[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 99.669959][ T30] audit: type=1800 audit(1562002221.721:25): pid=12665 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 99.695796][ T30] audit: type=1800 audit(1562002221.751:26): pid=12665 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 99.732490][ T30] audit: type=1800 audit(1562002221.781:27): pid=12665 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.120' (ECDSA) to the list of known hosts. 2019/07/01 17:30:37 fuzzer started syzkaller login: [ 119.789777][T12821] as (12821) used greatest stack depth: 53640 bytes left 2019/07/01 17:30:43 dialing manager at 10.128.0.26:37509 2019/07/01 17:30:43 syscalls: 2347 2019/07/01 17:30:43 code coverage: enabled 2019/07/01 17:30:43 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/07/01 17:30:43 extra coverage: enabled 2019/07/01 17:30:43 setuid sandbox: enabled 2019/07/01 17:30:43 namespace sandbox: enabled 2019/07/01 17:30:43 Android sandbox: /sys/fs/selinux/policy does not exist 2019/07/01 17:30:43 fault injection: enabled 2019/07/01 17:30:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/07/01 17:30:43 net packet injection: enabled 2019/07/01 17:30:43 net device setup: enabled 17:33:49 executing program 0: [ 307.625457][T12829] IPVS: ftp: loaded support on port[0] = 21 [ 307.776627][T12829] chnl_net:caif_netlink_parms(): no params data found [ 307.837297][T12829] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.844851][T12829] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.854635][T12829] device bridge_slave_0 entered promiscuous mode [ 307.866081][T12829] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.873510][T12829] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.882801][T12829] device bridge_slave_1 entered promiscuous mode [ 307.918351][T12829] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 307.930848][T12829] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 307.964955][T12829] team0: Port device team_slave_0 added [ 307.975257][T12829] team0: Port device team_slave_1 added [ 308.157355][T12829] device hsr_slave_0 entered promiscuous mode [ 308.263242][T12829] device hsr_slave_1 entered promiscuous mode [ 308.544988][T12829] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.552603][T12829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.560466][T12829] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.568033][T12829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.654846][T12829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.676787][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.690525][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.701293][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.714971][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 308.735044][T12829] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.754892][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.764997][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.772418][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.826288][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.836076][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.845275][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.852610][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.862085][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 308.872120][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 308.882146][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 308.892301][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.902179][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 308.911949][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 308.921785][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 308.931160][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.940423][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 308.949706][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.962082][T12829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 308.970980][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 309.011602][T12829] 8021q: adding VLAN 0 to HW filter on device batadv0 17:33:51 executing program 0: 17:33:51 executing program 0: 17:33:51 executing program 0: 17:33:51 executing program 0: 17:33:51 executing program 0: 17:33:51 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x2e) 17:33:51 executing program 0: r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, '\x98\xdez\x8cZ\xe9^\xc8y,\x92\x15\x0f\xc3:fO\x13\xee\xabe\xc02)\x01\xcak\xd3\x1b\xde,Q\xf0l_\v\x01O\x9f\x91\xee\xb7d|r@\xf4v\xc8\xd7]\xd0\x00\xaa\x8f\xaf\x8f\xb5t\x02\x00\xa6\xdcM'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000080)={0x0, 0xfffffffffffffffb, 0x8}) 17:33:51 executing program 0: mmap(&(0x7f0000d0d000/0x4000)=nil, 0x4000, 0x4, 0x101010, 0xffffffffffffffff, 0x1001) r0 = socket(0x9, 0x800, 0x6c82f8fd) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x100000000, 0x8, 0xd305, 0x1, 0x5, 0x5210000, 0x6, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0x4b7d}, &(0x7f00000000c0)=0xc) 17:33:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet(0x10, 0x3, 0x0) inotify_init() sendmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000001c0)="24000000280007031dfffd946fa2830020200a0009000000000003400004000000000000280000001100ffffba16a0aa1c0009e3966cf055d90f15a322e029eee7f817c37218fea642ef6b2c", 0x4c}], 0x1}, 0x0) 17:33:52 executing program 0: r0 = socket$inet6(0xa, 0x80000000080003, 0x20000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000000500)="44be19752ff225801cc4ecbe573fa86c5922995fdb833e219b867d04cac784b3f9ca187399a03cb08ecebfb3213f11458772224ce19a030012bb4e3f40cecdca94bd6751df35a2542ef3e0252198aaaa44f7faba96ffd6ff2e1949244362d26778a667b4659ea91da17958c9c987b9a377c12723facc7c6bc8541f08982fbe07d01c6f6cff5e1b7cc1d9b10b8feb66405b3ec4ea69b01445f517f5e501cc218d1524a80f3d175cbc2ac2ffd7868bb08c7bebc2034c8343c5e5f449fa9149f576f66013252b1a92c9359d51f707badc7b561fe8fff9ba213edcb4881e698834b3c034a212b4a24ad571d672e0d9b4a6d119374324be68242c6997ae3ccfa417717e00637f060f12e908ee2d17e8e962cdc178fa671f2e46ed863ccc04950997ba497b26d97d9d2b109efae7b78f38d9bf03ffafb0345e33a35e5ef2ceff9aedf8f20871f868eeeb4deaccaa7e7119730f6ac56cc230718e2110ae7f7877d5f6ba52e6c569960585d999f572bee3b9353ff8410c800343bde9f43f790b51fbec41336e6ed888fec58630616469626ba886b8cbd2d94302243e51bf3c68295d9181106162ae4de796fe4f80d2c1e0ad252762e5ad3507f038b1aab9039d056cfd9be62b4973f3c005f41b02219d72606e31c4225b70331cef1a7e0c54b14d50644df900bfd787c4d746a5aade1f4d988f4f0a15e9ab76996b2317906d383d575c396098ebe40f0b0992e85ab03624eb2e8085169870f84043e7c541b1c4ea86b0b98a711d1b13b4c9ad1e570501b674548c4628e7ca07897782453d6c71f032ee1b5905daed5076df584a034b637444046eebbae6db340ffd604e36816f3273a8b7ce833a9cb455f1aae6fc6dd7b7204150ddec45a0ecd427215f17fa3d86676c2f0a10b5a52040f34bb7b4f39a4b634074b455bb4f728bffd8417fa1a5372f353c441f1db10ee557523231e55e01d408d5790b1bf9ad24e7c41798a51624b3159dcec99a13d4b10dda2b0382cd25be10745c0d4e4340702bcd483b0bb9cc30683e4d338e5acf4f98b1f32f17e49cb491bf8cbdea29889c09cd5d9b90e0ec6e26a574b22427c2d35596e61768f4c3ede3d824229b376753d1ef873254427f1a6225e1993bc48b8a0978841639b87ec60207d8727016d635f2a661a6766f8aea2715c0e93a9b6d525fe959b71d4526960308529d2a995575a248f0f9401a088bb6836f4f3aedea46f8064e7b4d6a5894406a30c9eb59cbfa4278e7b20002e04eda8bcc04c5c33e17e5c51b47ce8a755f27702ebac1ea0454e452aaaa83f235385c337c254e243e5dd9eaa5ecfd13beaa3f9f02b0e24d229c076701b1a95d33f88e5abb3e75b1fe32fe81ba8a5788cf59f30ddfda499e56919a021aa40fd4c8120044e3cae6d64205f75c2fada46d2575b7200a200cd25df38de970309840422d35a121ee6b38111e9a594d305c718d1196888a21e82c18fb85004fe9b56d60c189c9036d958ff86c47edf2a9cfc7a2ee4b26483c0a6fe07ba58784d9c88609e313fb08984af8dbad7c975140c6c3071a3a312ba994b135d875767ac7f05b9c82d063a03e813aa55f088ba2a12f6406370b3b9908bf322d2e2ebe48004038f0094dcbdb4ee5ff0d95a860d0ecb4b67635da21b3b3cecd4db69a2a0388b8bfbc637b817509a71260e3ad2f56f50df73639a747ee630082333bbd2720265b2f8667620e233c4d96a31447ed646e88617d75496c4701df618626535d98b4c8def03c89fd1e957f6adf4add52b70d3e5a380986b4999f1a586242de39dbd152db9d5ab2fb4027d11ab7b446c01b568e9a144b03aead3ce8185df9e2b2f2f3468024a2af64512435bcde25d5b004d2b6da2c7135e5d652b1d500243a9028fd639cf70b2c9959d697d9be792c99b79cbe643a9aa39fb9f3c2d294e57ada32e120b2322ebfaee450d157858b6f5b8de2bbb4487f5af4853c76e98d774f8fbdf7e3af7e695cecd5d5cc4bbd37a6b2d481b9bffef211263e4c65bb35003b0907465c3ea19d4b9a0a", 0x5a1}], 0x1, 0x0, 0xfffffffffffffd74}}], 0x40001fc, 0x0) [ 309.939274][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.953899][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 17:33:52 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x2) sendto$inet6(r1, &(0x7f0000000280)="7ee7104a6f40342b970589a8124170bdce10534adee60ca841a04cd0f66fb1522d6c48952f0c87756067d88e23bd5d1f9652ae36cff318bb5ec625de675ff7583bae1749521205addb0b55d34eda9ab3b83957580310b5d521b2fb8c2575d24bb26c328ee6b09759fe12d1f1d3219b0732edb60156fd7422b9c554d25e0c6003a2cb33b1e2ce51b1cc685a19bb06e5727f839d4affd438285245ccc573d6c5c05448051fbaeff2f2cf491c2b2ecd92c2c2d1d069ee9187c15405e64618f81d02e33f7583a1eae2cf051a335103e633843d6d1d4d02ea121fd71e5838ff30cdb4e1", 0xe1, 0x8000, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @vbi={0x7ff, 0x0, 0x0, 0x0, [], [0x1]}}) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000080)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000040)={0x8000000000000000}) bind$rds(r2, &(0x7f00000000c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) [ 310.169068][T12865] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 17:33:53 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x202682, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in=@initdev}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 17:33:53 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_acct\x00') ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000000)=0x10000) r4 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) 17:33:53 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x5000) socketpair$tipc(0x1e, 0x2000000000004, 0x0, &(0x7f00000002c0)) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00000000c0)={0x2, 0x12000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000780)={0x4000201f}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) 17:33:53 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="0100d7945b8dac65bce99e0000", @ANYRES32=0x0], &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in6={{0xa, 0x4e21, 0x0, @loopback}}}, 0x98) 17:33:53 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x200040) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000040)=0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r1, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=""/85, 0x55}) getsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000180)={@loopback, @initdev}, &(0x7f00000001c0)=0x8) r2 = socket$inet6(0xa, 0x3, 0x8) getpid() r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x80, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) setfsuid(r5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x4, 0x5, 0x6}) sendmsg$rds(r0, &(0x7f00000008c0)={&(0x7f00000004c0)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000500)=""/189, 0xbd}, {&(0x7f00000005c0)=""/185, 0xb9}], 0x2, &(0x7f0000000800)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000006c0)=""/116, 0x74}, &(0x7f0000000740)}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x5, 0x101}, &(0x7f0000000780)=0x4, &(0x7f00000007c0)=0x2, 0x6, 0x7, 0x10001, 0x1ff, 0x0, 0x6}}], 0xa0, 0x20000000}, 0x4) setfsuid(r5) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000900)={0x0}, &(0x7f0000000940)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000980)={r6, 0xf9, "cfc8961c590d8fa92d22631c2358d92e2fd951e0980dd6ed1a7b55f3663ca099c48df6ab3b91702a73421fa34bf8e5345330a1390ddfd13034f684f8302de6692f421e806e7631a22728eb375a0723e502df3f7a060f9464b7cb263763014020ad63133dc15653b792cc65156a671994b8b9f895f2ccf6b3dd8b7353c9b455f3f11707ff1f9f3930fb608a3af711d2275aa882fe89c06f95c9d6edc58fc46238bb590b6e29aa2d8026fa7269d0c864ec11b5a1e4fd1fa93b5ac8070c576d4db1690d14ec4b1f38eb34c7fabf684b47b3530b73795f333185da045ea2769b9f7e612aeef6b4efc6c2dfcb75e5e15b7e7362649486f7e1299136"}, &(0x7f0000000ac0)=0x101) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000b00)) r7 = geteuid() recvmsg$kcm(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c00)=""/205, 0xcd}], 0x1, &(0x7f0000000d40)=""/211, 0xd3}, 0x40) r8 = getegid() r9 = getegid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, &(0x7f0000000f00)=0xc) stat(&(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001000)={0x0, 0x0, 0x0}, &(0x7f0000001040)=0xc) lstat(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f00000012c0)=[0xee01, 0xffffffffffffffff, 0xee00, 0xee01, 0xee01]) fsetxattr$system_posix_acl(r2, &(0x7f0000000e80)='system.posix_acl_access\x00', &(0x7f0000001300)={{}, {0x1, 0x7}, [{0x2, 0x4, r5}, {0x2, 0x1, r5}, {0x2, 0x6, r5}, {0x2, 0x0, r7}, {0x2, 0x5, r5}, {0x2, 0x2, r5}], {0x4, 0x2}, [{0x8, 0x2, r8}, {0x8, 0x6, r9}, {0x8, 0x4, r10}, {0x8, 0x4, r11}, {0x8, 0x0, r12}, {0x8, 0x6, r13}, {0x8, 0x2, r14}, {0x8, 0x2, r15}, {0x8, 0x1, r16}], {0x10, 0x5}}, 0x9c, 0x1) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000013c0)={@rand_addr="eb53c9aa5c4a64b6ccdf3935c814d9ec", 0x34, r4}) 17:33:53 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="0100d7945b8dac65bce99e0000", @ANYRES32=0x0], &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in6={{0xa, 0x4e21, 0x0, @loopback}}}, 0x98) 17:33:53 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000180)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000040)) 17:33:53 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000300)={0x53, 0xffff7ffbbfffffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2400, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f00000000c0)={0x3, 0xff}) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3, 0x400001) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) [ 311.771252][T12891] IPVS: ftp: loaded support on port[0] = 21 17:33:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x4, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0xc201}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x100001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x40000, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000002c0)=0x0) fcntl$lock(r1, 0x7, &(0x7f0000000300)={0x2, 0x1, 0xfffffffffffffff7, 0x8ce8, r4}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000100)={0xe941, 0x0, 0x10003, 0x4}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000280)={r5, 0x4}) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x8955, &(0x7f0000000000)=0x2) r6 = dup3(r2, r1, 0x0) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000080)={0x2b, 0xffff, 0xe9, &(0x7f0000000180)="c2a930273c700b3e40754178eaa7e6412dacad940e359f6bd5166d542d95dd717426407a2f84f0baba5789f5ed9ad924b34bbefcd25955406129c87701028989d84fc651629013093dc7055ea55d756b9b562c015607ae3e596cce3f71f84a01422d65855e32f0c30ddd3f9076229a039a9ffa6248e9a77230993dd6b2c59111b43718b581a6a3825b71dab6e0652427ccacd94a23c6e88c27fed87156f9db8fc510cc04d30cb9ca76708b4c183e3d89e689faf4faecf625f0645d23c1556ae3be8dd1bbd5c8891468bee8873beb5f7fe6da8ff6326d0357438be2d4e088ed27b7cfe6b25dcd8547a0"}) [ 311.999345][T12891] chnl_net:caif_netlink_parms(): no params data found [ 312.061591][T12891] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.069116][T12891] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.078476][T12891] device bridge_slave_0 entered promiscuous mode [ 312.089032][T12891] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.096530][T12891] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.105839][T12891] device bridge_slave_1 entered promiscuous mode [ 312.151936][T12891] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 312.165422][T12891] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 312.200151][T12891] team0: Port device team_slave_0 added [ 312.210913][T12891] team0: Port device team_slave_1 added [ 312.337249][T12891] device hsr_slave_0 entered promiscuous mode [ 312.592818][T12891] device hsr_slave_1 entered promiscuous mode 17:33:54 executing program 0: unshare(0x2000400) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) r1 = syz_open_dev$sndtimer(&(0x7f0000014000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') [ 312.802374][T12891] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.809750][T12891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.817628][T12891] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.825076][T12891] bridge0: port 1(bridge_slave_0) entered forwarding state 17:33:55 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) close(r3) connect$l2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x3a) close(r3) [ 312.964683][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.981750][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.067688][T12891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.088386][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.097688][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.116246][T12891] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.135489][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 313.145196][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.155947][ T3887] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.163552][ T3887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.180243][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.190103][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.199486][ T3887] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.206842][ T3887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.257558][T12891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.268238][T12891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.282582][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.293316][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 17:33:55 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f00000001c0)) fcntl$setsig(r1, 0xa, 0xf) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x121400, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460600050001019f10ffb349e61a68791f6877"], 0x16) close(r4) socket$netlink(0x10, 0x3, 0x1f) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000240)={0x901, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000002c0)={0x8, 0x120, 0xfa00, {0x4, {0x6, 0x0, "36146c0d1065a5469f02fe062db7e156fb2c665dcb4c8f5529b4ee346f1918af1faac5780fb2f8c071d9dcd98c7f3225b2b86bd8cd8771886c62acd0854843fa1317fb2be0171b31d56a8b7503566f69d902bd51bce3cbace143bb6b1abacce096eb71559c6dd380edc4c7d6cb84b7bc55e29d3ef69e55bbe7d88be7de8cd6df0d27bc7e28254536b447bdea368a197146c7405b82660e6d4d5de9d626a2acc8bcf127ce7c53c6ff2cbfb581c548cefbe82bf56824a0ec3382b7e03c4d813695865588111b35b42ef312e3ad249fff16ad66d95841c8d5de9b2f3064865b6240a50ca23a4969d6ad86169169019c8fc1498e563faf6e2c203ee61026bdec553a", 0x4, 0x10000, 0x1, 0x0, 0xffffffffffffffc1, 0x0, 0x401}, r5}}, 0x128) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$int_in(r0, 0x5452, &(0x7f0000000400)=0x7) ioctl(r6, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") splice(r2, 0x0, r4, 0x0, 0x80000001, 0x2) [ 313.303368][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.313748][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.323149][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.332883][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.342447][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.351683][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.361436][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.370722][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.386582][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.395635][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.451537][T12891] 8021q: adding VLAN 0 to HW filter on device batadv0 17:33:55 executing program 1: modify_ldt$write(0x1, &(0x7f0000000000)={0x200}, 0x10) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x100) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x48900008}, 0xc) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) 17:33:55 executing program 1: unshare(0x7fffffe) r0 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x10001, 0x40000) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000002c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000000)) r2 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x3, 0x2) ioctl$RTC_PIE_OFF(r2, 0x7006) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3a, 0x2cc200) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x4800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={r4, 0x80000, r6}) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000001c0)=0xfffffffffffffeff) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r9, 0x4030ae7b, &(0x7f0000000180)={0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000200)={r7, r5}) 17:33:56 executing program 1: r0 = socket(0x18, 0x0, 0x0) socket(0x10, 0x5, 0x7) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x9, 0x4}, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x2b, &(0x7f0000000000), 0x20a154cc) truncate(&(0x7f0000000080)='./file0\x00', 0x8) 17:33:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast1, 0x5}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x161, &(0x7f00000bfff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000002500000028bd7000fcdbdf250700000008000400232500002800170003000001040000007600000029bd70002cbd7000080000000300000004000000070000005000140077703235362d67656e6572696300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000006a00000008001900ff0000002c001700040000002dbd70002bbd700026bd700027bd7000580200000900000009000000080000009e03000028001a00ac1e0001000000000000000000000000ff0200000000000000000000000000010a0002010c0010000100000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x0, 0x0, 0x2, 0x9}, 0x20) 17:33:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r2, 0xffffffff}, &(0x7f0000000380)=0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x204000000bd, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000002c0)={{0x9d3, 0x7a000}, 'port1\x00', 0x1, 0x81400, 0x167a, 0x8, 0x3, 0x20, 0x400000, 0x0, 0x4, 0x33de}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000100000013) 17:33:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [0x10000040000001]}) setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v1={0x1000000, [{0x9, 0x7}]}, 0xc, 0x2) 17:33:56 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) listen(r0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) sendmsg$inet(r0, &(0x7f0000002c40)={0x0, 0x0, 0x0}, 0x24000001) 17:33:56 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) ustat(0xe4dd, &(0x7f00000000c0)) bind$tipc(r0, &(0x7f0000000000)=@name, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000700)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}}}, 0x10, 0x0}, 0x0) r1 = getpgid(0x0) capset(&(0x7f0000000000)={0x19980330, r1}, &(0x7f0000000080)={0x9, 0x800, 0x9, 0x1, 0x6, 0x101}) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000040)) 17:33:56 executing program 0: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000427, 0x40) write(r0, &(0x7f0000000300)="2a60fceb1a0e8a421ebf43162b35d852bebf7036524e03872dcddcaf2b287dd65974cfbf639cb3afc53b98b3ba6e5676e69fd973a2e262666c1d54dbaed27ea8bdbb669fe56e652b511093d1e2ee1fc6a4a1db9a0b5ecc7fc10942a5ed49b7e86070ab024dca884e22362a3f0ee0b56a1c56a4ae51e6833fe9417ebc7d6e67468fe2b8c3ea6bc4a71522c23fd8b7e41680e28ffae903fc71c4605a38e8d6ca2e4802479eb781e005a205bf13a353118c4f877380771718bb5ed9f4ebd94770411316c01ed1e2950024e669ed7211bbe3", 0xfc5f) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xffff, 0x400) write$UHID_GET_REPORT_REPLY(r1, &(0x7f00000000c0)={0xa, 0x2, 0x20, 0x1}, 0xa) symlinkat(&(0x7f0000000000)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000040)='./file1\x00') [ 314.643016][T12957] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) 17:33:56 executing program 0: setrlimit(0x2, &(0x7f0000000040)={0x7, 0xffffffff00000001}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0xffffffffffffffff) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', &(0x7f00000000c0)=""/206, 0xce) 17:33:57 executing program 0: setrlimit(0x2, &(0x7f0000000040)={0x7, 0xffffffff00000001}) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0xffffffffffffffff) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', &(0x7f00000000c0)=""/206, 0xce) [ 314.899922][T12965] mmap: syz-executor.0 (12965): VmData 18530304 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data. 17:33:57 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200000, 0x0) r3 = fcntl$getown(r0, 0x9) sendmsg$nl_generic(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2080}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x12b8, 0x10, 0x808, 0x70bd2c, 0x25dfdbfc, {0x15}, [@typed={0x8, 0x53, @u32=0x3}, @generic="0328b919a690d9a694978078254c052f9ca0545b896df90933f6ce4ce09d4165bb49d0543ba7f6ef0a1ccf0d3729ed15ef23454a67a5846eb0eeb83e6e8dd49f62d14ed94bbab79cca13729057bbfd618f247592be9f37d7696fc8c5baf57f9fe88e330034a62bbda2d42524c7837bceaac5e896e24a01d33a56631abc63", @nested={0x88, 0x8d, [@typed={0x84, 0x7c, @binary="0968e893d70c8ad6f84038287783218c822c91f4b1fbfc157fd6f9d98b3a3c8722077409dae00beeb5c7823b4080fb20c1c6327004eefc3b2c8a8724a5bc4b2f686ceecb774e6622a92b81cd76dcf7b99411bb056997d534cfde4cd8adb70fa4eb625047b7a8f054f48458e724cf7f3ab2b2290e6ec28353cb134f2cfa555c9d"}]}, @nested={0x1194, 0x8b, [@generic="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", @typed={0x14, 0x59, @ipv6=@local}, @typed={0x8, 0x42, @pid=r3}, @generic="4f3b2d3893d725631b9db2e887e90146f6af7817ec9e2db55d2441ea83b26aa9f073cbca39b6f234239d69201748190acb709010d4d81f449970a26fa90e88dd795dab9b6938fb344e3db14aa7d4b10013c0d8f4a20ae9cf059e0c1130b740bca4a36b95d4c8e673a39933376e03fcf1ab98085805cad72bd033873ee416596ced06", @generic="1638f27e2701d8afecf4e5bcd2a4f94417fbe496469d0b6da2a14b0ddcd99d30c81825a14d917b23db6756f7f0ed57610b3bbf4e0f86d4c3d2cbc2e70c14444b051a74b49de1e049dc3c252708f3c9fe2f50771c352e82", @generic="185ecd2fe59a49019bed16af59446101110520f381a199e988e24a8682eeb8496df2cd4e1c8bee7a3ac948422e15fdf91b7bcc68f0e84eb931d07dee938b2bb5b9debceee5", @generic="b57a5dad87236060deb6cd6a6b815a6c69909efe38cf39eeffe06911c4145913aef55c697bb61a2924d01f055ef949519d40f42752208270ada985ba75b5dffd4e7ba3b86b942e2c823d6a67fca315ea41603c60c0de"]}]}, 0x12b8}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) dup3(r0, r1, 0x0) 17:33:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r2, 0xffffffff}, &(0x7f0000000380)=0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x204000000bd, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000002c0)={{0x9d3, 0x7a000}, 'port1\x00', 0x1, 0x81400, 0x167a, 0x8, 0x3, 0x20, 0x400000, 0x0, 0x4, 0x33de}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000100000013) 17:33:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r2, 0xffffffff}, &(0x7f0000000380)=0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x204000000bd, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000002c0)={{0x9d3, 0x7a000}, 'port1\x00', 0x1, 0x81400, 0x167a, 0x8, 0x3, 0x20, 0x400000, 0x0, 0x4, 0x33de}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000100000013) 17:33:58 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x32) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) close(r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2, 0x80000, r1}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x30, &(0x7f0000000100)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r3, 0xffffffff}, &(0x7f0000000200)=0x8) read$eventfd(r0, &(0x7f0000000240), 0x8) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x1) r4 = request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='\x00', 0xfffffffffffffff9) r5 = request_key(&(0x7f0000000400)='logon\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='trusted.overlay.redirect\x00', 0x0) r6 = request_key(&(0x7f00000004c0)='cifs.spnego\x00', &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)='trusted.overlay.redirect\x00', 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000580)={r4, r5, r6}, &(0x7f00000005c0)=""/4096, 0x1000, &(0x7f0000001600)={&(0x7f00000015c0)={'wp384\x00'}}) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6b) openat$cgroup_int(r0, &(0x7f0000001640)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000001680)={0x0, 0x1, [0x3, 0x100, 0x8, 0x3, 0x8, 0x10000, 0x3a60124, 0x7fff]}) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000016c0)) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000001700)={0x1, 0x1, [0x80, 0x4, 0x6, 0x4, 0x200, 0x4, 0x8, 0x9]}) r7 = dup(r1) ioctl$PPPIOCSMRRU(r7, 0x4004743b, &(0x7f0000001740)=0xb65) ioctl$VIDIOC_SUBDEV_G_SELECTION(r7, 0xc040563d, &(0x7f0000001780)={0x1, 0x0, 0x0, 0x3, {0xa22d, 0x6, 0x6000, 0x7}}) clock_gettime(0x0, &(0x7f00000017c0)={0x0, 0x0}) setitimer(0x1, &(0x7f0000001800)={{}, {r8, r9/1000+10000}}, &(0x7f0000001840)) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000001880)={r3, 0x3, 0x7}, 0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001900)={&(0x7f00000018c0)='./file0\x00', 0x0, 0x8}, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001940)=""/4096, &(0x7f0000002940)=0x1000) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000002980)={[], 0x58, 0x8, 0x9, 0x0, 0x1, 0x6000, 0x0, [], 0x6a}) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000002b40)={@empty}, &(0x7f0000002b80)=0x14) socket$inet_tcp(0x2, 0x1, 0x0) 17:33:58 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="c0dca5055e0bcfec7be070") lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r2) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000002c0)=0x7) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x3d5, &(0x7f0000000080)=[{&(0x7f0000000180)="240000000d0607031dfffd946fa2830020200a0009000200001d85680c00679e6514450c1364b387320e638d341baba20400ff7e28a30000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x5b}], 0x1}, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x40) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000280)=0x1, 0x4) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000100)={0x0, 0x1, 0x2}) 17:33:58 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="cd390b081bf2ffff1497ffff86256002290f22403588b2deba2983469c7800383a0000000000000000000000ffe100000000ff020000000000d416a5e7368fd3b9010200907800000000609423df0000320100000000000000000000000000000001fe9b0000000000000b000000000000006b"], 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x4000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@host}) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 17:33:58 executing program 0: unshare(0x240203fc) sysfs$3(0x3) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000200)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) 17:33:58 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x40044103, 0x716000) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x10801) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000100)=0x60) [ 316.772592][T13002] IPVS: ftp: loaded support on port[0] = 21 17:33:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000001c0)=""/66) r4 = socket(0x0, 0x7, 0x9) getpeername(0xffffffffffffff9c, &(0x7f0000000080)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000100)=0x80) setsockopt$inet6_mreq(r4, 0x29, 0x1f, &(0x7f0000000140)={@empty, r5}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 316.971013][T13002] chnl_net:caif_netlink_parms(): no params data found 17:33:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r2, 0xffffffff}, &(0x7f0000000380)=0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x204000000bd, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000002c0)={{0x9d3, 0x7a000}, 'port1\x00', 0x1, 0x81400, 0x167a, 0x8, 0x3, 0x20, 0x400000, 0x0, 0x4, 0x33de}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000100000013) [ 317.078076][T13002] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.085720][T13002] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.095015][T13002] device bridge_slave_0 entered promiscuous mode [ 317.124111][T13002] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.131432][T13002] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.140727][T13002] device bridge_slave_1 entered promiscuous mode [ 317.239474][T13002] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 317.267627][T13002] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 317.307576][T13002] team0: Port device team_slave_0 added [ 317.321798][T13002] team0: Port device team_slave_1 added 17:33:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000001c0)=""/66) r4 = socket(0x0, 0x7, 0x9) getpeername(0xffffffffffffff9c, &(0x7f0000000080)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000100)=0x80) setsockopt$inet6_mreq(r4, 0x29, 0x1f, &(0x7f0000000140)={@empty, r5}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 317.458997][T13002] device hsr_slave_0 entered promiscuous mode [ 317.493113][T13002] device hsr_slave_1 entered promiscuous mode [ 317.560404][T13002] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.567851][T13002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.575722][T13002] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.583151][T13002] bridge0: port 1(bridge_slave_0) entered forwarding state 17:33:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000001c0)=""/66) r4 = socket(0x0, 0x7, 0x9) getpeername(0xffffffffffffff9c, &(0x7f0000000080)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000100)=0x80) setsockopt$inet6_mreq(r4, 0x29, 0x1f, &(0x7f0000000140)={@empty, r5}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 317.722557][T13002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.771319][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.784177][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.816905][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.836926][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 317.865676][T13002] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.898791][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.909377][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.916731][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state 17:34:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000001c0)=""/66) r4 = socket(0x0, 0x7, 0x9) getpeername(0xffffffffffffff9c, &(0x7f0000000080)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000100)=0x80) setsockopt$inet6_mreq(r4, 0x29, 0x1f, &(0x7f0000000140)={@empty, r5}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 317.977252][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.986489][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.993903][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.004257][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.014367][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 17:34:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r2, 0xffffffff}, &(0x7f0000000380)=0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x204000000bd, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000002c0)={{0x9d3, 0x7a000}, 'port1\x00', 0x1, 0x81400, 0x167a, 0x8, 0x3, 0x20, 0x400000, 0x0, 0x4, 0x33de}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) [ 318.040452][T13002] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.051178][T13002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.105486][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.114555][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.124502][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.134398][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.143583][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.161845][T13002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.207508][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 17:34:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000001c0)=""/66) socket(0x0, 0x7, 0x9) getpeername(0xffffffffffffff9c, &(0x7f0000000080)=@xdp, &(0x7f0000000100)=0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) unshare(0x20400) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x5) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x20, 0x1) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000140)) 17:34:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x480, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000080)={0x7b, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xae80) 17:34:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000001c0)=""/66) socket(0x0, 0x7, 0x9) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:00 executing program 2: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x200200, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x6, &(0x7f0000000280)="c0dca5055e16cfec7be070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) readlinkat(r0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=""/64, 0x40) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)=0x0) capget(&(0x7f0000000200)={0x399f1336, r4}, &(0x7f0000000240)={0x2105, 0x6, 0x5, 0x6, 0x6, 0x5}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0x7}, 0x8) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x20000) r5 = dup2(r1, r3) dup3(r5, r2, 0x0) 17:34:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000001c0)=""/66) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r2, 0xffffffff}, &(0x7f0000000380)=0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x204000000bd, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000002c0)={{0x9d3, 0x7a000}, 'port1\x00', 0x1, 0x81400, 0x167a, 0x8, 0x3, 0x20, 0x400000, 0x0, 0x4, 0x33de}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 17:34:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:01 executing program 2: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x200200, 0x40) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x6, &(0x7f0000000280)="c0dca5055e16cfec7be070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) readlinkat(r0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)=""/64, 0x40) ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000001c0)=0x0) capget(&(0x7f0000000200)={0x399f1336, r4}, &(0x7f0000000240)={0x2105, 0x6, 0x5, 0x6, 0x6, 0x5}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0x7}, 0x8) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x20000) r5 = dup2(r1, r3) dup3(r5, r2, 0x0) 17:34:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000001c0)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x8, 0x2, 0x27d0, 0x3, 0x1f, 0xb39a, 0x8, {0x0, @in={{0x2, 0x4e24, @empty}}, 0x1, 0x100000000, 0x70, 0xee, 0x22}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r1, 0x3, 0x4, 0x7fffffff}, 0x10) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000080)={0x5f54, 0x1e, 0xd, 0x3f, 0xfa2f, 0x6, 0x1, 0x100, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r3, 0x8, 0x1, 0x5}, 0x10) socket$key(0xf, 0x3, 0x2) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100), &(0x7f0000000000)=0x18c) 17:34:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r2, 0xffffffff}, &(0x7f0000000380)=0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x204000000bd, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000002c0)={{0x9d3, 0x7a000}, 'port1\x00', 0x1, 0x81400, 0x167a, 0x8, 0x3, 0x20, 0x400000, 0x0, 0x4, 0x33de}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) 17:34:02 executing program 2: syz_emit_ethernet(0xfffffffffffffe22, &(0x7f0000000100)={@broadcast=[0xff, 0xe0], @broadcast, [{[], {0x8100, 0xfffffffffffffff7, 0x2, 0x3}}], {@llc_tr={0x11, {@llc={0xbc, 0x0, "c539", "881e0e907016915a3ff29fd81b8e8fb6c8d4dcb3feee02f9c033b00c8b5322d42861a67c38aae7576021458936760b7dac5f5a23d42bdb47b6dac01d26d0e8c9cdcfdc82406e9891ae8e6ba4abca65a510b1653a4eb186c13919f302591938e04a971a35e296afe4adfb245b4df3097ebaac2ae8c2cc1f229550b67905e801b037009e8d0ddb62d95a25916b2e26a9d9add91c4bcb40c5226c428ced40a83f"}}}}}, 0x0) 17:34:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:02 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) accept(r0, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0x2, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0xfe80}, 0x9c) 17:34:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:02 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x400) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000002c0)=0xf4254) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) prctl$PR_SET_FPEXC(0xc, 0x40003) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f00000000c0)="fc054351d49947492e63957acf2b7d68be208baa133c789b662cae70aaffa372073abd15d0bf8a95e46f3d3611a32d51abb4760064cace4ef6ccf6ce679577011a8001e7cfbd32f599bd29d08ab4cef45e3af763f8e0baee59b1be64ab5c03d92a6aa43e862121877c3f7b235083d3ce916c6128f99a74b5ae0012cf94aa1da0c086b46f53b2230b1253b8949221cb1fec105163e8c748891d2943b086a9e83723d36651266f1cbd728123a9c6b60dbecb7b572ebd75f2bb71300b44f4158753c0b073c80aa427de68a96328ad8f99") bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0x11, "4899f3cccfa9c59a1b87fe4bb3c3f950ef"}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000004c0)={r2, 0x88, "07471f0ea52a92cd8db1b712cc98fcb9a68c0a290980a06b501837d3f9bc9831f986cbd4f4a72197c89a9a4f73d5554935f0bf43bc79f9c02e55bf4d0a57f18258d1cc212d107e3a1a5cbcc0a715bbb2adf0f82620cec09930ac15d0a7c44a7da6daf45991c777fb397d505243fb22829c675eda682fc23d3ea46a16b5ff592d03f09fbc6f8b30ee"}, 0x0) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000580)={{0x2, 0x1, 0x80000001, 0xef6, 0x2, 0x100000001}, 0x327, [0xfffffffffffff801, 0x7, 0x1, 0x2, 0x7, 0x0, 0xffffffff7fffffff, 0xffff, 0x0, 0x9, 0x1f, 0x2, 0x2, 0x8, 0x3d0, 0xffffffffffffff6e, 0x2d2, 0x100000000, 0x100000000, 0x6, 0xffffffff, 0x8, 0x7b6, 0x7, 0x1, 0x3, 0x7, 0x8, 0x0, 0x0, 0x4, 0x10000, 0x3, 0x4, 0x8, 0xa75, 0x2f93e40e, 0x0, 0x6, 0xfffffffffffff4d6, 0x9, 0x20, 0x3, 0xffffffff80000001, 0x100000001, 0xd522, 0x4, 0x10000000, 0xfffffffffffffffd, 0x9, 0x7fffffff, 0xca, 0x8, 0xfffffffffffffce6, 0x3, 0xe0, 0x6, 0x3f, 0x9, 0x2, 0x4, 0x3, 0x400000000000000, 0x9, 0x244dc000, 0xcd8, 0x9, 0x7, 0x7, 0xbf2, 0xd0, 0x8, 0x3, 0x1, 0x1, 0x0, 0x40, 0x9, 0x5, 0x6, 0x3f, 0xe6d, 0x8bc2, 0x1ff, 0x5, 0xffffffffffffa5d9, 0x7f, 0xff, 0x0, 0xba67, 0x4, 0x1, 0xa2, 0xc74, 0x8, 0x80000001, 0x0, 0x2, 0x7fff, 0x2, 0x2, 0x3, 0x1536, 0x458204e8, 0x9, 0xe056, 0xffff, 0x32, 0x8001, 0x93a1, 0x3, 0x7, 0x101, 0x8, 0x7, 0x6c, 0x1, 0x7f, 0x8, 0x1, 0x8, 0xffffffff, 0x2, 0x2, 0x0, 0x493f0f21, 0x5, 0x8, 0x1, 0x1eb2, 0x80000000, 0x7, 0x1000000, 0xffffffff, 0x7, 0x400, 0xffffffffffff8001, 0x100000001, 0x1f, 0x41, 0x4, 0x3, 0x13d, 0x3, 0x9, 0x9, 0x0, 0xe5b9, 0x9cc, 0x7fff, 0x2, 0x3, 0x3, 0x4, 0x20, 0xffff, 0x3, 0x1f, 0x9, 0x3, 0x2, 0x9, 0x7, 0x8, 0x81, 0x8, 0x8, 0x7ff, 0x1000, 0x0, 0x6, 0x18, 0x3, 0x8, 0x4f41, 0x8000, 0x6, 0x6, 0x3, 0x97, 0x1ff, 0x7, 0x4, 0x2, 0x0, 0x3ff, 0x7, 0x1, 0xfffffffffffffffb, 0x81, 0x101, 0x3ff, 0xc9f, 0x7f, 0x4, 0x2, 0xf968340, 0x2, 0x2, 0x80000001, 0xdd0, 0x8001, 0x200, 0xff, 0xffffffffffff0648, 0x2, 0x8, 0x101, 0x43d9, 0x10000, 0x6, 0x7, 0xeb, 0xc00000000000000, 0x5, 0x1ff, 0x1, 0x8, 0xee, 0x1ff, 0xff, 0x400, 0x3f, 0x2, 0x5, 0x5, 0x8, 0x5, 0x7, 0x200, 0x1, 0x9f9f, 0x100, 0xfff, 0xbd6, 0x100, 0x81, 0x200, 0x5b9, 0x5, 0x2, 0x4, 0x7f, 0x6, 0x7ff, 0x6, 0x2, 0x800, 0xff79, 0x17, 0x80, 0x800, 0x4, 0x2, 0x9, 0x200, 0x6097, 0x7ff, 0x3f, 0x1000, 0xef3, 0x3f, 0x2, 0x0, 0x5, 0xffa5, 0x7fffffff, 0x0, 0x1901a334, 0x1, 0x9, 0x6, 0x3, 0xffffffffffffffff, 0x2, 0x8001, 0x4d7c, 0x3e0000000000000, 0x3, 0x9, 0xfffffffffffff279, 0x2, 0x7, 0x5, 0x433, 0x6, 0x4, 0x8, 0xffffffff, 0xffffffff, 0x8, 0x401, 0x3, 0x5, 0x28f2, 0x0, 0x37ed000000000, 0x8, 0x5, 0x4, 0x20, 0x62, 0x7ff, 0xffffffff, 0x5, 0x8, 0x10001, 0x4, 0x5, 0x9, 0x6, 0xf91, 0x8, 0x5, 0xfff, 0xfff, 0x8, 0x0, 0xdc24, 0x0, 0x7fff, 0x0, 0x8, 0x800, 0x7, 0x4, 0xfffffffffffffffc, 0x7fff, 0x4, 0x7b5, 0x100, 0xfffffffffffffffc, 0x80000001, 0xffff, 0x17cf, 0x9, 0x3, 0x7, 0xec49, 0xe35e, 0x80, 0xff, 0x6, 0x6, 0xce, 0xa5, 0x8, 0x7c, 0x1000, 0xae77, 0xc45, 0x9, 0x7, 0x5, 0xc8d, 0x3, 0x1, 0x2, 0x200, 0x200, 0x100000000, 0x5c01, 0x4, 0x9a94, 0x1f, 0x200, 0x5, 0x93, 0x8000, 0x8000, 0x6, 0xfffffffffffffffd, 0x7a0, 0x100000001, 0x6, 0x1, 0x6, 0x7f, 0xfffffffffffffffb, 0x7, 0xff, 0x6, 0x8f5, 0x6, 0x4, 0xfffffffffffffffd, 0x3f, 0x4, 0xfffffffffffffff5, 0x101, 0x9, 0x7ff, 0x8001, 0x6, 0x5, 0x6, 0x100, 0x6, 0x7, 0x4, 0x401, 0x47f2, 0x4, 0x10001, 0x8001, 0x0, 0x0, 0xb9, 0x5, 0x6, 0x9, 0x7f, 0xd4f9, 0xba, 0x10000, 0x6, 0x5, 0x8, 0x4, 0x4, 0xffffffff, 0xfffffffffffffc00, 0x800, 0x5, 0x2, 0x4, 0x1c5, 0x2, 0x3, 0x6, 0x0, 0x7, 0x5, 0x40000000000, 0x2, 0x2, 0x5, 0x1, 0xffffffffffffffe0, 0x9, 0x20, 0x6, 0x20, 0x401, 0xff, 0x1, 0x80000000, 0x61d, 0xbc, 0x7, 0x37, 0x9, 0x401, 0x800, 0x2, 0x2f59, 0x1, 0x6, 0x9, 0xffffffffffff0001, 0x7ff, 0x7f, 0x100000000, 0x0, 0x0, 0xfffffffffffffff7, 0xe68, 0x0, 0x3, 0x20, 0x7, 0x7ff, 0x7f, 0x2215873e, 0xffffffff, 0x80, 0x0, 0x1000, 0x5, 0x7fff, 0x9, 0x1000, 0x3, 0x8, 0x1, 0x7, 0x4, 0x601683ef, 0x3530000000000, 0x7ff, 0x1f, 0x4, 0x3, 0x80, 0x73, 0x432, 0x4, 0x3, 0x5, 0x7, 0x4ea9, 0x8, 0x200, 0x1ff, 0x8, 0x9, 0x9, 0x5, 0xfffffffffffffffa, 0x6, 0xff, 0x8, 0x101, 0x1, 0xd79, 0x3, 0x9, 0x7fff, 0x4, 0x5, 0xa4, 0x8000, 0x2, 0x100, 0x3ff, 0x1, 0x2, 0x7fffffff, 0xb8, 0x22c5, 0x9, 0x5, 0x7, 0x1, 0x0, 0x7, 0x8, 0x1, 0x5, 0x0, 0x9, 0x3, 0x2, 0x10001, 0x5, 0x81, 0x2, 0xa6, 0x5, 0xcb, 0x2e, 0x79d, 0x100000001, 0x1, 0x1f86, 0xc8, 0xffff, 0x7, 0x61f, 0x8000, 0x1, 0x36, 0x6, 0x7f, 0x7fba, 0x5, 0x2, 0x1, 0x3, 0x1ff, 0x7, 0x7ff, 0x8, 0x0, 0x100000000, 0x97f4, 0x2, 0x8324, 0x3ff, 0x80, 0x401, 0x1, 0x2, 0x8001, 0x7, 0x6, 0x7, 0xfffffffffffffff8, 0x2, 0x8000, 0x6, 0x4, 0x3, 0xff, 0xfff, 0xcd0, 0x401, 0xffffffff, 0x5, 0x8, 0x3, 0x0, 0x2, 0x2, 0x7f, 0x0, 0x6, 0x401, 0x2, 0x0, 0x6, 0x2, 0x20, 0x6, 0xf345, 0x6, 0x2, 0x100000001, 0x100000000, 0x0, 0x1, 0x8, 0xffffffffffffffc2, 0xffffffffffffff9d, 0x6, 0x7, 0x0, 0x1, 0x2, 0x1ff, 0x800, 0x10001, 0x4, 0x454, 0x200, 0x5, 0xfff, 0xff, 0x41, 0x800, 0x6, 0xffff, 0x6, 0xda0, 0x1, 0xffff, 0x1, 0x100, 0x4, 0x0, 0x80000000, 0x6, 0x6, 0x0, 0x0, 0xea8e, 0xffffffffffffffff, 0x7ff, 0x1, 0x6, 0x6, 0x7f, 0x2, 0xfffffffffffff335, 0xe1db, 0x1e, 0x2, 0x4, 0x7, 0x1, 0x2, 0x6, 0xffffffff, 0x5c13, 0xffffffff, 0x7, 0x2, 0x8, 0x401, 0x2, 0x81, 0x4, 0x0, 0x7, 0x7, 0x6, 0x9, 0x8, 0x6, 0x1, 0x1, 0x8, 0x8, 0x8000000, 0x0, 0xa7, 0x9, 0x80000000, 0x7708, 0x300000000000, 0x40, 0x7f000000000, 0x2, 0x8, 0x44, 0x7, 0x0, 0x3f, 0x200, 0x9, 0x5, 0x5, 0x200, 0x8, 0xd82c, 0x40, 0xff, 0x1, 0xfff, 0x2, 0x10001, 0x7, 0xed, 0x80, 0x6, 0x9, 0x2ac, 0x8, 0x2, 0x3, 0x3, 0x6, 0xffffffffffffff95, 0x4, 0x9862, 0x6, 0x400, 0x200, 0x7, 0x9, 0x2, 0x8, 0x1ff, 0x7f, 0x9, 0x0, 0x87, 0x0, 0x9, 0x5, 0x221, 0x7fffffff, 0x5, 0x1, 0x2, 0x7, 0x8000, 0x3ff, 0x0, 0x800, 0x8, 0x7, 0x7fff, 0x4, 0x3ff, 0x2, 0x8, 0x3, 0x3, 0xffffffffffffffe0, 0x4, 0x3f, 0x800, 0x6, 0x2, 0x776e377d, 0xc46b, 0x8, 0x7, 0x1000, 0x0, 0x9, 0x2, 0x7, 0xffffffffffffff81, 0x9, 0x7, 0x7, 0xffffffff00000001, 0x765e8342, 0x3, 0x9, 0x5, 0x3, 0x8, 0x4, 0x6, 0x2, 0x100, 0xfff, 0x38, 0xf5ce, 0xb2, 0x0, 0x7, 0xfff, 0x400, 0x80000001, 0xcef, 0xe8, 0xa7, 0xffff, 0x7f1e, 0x4, 0x200, 0x4, 0xffffffffffffffff, 0x7, 0x3, 0x6, 0x6c, 0xffffffffffffff37, 0x6, 0x7f, 0x200, 0x100000000, 0x4, 0x3, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x81, 0x5, 0x9, 0x4, 0x8, 0x2, 0x1, 0x9, 0x8001, 0x80, 0x2, 0x8, 0x2, 0x100000000, 0x0, 0x6, 0x80000001, 0x400000, 0x0, 0x1, 0x1f, 0x7f, 0x7f, 0x7, 0x7ac, 0x3, 0x0, 0x3, 0x8, 0x4, 0x81, 0x0, 0x200, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x6, 0x1, 0x401, 0x100000000, 0xffffffffffffffe7, 0x4, 0x5, 0x8, 0x1, 0x6e1, 0x7, 0x0, 0x8, 0x1af, 0x7fff, 0x800, 0x3fffc00000000, 0xf19, 0xb7c9, 0x196, 0x4, 0x3, 0x3, 0x8000, 0x4, 0x7fff, 0x9, 0xffffffff, 0xfffffffffffffffa, 0x80000001, 0x3, 0x9, 0x0, 0x57e1, 0x6, 0x80000000, 0x1, 0x3, 0x3b84e462, 0x288, 0x200, 0xd8ff, 0x4, 0x9, 0x72b9, 0x4, 0xfffffffffffff678, 0x6ae, 0x8001, 0x100, 0x100000001, 0x1ff, 0xfffffffffffffffa, 0x80, 0xa, 0x2, 0x10000, 0x20, 0x612, 0x529a7742, 0x3, 0x5770, 0x7, 0x34e, 0xfffffffffffffff8, 0x7fffffff, 0x9adc, 0x32, 0x3, 0x8, 0x400, 0x4, 0x9, 0x6, 0x400000, 0x4, 0x1, 0x8, 0x7fff, 0xffff, 0x401, 0x4, 0x200, 0x53, 0x4, 0x1, 0x200, 0x3ff, 0xffffffff, 0x100000000, 0x100000001, 0x6, 0x7e7, 0xff, 0x3f, 0x66a, 0x2, 0x0, 0x3, 0x3, 0xfffffffffffffff7, 0x4, 0x97, 0x5, 0x1ff, 0x7, 0x6ce, 0x8, 0x7f, 0x5e89, 0xff, 0x101, 0x3, 0x3, 0x200, 0x49, 0xfffffffffffffffa, 0x1, 0x0, 0x2, 0x813, 0x2, 0x8, 0x2, 0x0, 0xffffffff, 0x0, 0x5, 0x9, 0x6, 0x2, 0x1, 0x2, 0x2, 0x8, 0x7, 0x6, 0x7, 0x80000001, 0x4, 0x0, 0x1, 0x1, 0xc000000000, 0x0, 0x0, 0x2e, 0x8000, 0xffffffff, 0xffffffff, 0x7ff]}) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000440)={0x80, 0x70, 0x1172, 0x3f}, 0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, 0x8) fsetxattr$security_capability(r1, &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)=@v1={0x1000000, [{0xfffffffffffffff9, 0x1}]}, 0xc, 0x3) 17:34:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17:34:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r2, 0xffffffff}, &(0x7f0000000380)=0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x204000000bd, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000002c0)={{0x9d3, 0x7a000}, 'port1\x00', 0x1, 0x81400, 0x167a, 0x8, 0x3, 0x20, 0x400000, 0x0, 0x4, 0x33de}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) tkill(r3, 0x1000100000013) 17:34:03 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080), 0x4) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x537}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={r2, 0x67f, 0x3, [0x8, 0xfffffffffffffffe, 0x8]}, &(0x7f0000000100)=0xe) sigaltstack(&(0x7f00007df000/0x4000)=nil, &(0x7f0000000180)) getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f0000000140)) 17:34:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17:34:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 17:34:03 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'erg\xc7\x1a\xc9w\xea\xd9\xc3\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) restart_syscall() listen(r0, 0x0) r1 = accept(r0, 0x0, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) 17:34:03 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 321.417984][T13171] sock: sock_set_timeout: `syz-executor.2' (pid 13171) tries to set negative timeout [ 321.455702][T13173] sock: sock_set_timeout: `syz-executor.2' (pid 13173) tries to set negative timeout 17:34:03 executing program 2: syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) syz_emit_ethernet(0xfffffd6c, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004500001400000000006c907800000000ffefffff00427210644a3c6f"], 0x0) 17:34:03 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 17:34:03 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 17:34:03 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:34:03 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:34:03 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3, 0x181000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x6, @remote, 0x4e20, 0x1, 'wlc\x00', 0xc, 0x40, 0x1d}, 0x2c) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x5e, &(0x7f0000000000)={&(0x7f0000000180)=@gettaction={0x28, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, @TCA_ACT_INDEX={0x8}}]}]}, 0x14}, 0x1, 0x0, 0x0, 0x47ffc}, 0x0) 17:34:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r2, 0xffffffff}, &(0x7f0000000380)=0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x204000000bd, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000002c0)={{0x9d3, 0x7a000}, 'port1\x00', 0x1, 0x81400, 0x167a, 0x8, 0x3, 0x20, 0x400000, 0x0, 0x4, 0x33de}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) tkill(r3, 0x1000100000013) 17:34:06 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:34:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000200)={0x6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}]}) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000240)=0xf20d, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0x9, 0x4) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000280)=""/210) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f00000000c0)={0x7fff, 0xf4f, @name="1f64f9b9633707a26aea56b8a5073c19e42986807c1d355ca9963fe60fe3728d"}) 17:34:06 executing program 3: r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) fallocate(r0, 0x20, 0x7, 0x80000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x2400, 0x0) splice(r1, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x9, 0x0) write$P9_RCREATE(r1, &(0x7f0000000100)={0x18, 0x73, 0x1, {{0x8, 0x2, 0x3}, 0x9}}, 0x18) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000140)) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000180)) fsetxattr(r1, &(0x7f00000001c0)=@random={'btrfs.', 'cgroup}\x00'}, &(0x7f0000000200)='cpuset\'}+vmnet1!systemcpuset\x00', 0x1d, 0x1) write$P9_RREAD(r1, &(0x7f0000000240)={0x45, 0x75, 0x1, {0x3a, "223617326c54eb781fbab4b430561b426fad6a7e5b1cffde65b64fab4cb2879ff5b48c52f415d414509c46c89ff837bbf5f9b0e0d5f504497eb4"}}, 0x45) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000002c0)={'security\x00'}, &(0x7f0000000340)=0x54) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000380)={0x0, 0x8, 0x401}, 0xc) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000003c0)={0x945d, 0x0, 0x8}) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) close(r0) prctl$PR_SET_NAME(0xf, &(0x7f0000000400)='security\x00') read$hidraw(r1, &(0x7f0000000440)=""/23, 0x17) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x40) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000004c0)={'veth0_to_team\x00'}) fcntl$getownex(r0, 0x10, &(0x7f0000000500)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000540)={0x1, r3}) ioctl$sock_ifreq(r2, 0x8914, &(0x7f00000005c0)={'veth0\x00', @ifru_settings={0x3, 0x7, @fr=&(0x7f0000000580)={0x3f, 0xff, 0x10000, 0x1f, 0x2, 0x1, 0x7f}}}) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000640)={0x6, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}]}) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000680)={0x1, 0xfffffffffffff801}, 0x8) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f00000006c0)={0x3, 0x2, 0xf5, 0x2, 0x7, 0x6}) r4 = fcntl$dupfd(r0, 0x406, r1) read$alg(r4, &(0x7f0000000700)=""/61, 0x3d) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000740)=0x1) write$P9_RLCREATE(r2, &(0x7f0000000780)={0x18, 0xf, 0x1, {{0x40, 0x4, 0x4}, 0x2}}, 0x18) [ 324.063169][T13198] QAT: Invalid ioctl [ 324.093946][T13198] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:34:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 324.189856][T13198] QAT: Invalid ioctl [ 324.223060][T13198] QAT: Invalid ioctl [ 324.260465][T13208] QAT: Invalid ioctl 17:34:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000200)={0x6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}]}) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000240)=0xf20d, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0x9, 0x4) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000280)=""/210) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc02c5625, &(0x7f00000000c0)={0x7fff, 0xf4f, @name="1f64f9b9633707a26aea56b8a5073c19e42986807c1d355ca9963fe60fe3728d"}) 17:34:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 324.564399][T13218] QAT: Invalid ioctl [ 324.577318][T13218] QAT: Invalid ioctl 17:34:06 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x50000) ioctl$KDADDIO(r1, 0x4b34, 0x4) r2 = openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="2d70696473202082"], 0x8) 17:34:06 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:34:06 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 324.801435][T13227] IPVS: ftp: loaded support on port[0] = 21 17:34:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r0, &(0x7f0000000000)=""/48, 0x2b) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) getdents(r0, &(0x7f00000002c0)=""/127, 0x23a) [ 325.130660][T13227] chnl_net:caif_netlink_parms(): no params data found [ 325.192841][T13227] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.200175][T13227] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.209554][T13227] device bridge_slave_0 entered promiscuous mode [ 325.226002][T13227] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.234894][T13227] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.244077][T13227] device bridge_slave_1 entered promiscuous mode [ 325.282709][T13227] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 325.295577][T13227] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 325.330733][T13227] team0: Port device team_slave_0 added [ 325.340535][T13227] team0: Port device team_slave_1 added [ 325.517026][T13227] device hsr_slave_0 entered promiscuous mode [ 325.702853][T13227] device hsr_slave_1 entered promiscuous mode [ 325.967573][T13227] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.975011][T13227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.982865][T13227] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.990198][T13227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.089914][T13227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.116523][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.128640][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.140358][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.154793][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 326.185624][T13227] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.203797][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.214501][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.223750][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.231561][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.295209][T13227] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 326.305764][T13227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.323149][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 326.333016][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.342383][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.349687][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.358285][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 326.368517][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.379033][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.389131][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.398915][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.409045][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.418934][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.428448][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.438233][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.447584][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.463922][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 326.473040][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.507562][T13227] 8021q: adding VLAN 0 to HW filter on device batadv0 17:34:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r2, 0xffffffff}, &(0x7f0000000380)=0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x204000000bd, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000002c0)={{0x9d3, 0x7a000}, 'port1\x00', 0x1, 0x81400, 0x167a, 0x8, 0x3, 0x20, 0x400000, 0x0, 0x4, 0x33de}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r3 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) tkill(r3, 0x1000100000013) 17:34:09 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 17:34:09 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x100, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") r3 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x100000000000001) write$binfmt_aout(r3, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) poll(&(0x7f0000000040)=[{r3}], 0x1, 0x7) 17:34:09 executing program 3: mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0xb) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="f082d2bfb300a2608ff913681887e613b38606443d8ee2b62d1e2a1249c55a2766c5f51c17b466adf14ea3f368a830452d25c013453693fecff5cd0ca652f2822b6c855e9a50c1f9456b6c974d7804cde227e87cf771a1b18f3079efc115d85969435c1ea84ee1e2851ec8610909983e8bd33aaa58df70cf2a46523d0ba72a305237ebe5e87bdc141ea1369eb210516cb9ee4a0781ba8ef0246790b169843a0e42e04403381d855e3a54f78a125aac6b448290072e36538b6c06bda38af1cdb75924d5753bbdeb674604f0e01b195d9da7854ce3420d7282b3249d6a43e6db9dff31") 17:34:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x3}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)) 17:34:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x7f, "77b042b1f308a8992c7c4d106dc924b93f12ab7c806ef1848e8e0bc086c19d29", 0x2}) prctl$PR_SET_SECUREBITS(0x1c, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x400, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) setpriority(0x0, r2, 0x800) ioctl$TCSBRKP(r0, 0x5425, 0x7) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f0000000100)="8f5d3597d4b8f7b173cc384e476e65458efac45429f1f59ebcc9f986b7821e1a96b409dd870a4965a1427b1d0503d25b5e92c40d1a147e95848cda1a51a64fb6efadd1c015c65447d434617f267c46ce15072c72cce7a401108c727307aee0") setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000180)={0x77359400}, 0x10) getpriority(0x0, r2) keyctl$session_to_parent(0x12) getsockopt(r0, 0x81, 0x1, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=0x1000) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000001340)={0x1, &(0x7f0000001200)=""/75, &(0x7f0000001300)=[{0x8, 0x41, 0x1, &(0x7f0000001280)=""/65}]}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) getpriority(0x1, r2) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000001380)=""/4096) lsetxattr$trusted_overlay_redirect(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)='trusted.overlay.redirect\x00', &(0x7f0000002400)='./file0\x00', 0x8, 0x3) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000002440)=0x7fff) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000002480)={r0, 0x3a}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000024c0)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x7}}, [0x7, 0xd3b3, 0x0, 0x3, 0x8001, 0x7e473338, 0x5, 0x7, 0x4, 0x2, 0x3, 0x9, 0x7fff, 0xffffffffffffffff, 0x54c]}, &(0x7f00000025c0)=0x100) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000002600)={r3, 0x2}, &(0x7f0000002640)=0x8) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000002680)=0x4) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000026c0)=r0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000002740)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x28, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c010) write$cgroup_subtree(r0, &(0x7f0000002840)={[{0x2b, 'io'}, {0x2d, 'memory'}]}, 0xc) ioctl$BLKPG(r0, 0x1269, &(0x7f0000003880)={0x80000000, 0x800, 0x1000, &(0x7f0000002880)="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"}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000038c0)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000039c0)=0xe8) r6 = getgid() fchown(r1, r5, r6) 17:34:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:09 executing program 2: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000240)={'syz'}, 0x0, 0x0, r4) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-monitor\x00', 0x288000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x1000}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000003c0)={r6, 0x10001, 0x5, 0x200}, &(0x7f0000000400)=0x10) 17:34:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:09 executing program 2: r0 = socket$kcm(0x10, 0x800, 0x4) socket(0x800000002b, 0x1, 0x1) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="39000000140081ae00d175040f62b04a2b546fc54c1960b89c40ebb373585806dbb7d553b4a400"/57, 0x39}], 0x1}, 0x0) 17:34:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 328.232460][T13289] IPVS: ftp: loaded support on port[0] = 21 [ 328.413076][T13289] chnl_net:caif_netlink_parms(): no params data found [ 328.478618][T13289] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.486691][T13289] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.496080][T13289] device bridge_slave_0 entered promiscuous mode [ 328.508737][T13289] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.516273][T13289] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.526221][T13289] device bridge_slave_1 entered promiscuous mode [ 328.561797][T13289] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 328.576443][T13289] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 328.611025][T13289] team0: Port device team_slave_0 added [ 328.620965][T13289] team0: Port device team_slave_1 added [ 328.807457][T13289] device hsr_slave_0 entered promiscuous mode [ 328.974740][T13289] device hsr_slave_1 entered promiscuous mode [ 329.088315][T13289] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.095762][T13289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.103668][T13289] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.111027][T13289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.216053][T13289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.244041][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.257577][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.267931][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.287217][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 329.310842][T13289] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.339999][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.350534][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.357943][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.421723][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.431003][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.438409][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.449934][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.460250][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.470107][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.486909][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.496108][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.505960][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.520877][T13289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.579050][T13289] 8021q: adding VLAN 0 to HW filter on device batadv0 17:34:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r2, 0xffffffff}, &(0x7f0000000380)=0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x204000000bd, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000002c0)={{0x9d3, 0x7a000}, 'port1\x00', 0x1, 0x81400, 0x167a, 0x8, 0x3, 0x20, 0x400000, 0x0, 0x4, 0x33de}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000100000013) 17:34:12 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x2}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) write$P9_RXATTRCREATE(r1, &(0x7f0000000080)={0x7, 0x21, 0x2}, 0x7) 17:34:12 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RAUTH(r0, &(0x7f0000000180)={0x14}, 0x14) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x3, "63dc7650803f100113fc1d8a2e2dc9a5bbd5606c1e51501a0ac04e27905153f4", 0x2, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000003c0)={0x0, 0x7, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6a0bdc9"}, 0x0, 0x0, @planes=0x0, 0x4}) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) 17:34:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x40000c5, 0x2000000080003, 0x0, 0x0, 0x0, 0x6}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 17:34:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64ecffffff0b00020008001a0000000000"], 0x3c}}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x0) ioctl$CAPI_INSTALLED(r1, 0x80024322) openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) 17:34:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008911, &(0x7f0000000000)="3922b45916155148b02478329feb3f919d2ae9ee32dfd75054f0cad0cc6b032dcd0ee3f4d76e75537b4e3c538bca319165e8e1c20cc1300a89ee2e7302a6d315b4c8111331cc7569327d97aadfcf67f3f824e4") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{}, {0x20000000304, @local}, 0x14, {0x2, 0x0, @empty}, 'lapb0\x00'}) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000440)={{0x2, 0x0, @empty}, {0x0, @random="4a71ff818dd5"}, 0x0, {0x2, 0x0, @initdev}, 'gretap0\x00'}) 17:34:12 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RAUTH(r0, &(0x7f0000000180)={0x14}, 0x14) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x3, "63dc7650803f100113fc1d8a2e2dc9a5bbd5606c1e51501a0ac04e27905153f4", 0x2, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000003c0)={0x0, 0x7, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6a0bdc9"}, 0x0, 0x0, @planes=0x0, 0x4}) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) 17:34:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:12 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000087c0)={0x0, 0x0, &(0x7f0000008780)={&(0x7f0000000000)=ANY=[]}}, 0x0) 17:34:12 executing program 3: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8447, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x200000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000100)) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x3, 0x0, 0x0, [], 0x0}) r2 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000040)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000140)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000180)={{0x3, 0x2, 0x1, 0x3, 0xc8}, 0x7fff, 0x0, 0x2f8}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0xfffffffffffffffe) 17:34:15 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC]) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vbi(&(0x7f00000002c0)='/dev/vbi#\x00', 0x0, 0x2) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000340)) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000140)=0xffffffffffffffc1) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)=""/183, 0xb7) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x15043080}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000005cf5a483e9cc6ed802884104", @ANYRES16=r2, @ANYBLOB="000126bd7000fddbdf250900000008000600f40b00001c00010008000100000000000800090013000000080005000200000008000600000000000c000100080004004e23000008000400ff030000"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 17:34:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r2, 0xffffffff}, &(0x7f0000000380)=0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x204000000bd, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000002c0)={{0x9d3, 0x7a000}, 'port1\x00', 0x1, 0x81400, 0x167a, 0x8, 0x3, 0x20, 0x400000, 0x0, 0x4, 0x33de}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000100000013) 17:34:15 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RAUTH(r0, &(0x7f0000000180)={0x14}, 0x14) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x3, "63dc7650803f100113fc1d8a2e2dc9a5bbd5606c1e51501a0ac04e27905153f4", 0x2, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000003c0)={0x0, 0x7, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6a0bdc9"}, 0x0, 0x0, @planes=0x0, 0x4}) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) 17:34:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000180)={0x88, @local, 0x4e21, 0x1, 'lc\x00', 0x18, 0x0, 0x45}, 0x2c) pread64(r0, &(0x7f0000000180), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000240)={0x0, 0x4, 0x6, [], &(0x7f0000000200)=0xa6}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f00000001c0)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0xb}) 17:34:15 executing program 5: r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) fadvise64(r0, 0x2b, 0x8, 0x5) r1 = dup3(r0, r0, 0x80000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000040)=""/40) fstat(r1, &(0x7f0000000080)) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000100)={0x0, 0x6bc}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000140)=0x10001, 0x4) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000180)=""/173) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000240)={0x3, 0x5}) fchdir(r1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000280)={0x100, 0x9, 0x0, 0x7}, 0x10) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x400) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000002c0)={0x2, 0xffffffff, 0x6}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0xfff, 0x9, 0x100000000, 0x5}, {0x5, 0x7, 0x2, 0x7}, {0x8, 0xe011, 0x400, 0x100}, {0x80000001, 0x9, 0x3, 0x3}, {0x5, 0x82a2, 0x8, 0xd60}]}, 0x10) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000380)={0x0, 0x80000001, 0x23, 0x1, 0x2, 0x4, 0x8, 0x5, 0x3, 0x0, 0x400, 0x3}) openat$ion(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ion\x00', 0x480000, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0x200000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000440)={0x1, {0x77359400}, 0x4130, 0x7fffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000480)={0x80000000, 0x0, 0x0, 0x26a}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000004c0)={0x3a5b, r3}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000500)={0x6, 0x2, 0x2, 0xfffffffffffffe00, 0xfff, 0xe1c9}) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000540)) r4 = accept(r2, &(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000600)=0x80) r5 = syz_open_dev$media(&(0x7f0000000640)='/dev/media#\x00', 0x4, 0x488000) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000680)={0x0, 0x8, 0x9, 0x7f, 0x9, 0x7, 0x3, 0x9, {0x0, @in6={{0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x14020013}}, 0x6e3, 0x10001, 0x100000000, 0xfffffffffffffff8, 0x3}}, &(0x7f0000000740)=0xb0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000780)={r6, @in={{0x2, 0x4e23, @multicast1}}}, &(0x7f0000000840)=0x84) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000880)=0x9, 0x4) write$cgroup_subtree(r2, &(0x7f00000008c0)={[{0x2d, 'rdma'}, {0x2b, 'rdma'}, {0x2f, 'pids'}]}, 0x12) syz_open_dev$vcsa(&(0x7f0000000900)='/dev/vcsa#\x00', 0x5, 0x101000) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000940)=0x4) 17:34:15 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RAUTH(r0, &(0x7f0000000180)={0x14}, 0x14) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x3, "63dc7650803f100113fc1d8a2e2dc9a5bbd5606c1e51501a0ac04e27905153f4", 0x2, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000003c0)={0x0, 0x7, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6a0bdc9"}, 0x0, 0x0, @planes=0x0, 0x4}) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) 17:34:15 executing program 4: 17:34:15 executing program 3: 17:34:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f05cd90e2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:15 executing program 4: 17:34:15 executing program 3: 17:34:15 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RAUTH(r0, &(0x7f0000000180)={0x14}, 0x14) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x3, "63dc7650803f100113fc1d8a2e2dc9a5bbd5606c1e51501a0ac04e27905153f4", 0x2, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000003c0)={0x0, 0x7, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e6a0bdc9"}, 0x0, 0x0, @planes=0x0, 0x4}) [ 334.097059][T13393] IPVS: ftp: loaded support on port[0] = 21 [ 334.194168][T13393] chnl_net:caif_netlink_parms(): no params data found [ 334.234434][T13393] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.241654][T13393] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.250352][T13393] device bridge_slave_0 entered promiscuous mode [ 334.259165][T13393] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.268736][T13393] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.277176][T13393] device bridge_slave_1 entered promiscuous mode [ 334.302348][T13393] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 334.314053][T13393] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 334.339580][T13393] team0: Port device team_slave_0 added [ 334.348100][T13393] team0: Port device team_slave_1 added [ 334.406382][T13393] device hsr_slave_0 entered promiscuous mode [ 334.452506][T13393] device hsr_slave_1 entered promiscuous mode [ 334.517586][T13393] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.525101][T13393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.532941][T13393] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.540220][T13393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.600662][T13393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.617307][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 334.626472][ T3346] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.635169][ T3346] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.647429][ T3346] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 334.664781][T13393] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.679319][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 334.688067][ T3887] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.695484][ T3887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.725657][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 334.735662][ T3887] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.742978][ T3887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.753487][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 334.763659][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 334.780237][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 334.797094][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 334.818773][T13393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.830908][T13393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.841516][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 334.870661][T13393] 8021q: adding VLAN 0 to HW filter on device batadv0 17:34:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r2, 0xffffffff}, &(0x7f0000000380)=0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x204000000bd, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000002c0)={{0x9d3, 0x7a000}, 'port1\x00', 0x1, 0x81400, 0x167a, 0x8, 0x3, 0x20, 0x400000, 0x0, 0x4, 0x33de}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000100000013) 17:34:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:18 executing program 3: 17:34:18 executing program 4: 17:34:18 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) write$P9_RAUTH(r0, &(0x7f0000000180)={0x14}, 0x14) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x3, "63dc7650803f100113fc1d8a2e2dc9a5bbd5606c1e51501a0ac04e27905153f4", 0x2, 0x1}) 17:34:18 executing program 5: 17:34:18 executing program 4: 17:34:18 executing program 3: 17:34:18 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x3, "63dc7650803f100113fc1d8a2e2dc9a5bbd5606c1e51501a0ac04e27905153f4", 0x2, 0x1}) 17:34:18 executing program 5: 17:34:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:18 executing program 4: 17:34:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r2, 0xffffffff}, &(0x7f0000000380)=0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x204000000bd, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000002c0)={{0x9d3, 0x7a000}, 'port1\x00', 0x1, 0x81400, 0x167a, 0x8, 0x3, 0x20, 0x400000, 0x0, 0x4, 0x33de}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000100000013) 17:34:21 executing program 3: 17:34:21 executing program 2: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000040)={0x3, "63dc7650803f100113fc1d8a2e2dc9a5bbd5606c1e51501a0ac04e27905153f4", 0x2, 0x1}) 17:34:21 executing program 4: 17:34:21 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x31, 0x81, 0x76, 0x40, 0x7a6, 0x8511, 0xb2b5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x0, 0x0, 0x20, 0xdf, 0xa8}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001c00)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001f00)={0x54, &(0x7f0000001c40)={0x0, 0x0, 0x1, "05"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:34:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:21 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x31, 0x81, 0x76, 0x40, 0x7a6, 0x8511, 0xb2b5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4f, 0x0, 0x0, 0x20, 0xdf, 0xa8}}]}}]}}, 0x0) 17:34:21 executing program 2: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000040)={0x3, "63dc7650803f100113fc1d8a2e2dc9a5bbd5606c1e51501a0ac04e27905153f4", 0x2, 0x1}) 17:34:21 executing program 4: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200010a) close(r0) execve(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) open$dir(&(0x7f0000000000)='./file0\x00', 0x40000841, 0x0) clone(0x3103101ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) accept4$packet(r2, 0x0, 0x0, 0x0) 17:34:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:21 executing program 2: ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000040)={0x3, "63dc7650803f100113fc1d8a2e2dc9a5bbd5606c1e51501a0ac04e27905153f4", 0x2, 0x1}) [ 339.852069][ C1] hrtimer: interrupt took 172374 ns [ 339.922300][ T17] usb 6-1: new high-speed USB device number 2 using dummy_hcd 17:34:22 executing program 2: r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x3, "63dc7650803f100113fc1d8a2e2dc9a5bbd5606c1e51501a0ac04e27905153f4", 0x2, 0x1}) [ 340.126047][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd 17:34:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000200)={r2, 0xffffffff}, &(0x7f0000000380)=0x8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x204000000bd, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000002c0)={{0x9d3, 0x7a000}, 'port1\x00', 0x1, 0x81400, 0x167a, 0x8, 0x3, 0x20, 0x400000, 0x0, 0x4, 0x33de}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(0x0, 0x1000100000013) 17:34:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:34:22 executing program 2: r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f0000000040)={0x3, "63dc7650803f100113fc1d8a2e2dc9a5bbd5606c1e51501a0ac04e27905153f4", 0x2, 0x1}) 17:34:22 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) [ 340.312566][ T17] usb 6-1: config 0 has an invalid interface number: 79 but max is 0 [ 340.321064][ T17] usb 6-1: config 0 has no interface number 0 [ 340.327515][ T17] usb 6-1: New USB device found, idVendor=07a6, idProduct=8511, bcdDevice=b2.b5 [ 340.336871][ T17] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.347395][ T17] usb 6-1: config 0 descriptor?? [ 340.533091][ T31] usb 4-1: config 0 has an invalid interface number: 79 but max is 0 [ 340.541336][ T31] usb 4-1: config 0 has no interface number 0 [ 340.547794][ T31] usb 4-1: New USB device found, idVendor=07a6, idProduct=8511, bcdDevice=b2.b5 [ 340.557174][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.644253][ T31] usb 4-1: config 0 descriptor?? [ 340.903322][ T31] ================================================================== [ 340.911467][ T31] BUG: KMSAN: uninit-value in read_eprom_word+0x947/0xdd0 [ 340.918610][ T31] CPU: 1 PID: 31 Comm: kworker/1:1 Not tainted 5.2.0-rc4+ #7 [ 340.926015][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.936135][ T31] Workqueue: usb_hub_wq hub_event [ 340.941188][ T31] Call Trace: [ 340.944533][ T31] dump_stack+0x191/0x1f0 [ 340.948931][ T31] kmsan_report+0x162/0x2d0 [ 340.953756][ T31] __msan_warning+0x75/0xe0 [ 340.958323][ T31] read_eprom_word+0x947/0xdd0 [ 340.963168][ T31] pegasus_probe+0xf2b/0x4be0 [ 340.967922][ T31] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 340.973944][ T31] ? usb_unlocked_disable_lpm+0x10a/0x180 [ 340.979707][ T31] ? kaweth_get_link+0x70/0x70 [ 340.984511][ T31] ? kaweth_get_link+0x70/0x70 [ 340.989409][ T31] usb_probe_interface+0xd19/0x1310 [ 340.994669][ T31] ? usb_register_driver+0x7d0/0x7d0 [ 341.000000][ T31] really_probe+0x1344/0x1d90 [ 341.004753][ T31] driver_probe_device+0x1ba/0x510 [ 341.009916][ T31] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 341.015864][ T31] __device_attach_driver+0x5b8/0x790 [ 341.021306][ T31] bus_for_each_drv+0x28e/0x3b0 [ 341.026199][ T31] ? deferred_probe_work_func+0x400/0x400 [ 341.032000][ T31] __device_attach+0x489/0x750 [ 341.036837][ T31] device_initial_probe+0x4a/0x60 [ 341.041923][ T31] bus_probe_device+0x131/0x390 [ 341.046842][ T31] device_add+0x25b5/0x2df0 [ 341.051455][ T31] usb_set_configuration+0x309f/0x3710 [ 341.056997][ T31] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 341.063188][ T31] generic_probe+0xe7/0x280 [ 341.068534][ T31] ? usb_choose_configuration+0xae0/0xae0 [ 341.074307][ T31] usb_probe_device+0x146/0x200 [ 341.079201][ T31] ? usb_register_device_driver+0x470/0x470 [ 341.085151][ T31] really_probe+0x1344/0x1d90 [ 341.089887][ T31] driver_probe_device+0x1ba/0x510 [ 341.095049][ T31] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 341.100992][ T31] __device_attach_driver+0x5b8/0x790 [ 341.106436][ T31] bus_for_each_drv+0x28e/0x3b0 [ 341.111340][ T31] ? deferred_probe_work_func+0x400/0x400 [ 341.117208][ T31] __device_attach+0x489/0x750 [ 341.122042][ T31] device_initial_probe+0x4a/0x60 [ 341.127118][ T31] bus_probe_device+0x131/0x390 [ 341.132034][ T31] device_add+0x25b5/0x2df0 [ 341.136625][ T31] usb_new_device+0x23e5/0x2fb0 [ 341.141775][ T31] hub_event+0x5853/0x7320 [ 341.146321][ T31] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 341.152253][ T31] ? led_work+0x720/0x720 [ 341.156619][ T31] ? led_work+0x720/0x720 [ 341.160991][ T31] process_one_work+0x1572/0x1f00 [ 341.166095][ T31] worker_thread+0x111b/0x2460 [ 341.170972][ T31] kthread+0x4b5/0x4f0 [ 341.175091][ T31] ? process_one_work+0x1f00/0x1f00 [ 341.181048][ T31] ? kthread_blkcg+0xf0/0xf0 [ 341.185705][ T31] ret_from_fork+0x35/0x40 [ 341.190170][ T31] [ 341.192783][ T31] Local variable description: ----data.addr.i13@read_eprom_word [ 341.200430][ T31] Variable was created at: [ 341.204886][ T31] read_eprom_word+0x498/0xdd0 [ 341.209774][ T31] pegasus_probe+0xf2b/0x4be0 [ 341.214461][ T31] ================================================================== [ 341.222539][ T31] Disabling lock debugging due to kernel taint [ 341.230071][ T31] Kernel panic - not syncing: panic_on_warn set ... [ 341.236702][ T31] CPU: 1 PID: 31 Comm: kworker/1:1 Tainted: G B 5.2.0-rc4+ #7 [ 341.245575][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.255698][ T31] Workqueue: usb_hub_wq hub_event [ 341.260748][ T31] Call Trace: [ 341.264089][ T31] dump_stack+0x191/0x1f0 [ 341.268469][ T31] panic+0x3c9/0xc1e [ 341.272476][ T31] kmsan_report+0x2ca/0x2d0 [ 341.277031][ T31] __msan_warning+0x75/0xe0 [ 341.281587][ T31] read_eprom_word+0x947/0xdd0 [ 341.286415][ T31] pegasus_probe+0xf2b/0x4be0 [ 341.291250][ T31] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 341.297180][ T31] ? usb_unlocked_disable_lpm+0x10a/0x180 [ 341.302941][ T31] ? kaweth_get_link+0x70/0x70 [ 341.307745][ T31] ? kaweth_get_link+0x70/0x70 [ 341.312568][ T31] usb_probe_interface+0xd19/0x1310 [ 341.317831][ T31] ? usb_register_driver+0x7d0/0x7d0 [ 341.323163][ T31] really_probe+0x1344/0x1d90 [ 341.327907][ T31] driver_probe_device+0x1ba/0x510 [ 341.333058][ T31] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 341.338991][ T31] __device_attach_driver+0x5b8/0x790 [ 341.344434][ T31] bus_for_each_drv+0x28e/0x3b0 [ 341.349499][ T31] ? deferred_probe_work_func+0x400/0x400 [ 341.355265][ T31] __device_attach+0x489/0x750 [ 341.360103][ T31] device_initial_probe+0x4a/0x60 [ 341.365181][ T31] bus_probe_device+0x131/0x390 [ 341.370114][ T31] device_add+0x25b5/0x2df0 [ 341.374701][ T31] usb_set_configuration+0x309f/0x3710 [ 341.380247][ T31] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 341.386371][ T31] generic_probe+0xe7/0x280 [ 341.390917][ T31] ? usb_choose_configuration+0xae0/0xae0 [ 341.396968][ T31] usb_probe_device+0x146/0x200 [ 341.401864][ T31] ? usb_register_device_driver+0x470/0x470 [ 341.407887][ T31] really_probe+0x1344/0x1d90 [ 341.412639][ T31] driver_probe_device+0x1ba/0x510 [ 341.417804][ T31] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 341.423754][ T31] __device_attach_driver+0x5b8/0x790 [ 341.429210][ T31] bus_for_each_drv+0x28e/0x3b0 [ 341.434103][ T31] ? deferred_probe_work_func+0x400/0x400 [ 341.439883][ T31] __device_attach+0x489/0x750 [ 341.444716][ T31] device_initial_probe+0x4a/0x60 [ 341.449789][ T31] bus_probe_device+0x131/0x390 [ 341.454692][ T31] device_add+0x25b5/0x2df0 [ 341.459278][ T31] usb_new_device+0x23e5/0x2fb0 [ 341.464209][ T31] hub_event+0x5853/0x7320 [ 341.468776][ T31] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 341.474720][ T31] ? led_work+0x720/0x720 [ 341.479086][ T31] ? led_work+0x720/0x720 [ 341.483467][ T31] process_one_work+0x1572/0x1f00 [ 341.488581][ T31] worker_thread+0x111b/0x2460 [ 341.493430][ T31] kthread+0x4b5/0x4f0 [ 341.497534][ T31] ? process_one_work+0x1f00/0x1f00 [ 341.502791][ T31] ? kthread_blkcg+0xf0/0xf0 [ 341.507439][ T31] ret_from_fork+0x35/0x40 [ 341.513015][ T31] Kernel Offset: disabled [ 341.517368][ T31] Rebooting in 86400 seconds..