bb2bfc386718f6ffd429b4a2b7456916b7f79aca699c6b901fc349ae097fe18b6601e4cfa6700508d7ccb497aa5dabe91d09a90b8d479327568ad2af65649b2dff5524aa1483264ce7ea4d3249597f24fb6b193cec1bc4e12e89f1022e7a82dd8a5bc42297a2a55111b9044657e011f84970e161fcd5", 0xcb}, {&(0x7f00000011c0)="ea0944828ae65559d70a3ee1a6c9d0bc0ea2f5b89e9e8945479214fdb5ecb889ba58bb3cecbd3c28f07ede44245fb965a437e477e8085414a1a2a5e97deffc9b762d7699d328d65dcccfe9eb9fea266a9b94e97419eb581f863e01aa0bdd7a18960c21c877f9673d2f79cd2bf44d1200b84dcc55591a9fc41781f9ee6e42a261ff2a526692186850991da1591b50cddec86405c738", 0x95}], 0x7, &(0x7f00000019c0)=[@cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @cred={0x20, 0x1, 0x2, r24, r25, r26}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r27, r28, r29}, @rights={0x18, 0x1, 0x1, [r0]}], 0x148, 0x44000}, {&(0x7f0000001b40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001bc0)="7c87abd9485eb9f3a186e909e965249596557ef4cc0d981797c75483a9168d41d06403f446fccf093b2c8e00734e801e6536ee2b17cfbf45d1fb62d6b7f5032ada68c25bf7bb420e8969a43668de4e9bb7bb1a66032a1c1e2c", 0x59}, {&(0x7f0000001c40)="1caad5aac0dacea1908278f1eaad1aea5abbf7c301db394de82c2d78957a69c2dd3ef39e56d7d5a6f4b83d3690c79c4510004f13b347f69b910bf2394483", 0x3e}], 0x2, 0x0, 0x0, 0x88c0}, {&(0x7f0000001cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003180)=[{&(0x7f0000001d40)="b75b7859d004074006d91799e7b800", 0xf}, {&(0x7f0000001d80)="7f39516ce2fd7453b558b6e59d60d896248d372b4c7ea6e117310f0944b543a112eca4a91d8980006731e9ea797367f774959d74089eea029292f866f9a332b9ebf02ea906064277f5f709cf3668a00f9ca88e341643aefa4226f6a7a14c851433c3192cc6fdbbcfabcb6bb16ba1e37309", 0x71}, {&(0x7f0000001e00)="f86b7f69a327d39b24deea351fdaca01f629e065e4d6f0a24e23b1186a6d67d5355ba4968a6cae61458cca3089465a513d1cd679aa4b", 0x36}, {&(0x7f0000001e40)="99c142d4bc10d224daf11400817c7223475c1f7d936839fa0c41fa7f30fb23e0671e6c6b0680f5611b37f5b2623cb97852bc6506d0ec6738eb9fe4bf926a47e2884a4954cd16a2153d", 0x49}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000002ec0)}, {&(0x7f0000002f00)="27fb392838b8ad6fda99dafacf9b1892fe6c80b34c7782f2c81af6f18b02c74dd5a92c4e8a7c3f22f0a9e2729f763ea0912f971b2fb5d3a831f96783f28d7924cc5176cf0edd131a", 0x48}, {&(0x7f0000002f80)="bb4892772e43a7206501b0a8bb86c2dd4438869c5aa1939648f85fad8f782fb00d3777758ef506b8558bd23b47eb39b321c3790efd7c5f8b844387e9a880f4a6bffc6df074fbf3c27f6607cc343dc194cab90015fbb6090e10dd45efabf67eab8823f989685e259828798c1c2d210e60e7dd495c9ba48c2c28c4aeca0be13ed569ef2ff475de71d47e3acd07e2398bedc5b1c27af60ada0f62e4b02d19903cbe22e47fa5488e7824577a5242b75c42ad62fbddfca1664e1f4b153683d38e37e44fe7600e2bfaf17399ab0be06ad442092e759f8e2da06259ca", 0xd9}, {&(0x7f0000003080)="fd7db3c6cf543f02cbe84ebd337b9c020dc7579a9528e79ea90e129110232ed4db42bccc2b253a96c97d52de9da4301122f225c4c17560e837d29adcd475761dafd19dcc5104db8df121340703ce33e38cacdb3bfbd44dc8929b58d808afbef1e5ef82db6e79e5e55ee152f488711b4dca88b0b784f50a90580d602c3f8ae307c17b03367b1c197683b9bdbcf1d76190605fc17770cf130f3a1f247314b70faf5d2d7903ede2737284864600a6b298b1d23182c080fc8077efcbdcd6b0a3134bc6f73870e0463b153d1c9cbf264e564337d28d214b264d8c74fdbbd381c992e2667011f15c", 0xe5}], 0x9, &(0x7f0000003400)=[@cred={0x20, 0x1, 0x2, r30, r31, r32}], 0x20, 0x41}, {&(0x7f0000003440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003580)=[{&(0x7f00000034c0)="9053a7a214c38a5d82bdc5b67a1756529febbccc1f945c8df3e7a4524e294cf769e6c9c88f5754cc29629b4d8391800e55d4358f4dda7213ee59c1327407bd826723de5705cdfbf209b1af57220365853597f7616b00166c39d4002ec52def339e8e8458486f02b97317165005b45085f1098f10cfaee845a10540d87affe7f3579a97e19bc766f170efe312ca432d9b4131c6d841bdedecf573e28e5b3db86f4788878b032ae15c36cc462aad9d6b3d023ab67e", 0xb4}], 0x1, &(0x7f0000003840)=[@cred={0x20, 0x1, 0x2, r33, r34, r35}, @cred={0x20, 0x1, 0x2, r36, r37, r38}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r39, r0, r0]}], 0x70, 0x4000}], 0x6, 0x8000) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) 09:55:46 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x841, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/208) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80100, 0x40) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) setsockopt(r1, 0x5, 0xed8, &(0x7f0000000040)="90574f2220dc5350ccae6170cc5a90e125d1f5da66a1abd3b7544cffcb2e5708b7a93341e8bb5020418460e09d4cc72e1764df3904ac5874cfd0", 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0xa) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000240)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0xa}, 0x5}}, 0x24) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0xd4) connect$inet(r3, &(0x7f0000e5c000)={0x2, 0x14e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 09:55:46 executing program 0: socketpair(0x5, 0x807, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_out(r0, 0x5462, &(0x7f0000000040)) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@local, @dev={[], 0x22}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {}]}]}}}}}}}, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) 09:55:47 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400100, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000080)) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x8}) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4600000000000000000000200000000000000000000000000000000000400053f41afa4d09a20100000000000000000000000000000000000000003800000000000000d6e700000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000"], 0x78) 09:55:47 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x841, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/208) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80100, 0x40) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) setsockopt(r1, 0x5, 0xed8, &(0x7f0000000040)="90574f2220dc5350ccae6170cc5a90e125d1f5da66a1abd3b7544cffcb2e5708b7a93341e8bb5020418460e09d4cc72e1764df3904ac5874cfd0", 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0xa) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000240)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0xa}, 0x5}}, 0x24) openat(r2, &(0x7f0000000200)='./file0\x00', 0x40000, 0xd4) 09:55:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x5d, 0x20, r2}) r3 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000005280)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="612269a26b8c4b582ce84856c85a8862770ac6e1f5fd3c6e09617c88141d5c61", 0x20}], 0x1}], 0x1, 0x0) readv(r3, &(0x7f00000007c0), 0x0) r4 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x10080) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x400, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x32f}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) [ 346.642357] sd 0:0:1:0: tag#359 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 346.650535] sd 0:0:1:0: tag#359 CDB: Read(6) 08 00 00 00 00 00 [ 346.654468] IPVS: ftp: loaded support on port[0] = 21 [ 346.870799] chnl_net:caif_netlink_parms(): no params data found [ 346.882269] sd 0:0:1:0: tag#366 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 346.890420] sd 0:0:1:0: tag#366 CDB: Read(6) 08 00 00 00 00 00 [ 347.016367] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.022979] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.031506] device bridge_slave_0 entered promiscuous mode [ 347.066422] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.073075] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.081605] device bridge_slave_1 entered promiscuous mode [ 347.119522] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 347.131662] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 347.166553] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 347.175576] team0: Port device team_slave_0 added [ 347.182257] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 347.191158] team0: Port device team_slave_1 added [ 347.198325] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 347.207052] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 347.277653] device hsr_slave_0 entered promiscuous mode [ 347.325025] device hsr_slave_1 entered promiscuous mode [ 347.523625] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 347.531283] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 347.568587] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.575193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.582506] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.589058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.705889] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 347.712668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.730270] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 347.748880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.760546] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.770331] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.786249] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 347.808786] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 347.815037] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.837112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.845588] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.852178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.872044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 347.885155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 347.902318] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 347.910161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 347.919076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 347.927778] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.934365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.943134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 347.952842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 347.974229] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 347.988317] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 348.002493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 348.016634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 348.026582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.036477] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.049396] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 348.057556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.066910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.075921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.085032] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.094087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.102839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.112142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.120856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.130796] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.139143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.197089] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 348.223895] 8021q: adding VLAN 0 to HW filter on device batadv0 09:55:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:55:49 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x1, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x10) ioctl$RTC_PIE_ON(r0, 0x7005) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0) 09:55:49 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x841, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/208) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80100, 0x40) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) setsockopt(r1, 0x5, 0xed8, &(0x7f0000000040)="90574f2220dc5350ccae6170cc5a90e125d1f5da66a1abd3b7544cffcb2e5708b7a93341e8bb5020418460e09d4cc72e1764df3904ac5874cfd0", 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0xa) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000240)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0xa}, 0x5}}, 0x24) 09:55:49 executing program 0: capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000140)) r0 = getpgid(0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x40, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x0, 0x2, 0x3, 0x1ff, 0x9, 0x17, 0x7fffffff, 0x5, 0x1, 0x4, 0x3, 0x36c00000000, 0x9}, {0x6, 0x8, 0x4, 0x40, 0x8, 0x2, 0x505, 0x8, 0x8, 0x9, 0x4b3d, 0x9a, 0xffff}, {0x4, 0xfff, 0x6, 0x3, 0x2, 0x401, 0x4, 0x5, 0x1, 0x0, 0x3, 0x4, 0x7}], 0x100}) ioprio_set$pid(0x1, r0, 0x0) 09:55:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)) r2 = syz_open_pts(r1, 0x0) flistxattr(r1, &(0x7f0000000100)=""/155, 0x9b) dup3(r2, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) 09:55:49 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x841, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/208) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80100, 0x40) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) setsockopt(r1, 0x5, 0xed8, &(0x7f0000000040)="90574f2220dc5350ccae6170cc5a90e125d1f5da66a1abd3b7544cffcb2e5708b7a93341e8bb5020418460e09d4cc72e1764df3904ac5874cfd0", 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0xa) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) setsockopt(r3, 0x0, 0x4, 0x0, 0x0) 09:55:49 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x82, 0x0) pread64(r0, &(0x7f00000000c0)=""/16, 0x10, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000000)=[{r1}, {r2, 0x1}], 0x2, 0x0, 0x0, 0x0) 09:55:49 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x40000000, 0x20000001100082) r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000002c0)=0x0) r3 = getpgid(r2) ptrace$getregset(0x4204, r3, 0x201, &(0x7f0000000000)={&(0x7f0000000200)=""/171, 0xab}) pwritev(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)='\'', 0xfffffffffffffd38}], 0x1, 0x1081806) sendfile(r0, r1, 0x0, 0x2000005) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="000425bd7000fedbdf250f000000240002000800060001000000080007004ed0e4ff81b9ceb80500000003000300080005002f00000008000400060000001400010008000b007369700008000500000000000800040000000000240002000800040001000100080003b7d41cbae1bb1ad1da7ad3c87157be0000000000080039e64e23000008000b000a00000000000000000000000000000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x4004}, 0x1) fanotify_init(0x20, 0x2) [ 348.854178] kvm: emulating exchange as write 09:55:49 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00') setns(r0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:modem_device_t:s0\x00', 0x24, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x103001, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x5, 0x0, 0x1, 0x6, 0x2, 0x9, 0x80, 0xffffffffaa5173b1, 0x7, 0xffff, 0x0, 0x0, 0x4}, {0x5, 0xfffffffffffffffc, 0xfe, 0x0, 0xf5, 0x4, 0x2, 0x5, 0x9, 0x4, 0x2, 0x401, 0x4}, {0x7ee, 0x6, 0x10000, 0x9, 0x8001, 0x10001, 0x57eb, 0x5, 0x0, 0x812b, 0x6640bbe3, 0x2, 0x400}], 0x7fffffff}) sendmsg$can_raw(r1, &(0x7f0000000200)={&(0x7f0000000140), 0x10, &(0x7f00000001c0)={&(0x7f0000000180)=@can={{0x2, 0x2, 0xd9, 0xc58f}, 0x4, 0x1, 0x0, 0x0, "73b7e505fff61dc9"}, 0x10}}, 0x4000010) 09:55:50 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x841, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/208) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80100, 0x40) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) setsockopt(r1, 0x5, 0xed8, &(0x7f0000000040)="90574f2220dc5350ccae6170cc5a90e125d1f5da66a1abd3b7544cffcb2e5708b7a93341e8bb5020418460e09d4cc72e1764df3904ac5874cfd0", 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0xa) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) 09:55:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc40003c123f3188a070") r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7f, 0x408000) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000240)="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") ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000000c0)) r4 = dup2(0xffffffffffffffff, r1) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000003c0)={0x2, 0x0, [{0x1, 0xfff, 0x0, 0x9, 0x3ff, 0xff}, {0x7, 0xfffffffffffffffd, 0x1, 0xbf80, 0x100, 0x55, 0x6}]}) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000040)='./file0\x00', r3}, 0x10) 09:55:50 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:55:50 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x82, 0x0) pread64(r0, &(0x7f00000000c0)=""/16, 0x10, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ppoll(&(0x7f0000000000)=[{r1}, {r2, 0x1}], 0x2, 0x0, 0x0, 0x0) 09:55:50 executing program 0: unshare(0x2000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0x4008ae06) ustat(0x81, &(0x7f0000000000)) 09:55:50 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x841, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/208) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80100, 0x40) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) setsockopt(r1, 0x5, 0xed8, &(0x7f0000000040)="90574f2220dc5350ccae6170cc5a90e125d1f5da66a1abd3b7544cffcb2e5708b7a93341e8bb5020418460e09d4cc72e1764df3904ac5874cfd0", 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0xa) 09:55:50 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = dup2(r0, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/19, 0x13) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) read$FUSE(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x200, 0x32, 0x4, 0x100000001, 0x1000, 0x2, 0x7, 0x2, 0x9, 0x0, 0x9, 0x7ff, 0x3f, 0xb44, 0x7fffffff]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e22, 0xaa0, @local}}, 0x8dc, 0x2}, &(0x7f00000003c0)=0x90) 09:55:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000240)={{0x0, 0x1, 0x8, 0x3, 0x7}, 0x80000001, 0x100000000, 0x7fff}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x20001, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x4) write$P9_RVERSION(r3, &(0x7f00000013c0)={0x15, 0x65, 0xffff, 0x1ff, 0x8, '9P2000.u'}, 0x15) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000001400)={r3, 0x4}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x1000, "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"}, &(0x7f0000001300)=0x1008) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000001340)=r4, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f0000dc5f98)) ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f0000001380)=0x4) 09:55:50 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000d40)={0x0, 0xffffffffffffff0a, &(0x7f0000000d00)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190021040000000000000000ff0800000000000000000000000000010000000000000000000000000000000100000000000000000200120000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090f77b3a5350c047a4b0de3c9658a5199fceab08fd000000659685fc06f38d7418555d22384b8df31f9f11f5742e9fe5e5f318e7d8cef634d04b"], 0xb8}}, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 09:55:50 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x841, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/208) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80100, 0x40) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) setsockopt(r1, 0x5, 0xed8, &(0x7f0000000040)="90574f2220dc5350ccae6170cc5a90e125d1f5da66a1abd3b7544cffcb2e5708b7a93341e8bb5020418460e09d4cc72e1764df3904ac5874cfd0", 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) [ 349.947946] Unknown ioctl -1068477435 09:55:51 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000000c0)=""/4096) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="1d01000000000000000015000000"], 0x14}}, 0x0) 09:55:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:55:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf64(r0, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x80000000, 0xfaa, 0x9, 0x8, 0x0, 0x3, 0x3f, 0x80000001, 0x191, 0x40, 0x24d, 0x8, 0x10000000000000, 0x38, 0x1, 0x8, 0x80, 0x200}, [{0x60000002, 0x8, 0x1, 0x3, 0xa6, 0x3ff, 0x9, 0x4}, {0x6, 0x8, 0x6, 0x9, 0xfffffffffbaae922, 0x8, 0x9, 0x9}], "30f4cc8bb7960657fb6f1c309434a072bfc21a49fb1793e23c4bb9a818eea6321bdf00c59186f771aa264f18d39a31eebcfa5a0fc8dc8df7513c9b57b3e26dc78654e30629123f6b62a3177353dba84d7e5c2b8933b293b58117a41181f35c0e32a7758155ae696396f17cfae6d0af6e4069e6c7db733f838445ec62de642085db8dba4a77a024714ef5f2fa69d3e0750e2efa095c0d2ef7a6e0c2c9cc4650afe42ed876effab33e200add259d943993a86945f76a1d3ae7af496c1285528175903f67dec3175557927192c85bce8e9f69cc63fed3dcd94ca36efaaa808e2eb584311984", [[], [], [], [], [], [], [], []]}, 0x994) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f0000000100)=""/34, 0x22}, {&(0x7f00000001c0)=""/120, 0x78}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000140)=""/48, 0x30}, {&(0x7f0000000340)=""/6, 0x6}], 0x6, &(0x7f0000000400)=""/134, 0x86}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x2ff, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100210100000000000000040000000800150000000000"], 0x28}}, 0x0) 09:55:51 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x841, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/208) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80100, 0x40) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) setsockopt(r1, 0x5, 0xed8, &(0x7f0000000040)="90574f2220dc5350ccae6170cc5a90e125d1f5da66a1abd3b7544cffcb2e5708b7a93341e8bb5020418460e09d4cc72e1764df3904ac5874cfd0", 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 09:55:51 executing program 3: r0 = socket(0x1d, 0x0, 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="92daeff237f8cc8f288ad0f85badf4a3", 0x10) 09:55:51 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x841, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/208) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80100, 0x40) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f00000000c0)) setsockopt(r1, 0x5, 0xed8, &(0x7f0000000040)="90574f2220dc5350ccae6170cc5a90e125d1f5da66a1abd3b7544cffcb2e5708b7a93341e8bb5020418460e09d4cc72e1764df3904ac5874cfd0", 0x3a) 09:55:51 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)=@nfc={0x27, 0x1}, 0x80, 0x0}}, {{&(0x7f00000001c0)=@vsock, 0x80, 0x0}}], 0x2, 0x0) 09:55:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:55:52 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)=""/236) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000001c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x200, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(r2, 0x1, 0x1, &(0x7f0000000240)="c35c21bcad673db3df30b5bb9769563b6d25f250072391bc00a38054d15d313d896d0e2f143293c75f1bc555ce1ee3b716e12ee812ba404b37daccaf7ec43db4ff8a2efd7cc42484c3843d8726eb4c17626d1b69d25f8a49fd4f07ba1ef1a9fceeeeab468841a8668b5781b0f59a13214e02c8d022b68970191ea884c9b3d5399ef10b4d62846713183ee771f904a408544cf6c37a435f6884ebd6cdd83d1453fec3828653efd5e1ca797a079e067fcbedb04c03e2b77289ae3e6c364186fdd331cf95c32fd4e9ce7bdc9b4bb1b713b8a48f9d16ee0eb0ae80053f7c49fc458018e8f3ab1591141c4a1aca0cb8fdb7ab194e9727", 0xf4) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mixer\x00', 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0xffff, 0x466, 0x100, 0x56, 0x8, 0x3, 0x6, 0x588f, 0x2bb, 0x38, 0x2b, 0x6, 0x7, 0x20, 0x1, 0x4, 0x3, 0x80000000}, [{0x6, 0x2, 0x5b, 0x6d, 0x0, 0x6, 0x3, 0xffffffffffffff24}], "a91ee2df7da9c524ae75f190ad44e098eaf2dc2e16133b396198249fcf7fdbde90deb215d302cf8a0c6947147852c3e0ee623e7841d45559871f737a092dd47b5440fe822ff88a2b90eb5f470fd275fc0339726fef94a9cae9c87b106d032a9e68021dfb324b05fed1705f607389399bd7bea113e5e198213c3722005740c3c652f6729bc7853800bfeadef8a5e3bc7b82d65e680c54ccce0ee3dc3f296a57cda4b9021056b9411aed4b756bcbef644b2fff8ef3909adfdd0eaf4be61c7f9a21eb4076b67a991308bbedba40d50899df0b5cda3c750c178498", [[], [], [], [], [], [], [], []]}, 0x931) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000cc0)=""/167, &(0x7f0000000d80)=0xa7) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/vfio/vfio\x00', 0x408000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000e00)={{{@in=@local, @in=@multicast1}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000f00)=0xe8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) semget(0x3, 0x3, 0x22) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000f40)={0x9, 0xa, 0x5, 0x100000000, 0x0}, &(0x7f0000000f80)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000fc0)={r6, @in6={{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x200}}}, 0x84) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001080), &(0x7f00000010c0)=0x4) accept$inet(r3, &(0x7f0000001100)={0x2, 0x0, @broadcast}, &(0x7f0000001140)=0x10) r7 = socket$inet_smc(0x2b, 0x1, 0x0) fchdir(r7) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000001180)=""/149, &(0x7f0000001240)=0x95) prctl$PR_GET_NAME(0x10, &(0x7f0000001280)=""/178) getsockopt$inet6_udp_int(r4, 0x11, 0x6f, &(0x7f0000001340), &(0x7f0000001380)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000013c0)={r6, @in6={{0xa, 0x4e24, 0x2, @mcast1}}, 0x80000001, 0xffffffff}, &(0x7f0000001480)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000014c0)={0x400, 0x2, 0xff, 0xfc44, r8}, &(0x7f0000001500)=0x10) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000001540)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000001580)=0x2, 0x4) sync_file_range(r0, 0x19978c54, 0x8001, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000015c0)={r8, 0x8}, &(0x7f0000001600)=0x8) symlink(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)='./file0\x00') 09:55:52 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) unlink(0x0) unlink(0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) 09:55:52 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x841, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/208) socket$inet6(0xa, 0x6, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80100, 0x40) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000000c0)) 09:55:52 executing program 3: mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000011000/0x2000)=nil, &(0x7f0000011000/0x3000)=nil, 0x2000}) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 09:55:52 executing program 1: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000200)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x0, @dev}, 'ip6_vti0\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000000304, @link_local}, 0x6, {0x2, 0x0, @local}, 'syzv\xfb\xbdH\x10lMK\x00'}) 09:55:52 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x841, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/208) socket$inet6(0xa, 0x6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80100, 0x40) 09:55:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:55:52 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc004510e, &(0x7f0000000100)={{}, {0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0xff03]}) 09:55:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000240)={0x7fffffff, {{0x2, 0x4e21, @multicast1}}, 0x0, 0x6, [{{0x2, 0x4e22, @empty}}, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e23, @rand_addr=0x1f}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x390) 09:55:52 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x841, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/208) socket$inet6(0xa, 0x6, 0x0) 09:55:52 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setrlimit(0x7, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) 09:55:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000340)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0) [ 352.249277] IPVS: ftp: loaded support on port[0] = 21 [ 352.353088] chnl_net:caif_netlink_parms(): no params data found [ 352.401351] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.407814] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.417270] device bridge_slave_0 entered promiscuous mode [ 352.425841] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.432539] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.439955] device bridge_slave_1 entered promiscuous mode [ 352.464669] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 352.476020] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 352.499221] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 352.508219] team0: Port device team_slave_0 added [ 352.514945] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 352.523350] team0: Port device team_slave_1 added [ 352.529086] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 352.537249] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 352.595159] device hsr_slave_0 entered promiscuous mode [ 352.632332] device hsr_slave_1 entered promiscuous mode [ 352.682846] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 352.690087] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 352.712041] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.718473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.725720] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.732253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.795910] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 352.802287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.813550] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 352.824724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.833821] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.841150] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.850003] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 352.865381] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 352.871456] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.885636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.893876] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.900413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.915176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.923358] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.929841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.955758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 352.966800] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 352.982499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 353.003644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.012900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.025931] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 353.032193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 353.055076] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 353.070609] 8021q: adding VLAN 0 to HW filter on device batadv0 09:55:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:55:54 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x841, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/208) 09:55:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:55:54 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) chroot(&(0x7f0000000000)='./file0\x00') r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x7f7, 0x0, 0x0, 0xfffffffffffffe1f) 09:55:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1f0000000b06193b130907000000068100023b050900030000004000020058", 0x1f}], 0x1) 09:55:54 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', 0x0, 0x0, 0x0) 09:55:54 executing program 2: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000100)=""/208) 09:55:54 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;<\xadH\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) unlink(0x0) unlink(0x0) mkdir(0x0, 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) 09:55:54 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8910, &(0x7f0000000080)={'bond0\x00', r1}) 09:55:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup2(r0, r1) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x0) 09:55:54 executing program 2: shmctl$SHM_STAT(0x0, 0xd, 0x0) 09:55:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:55:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:55:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000000)=@in={0x2, 0x0, @broadcast}, 0x80, 0x0}, 0x0) 09:55:55 executing program 1: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x9) close(r0) recvmsg(r0, 0x0, 0xfffffffffffffffe) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x40000140) mkdir(0x0, 0xc8) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r4, &(0x7f0000001340)={&(0x7f0000000c00)=@in={0x2, 0x0, @broadcast}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00', 0x0, 0x18}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffff9c, 0x28, &(0x7f0000000280)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={r8, 0x1ff, 0x18}, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000300)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, 0x0) socket$kcm(0x2, 0x0, 0x2) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x28, &(0x7f0000000140)}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 09:55:55 executing program 2: shmctl$SHM_STAT(0x0, 0xd, 0x0) 09:55:55 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000480)='/dev/dmmidi#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000540)=@l2={0x1f, 0x0, {0x0, 0x3}, 0x0, 0x8000}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='lp\x00', 0x3) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r2, 0x401104000000016) [ 354.204676] device lo entered promiscuous mode 09:55:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:55:55 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000400000000400000000000f5ff0000003557005da9a973c914f53b38"], 0x37) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1000) 09:55:55 executing program 2: shmctl$SHM_STAT(0x0, 0xd, 0x0) 09:55:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:55:55 executing program 0: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57b, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r0, 0x50, &(0x7f0000000100)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:55:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) write$P9_RLINK(r3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="960f33"]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000140)=0x40, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 09:55:55 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) 09:55:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:55:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:55:56 executing program 1: syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs], 0x0, 0x0, 0x0}) 09:55:56 executing program 0: gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x10010009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) fchmodat(0xffffffffffffffff, 0x0, 0xc0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x507000, 0x0, 0x811, r2, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x0, 0x0, 0x4, 0x78}, 0x2c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:55:56 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc4c85513, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0}) 09:55:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:55:56 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:55:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc4c85512, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0}) 09:55:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 356.010218] binder: 11670:11671 DecRefs 0 refcount change on invalid ref 0 ret -22 09:55:57 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x75cf7253c0fdb943) close(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) [ 356.096033] binder: 11670:11675 DecRefs 0 refcount change on invalid ref 0 ret -22 09:55:57 executing program 2: ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r1, 0x1000000) sendfile(r0, r1, 0x0, 0xfffffdef) 09:55:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:55:57 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x3f, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x3c) 09:55:57 executing program 1: r0 = openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sigaltstack(&(0x7f0000ffa000/0x3000)=nil, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x101}, 0x28, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000), 0x4) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0xff4f) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000) fcntl$getown(r1, 0x9) 09:55:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:55:57 executing program 0: unshare(0x8000400) io_setup(0x1, &(0x7f00000000c0)=0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000002d40)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) 09:55:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:55:57 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 09:55:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:55:58 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xfffffffffffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) 09:55:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x0) 09:55:58 executing program 3: pipe(&(0x7f0000001a80)) userfaultfd(0x0) syz_open_dev$mouse(0x0, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 357.065244] syz-executor.1 (11704) used greatest stack depth: 54000 bytes left 09:55:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a933d559166", 0x9) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001400)=[{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 09:55:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:55:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:55:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'') r1 = syz_open_procfs(0x0, &(0x7f0000000440)='statm\x00') sendfile(r0, r1, 0x0, 0x1) 09:55:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="4df78097a43f1d4ae5de78bae76d5d2691b2a200873ad26a8ec484688baa78b3c66884475d8b79ae1fd6f0af6062c8299bfa263f4091d793baa005f9d8d83f9a4678cc95a0663c7e5b16c7d993ed95fe7d63ae2221fcc02834f3756f11bcf98870f854651d92c50a03a851b4cee693a7bc1fc67a726f8728bf6066b3d9d846cab4473625c33fbf10fd0059356ddedd6d9bf8e87d3d33a60af1daf6324c9b9847aebe048d283276efa1d8f0861f", 0xad}], 0x1, 0x0, 0x0, 0x4000040}], 0x1, 0x40044) recvmmsg(r2, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) 09:55:58 executing program 0: 09:55:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:55:59 executing program 0: 09:55:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:55:59 executing program 0: 09:55:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:55:59 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b700000094b67fb3bfa30000000000000703000028feffff7a0af0fff8ffffff71a4f8ff00000000b70600feffffff012d400500000000005504000001ed00001d040000000000006f460000000000006b0a00fe000000008500000007510000b7000000000000009500000000000000"], 0x0}, 0x48) 09:55:59 executing program 2: 09:55:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1d88b070") r1 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr, 0x15, 0x0, 'rr\x00'}, 0x2c) 09:55:59 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) lsetxattr$security_smack_transmute(0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000000)=0xdb51) uselib(0x0) 09:55:59 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:56:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:00 executing program 3: 09:56:00 executing program 1: 09:56:00 executing program 2: 09:56:00 executing program 3: 09:56:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:56:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:00 executing program 1: 09:56:00 executing program 2: 09:56:00 executing program 1: 09:56:02 executing program 0: 09:56:02 executing program 3: 09:56:02 executing program 2: 09:56:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:56:02 executing program 1: 09:56:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:56:02 executing program 1: 09:56:02 executing program 3: 09:56:02 executing program 2: 09:56:02 executing program 0: 09:56:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:56:02 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:56:02 executing program 0: 09:56:02 executing program 2: 09:56:03 executing program 1: 09:56:03 executing program 3: 09:56:03 executing program 2: 09:56:03 executing program 0: 09:56:03 executing program 3: 09:56:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:56:03 executing program 1: 09:56:03 executing program 0: 09:56:03 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:56:03 executing program 2: 09:56:03 executing program 3: 09:56:03 executing program 1: 09:56:03 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 09:56:03 executing program 0: 09:56:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:56:04 executing program 2: 09:56:04 executing program 1: 09:56:04 executing program 3: 09:56:04 executing program 0: 09:56:04 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 09:56:04 executing program 2: 09:56:04 executing program 0: 09:56:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:56:04 executing program 3: 09:56:04 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 09:56:04 executing program 1: 09:56:04 executing program 2: 09:56:04 executing program 3: 09:56:04 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:56:05 executing program 1: 09:56:05 executing program 0: 09:56:05 executing program 3: 09:56:05 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 09:56:05 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:56:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:56:05 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='com.apple.FinderInfo\x00') 09:56:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet_mreqsrc(r1, 0x0, 0x2, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x0) fcntl$setstatus(r1, 0x4, 0x42803) 09:56:05 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) chroot(&(0x7f0000000000)='./file0\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x56a, 0x0, 0x0, 0xfffffffffffffe1f) 09:56:05 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0x0) 09:56:05 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:56:05 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 09:56:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:56:06 executing program 3: r0 = getpgrp(0x0) r1 = gettid() clone(0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r0, r1, 0x0, 0x0) 09:56:06 executing program 0: r0 = creat(&(0x7f0000002440)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\x00', 0xffffffa6) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) fallocate(r0, 0x3, 0xd76350b, 0x8000) 09:56:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x01\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{}, {0x16}]}) close(r1) 09:56:06 executing program 1: openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_names\x00') preadv(r0, &(0x7f00000017c0), 0x324, 0x0) 09:56:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:56:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:06 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file0'}, 0xffffff0c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000180), 0x4) 09:56:06 executing program 1: openat$smack_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_names\x00') preadv(r0, &(0x7f00000017c0), 0x324, 0x0) 09:56:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:56:06 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:56:06 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='lp\x00', 0x3) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) gettid() 09:56:07 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)='sit0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x50, &(0x7f00000002c0)}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200), 0x4) 09:56:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000000c0), 0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, 0x0, &(0x7f0000000200)) 09:56:07 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:56:07 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:56:07 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 09:56:07 executing program 2: creat(&(0x7f0000000100)='./file0\x00', 0x50) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup2(r0, r1) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x0) 09:56:07 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 09:56:08 executing program 3: 09:56:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) 09:56:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1f0000000306193b130907000000068100023b050900030000004000020058", 0x1f}], 0x1) 09:56:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:08 executing program 0: 09:56:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:56:08 executing program 1: 09:56:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:08 executing program 2: 09:56:08 executing program 0: 09:56:08 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:56:08 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/62, 0x3e}], 0x1, 0x0) 09:56:08 executing program 3: 09:56:08 executing program 2: 09:56:08 executing program 0: 09:56:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:09 executing program 0: 09:56:09 executing program 3: 09:56:09 executing program 2: 09:56:09 executing program 1: 09:56:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:09 executing program 0: 09:56:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:09 executing program 3: 09:56:09 executing program 2: 09:56:09 executing program 1: 09:56:09 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:09 executing program 3: 09:56:09 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'HL\x00'}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000740)={0x0, 0x0}) getgid() ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) r3 = syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x9c, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1a16}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 09:56:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000002140)={&(0x7f0000001d00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, &(0x7f0000002080)=[{&(0x7f0000001d40), 0x101d0}, {0x0}, {0x0}], 0x3}, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000280)='cgroup.type\x00', 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x10000000003, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) gettid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000002c0)='pids.current\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)={[{0x0, 'memory'}, {0x2d, 'cpu'}, {0x2d, 'pids'}, {0x0, 'cpu'}, {0x2f, 'cpu'}]}, 0x1d) 09:56:10 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) 09:56:10 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="4c000000120081ae08060c04f711253f9333848f400100000000000000ca1b4e7d06a6bd7c493872f750375ed08a562ad6e74704008f93b82afb9bbc7a461eb886a5e54e8ff53144612ad5d0", 0x4c}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000240)) 09:56:10 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="0a5f3d023414a130889cd694244d59dff090b6289097be35eb5cd5c2bd03db5890df9987d5f0e56b6a00d89ef516608d673312a2dde3850f8c017c3f7bd07b2956cccaec823fa81ff4aa6b506003deb302fb2095c388d9faf501259ae4835170d6d4a8ef3bffecd899f3d3c7c860d78132315b859c2de97cb6d9c893959fffe43c98203ebfdd6bb44f69ea3a240c4b1369b778ad19a4eff544ade45fe492a4") getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:10 executing program 0: 09:56:10 executing program 1: 09:56:10 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:10 executing program 2: gettid() r0 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180), 0x1000) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x10010009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80140, 0x0) fchmodat(r0, 0x0, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x507000, 0x0, 0x811, r2, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x0, 0x0, 0x4}, 0x2c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:56:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:10 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)='A', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000840), 0x4) 09:56:10 executing program 1: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', r1, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00') clone(0x10403ff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setuid(r1) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 09:56:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f0000000300)}) 09:56:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0x0, r1) 09:56:11 executing program 0: gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x10010009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80140, 0x0) fchmodat(r0, 0x0, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x507000, 0x0, 0x811, r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x0, 0x0, 0x4, 0x78}, 0x2c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000300)) 09:56:11 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x14) recvmmsg(r1, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000018c0)=""/19, 0x13}], 0x1}}], 0x1, 0x0, 0x0) 09:56:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) 09:56:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 370.209680] binder: send failed reply for transaction 6 to 12290:12291 [ 370.217388] binder: undelivered TRANSACTION_COMPLETE [ 370.222722] binder: undelivered TRANSACTION_ERROR: 29189 09:56:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x0, @local}], 0x10) 09:56:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:11 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, 0x0) 09:56:11 executing program 1: gettid() r0 = dup(0xffffffffffffffff) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x10010009, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) fchmodat(r0, 0x0, 0x0) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x507000, 0x0, 0x811, r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x0, 0x0, 0x4, 0x78}, 0x2c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f0000000300)) 09:56:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:12 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 09:56:12 executing program 0: memfd_create(&(0x7f00000005c0)=')\\\x00', 0x0) 09:56:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x1000000000004) 09:56:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae4c8471"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:13 executing program 3: syz_execute_func(&(0x7f0000000140)="3666440f50f564ff0941c366440f56c9c4c27d794e0066420fe2e3f347aac442019dccd3195be1") socketpair$unix(0x1, 0x400000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14}, 0xfffffde2) 09:56:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:13 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'lo\x00', 0x60001}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000180)='lo\x00\x96o\xd6Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 09:56:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f00000002c0)=[@decrefs, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 09:56:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 372.426113] binder: 12395:12397 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 372.434289] binder_alloc: 12395: binder_alloc_buf, no vma [ 372.439914] binder: 12395:12397 transaction failed 29189/-3, size 0-0 line 3035 [ 372.683665] binder: undelivered TRANSACTION_ERROR: 29189 09:56:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000f09e4d1b79a0f31bcae6091fec85a8526e9382e559dc21115"], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@hci, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='lp\x00', 0x3) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r2, 0x401104000000016) 09:56:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r3 = dup2(r0, r1) shmctl$SHM_INFO(0x0, 0xe, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0) write$P9_RLCREATE(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) tkill(r2, 0x1000000000016) 09:56:14 executing program 3: dup(0xffffffffffffffff) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10010009, 0xffffffffffffffff}) fchmodat(0xffffffffffffffff, 0x0, 0x0) 09:56:14 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0x10000007c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup2(r0, r1) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TCSBRK(r2, 0x5409, 0x0) 09:56:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:14 executing program 2: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) 09:56:14 executing program 0: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="65786563203a3a0a09fbe0e1ddbfa699cd5d556a2080457673075e5c7a6b873bfc7739df16b86058a52e946c1419e19a500c40b9e0f0cb1f792a7e2a04c568af275a7add3bf91f0100148a0a51d50a04b25b210274f5c3cc2c2ef2449cdb893dae"], 0x1) 09:56:14 executing program 1: syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f00000002c0)=[@decrefs, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 09:56:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 373.822364] binder: 12443:12445 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 373.830263] binder: 12443:12445 transaction failed 29189/-22, size 0-0 line 2896 [ 373.900529] binder: undelivered TRANSACTION_ERROR: 29189 09:56:15 executing program 1: ptrace$peekuser(0x3, 0x0, 0x0) 09:56:15 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)='A', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000840), 0x4) 09:56:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:15 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000002140)={&(0x7f0000001d00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 09:56:15 executing program 1: mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mlockall(0x3) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 09:56:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:15 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) 09:56:15 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0x40605346, &(0x7f0000000180)={0x0, 0x0, 0x2, 'queue1\x00'}) 09:56:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:15 executing program 3: r0 = creat(&(0x7f0000002440)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000001c0)='threaded\x00', 0xffffffa6) fallocate(r0, 0x3, 0x0, 0x8000) 09:56:15 executing program 0: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000540)=@l2={0x1f, 0x0, {0x0, 0x3}, 0x0, 0x8000}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='lp\x00', 0x3) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r2, 0x401104000000016) 09:56:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:16 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000400000000400000000000f5ff0000003557005da9a973c914f53b380002"], 0x39) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1000) 09:56:16 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000400000000400000000000f5ff0000003557005da9a973c914f53b380002"], 0x39) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1000) 09:56:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:16 executing program 0: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x54, 0x0, &(0x7f00000002c0)=[@decrefs, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 09:56:16 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0xfe85) close(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0) write$P9_RREMOVE(r0, 0x0, 0x0) 09:56:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:16 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000400000000400000000000f5ff0000003557005da9a973c914f53b380002"], 0x39) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1000) [ 375.540068] binder: 12520:12523 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 375.548134] binder_alloc: 12520: binder_alloc_buf, no vma [ 375.553886] binder: 12520:12523 transaction failed 29189/-3, size 0-0 line 3035 09:56:16 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000400000000400000000000f5ff0000003557005da9a973c914f53b380002"], 0x39) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r0, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1000) [ 375.647858] binder: BINDER_SET_CONTEXT_MGR already set [ 375.653463] binder: 12520:12523 ioctl 40046207 0 returned -16 [ 375.668360] binder: undelivered TRANSACTION_ERROR: 29189 09:56:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) ustat(0x0, 0x0) 09:56:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_persistent(0x16, 0x0, r1) 09:56:17 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000400000000400000000000f5ff0000003557005da9a973c914f53b380002"], 0x39) execveat(r0, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1000) 09:56:17 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000240)=0x4, 0x12) write$cgroup_int(r1, &(0x7f0000000100)=0x2, 0x12) write$cgroup_int(r1, &(0x7f0000000040)=0x2, 0x12) 09:56:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f027c123f3088a070") syz_emit_ethernet(0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="aa6aaaaaaaaa00000000000086dd60b40900000000000000ffffe0000002ff02000000800000000000000000000188fa0000060000000000000000000000ffffffffffff000000000000b0fcaf351412660d6cc2a5b79dce00130800ffffac14ffbb000000000000000000004804373507309475b44501fa0a9bdd28583e47e21b4f0aced4ebec396162db067fbe578f62824f6d07e6757c7cb71abcea31084d723087e5e1a3b20a4d6267b1d86a609be526"], 0x0) 09:56:17 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000400000000400000000000f5ff0000003557005da9a973c914f53b380002"], 0x39) execveat(r0, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1000) 09:56:17 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x3, @empty, 'bond0\x00\x00\x00\x00\x06\x00\x00\b\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8937, &(0x7f0000000080)={'bond0\x00', r2}) 09:56:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:17 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) 09:56:17 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x14) clock_gettime(0x0, &(0x7f0000005a80)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001a00)=""/97, 0x61}], 0x1}}], 0x1, 0x40000000, &(0x7f0000005ac0)={r2, r3+30000000}) 09:56:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="f20fae"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 377.181639] ================================================================== [ 377.189046] BUG: KMSAN: kernel-infoleak in __kvm_write_guest_page+0x2d5/0x470 [ 377.196392] CPU: 0 PID: 12605 Comm: syz-executor.5 Not tainted 5.0.0-rc1+ #9 [ 377.203589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.212955] Call Trace: [ 377.215609] dump_stack+0x173/0x1d0 [ 377.219284] kmsan_report+0x12e/0x2a0 [ 377.223114] kmsan_internal_check_memory+0x9e4/0xb10 [ 377.228278] kmsan_copy_to_user+0xab/0xc0 [ 377.232454] __kvm_write_guest_page+0x2d5/0x470 [ 377.237159] kvm_vcpu_write_guest+0x77a/0x920 [ 377.241723] emulator_write_std+0x391/0x4d0 [ 377.246115] ? kvm_read_guest_phys_system+0x100/0x100 [ 377.251341] em_fxsave+0x7c2/0x840 [ 377.254995] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 377.260212] ? check_svme+0x220/0x220 [ 377.264059] x86_emulate_insn+0x2d11/0xb400 [ 377.268606] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 377.273823] x86_emulate_instruction+0x1105/0x73b0 [ 377.278773] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 377.284001] ? __msan_metadata_ptr_for_store_1+0x10/0x20 [ 377.289523] kvm_mmu_page_fault+0xcef/0x2860 [ 377.293966] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 377.299436] ? kvm_requeue_exception+0x4e8/0x5e0 [ 377.304265] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 377.309492] handle_ept_violation+0x565/0x5a0 [ 377.314025] ? handle_desc+0x110/0x110 [ 377.317938] vmx_handle_exit+0x17a9/0x6690 [ 377.322192] ? kmsan_get_shadow_origin_ptr+0x120/0x440 [ 377.327505] ? vmx_flush_tlb_gva+0x420/0x420 [ 377.331938] kvm_arch_vcpu_ioctl_run+0xa556/0x11300 [ 377.337134] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 377.342513] ? update_load_avg+0x11b5/0x1a90 [ 377.346953] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 377.352423] ? rb_erase_cached+0xde8/0x2c00 [ 377.356787] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 377.362026] ? __msan_poison_alloca+0x1f0/0x2a0 [ 377.366728] ? put_pid+0x4a/0x260 [ 377.370204] ? kvm_vcpu_ioctl+0x1d11/0x1d20 [ 377.374560] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 377.379778] kvm_vcpu_ioctl+0xfe9/0x1d20 [ 377.383880] ? kvm_vm_release+0x90/0x90 [ 377.387886] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 377.393104] ? kvm_vm_release+0x90/0x90 [ 377.397102] do_vfs_ioctl+0xebd/0x2bf0 [ 377.401047] ? security_file_ioctl+0x92/0x200 [ 377.405584] __se_sys_ioctl+0x1da/0x270 [ 377.409599] __x64_sys_ioctl+0x4a/0x70 [ 377.413510] do_syscall_64+0xbc/0xf0 [ 377.417324] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 377.422536] RIP: 0033:0x457e29 [ 377.425757] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 377.444668] RSP: 002b:00007f89a2e6cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.452388] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 377.459695] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 377.466975] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 377.474279] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f89a2e6d6d4 09:56:18 executing program 2: 09:56:18 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000400000000400000000000f5ff0000003557005da9a973c914f53b380002"], 0x39) execveat(r0, &(0x7f0000000100)='\x00', 0x0, 0x0, 0x1000) 09:56:18 executing program 3: 09:56:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:56:18 executing program 0: [ 377.481576] R13: 00000000004c0d62 R14: 00000000004d2b18 R15: 00000000ffffffff [ 377.488929] [ 377.490564] Local variable description: ----fx_state@em_fxsave [ 377.496534] Variable was created at: [ 377.500270] em_fxsave+0xcb/0x840 [ 377.503744] x86_emulate_insn+0x2d11/0xb400 [ 377.508062] [ 377.509702] Bytes 8-159 of 160 are uninitialized [ 377.514523] Memory access of size 160 starts at ffff8881b9afedc0 [ 377.520682] Data copied to user address 0000000020000000 [ 377.526129] ================================================================== [ 377.533496] Disabling lock debugging due to kernel taint [ 377.538951] Kernel panic - not syncing: panic_on_warn set ... [ 377.544876] CPU: 0 PID: 12605 Comm: syz-executor.5 Tainted: G B 5.0.0-rc1+ #9 [ 377.553469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.562855] Call Trace: [ 377.565474] dump_stack+0x173/0x1d0 [ 377.569129] panic+0x3d1/0xb01 [ 377.572394] kmsan_report+0x293/0x2a0 [ 377.576265] kmsan_internal_check_memory+0x9e4/0xb10 [ 377.581419] kmsan_copy_to_user+0xab/0xc0 [ 377.585593] __kvm_write_guest_page+0x2d5/0x470 [ 377.590346] kvm_vcpu_write_guest+0x77a/0x920 [ 377.594928] emulator_write_std+0x391/0x4d0 [ 377.599343] ? kvm_read_guest_phys_system+0x100/0x100 [ 377.604557] em_fxsave+0x7c2/0x840 [ 377.608204] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 377.613416] ? check_svme+0x220/0x220 [ 377.617239] x86_emulate_insn+0x2d11/0xb400 [ 377.621633] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 377.626858] x86_emulate_instruction+0x1105/0x73b0 [ 377.631806] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 377.637028] ? __msan_metadata_ptr_for_store_1+0x10/0x20 [ 377.642520] kvm_mmu_page_fault+0xcef/0x2860 [ 377.646947] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 377.652405] ? kvm_requeue_exception+0x4e8/0x5e0 [ 377.657225] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 377.662442] handle_ept_violation+0x565/0x5a0 [ 377.666996] ? handle_desc+0x110/0x110 [ 377.670899] vmx_handle_exit+0x17a9/0x6690 [ 377.675147] ? kmsan_get_shadow_origin_ptr+0x120/0x440 [ 377.680470] ? vmx_flush_tlb_gva+0x420/0x420 [ 377.684888] kvm_arch_vcpu_ioctl_run+0xa556/0x11300 [ 377.690064] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 377.695452] ? update_load_avg+0x11b5/0x1a90 [ 377.699873] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 377.705334] ? rb_erase_cached+0xde8/0x2c00 [ 377.709686] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 377.714913] ? __msan_poison_alloca+0x1f0/0x2a0 [ 377.719603] ? put_pid+0x4a/0x260 [ 377.723065] ? kvm_vcpu_ioctl+0x1d11/0x1d20 [ 377.727409] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 377.732707] kvm_vcpu_ioctl+0xfe9/0x1d20 [ 377.736835] ? kvm_vm_release+0x90/0x90 [ 377.740822] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 377.746022] ? kvm_vm_release+0x90/0x90 [ 377.750009] do_vfs_ioctl+0xebd/0x2bf0 [ 377.753932] ? security_file_ioctl+0x92/0x200 [ 377.758452] __se_sys_ioctl+0x1da/0x270 [ 377.762455] __x64_sys_ioctl+0x4a/0x70 [ 377.766349] do_syscall_64+0xbc/0xf0 [ 377.770088] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 377.775288] RIP: 0033:0x457e29 [ 377.778486] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 377.797410] RSP: 002b:00007f89a2e6cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.805123] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457e29 [ 377.812410] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 377.819679] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 377.826986] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f89a2e6d6d4 [ 377.834269] R13: 00000000004c0d62 R14: 00000000004d2b18 R15: 00000000ffffffff [ 377.842459] Kernel Offset: disabled [ 377.846086] Rebooting in 86400 seconds..