[ 71.696399] audit: type=1800 audit(1548378779.709:28): pid=9577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 72.799061] sshd (9642) used greatest stack depth: 54192 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 73.209935] audit: type=1800 audit(1548378781.259:29): pid=9577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 74.110308] sshd (9714) used greatest stack depth: 54176 bytes left Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.56' (ECDSA) to the list of known hosts. 2019/01/25 01:13:11 fuzzer started 2019/01/25 01:13:16 dialing manager at 10.128.0.26:41067 2019/01/25 01:13:16 syscalls: 1 2019/01/25 01:13:16 code coverage: enabled 2019/01/25 01:13:16 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/01/25 01:13:16 extra coverage: extra coverage is not supported by the kernel 2019/01/25 01:13:16 setuid sandbox: enabled 2019/01/25 01:13:16 namespace sandbox: enabled 2019/01/25 01:13:16 Android sandbox: /sys/fs/selinux/policy does not exist 2019/01/25 01:13:16 fault injection: enabled 2019/01/25 01:13:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/01/25 01:13:16 net packet injection: enabled 2019/01/25 01:13:16 net device setup: enabled 01:15:13 executing program 0: r0 = inotify_init() ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, 0x0) syzkaller login: [ 205.718094] IPVS: ftp: loaded support on port[0] = 21 [ 205.851441] chnl_net:caif_netlink_parms(): no params data found [ 205.920291] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.926857] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.935082] device bridge_slave_0 entered promiscuous mode [ 205.944730] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.951300] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.959450] device bridge_slave_1 entered promiscuous mode [ 205.991828] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 206.002753] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 206.031874] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 206.040172] team0: Port device team_slave_0 added [ 206.048024] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 206.056309] team0: Port device team_slave_1 added [ 206.063362] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 206.071696] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 206.246175] device hsr_slave_0 entered promiscuous mode [ 206.502319] device hsr_slave_1 entered promiscuous mode [ 206.762919] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 206.770535] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 206.797952] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.804491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.811521] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.818074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.896453] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.905593] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.926426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.938753] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 206.950411] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 206.957260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.965356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.978668] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 206.984879] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.997552] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 207.005697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.014207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.022363] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.028796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.046157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 207.053834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.063751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.071900] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.078345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.093749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 207.106286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 207.118919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 207.126869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.136090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.145180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.154235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.181991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.204714] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 207.211805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.220868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.239468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 207.247221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.255848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.269671] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 207.277244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.285734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.298845] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 207.305369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.328774] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 207.347750] 8021q: adding VLAN 0 to HW filter on device batadv0 01:15:15 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200) 01:15:15 executing program 0: mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 01:15:15 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000180), 0x4000000000004fc, 0x0, &(0x7f0000000180)={0x77359400}) 01:15:16 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000080)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) 01:15:16 executing program 0: pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) dup2(r2, r1) 01:15:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x4, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @loopback}], 0x10) shutdown(r1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='system.sockprotoname\x00') 01:15:16 executing program 0: acct(&(0x7f0000000740)='./file0\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000780)='/dev/autofs\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f00000007c0)='/dev/cec#\x00', 0x1, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000800)='/dev/usbmon#\x00', 0x8147, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000840)={r1, r2}) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6048, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)="b9531971df89d201f2182d3a28d42a9dbd7b6b88848bbd0cd7376dc7f8abe86acea5e2f3c042827a359d4ca5c41d5464037f7c7a1bf6fd8932a8ff89371096ebe8888b5dc4b575038889f7d2b5085ec2f6853d4956fae4655806d776511ad7e3a9414d16347aabd0d63874292b517e94c8558ab72d5dfce84dc42dbd585258ae357586d31715f327ede59899543c392160", 0x91, 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="6da64b4588c698cff39fb2fc8000d4d48d4d998bcde6fc54226cc8b6e561b47e9cf3bd22", 0x24, 0xfffffffffffffffd) add_key(&(0x7f00000002c0)='cifs.idmap\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380), 0x0, 0xfffffffffffffffe) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x100200080, 0x0) write$P9_RSTAT(r3, &(0x7f0000000640)={0x5a, 0x7d, 0x2, {0x0, 0x53, 0x7, 0x8e, {0x80}, 0x1000000, 0x2, 0x2, 0x2, 0x6, '\'wlan1', 0x6, ',@GPL\'', 0xb, 'cifs.idmap\x00', 0x9, 'mime_type'}}, 0x5a) r4 = msgget$private(0x0, 0x20) msgrcv(r4, &(0x7f0000000540)={0x0, ""/196}, 0xcc, 0x0, 0x1000) r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)="a977b117811552a5e94b0cbd197c815ba7b16ec371474b507ede2063c558fecfbf876715582631f47631292446531b69a1d3ecc067cb3f0a3de231862ab0ca2e1b91a52d8096622b85e698119c784e1d1801604e540d865adf1f6e2f9b4b53076faf5199e53aa80048cb4b96dc3401308c7d57fe07f614d3c15ad2ef735c0f2e653a22d5e3f83a3a87814217ccf4bb0b2644cec53b2cda045c183306e19a04a2d7d0d6a3c98dbd71fb0866d0c668632b3186200e9985a88410dfd30cc33e04c8dfa8bb776c08cadff978", 0xca, 0xfffffffffffffff9) keyctl$update(0x2, r5, &(0x7f0000000000)="a8", 0x1) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00'}, &(0x7f0000000380)=0x44) 01:15:16 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) r1 = shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000100)=""/183) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x6, 0x400180) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000200)={0x281, 0x2}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x2, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x8) ioctl$LOOP_SET_FD(r3, 0x4c00, r3) ioctl$VIDIOC_S_PRIORITY(r2, 0x40045644, 0x3) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8) setsockopt$sock_void(r3, 0x1, 0x1b, 0x0, 0x0) setns(r3, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000340)=""/232, &(0x7f0000000440)=0xe8) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000480)={0x0, 0x55a}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000500)={r5, 0x4, 0x5, 0x3, 0xfa, 0x92e2}, &(0x7f0000000540)=0x14) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r7, 0x400, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x8010) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f00000006c0)={0x0, 0x6}) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000700)) ioctl$sock_inet6_udp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000840)) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000880)={0x3}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000008c0)={r6, @in6={{0xa, 0x4e22, 0x9, @ipv4={[], [], @broadcast}, 0x5}}, 0xfb7d, 0x401}, 0x90) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000980)) fdatasync(r8) setresuid(r4, r4, r4) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000ac0)=0x0) ioprio_set$pid(0x3, r9, 0x7f) [ 209.080221] IPVS: ftp: loaded support on port[0] = 21 [ 209.225176] chnl_net:caif_netlink_parms(): no params data found 01:15:17 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000), 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x7) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) userfaultfd(0x0) r4 = getpgid(r3) kcmp(r3, r4, 0x4, r0, r1) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x5}) [ 209.299110] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.305783] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.314011] device bridge_slave_0 entered promiscuous mode [ 209.323914] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.330382] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.338477] device bridge_slave_1 entered promiscuous mode [ 209.410551] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 209.422021] bond0: Enslaving bond_slave_1 as an active interface with an up link 01:15:17 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x200000) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600090406020000000000000002000300000000004f0000000000000040000000000000003b000000000000000900000027bb3800010001802000b30053e574640700000009000000000000000700000000000000d545000000000000ff7f0000000000000300000000000000d4070000000000000700006004000000ffffffff000000000000008000000000c5020000000000007f000000000000000600000000000000c45700000000000022b9686b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1b4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) signalfd(r2, &(0x7f0000000400)={0x7fff}, 0x8) syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x3, 0x101000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)=ANY=[]) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000000)={0x9, &(0x7f00000000c0)=[{}, {0x0}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000380)={r4, 0x1}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) syz_genetlink_get_family_id$tipc(0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000140)) [ 209.450942] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 209.459331] team0: Port device team_slave_0 added [ 209.467107] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 209.475621] team0: Port device team_slave_1 added [ 209.481904] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 209.505875] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 209.716249] device hsr_slave_0 entered promiscuous mode 01:15:17 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000007c0)=""/246) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) unshare(0x20400) ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174) [ 209.863420] device hsr_slave_1 entered promiscuous mode [ 210.023182] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 210.030684] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 210.079460] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.086018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.093128] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.099594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.203919] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 210.210172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.223774] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 210.237288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.246450] bridge0: port 1(bridge_slave_0) entered disabled state 01:15:18 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000007c0)=""/246) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) unshare(0x20400) ioctl$EVIOCGREP(r0, 0x40107447, &(0x7f0000000000)=""/174) [ 210.257302] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.268880] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 210.289530] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 210.295803] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.343451] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 210.351537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 210.361345] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.369791] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.376269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.394150] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 210.409945] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 210.422494] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 210.435603] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 210.443283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 210.451792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 210.459850] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.466329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.474908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.483800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.492694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.501333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.514245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 210.521343] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.529068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.537803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 01:15:18 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000180)={0x0, 0x800, 0x96, [], &(0x7f0000000140)=0x1}) r1 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0xd0, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x20000000000a, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 210.558375] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 210.565749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.574019] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.587393] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 210.595415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.603619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.626577] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 210.632777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.675196] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 210.699435] 8021q: adding VLAN 0 to HW filter on device batadv0 01:15:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x80) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x3de) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000380)={0x0, 0x30, &(0x7f0000000340)={&(0x7f0000000280)={0x14}, 0x9b8}, 0x5}, 0x5000000) 01:15:18 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x20000, 0x0) unshare(0x2000400) ioctl$CAPI_INSTALLED(r0, 0x80024322) 01:15:19 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1}, 0x14) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0xd80, 0x4) write(r0, 0x0, 0x0) 01:15:19 executing program 0: socketpair$unix(0x1, 0x400010000000007, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x80000804000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) r2 = getpgrp(0xffffffffffffffff) r3 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000280)={r3, r0, 0x2}) r4 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3fe, 0x1ffc) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f00000001c0)={0xfd, 0x3f}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x123) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x4800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000180)={0x4000000000000000, 0xd000, 0x7, 0x8, 0xd}) ioctl$TCSETA(r6, 0x5406, &(0x7f00000002c0)={0x8f, 0x2, 0x3, 0xa, 0xe, 0x2, 0x20, 0x8, 0x15a3d989, 0x4}) socketpair(0x1d, 0x0, 0x0, &(0x7f0000000000)) r7 = fcntl$dupfd(r0, 0x0, r0) ioctl$VIDIOC_ENUMAUDOUT(r7, 0xc0345642, &(0x7f0000000100)={0x4, "f93bc2ebe96c0debe0d1dbd206f91b11be4e254903b1f429cba785d876bc5892", 0x1}) [ 211.118662] can: request_module (can-proto-0) failed. 01:15:19 executing program 1: unshare(0x400) r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000040)=0x8) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x8b, 0x2180) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000140)) write$P9_RSETATTR(r1, &(0x7f0000000100)={0x7, 0x1b, 0x1}, 0x7) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180)=0x3, 0x4) 01:15:19 executing program 1: socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) utimensat(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x0, 0x7530}, {0x77359400}}, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x1ff) ioctl$BLKBSZGET(r4, 0x80081270, &(0x7f0000000000)) [ 211.456829] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 01:15:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x8000, 0xa000000, 0x40}, 0xeb) recvmmsg(r0, &(0x7f0000002580)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000000180)=""/187, 0xbb}, {&(0x7f0000000240)=""/240, 0xf0}, {&(0x7f0000000340)=""/93, 0x5d}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/113, 0x71}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x6}, 0x2}, {{&(0x7f00000024c0)=@ax25={{0x3, @null}, [@netrom, @bcast, @default, @default, @default, @remote, @remote, @netrom]}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002680)=""/24, 0x18}], 0x1}, 0xe6c7}], 0x2, 0x20, &(0x7f0000002600)={0x0, 0x989680}) setsockopt$inet6_dccp_int(r1, 0x21, 0x1f, &(0x7f0000002640)=0x5df8cd12, 0x4) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2002, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x4, 0x118c, 0x0, 0x9c6, 0x0, 0x6, 0x8000, 0x4, 0x8, 0x6, 0x4, 0x100000001, 0x4, 0xe615, 0x0, 0x2c2, 0xff, 0x7ff, 0x2a00000000000000, 0x6, 0x0, 0xffffffff, 0x80, 0xf36e, 0x4, 0x3, 0x7fff, 0x1, 0x5b176ac5, 0x6, 0x5, 0x7f, 0x588, 0x2, 0x1, 0x10000000, 0x0, 0xea7, 0x2, @perf_config_ext={0x3}, 0x29020, 0x5, 0x2, 0x3, 0x0, 0x6, 0x5}, 0x0, 0xffffffffffffffff, r2, 0x1) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000002540)) [ 211.905789] can: request_module (can-proto-0) failed. 01:15:20 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x8800, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) unshare(0x4000400) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000000100)) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000440), &(0x7f0000000480)=0xc) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) setxattr$security_smack_transmute(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000400)='TRUE', 0x4, 0x1) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x600210) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x2080, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000180)="14f9d28bcc45f44c6d4cfa7ff76dc6d9463ffc85151bb7852b1edbf8143f42f965b355c76911908ad4d45967dd0b9345911799eca0134e81ea380e31559512b93dffeedfb4b3e148fb98c6ea954bea9a31d02a10e903a47ce6802fb4b407675539fedf93e404dd13d1662e1f8792888d2dd0a0f689e8d21479b078d689f2e876b5677441057ff89499a710612b0b259d25ad3882a2c6bf5bf7c3f3ba677369a0dffcb0eb778409e59ef6211dba777d7854567cee623736dec3d80f2424870a5abe7724b0390f8bf9ea0341ea593f3013d5340e3abaab11c9796f0e4d4d17a85597203349751648e8161b765a7255d42c65") r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000080)={0x2, 0x80000001000, 0x200, 0x9, 0x12, 0x5, 0x3bda, 0x3, 0x1000, 0x6}) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/145, 0x91}], 0x1) 01:15:20 executing program 0: timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x77359400}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2) getsockname$tipc(r1, &(0x7f0000006dc0)=@id, &(0x7f0000006e00)=0x10) timer_gettime(r0, &(0x7f0000000000)) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000000c0)=0x1) r2 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x4, 0x200) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140), &(0x7f0000000180)=0x4) 01:15:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x10, 0x11, [@generic="e2abb4ec7645192056d52f"]}]}, 0x24}, 0x1, 0x300}, 0x0) fremovexattr(r0, &(0x7f0000000080)=@random={'security.', '\x00'}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) 01:15:20 executing program 0: r0 = epoll_create1(0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x80c) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000003c0)='ramfs\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x20000) umount2(&(0x7f0000000100)='./file0\x00', 0x0) [ 212.366634] sysfs: cannot create duplicate filename '/class/ieee80211/â«´ìvE VÕ!' [ 212.374700] CPU: 1 PID: 9854 Comm: syz-executor1 Not tainted 5.0.0-rc1+ #7 [ 212.381746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.391126] Call Trace: [ 212.393777] dump_stack+0x173/0x1d0 [ 212.397470] sysfs_warn_dup+0x1c4/0x1f0 [ 212.401521] sysfs_do_create_link_sd+0x293/0x360 [ 212.406335] sysfs_create_link+0x125/0x190 [ 212.410619] device_add+0x1730/0x2ed0 [ 212.414492] wiphy_register+0x2b4b/0x3900 [ 212.418718] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 212.423967] ieee80211_register_hw+0x3ac2/0x5ca0 [ 212.428779] ? ieee80211_register_hw+0x1041/0x5ca0 [ 212.433790] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 212.439395] ? tasklet_hrtimer_init+0x114/0x1b0 [ 212.444112] ? hw_scan_work+0xc40/0xc40 [ 212.448143] mac80211_hwsim_new_radio+0x3267/0x4f50 [ 212.453234] hwsim_new_radio_nl+0x1444/0x1990 [ 212.457799] ? hwsim_tx_info_frame_received_nl+0x1220/0x1220 [ 212.463637] genl_rcv_msg+0x185f/0x1a60 [ 212.467693] netlink_rcv_skb+0x431/0x620 [ 212.471791] ? genl_unbind+0x390/0x390 [ 212.475736] genl_rcv+0x63/0x80 [ 212.479070] netlink_unicast+0xf3e/0x1020 [ 212.483272] netlink_sendmsg+0x127f/0x1300 [ 212.487574] ___sys_sendmsg+0xdb9/0x11b0 [ 212.491676] ? netlink_getsockopt+0x1460/0x1460 [ 212.496410] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 212.501657] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 212.507062] ? __fget_light+0x6e1/0x750 [ 212.511094] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 212.516334] __se_sys_sendmsg+0x305/0x460 [ 212.520548] __x64_sys_sendmsg+0x4a/0x70 [ 212.524650] do_syscall_64+0xbc/0xf0 [ 212.528422] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 212.533645] RIP: 0033:0x458099 [ 212.536881] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 212.555816] RSP: 002b:00007f4ee9233c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.563564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458099 [ 212.570881] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 212.578187] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 212.585490] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4ee92346d4 [ 212.592788] R13: 00000000004c565f R14: 00000000004d93c0 R15: 00000000ffffffff 01:15:20 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x6, 0x10000) r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="256e8373b5aa0668326dc2d619b3d86774123fac52005591a50278b730186d32467bc20c4c608dc6fa1d7f857b2ca6e3571d234fa3e5c941ace90b8615bc9f8e4f6846664048869b55ba46f7ecc6aee4e5b6e9f464d293e86f6a61066c9e146d82b79da1e90aa7fec51c57b31b3f84094ec3cd0896c8b553280a7b146d498ba86bbacc606544fd6cf357bd68978c47f8dc5e68df389a54b84a2bb64bedd627a0ec32c6eb2c917062dbd26f8c81ebcd4296a5836e202f616fb7f1dd9058096c783d60fa70d04db4ee5ebe9dfc40ebcd73f4c7", 0xd2, 0xfffffffffffffff8) r2 = add_key(&(0x7f0000000340)='encrypted\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f00000003c0)="1fd5f9fcf673bf0a2ea24f6b8f6c2a8c99d4c5ffe148ceeaee3c8a9c90c6280ed81b80e5e0b542a0d00bdfd259fff34a17a30635f9a0161f45a647208658410a6865e8106790237f6a1af01467caa86f1e96c22047aaea07f60fcdc781458e08dc57db8960245f24a6f23e372ccd174a0abe4db93488bd189aa0539018bacf7034f8ca1c75eab06e63f390d32ac66564b587c81075ecee7830346357511bc5f5789f9f953e70f06ee939450a4c8ffa15", 0xb0, 0xfffffffffffffff8) keyctl$search(0xa, r1, &(0x7f00000002c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x3}, r2) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000000c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000003c003f00000000061f000000000000002514817a72931b3d"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x265, &(0x7f000000cf3d)=""/195}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) r4 = semget(0x2, 0x0, 0x5e2) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x10000, 0x4) socket$xdp(0x2c, 0x3, 0x0) semctl$GETPID(r4, 0x1, 0xb, &(0x7f0000000040)=""/42) close(r3) 01:15:20 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x90000915, &(0x7f0000000100)) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000006804000050020000500200005002000080030000800300008003000004000000", @ANYPTR=&(0x7f0000000600)=ANY=[@ANYBLOB="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"], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000180100000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000ffffffff00000000ac1414aae0000002ff0000ff00000000d4e49cdc0196000000000000000000000000000000000000ff00ffffffff000000000000000000000180c2000003000000000000000000000000000000000000ffff00ffff00000000000000000000000001000900050001029b000069705f7674693000000000000000000069726c616e300000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000150000000000000000000000f00038010000000000000000000000000000000000000000000000000000480049444c4554494d4552000000000000000000000000000000000000000000ffffff7f73797a30000000000000000000000000000000000000000000000000030000000000000000000008ac1e000100000000ff0000ffaaaaaaaaaa1700000000000000000000000000000000000000ffffffffff00000000000000000000aaaaaaaaaa0d000000000000000000000000000000000000ffffffffff0000000000000000000000000600030000001f00080009626174616476300000000000000000006e6c6d6f6e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000040300000000000000000000f0003001000000000000000000000000000000000000000000000000000040004552524f52000000000000000000000000000000000000000000000000008a51a1b562f43baa912c24b3c2a51cd8d8775b30bcce87773e70ec86dedc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4b8) 01:15:20 executing program 1: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000100)={@local, @local}, 0x8) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x8a00, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000240)={0xd, 0x7fffffff, 0x1}) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000400), &(0x7f0000000440)=0x30) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}, {0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc}, {0x7ff}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)={@multicast2, @local, 0x0, 0x9, [@remote, @broadcast, @local, @local, @multicast1, @broadcast, @remote, @multicast2, @multicast2]}, 0x34) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x5c, @dev={0xac, 0x14, 0x14, 0x22}, 0x4e21, 0x1, 'fo\x00', 0x5, 0x40, 0x1d}, {@loopback, 0x4e20, 0x2000, 0x1, 0x3, 0x1}}, 0x44) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x881}, 0x14) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000280)) 01:15:20 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)}) [ 212.903541] IPVS: set_ctl: invalid protocol: 92 172.20.20.34:20001 [ 212.934332] IPVS: set_ctl: invalid protocol: 92 172.20.20.34:20001 01:15:21 executing program 1: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000100)={@local, @local}, 0x8) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x8a00, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000240)={0xd, 0x7fffffff, 0x1}) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000400), &(0x7f0000000440)=0x30) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}, {0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc}, {0x7ff}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)={@multicast2, @local, 0x0, 0x9, [@remote, @broadcast, @local, @local, @multicast1, @broadcast, @remote, @multicast2, @multicast2]}, 0x34) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x5c, @dev={0xac, 0x14, 0x14, 0x22}, 0x4e21, 0x1, 'fo\x00', 0x5, 0x40, 0x1d}, {@loopback, 0x4e20, 0x2000, 0x1, 0x3, 0x1}}, 0x44) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x881}, 0x14) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000280)) 01:15:21 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101100, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0x8) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000280)={0x7fff, 0x5f57595f, 0x2, @discrete={0x8, 0x1}}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r2, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) io_setup(0x5b2, &(0x7f0000000040)=0x0) io_submit(r3, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf000000000001b, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x200c5) [ 213.108749] IPVS: set_ctl: invalid protocol: 92 172.20.20.34:20001 01:15:21 executing program 1: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60x0}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000500)=r5, 0x4) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000540)={0x5, 0x0, 0x1, 0x1000, 0x100000000}) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000580)='hwsim0\x00', 0x7) modify_ldt$write2(0x11, &(0x7f00000005c0)={0x6, 0x1000, 0x2000, 0x2, 0x1f, 0x0, 0x4, 0x8000, 0x8001, 0xfffffffffffffff9}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setxattr$security_selinux(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='security.selinux\x00', &(0x7f0000000680)='/usr/sbin/cupsd\x00', 0x10, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000006c0)={0x127fd, 0x1, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000700)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000740)={r5, 0x9}, &(0x7f0000000780)=0x8) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000007c0)={0x5, {{0xa, 0x4e21, 0xd7400, @mcast2, 0x3}}, 0x1, 0x1, [{{0xa, 0x4e22, 0x9, @local, 0x5}}]}, 0x110) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000900)=r1) 01:15:21 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x101100, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0x8) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000280)={0x7fff, 0x5f57595f, 0x2, @discrete={0x8, 0x1}}) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r2, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84) io_setup(0x5b2, &(0x7f0000000040)=0x0) io_submit(r3, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf000000000001b, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x200c5) 01:15:21 executing program 1: unshare(0x2000400) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000040)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x8001, 0x2, 0x6, 0x8, 0x4}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000001c0)={0x0, {0x6e81, 0x6}}) getsockopt$inet6_udp_int(r2, 0x11, 0x6f, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000000)=@generic={0x3}) 01:15:21 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x111000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000180)={0xffff, 0x10000, 0x7fffffff, 'queue0\x00'}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x0, 0x5, 0x2}) r2 = getpid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) kcmp(r2, r3, 0x4, r1, r1) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000100)=0x14) 01:15:21 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000000)={0x8000000}) r1 = add_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="9b782ba0a6384a1090515ab86b4ebf612ba267caabd7abe9dca9de6a120e8d756d7f8dce8f61147cff8350f7fef76bbb5d08b041b1264ba9ac710e99df91fc1f85df53032ab1ff19d90cd21bd987eb01e932df17281316d1a0a8bb42769e677aac28b4c837d0fc9173ad269b462184a7bb095fde19a65b4a9ea160391b6a475a8dae9ba407dc88148093f2664cf388a6", 0x90, 0x0) keyctl$describe(0x6, r1, &(0x7f0000000180)=""/164, 0xa4) [ 213.947901] IPVS: ftp: loaded support on port[0] = 21 01:15:22 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x2102001ff7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup2(r0, r0) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x1f) r2 = getpid() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000040), 0x876f3ed5) ptrace(0x4206, r2) ptrace$getsig(0x4207, r2, 0x0, 0x0) 01:15:22 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000000)=0x44) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000300)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000000280)=@in6={0xa, 0x0, 0x4, @loopback}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000000)}, 0xffffffffffffffff}], 0x2, 0x0) [ 214.163811] chnl_net:caif_netlink_parms(): no params data found [ 214.230592] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.237144] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.245117] device bridge_slave_0 entered promiscuous mode [ 214.253731] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.260265] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.268362] device bridge_slave_1 entered promiscuous mode [ 214.298483] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 214.309685] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 214.336498] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 214.344814] team0: Port device team_slave_0 added [ 214.351056] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 214.359438] team0: Port device team_slave_1 added [ 214.365585] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 214.374014] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 01:15:22 executing program 1: keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x1}) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x1e, 0x1, 0x3, "0f348062d812fac12e4065af6600", 0xfffffffffffffffc}) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x101, 0x200580) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x4, 0x4) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x4, 0x8403}]}) [ 214.466694] device hsr_slave_0 entered promiscuous mode 01:15:22 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x8000, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x7fffffff}) [ 214.524268] device hsr_slave_1 entered promiscuous mode [ 214.544306] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 214.551812] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 214.621784] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.628414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.635535] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.642064] bridge0: port 1(bridge_slave_0) entered forwarding state 01:15:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0x400, 0x0, 0x1}, 0xc3) fsetxattr$security_evm(0xffffffffffffffff, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x2, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) [ 214.738440] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 214.744742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.781717] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 214.797245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.808482] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.827781] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.841833] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 01:15:22 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) accept$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) r2 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in=@rand_addr=0x1, @in6=@empty, 0x4e22, 0x100, 0x4e20, 0x0, 0xa, 0x0, 0x20, 0x2, r1, r2}, {0x1000, 0xaee, 0x1f, 0x8, 0x3ff, 0x1, 0x6, 0x2a54}, {0x8dc, 0x0, 0x7b, 0x8}, 0x1, 0x6e6bbb, 0x1, 0x0, 0x3}, {{@in6=@ipv4={[], [], @multicast1}, 0x4d3, 0x3c}, 0x2, @in6=@mcast1, 0x3502, 0x0, 0x1, 0x0, 0x1, 0x1ff, 0x400}}, 0xe8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x3ff, 0x6, 0x7}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r3, 0x3, 0x20}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$inet6_int(r4, 0x29, 0xdb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)=""/140, 0xb6, 0x8c, 0x1}, 0x20) shmget(0x1, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) [ 214.892469] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 214.898592] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.947484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.955522] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.962027] bridge0: port 1(bridge_slave_0) entered forwarding state 01:15:23 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000080)={0xd0}) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000000)) [ 214.993389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 215.001777] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.008224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.063899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.073038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.082105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.090295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.107146] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 215.113307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 215.149061] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 215.178301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.197213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 01:15:23 executing program 2: futex(&(0x7f000000cffc)=0x1, 0x8b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r0 = dup(0xffffffffffffff9c) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000180)={{0x0, 0x0, 0x6, 0x0, 0x2}, 0x5, 0x3fc7, 'id0\x00', 'timer1\x00', 0x0, 0xfffffffffffffbff, 0x2, 0x1000, 0x800}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x14000, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000100), &(0x7f0000000140)=0x4) 01:15:23 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x1000000008) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x250200, 0x0) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) sendmsg(r1, &(0x7f0000003400)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000000c0)="04", 0x1}], 0x1}, 0x0) 01:15:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ff2000/0xb000)=nil, 0xb000}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_pts(r1, 0x2) r3 = dup3(r2, r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x80000000000009) write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000100), 0x1000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) fchmod(r5, 0x20) socket$can_bcm(0x1d, 0x2, 0x2) 01:15:23 executing program 1: socket(0x2, 0x1, 0x200) r0 = socket$kcm(0xa, 0x100000002, 0x73) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64EXEC\x00', &(0x7f0000000100)='&vmnet0vboxnet0(security{\x00', 0x1a, 0x2) sendmsg$kcm(r0, &(0x7f0000002b00)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x80, 0x0}, 0x0) 01:15:23 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x1ff, 0x2, 0x4, 0x20100000, {r2, r3/1000+10000}, {0x0, 0x3, 0x2, 0x4, 0x7, 0x10001, "edaf5a08"}, 0x3, 0x2, @fd=0xffffffffffffff9c, 0x4}) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000040)={{0x1, @addr=0x3}, "b5929d4e2e5494a6d8b2589dfb861acd1e564b2299f7cab229a4445bdcae9f7d"}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80011, r0, 0x0) 01:15:23 executing program 0: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x400400, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000080)={r1, 0x4}) r2 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r3 = fcntl$getown(r2, 0x9) ptrace$setopts(0x4200, r3, 0xffffffffffffffcb, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ftruncate(r2, 0x8200) pause() r5 = open(&(0x7f00000001c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r6 = memfd_create(&(0x7f00003ce000)='}\x00', 0x0) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r6, &(0x7f00002e4000)='./file\xff\xff', &(0x7f0000000000)={0x8}, &(0x7f0000001ffc), 0x1400) 01:15:23 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffc}, 0x0, 0x8) r0 = gettid() r1 = shmget$private(0x0, 0x3000, 0x7c001002, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f00000001c0)=""/71) timer_create(0x2, &(0x7f0000000000)={0x0, 0x3b, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) 01:15:24 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffc}, 0x0, 0x8) r0 = gettid() r1 = shmget$private(0x0, 0x3000, 0x7c001002, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f00000001c0)=""/71) timer_create(0x2, &(0x7f0000000000)={0x0, 0x3b, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) 01:15:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fstatfs(r0, &(0x7f0000000100)=""/101) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x2) fcntl$setflags(r1, 0x2, 0x1) r2 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x0, 0x2) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x40080, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x70, 0x5, 0x5, 0xff, 0x8000, 0x0, 0xfffffffffffffc01, 0x104c0, 0x9, 0x9, 0x10000, 0x401, 0x6, 0x5, 0x0, 0x8, 0x80000000, 0x8, 0xfffffffffffffffa, 0x8, 0x7, 0x8001, 0xff, 0x5, 0x40, 0x100000000, 0xfffffffffffffeff, 0xf1, 0x2, 0x3, 0x9, 0x800, 0x0, 0x2, 0x2, 0x20, 0x9, 0x0, 0x3fffffffc0, 0x4, @perf_config_ext={0x6, 0x6}, 0x2001, 0x0, 0x0, 0xe, 0x8001, 0x100000001, 0x1}, r2, 0xe, r3, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005780), 0x0, 0x1, 0x1000, &(0x7f0000001240)=""/4096}, 0x48) r4 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r4, 0xc0487c04, &(0x7f0000000000)=""/226) 01:15:24 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000140)={0xfffffffffffffffc}, 0x0, 0x8) r0 = gettid() r1 = shmget$private(0x0, 0x3000, 0x7c001002, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f00000001c0)=""/71) timer_create(0x2, &(0x7f0000000000)={0x0, 0x3b, 0x4, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) 01:15:24 executing program 2: unshare(0x8000000) r0 = mq_open(&(0x7f0000000000)='!selinux\x05\x00l S\x8a\xd1?\xa9\x94M\xf4\xe46h}S\xc9\x7finux\x00', 0x8c2, 0x0, &(0x7f0000000040)={0x0, 0x4, 0x51d}) mq_notify(r0, &(0x7f0000000080)={0x0, 0x17}) mq_timedsend(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000100)=0x101) 01:15:24 executing program 0: r0 = add_key(&(0x7f0000001280)='user\x00', &(0x7f00000012c0)={'syz', 0x1}, &(0x7f0000001300)="de", 0x1, 0xffffffffffffffff) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0x101) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000001400)='encrypted\x00', &(0x7f0000001440)='fd') sendto$inet6(r1, &(0x7f00000000c0)="ed78e3a857fb931a924e50cde1f68cbca7c4dc10432509778ca50b054e436df3ab71cb5d9e5ead2fc10c055579610683fa93e934344b2f2cf81437fe22a633ce50b3549e7359ed7685a781ea2d1c7352f4c2785c06d5df88b6b795ffe8d2a61016b5cca47b6a21456e7ad628c51444b382128a33cdc1f2ced0c63a4ab8ded83cdeb64c37cd537cbce883800a9592c69a8058964f0fe3e329a4dca0", 0x9b, 0x20040084, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0x1d}, 0x3}, 0x1c) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000180)={0x0, 0x12, 0xfffffffffffffffa, 0x1000, "743ff8c8661d3be1e41730db9c3279ac70c5099a74025d44ff427aff4e3073dc"}) 01:15:24 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000180)={0x0, 0x1, 0x100a, [], &(0x7f0000000100)={0x0, 0x0, [], @p_u8=&(0x7f00000000c0)}}) 01:15:24 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) unshare(0x20400) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x20, @tick=0xfff, 0x100, {0xffffffffffffff42, 0x5}, 0x2, 0x1, 0x7fffffff}) ioctl$KDGKBLED(r0, 0xc0045405, &(0x7f0000a07fff)) 01:15:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/if_inet6\x00') lseek(r0, 0x40000000200000, 0x0) 01:15:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$P9_RLOCK(r1, &(0x7f0000000000)={0x8}, 0x8) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000002c0)={0x82e, 0xa9, 0x2, 0xec}) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000001000)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @in={0x2, 0x4e21, @remote}}}, 0x90) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r4 = accept$alg(r0, 0x0, 0x0) r5 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r5, 0x0, 0x0, 0x73e0) name_to_handle_at(r5, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x33, 0x1c9, "1607639c36665afe3624b9cec7cd46ac7404900ccda3f44c9bd97d10b4dc80c2ae5090b672dbf73b3301bc"}, &(0x7f0000000100), 0x1400) sendfile(r4, r5, 0x0, 0x1000) 01:15:25 executing program 1: unshare(0x2000400) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000080)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000000c0)={{0xcc, 0x9}, 'port1\x00', 0x4, 0x804, 0x80000000, 0x200, 0x6, 0xb2dd, 0x8001, 0x0, 0x1, 0xfff}) 01:15:25 executing program 0: io_setup(0x100000001, &(0x7f0000000000)=0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x40800, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80000, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x410100, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x800, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x1000, 0x800) r7 = socket$caif_seqpacket(0x25, 0x5, 0x1) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = syz_open_dev$mice(&(0x7f0000000640)='/dev/input/mice\x00', 0x0, 0x410801) io_submit(r0, 0x5, &(0x7f00000006c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x80000000, r1, &(0x7f0000000080)="238d104e18b38c38d424810c4d46f1aab4b4f1b2ff7f0802f11d0db8283a54380dfa02b9", 0x24, 0x687a, 0x0, 0x2, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x6, r3, &(0x7f0000000180)="371af29910482f3a2ca1bd3904383fef693c2da7a8ed33ad84f0ba0b35eabf1ce3f18636aebce6260c0e0bd4702dbcd42aa472b7fd0fa3641f27afbc5760e1450726657bb1f8fa70fedc77101d141bf45bb37e1764913dc36c5a6acb6bfdfebd0e076c58595ed74a8aa2f2372e29c88d169d89bf828e38c07625f1157b486503100cc8455d3f3f6df49bd1c12e5b79769d75db9e369d3e93de207d31157b99f8bf831f456526c1a899b57d5018cf3d37ffc1c97bb40af1f35619ef33e7e529c4e00907cce50be23346db88a106779909eeb5", 0xd2, 0x800, 0x0, 0x1, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x3ff, r5, &(0x7f0000000340)="d7a6181639159b294a601dcaa8c333c6fa934e9fe528b8f1e336bc21d6de4f051e08d122130e781bfec7e3d0492f739ff67bb90370aeb5f7d249568d4f06f9b3e0f1aa84518c5f4ca3a7b951ea267bc660bcb48a95db2414da7d79715e2f848be4f26bb74f481f6c945408157aca8da271c2cd63aee2c5f75aed720c62d466caeab6f73f4603efc3b332dbd2224c004f69f1b83fb89f93d0773e7b2c30d59021da681a67b85cb3d3d7e8e44f515c7e10ef5fbb78ded2326da350f25375133c7a79c018ab27e68a5672650716da584e515bb5168f7519579423f59e9bcb5fcb8c98ea66e15560a9d02a7f822beca45825f2f12fc8f45b6f", 0xf7, 0x78, 0x0, 0x0, r6}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, r7, &(0x7f00000004c0)="bae30143754911338813180b8ac23b609fee40ccc52e9aa78f5aa61a28bbc5af0f7ec1c985e7f7294c2d83d2d2a9f52f3e", 0x31, 0xbee, 0x0, 0x2}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x3, r8, &(0x7f0000000540)="97ae7e28a771894ad5efd4032f5e9fc837ff0b3ca1b307e2ab2216726f8a3bb3685326b5e4a3b039299d7048885b8f47243043a0f2ccaba47cc90e3ea253e24d0e6b857d47b81a4f295cd55fdb7e1b1b0329da033843a7e3e75caf4787e14f7cde695b1aa01255cfe30df265e423f91441fd41683721041fe83fc94e5c95fdc5e564db453756558a9cf524ed748be1e6fe7320dda20e67d97098d9e53c5d9721fdf9fe54e649c24961337e5ca07558c321dd6a643fa69bbe1670dfc8da6e949b65f8f88b7eb16df09224bfcb17fd33ad0fe5b395", 0xd4, 0x1, 0x0, 0x1, r9}]) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps\x00') writev(r10, 0x0, 0x0) 01:15:25 executing program 1: unshare(0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x6, 0x111000) flistxattr(r0, &(0x7f0000000040)=""/190, 0xffffffffffffffea) r1 = pkey_alloc(0x0, 0x1) pkey_free(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xaf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xdau\xaf\x1f\x02\xac\x06\xed\xbc\xd7\xa0q\xfb53\x1c\xe3\x9cZ\x00\x00\x00\x00') setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000100)=0x2f39, 0x4) readahead(r2, 0x0, 0x0) 01:15:25 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000340)={'bcsh0\x00', {0x2, 0x4e20, @multicast2}}) socket$kcm(0xa, 0x7, 0x73) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000300)={r3}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="04010000", @ANYRES16=r4, @ANYBLOB="040229bd7000fbdbdf250e000000240009000800010003000000080002000002000008000200a60000000800020000000000300004000c00010073797a31000000001400010062726f6164636173742d6c696e6b00000c00010073797a31000000009c00050044000200080003002000000008000300010000000800030009000000080004000900000008000400f5b6031a2f2778e5090000000800010018000000080001001c0000002400020008000300ff0100000800020000000000080002000180000008000200060000001c000200080001001c0000000800030001800000080001000900000008000100657468000c00020008000400a30e0000"], 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$cgroup_type(r2, 0x0, 0xffffffffffffff3d) 01:15:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 01:15:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x7fc, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000140)={0x1, "ffccc11e59bcaea5c2eadffce726059341f7c6be2bc174622f2fb3e3696f388c", 0x2, 0x40, 0x2, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000002c0)={0x0, 0x0, [], {0x0, @bt={0x1, 0x2, 0x167a27a5316f39aa, 0x2, 0x0, 0x8, 0x7, 0x9, 0xffffffff00000000, 0x3, 0x8a95, 0x7, 0x3ff, 0x6e2, 0x4, 0x2}}}) getsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000100), &(0x7f0000000200)=0x4) finit_module(r2, &(0x7f00000000c0)='\x00', 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000480)={0x8, "dfa3a5ce0e1763cfb9cffac2807706f134f231c1c4e8adb06629099423108c6f", 0x5, 0x40, 0x6, 0x5, 0xc, 0x4, 0x100000000, 0x7}) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000380)={0x0, 0x1, 0x3, 0x2, 0x0}, &(0x7f00000003c0)=0x10) setsockopt(r1, 0x4, 0x81, &(0x7f0000000500)="d2fc0e8c715878ffe903ca752e44562ae1fab90614f9f5c5c8739bf31bff5e85926974f3fae2051ffe7c26259d311daa120d92203ccf1559ca69f6c6bf45a3e9935c3b97f45083b5d015ae76ce40e43b3035f8f449cb3f9dcfcf224010d141be84efbcbebfa7c21b2e02ae1b5a0c76dd5e7a5897e91d0803dbaff0ae6cf62a2d0875bd5ed98c43a7eba63dae48c84f8835f5", 0x92) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000400)={r3, 0xfa}, &(0x7f0000000440)=0x8) 01:15:25 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/127) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f00000000c0)) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r2, 0x4, 0x6800) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffec1) splice(r0, 0x0, r3, 0x0, 0x5, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0', [{}, {0x20, '\x7fcpusetprocmime_type\\wlan0lo+'}], 0xa, "20f825035f5d82030a4c5f701366c12a7a09df8fa99add85b861c88e2c164f7c3107eafe2d34925b5359cb2e38a16abefda31484cab336aa436d4eddb2789fbcbe817a219d6a852498cadedba0b7c2d0aeb05dc85f6e70055cfd46e5dbb7ee94f094ac4f1873a329bc07ac151ddfe8423bd4dee6f1ff2cbd37000cf23f2f72a1f964bc8fd46875aa7a063adab457434c1873fcc4d43d2b4f60d4fc94f6c0131b775b1bf7d9b493db12adaddc7414b2"}, 0xd9) prctl$PR_GET_FP_MODE(0x2e) socket$xdp(0x2c, 0x3, 0x0) 01:15:25 executing program 0: timer_create(0xfebffffffffffff0, &(0x7f0000000100)={0x0, 0x40000000000020}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000000)={0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x11, 0x0, [0x800, 0x10000, 0x4, 0x37c, 0xec1a, 0x4, 0x1, 0x200, 0x4, 0x2e4, 0xffffffffffff392c, 0x2, 0x10001, 0x1000, 0x1f, 0x2]}, {0x1, 0x0, [0x8, 0xff, 0x0, 0x23, 0x2, 0xfffffffffffffff9, 0x101, 0x1705, 0x9, 0x0, 0x3, 0x8, 0x9, 0x100000001, 0x1, 0x1d]}, {0x8, 0x0, [0x4, 0xfffffffffffffc00, 0x8001, 0x0, 0x5, 0xfffffffffffffc00, 0x84c, 0x1ff, 0x7a, 0x7, 0x5, 0x5, 0x7fffffff, 0x4, 0x6, 0x1]}, {0x2, 0x0, [0x7, 0x9, 0x0, 0x7ae, 0x2916d9c8, 0x8, 0x4, 0x4, 0x400000000000000, 0x3, 0x8, 0x4, 0x7fffffff, 0x125, 0x8001, 0xfffffffffffff800]}, {0x10, 0x0, [0x3, 0x1, 0x8, 0x6c5, 0x9, 0x0, 0x8000, 0x5, 0x0, 0xfffffffffffffff9, 0x4, 0x2, 0x100000000, 0xffff, 0x4, 0x40]}, {0x5, 0x0, [0x10000, 0x200, 0x1ff, 0x3, 0x2, 0x7, 0x13c05e45, 0x40, 0x7, 0x2, 0x7, 0xfff, 0x8000, 0x6, 0x5, 0x2]}], r2, 0x1, 0x1, 0x1b0}}, 0x20) timer_settime(0x0, 0x1, &(0x7f0000000180)={{r0}, {0x0, 0x989680}}, &(0x7f0000000140)) 01:15:25 executing program 0: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x109080) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000100)={0x4, 0x81, @name="5aa99d0b83066f4000dc6c8a69f7f0d7d1d61b813a54669c2e9eb40623c447c4"}) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x3, 0x10040) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000000)=0x5) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc058565d, &(0x7f0000000180)={0x0, 0x3, "2a8f5865af49c7250671f832f1ce9782bf915349fd6618fbaf11b15f24f44d12", 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000040)) 01:15:26 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000003c0)={0x0, 0x100000001, 0x800000000004, {0x1, @raw_data="2e326ad4d6de1c73c5ff6859c54bba23e7abe3c83d4e61fd399ad27fbfc521dfab96f615bd233fc9b7ed5043943f226af00bf1841f47a75652ebe91ca752f436589dafbc49b3a932492a954514195ab5d090d3615e4cf370bf2a99b3b1f489d6217f08e4844ebcf630fa9f029fe199c93fcacb80d868b5edc8a7d088727af50ba14bd85f85fe6289b211f7078aeaedd88327c0a649cb70a0588e09f70b0309740a6e427c2bbfc4b432f369ce300a26ce45e64dc63a2e002211c5d1dacc87917e8c19ac392b51504d"}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) 01:15:26 executing program 0: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpgrp(0xffffffffffffffff) ptrace(0xffffffffffffffff, r0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x10000000016, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$poke(0x7, r1, 0x0, 0x0) 01:15:26 executing program 1: capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x60) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x4, &(0x7f0000000100)='+:!\x00'}, 0x30) ptrace$getsig(0x4202, r2, 0xb98, &(0x7f0000000200)) io_setup(0x3, &(0x7f0000000000)=0x0) io_destroy(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') 01:15:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fanotify_mark(0xffffffffffffffff, 0x12, 0x10, 0xffffffffffffffff, 0x0) accept4$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80800) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x107000, 0x0) execveat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='/dev/hwrng\x00', &(0x7f0000000180)='selinux\x00', &(0x7f0000000200)='/dev/hwrng\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='/dev/hwrng\x00', &(0x7f0000000300)='vboxnet0vboxnet1wlan0{\x00', &(0x7f0000000340)='/-keyring\x00', &(0x7f0000000380)='/dev/hwrng\x00', &(0x7f00000003c0)='system\x00', &(0x7f0000000400)='md5sum\\\x00', &(0x7f0000000440)=':.selinuxmd5sum\x00'], 0x100) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000004c0)) [ 218.485200] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) 01:15:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fanotify_mark(0xffffffffffffffff, 0x12, 0x10, 0xffffffffffffffff, 0x0) accept4$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80800) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x107000, 0x0) execveat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000140)='/dev/hwrng\x00', &(0x7f0000000180)='selinux\x00', &(0x7f0000000200)='/dev/hwrng\x00'], &(0x7f0000000480)=[&(0x7f00000002c0)='/dev/hwrng\x00', &(0x7f0000000300)='vboxnet0vboxnet1wlan0{\x00', &(0x7f0000000340)='/-keyring\x00', &(0x7f0000000380)='/dev/hwrng\x00', &(0x7f00000003c0)='system\x00', &(0x7f0000000400)='md5sum\\\x00', &(0x7f0000000440)=':.selinuxmd5sum\x00'], 0x100) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000004c0)) 01:15:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='\x00\x00\x00\x00\x00') openat$cgroup_ro(r0, &(0x7f00000003c0)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={r2, @multicast1, @empty}, 0xc) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x400000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000180)={0x3, "9f1908"}, 0x4) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000000080), 0xc, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000008060501ff0080fffdffff2e0a0000000c000100060000007d0a00010c000200000022ff02f10000"], 0x2c}}, 0x0) fcntl$getown(r3, 0x9) [ 219.300978] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 219.308564] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 219.340501] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 219.348054] netlink: 'syz-executor0': attribute type 1 has an invalid length. 01:15:27 executing program 0: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc002, &(0x7f0000000000)=0x8, 0x3, 0x3) r0 = socket(0x4, 0xc, 0x6) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000080), 0x4) 01:15:27 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:27 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f00000001c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f00000000c0)) chdir(&(0x7f0000000780)='./file0\x00') r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000200)={"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"}) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00007a7000)='./control\x00', 0xa4000960) rename(&(0x7f0000000080)='./control\x00', &(0x7f0000000040)='./file0\x00') 01:15:27 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x1810c0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x5402, &(0x7f00000001c0)={0xfffffffffffffffc, 0x3, 0x6, 0x7, 0x12, 0x6, 0xffff, 0x81, 0xfff, 0x5, 0x40, 0x100}) r1 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0xf3d, 0x1a1800) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000240)='nr0\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000280)={0x0, @aes128, 0x3, "f1c443a0f8443316"}) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000002c0)={0x2, 0x400}, 0x2) ioctl(r0, 0x5, &(0x7f0000000300)="50600118fd68ced8408f9e49511f4a63a5ec0ffc47e9b737a38e6686e26ac2642facb425fcc92e569962e86de218df69d21e36dab79936b8144a9d3ef8728ac9fb10eaca0bbff9d6f50d1e885ff8d79404742524849ff23a2b1f8a47f2fc5ee92eabc913cbf833471df25b752aef0ba90a5448b51d263304064c730899f23a381b803a85fd7c55c32bcac684e3df9761746ae8e49623f46435f8081cda0e2d622f") ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00000003c0)={[], 0xc0000000000, 0x21d174e3, 0x9, 0x0, 0x81, 0x1f000, 0x0, [], 0xc9}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000580)) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000005c0)={0x2, 0x6, 0x8, 0xf4b, 'syz0\x00', 0x3f}) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000600)) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r0, &(0x7f00000007c0)={0xa0, 0x19, 0x1, {0x402, {0x48, 0x0, 0x3}, 0x0, r3, r5, 0x4, 0xf907, 0x7, 0x7fffffff, 0x7, 0x2, 0x281, 0x1, 0x1, 0x0, 0x20, 0xffffffffffffffc0, 0x5, 0x1, 0x7ff}}, 0xa0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880)='/dev/hwrng\x00', 0x4400, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000008c0)={'syz_tun\x00'}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000900)=0x3ff, 0x4) socket$l2tp(0x18, 0x1, 0x1) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000940)=0x1) write$P9_RLERROR(r6, &(0x7f0000000980)={0x10, 0x7, 0x1, {0x7, ']nodev,'}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111, 0x3}}, 0x20) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) llistxattr(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)=""/141, 0x8d) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000bc0)='trusted.overlay.redirect\x00', &(0x7f0000000c00)='./file1\x00', 0x8, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000c40)=[@in={0x2, 0x4e23, @rand_addr=0x9}, @in={0x2, 0x4e24, @multicast2}], 0x20) quotactl(0x19, &(0x7f0000000c80)='./file0\x00', r4, &(0x7f0000000cc0)="609b6c565582c1da2986095304b49195e16269183ff0ddb4910a79559bafaba37a5f8cdd2824ec4a70610937920fd0a969809428fb75356eb873ef159dde0e751bf28c324dbe52363499d1a9fe4b87b8435ec6204f3e25fbc885b3cd0792b8046490fb3bd22738e579750dde246776b0af42d4412846e794d909265516c6d318aea922863e9a1f42c4a36c4085bb7cd957913c4559be399bf35c1809f14b52075a65901b53954376e73be1c9f3d00379c4094279bc8fec61ebd1eb19d1cc7224a93de7b965c7d16eabfd526d8295a8f9c70225988f5d177040638016e7f27c5c3e95df2544955241796acd50d4dca26a02f4") r7 = syz_open_dev$usb(&(0x7f0000000dc0)='/dev/bus/usb/00#/00#\x00', 0x781, 0x200000) ioctl$IOC_PR_REGISTER(r7, 0x401870c8, &(0x7f0000000e00)={0x9, 0x1}) 01:15:27 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = dup2(r0, r0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000000)=[0x4, 0x2], 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc04c5349, &(0x7f0000dc5f98)) 01:15:28 executing program 0: chdir(&(0x7f0000000000)='./file0\x00') r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f00000000c0)='F') r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x402c0, 0x0) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) 01:15:28 executing program 2: r0 = socket$inet6(0xa, 0xb, 0x4f075b87) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xe6d, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={r1, 0x0, 0x7178, 0x1, 0x4}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) close(r2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4') r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) sendfile(r2, r3, 0x0, 0x8005) 01:15:28 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 220.333098] syz-executor2 (10155): /proc/10155/oom_adj is deprecated, please use /proc/10155/oom_score_adj instead. 01:15:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r1}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) recvfrom$packet(r2, &(0x7f0000000080)=""/67, 0x43, 0x2, 0x0, 0x0) 01:15:28 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) unshare(0x20400) recvmmsg(r0, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x206000, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x7fff, 0x4) [ 220.482934] IPVS: ftp: loaded support on port[0] = 21 01:15:28 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 220.714484] chnl_net:caif_netlink_parms(): no params data found 01:15:28 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000380)={0x0, 0x20, {0x200, 0x1, 0x0, 0x7, 0x1, 0x4, 0x0, 0x5}}) r1 = syz_open_dev$video(&(0x7f0000000480)='/dev/video#\x00', 0x100000007fffffff, 0x0) syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x10001, 0x80) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000200)={0xb, @output={0x0, 0x0, {}, 0x1}}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r0, 0xfffffffffffffffa, 0x4, "cdb692f22e4fa33c66dd974b99a522c2c4bdef65465871f169a6b1e530d1220ed3f4a3bc"}) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f00000001c0)={0x401, 0x4, 0x0, [], &(0x7f0000000080)=0x3}) [ 220.782902] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.789501] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.797761] device bridge_slave_0 entered promiscuous mode [ 220.842570] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.849068] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.857268] device bridge_slave_1 entered promiscuous mode 01:15:28 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 220.926707] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 220.938043] bond0: Enslaving bond_slave_1 as an active interface with an up link 01:15:29 executing program 2: r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000000c0)) geteuid() ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) [ 220.996397] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 221.004825] team0: Port device team_slave_0 added [ 221.025657] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 221.034012] team0: Port device team_slave_1 added [ 221.040555] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 221.064934] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 221.170006] device hsr_slave_0 entered promiscuous mode [ 221.202328] device hsr_slave_1 entered promiscuous mode [ 221.224745] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 221.233657] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 221.258701] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.265234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.272340] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.278823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.354995] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 221.361121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.376281] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 221.389497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.400426] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.411309] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.425786] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 221.445556] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 221.452500] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.469641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.477879] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.484395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.525505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.533899] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.540355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.549740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.558358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.572173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.606952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.616579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.628998] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 221.635529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.660678] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 221.681150] 8021q: adding VLAN 0 to HW filter on device batadv0 01:15:29 executing program 3: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0x9, 0x8}, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getpeername(r1, 0x0, 0x0) 01:15:29 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:29 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="237bfffcf781f1b7944258bd9a37706461746520646566615ffec0cad0c21bc0849300e848935df832a58b5b7e549984f7049cd0faed99e8fedd8ceae4eefcaae92bcfa3a0c8ac7afb84b4bdf7cadce88ab6302f32ceb29e2394c950ac749876ee81c8521ce29afe9ca3e2939b8064cea3dc6b5997b65c71f664a053632ffc72201b2b373e0015ff84c3b8b4"], 0x0, 0x0) 01:15:29 executing program 0: unshare(0x24020400) r0 = socket$inet6(0xa, 0xa, 0xfffffffffffffffb) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 01:15:30 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x630}, {&(0x7f00000000c0)=""/85, 0xfb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xf0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x16}], 0x4, &(0x7f0000002400)=""/191, 0xbf}}], 0x4000000000000f0, 0x0, &(0x7f0000003700)={0x77359400}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) 01:15:30 executing program 2: r0 = socket$inet6(0xa, 0x4, 0xfffffffffffffffd) r1 = gettid() lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000000c0), &(0x7f0000000140)=0x0, &(0x7f00000001c0)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={r1, r2, r3}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) connect$inet(r4, &(0x7f0000000180), 0x10) r5 = dup(r4) shutdown(r5, 0x1) shutdown(r4, 0x1) 01:15:30 executing program 3: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0x9, 0x8}, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) getpeername(r1, 0x0, 0x0) 01:15:30 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80, 0x20000) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0585611, &(0x7f0000000180)={0x0, 0x9, "2a8f5865af49c7250671f832f1ce9782bf915349fd6618fbaf11b15f24f44d12", 0x0, 0x0, 0x0, 0x70effc, 0x100000001}) 01:15:30 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$vhci(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/vhci\x00', 0x2001) io_setup(0x8, &(0x7f0000000300)=0x0) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000080), &(0x7f0000000140)=0x2) io_submit(r2, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000140), 0x2}]) 01:15:30 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x1e, &(0x7f0000000080), 0x0) 01:15:30 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000052001f0014f9f407000904ff02000f0208000100fffbffff0800000000000006", 0x24) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1811}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r1, 0x7827, 0x3}, 0x8) 01:15:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b7", 0x1) readv(r0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000000040)=""/56, 0x38}, {&(0x7f0000000080)=""/7, 0x7}], 0x4) 01:15:30 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:30 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 01:15:30 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000001100)={0x1004, 0x100000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x101ff, 0x2, 0xf000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0) listen(r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x40000ab11, 0x0) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f0000001140)) getgroups(0x2, &(0x7f00000000c0)=[0xee00, 0xee00]) stat(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000001440)=[0xee01, 0xffffffffffffffff, 0xee01, 0xee00, 0xee01]) setgroups(0x6, &(0x7f0000001480)=[r3, r4, r5, r6, r7, r8]) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="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", 0x1000, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 01:15:31 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast2}, 0x3, 0x2, 0x2, 0x4}}, 0x26) close(r0) 01:15:31 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:31 executing program 2: userfaultfd(0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) pipe(&(0x7f0000000180)) r0 = socket$inet_udp(0x2, 0x2, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 01:15:31 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x40501, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="0bf5430f080319", 0x7}], 0x1) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="3ef3670f35d81b0f20e06635000100000f22e066b8fcffffff0f23c00f21f8663500000b000f23f88bd99a0b00e0000fc75800660f3a401470ba4100b0f5ee360f00db", 0x43}], 0x1, 0x30, &(0x7f0000000100)=[@efer={0x2, 0x400}, @vmwrite={0x8, 0x0, 0x2, 0x0, 0x5, 0x0, 0x8, 0x0, 0x8}], 0x2) 01:15:31 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x1, {0xa}}, 0x14) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f00000000c0)) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x1013, r0, 0x0) 01:15:31 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0x153c4a94, 0x2, 0x8000, 0xe68, 0xb39c, 0x8, 0x9, 0xffffffffffffff36}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x7fe10f94, 0x4, [0xff71, 0x1, 0x8001, 0x9]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x7d, &(0x7f0000000100)={r3, 0x0, 0x1f39}, 0xfffffffffffffc22) close(r2) close(r1) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x200000) 01:15:31 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x3}) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r1, 0x29, 0x18, 0x0, &(0x7f0000013000)) 01:15:31 executing program 2: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f0000000080)={0xfffffffffffffffe, 0x20, 0x0, {0x6, 0x0, 0x20303159, 0x0, 0x5, 0xfffffffffffffffe, 0x2, 0xfffffffffffffffa}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40480, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) 01:15:31 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:31 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x3c) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0xd}) 01:15:31 executing program 0: r0 = socket(0x200000000000011, 0x803, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0xe, 0xc1d, 0xf, 0x2, 0x0, 0x70bd26, 0x25dfdbff}, 0x10}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) getpeername(r0, &(0x7f0000000080)=@vsock, &(0x7f0000000100)=0x80) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 01:15:31 executing program 2: creat(&(0x7f0000000340)='./bus\x00', 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x20011, r0, 0x0) msync(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x6) 01:15:31 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:31 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000a00a300000000000000000900000000000000000000000000"], 0x1c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 01:15:32 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x14) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r1, 0xffffffffffffffc7, &(0x7f0000000240)) 01:15:32 executing program 2: r0 = socket(0x40000000002, 0x3, 0x67) getsockopt(r0, 0x8, 0x5, &(0x7f00000000c0)=""/214, &(0x7f0000000000)=0xd6) getsockname(r0, &(0x7f00000001c0)=@x25, &(0x7f0000000040)=0x80) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0xd0000eb}, 0x6e) 01:15:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 224.164838] raw_sendmsg: syz-executor2 forgot to set AF_INET. Fix it! 01:15:32 executing program 2: r0 = socket$kcm(0x10, 0x7ff, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@nl, 0x80, 0x0, 0x0, &(0x7f0000000200)=[{0x10}], 0x10}, 0x0) fcntl$notify(r0, 0x402, 0x20) 01:15:32 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8004000000008, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18e8f1539d0000000000000008000000dbfad1fffcffffff17590000040000005a0f0000fcffffff95000000000000009500000000000080"], &(0x7f0000000040)='GPL\x00', 0x81, 0x72, &(0x7f0000000300)=""/251, 0x0, 0x2, [], 0x0, 0x40004}, 0x48) 01:15:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='9']}) close(r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x505842, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f00000000c0)=0x6) close(r1) 01:15:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0x9, 0x1f, 0x9, 0x80, 0x2, 0x5, 0x5e, 0x13, 0x7d0e1be7, 0x6, 0x8, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)) 01:15:32 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000005a80)={r0}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000005ac0)={0x0, @in={{0x2, 0x4e24, @multicast1}}, 0x80000000, 0x800}, &(0x7f0000005b80)=0x90) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000005bc0)={r2, 0x1, 0xffffffffffffff00}, 0x10) socket$pptp(0x18, 0x1, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000001c0)={0xff, {{0x2, 0x4e23, @rand_addr=0x80}}, 0x1, 0x6, [{{0x2, 0x4e22, @empty}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e23, @multicast2}}]}, 0x390) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000180)=0x54) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x3ff, 0x80000001, 0xe00000000000000, 0x5c0}, 0x8) 01:15:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff810040010000000058000b4824ca945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010009081000414900000004fcff", 0x58}], 0x1) uselib(&(0x7f0000000000)='./file0\x00') [ 224.804289] IPVS: ftp: loaded support on port[0] = 21 01:15:33 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000340)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x4, &(0x7f0000000040)) ppoll(&(0x7f0000000000)=[{r0}, {r1, 0x1111}], 0x2, 0x0, 0x0, 0x0) 01:15:33 executing program 1: r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:33 executing program 0: writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000340)="65c179c1710575d63c4e31e0189566f9d001229411a1d7340167195e4411573d4b27868a8256a4c4b560c10ed1a1c3cc7033", 0x32}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key(0x0, 0x0, &(0x7f0000000480)="9605550835d6548b5ad5805000b57a8ecc72933d061e1ca9a29afab626959bf2b0ab3cc1017b2e8728ec524154079361e8bcbacd52c76fbed9d534dfb5df34004ed295724d60c1b1c65d4ddd1d1759f7584a61a9b588f2d66fd14d7456ee209aad", 0x61, 0xfffffffffffffff8) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffffa, 0x100) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000040)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@flags], 0x1) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000580)=0x2fff) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000280)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 01:15:33 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000080)={{}, {0xffffff80}}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x7, 0x3, 0x3f}) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x2801, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x6) 01:15:33 executing program 1: r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:33 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) 01:15:33 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/111, 0x6f) faccessat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x40, 0x400) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x1, 0x101000) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000240)=@fragment={0x2f, 0x0, 0x3f800000000000, 0x100000001, 0x0, 0x40, 0x66}, 0x8) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000180)={'erspan0\x00', {0x2, 0x4e23, @broadcast}}) [ 225.769029] IPVS: ftp: loaded support on port[0] = 21 01:15:34 executing program 1: r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:34 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000000)) 01:15:34 executing program 3: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0xf, 0xb46c244a7c6a15cc) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x3, 0x1, 0x0, "616052eabcab615670171e305f4522b0d2cae32de2031dbe6cde243bbf3da078"}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x202202) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)={0x2b, 0x6, 0x0, {0x6, 0x6, 0x2, 0x0, '#\''}}, 0x2b) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) 01:15:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket$inet(0x2, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='ip6gretap0\x00', 0xe) sendmsg$nl_generic(r2, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000014000700000000ee0000008002ff0006667e279639a91d7bd91397917daf4204a00b32eadc282841e0000002e3d8960f65b27ee8125f42360c00f00015739d53d5000000"], 0x48}}, 0x0) 01:15:35 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:35 executing program 3: r0 = socket(0x10, 0x2, 0x400) ioctl(r0, 0x20, &(0x7f00000000c0)="75df370ab13dacd8d10df1c80409") bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc) r1 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000080)=0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(r0, r1, 0x0, 0x37) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e23, 0x200, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x23}}, 0x8}, {0xa, 0x4e20, 0x100, @mcast1, 0xffff}, 0x2, [0x9, 0x2, 0x0, 0x4, 0x3, 0xb03a, 0x8, 0x4]}, 0x5c) 01:15:35 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c746572005008ac4a92eff341c10b000000000000010000003c324e79414948157a510000000007000000040000008004000040010000580200000000000098ac5d2e4a8813db5251ac83bddf0bbbd180503d25c564cc2b4572f99b5de55e8631c66966e80f8e9e29048b2b2bdc460fbabab1469118ba8c220913eec2ab8e17f14441ecb4ceb2ca7088ce6a62c7bde51fe78cb2de18afa54cf8d12fd76b2584b63e2b068ffe22ad1d6237c6"], 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x23}, 0x1}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000140)={r2, 0x2}, &(0x7f0000000180)=0x8) 01:15:35 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) write$9p(r0, &(0x7f0000001400)="b6d08ebda3d36e9d5e2fb35953d6cbde0dec5e0c3202d8c3847ce934541ca4882c9734fdb9c033377d86d498aa197f49b77115b6a97a71296a66d498553799ae3a9d421eef09fdbfaae783498cb669d142fd3239260597ceb721501dac5f8146aaf8237359b7f1d3377b45f979e50731c8991c6313501224f1758cbcd6fb0165aa4a12308710540e8fd3cbc72829df1c55d9a340737e65fc94cae058dff946ea3caf49171f8d4f42ab938b389310440582eb0e3bb67d80f71e9a71738e2304b9b5d7f76ad83bd47fce89b31871a372271673a2df84225979148514cc7802dfa3c64ef8c732703ea4b3b078309aa95eec5a83883b77b2b05525b0ac07423b4ea16b5bff11d2464285bae1ab2e5d373677f4079a3461cf5b789757a87bb0bd73ddf6b0e801c23857c2073e08565e4aa1095ed5c803a7e574e1c6e93a0aa98b6b1254afd0aca0dac24e2b2bc92ff864d77b33df1f8fdf4c12daa146477dff6ed74482c218953f11742ee8e2e3ed32c52d46b34142d9f37479c10c648dcda05c954eed0d18b96eeabbabace88468298ea515151276c78f10a78cf01ffc36fa75a1c60c6ce757861a8623c69c6a4493ed57e3c301886399f16dde18e90ceb4dc4f2427a6537b251fb70c067b321efc6820dd525676f54fcabb9d14434bc71a397e064b4358af7760fdda171cfd760aea8be9647e3abdc1daafc5ecde00b1792a33ae584bb484bec0ead49938a6773998dbf57bcb1778d72ec0f52d080cef13f9a878942ea2b0ad735c48977068f9dc4ba171eb7393865650fc8dd0b934e9b94555e2291228cf88a3a33662d1ecc0ecf4d49c4459da6d6f9aab2bd208cf5c9ddc5e48e4cc19cc2624de9700955a09b53cb4de430e1cf4b9718d5f8aad216380ad64d5adee83efb9a26acf648e1fd38e620a54dc003c4c233df1325128080da9fc33ce0b2583165d18cd05173736989ed6446e3c43fa60e5d1ee93d4416b916a3153402dbe674e21b8ac4a55a5ee385d155f6badb96c84b03641f6236f36ff8ebc8e8b81f3898f76550ba48a50ffce49b83b4353d5876fe76db0c716c5127b759f593fb4591fbca6a6ceda7f258189f27d6a8bcd193f6fec86c06cbe404fdf5979d46752eb41c4fc9476cdedc83993f94b2c29efde5c9b02d31aed90f8bd3089fa45ede6daf006ad6a3b47b8d84c4e845f341b8a5195d04aa3a905817d9250f4a1defb42045af791d3b306d9fcbba5301133dd995e6f6fe91bdc681c8b2d05058c7a8439518e29183efdbdd37b2297583abe0ac2fa6ece6e00f0772e083eca6c35232f9fc91b0649df62d3f50dbb0793e773e6fbfd2e711b2e3667198bbf169f8c4a8c8a6dcd4e61fd24cd1202804ebdbd15be7431ec06856944cd009e82b83e166a4e3c7f4503635be0fcb4bbb5c998690defdcb960027080cdcaa68a246f6593c49c0a225b0fd18fcffd20dd695baa5b1d856fccef594bcd84b0591fe44656319182321094548f9392c6d7e06f4c478a5726cdc9e0918fb8218b11398f53dd7751677d488dc40bf0ad21fa8e6ec81b05e3ba6c2188c1e14d202825b999c568c7fd9c674ee644913588423e37e4cbf9c0a74ac6697d321652d8e00ee6ebdfaee899d80c3c0f0ce3356463d88574f950b70e65f7cce7e47a14bcce770854ebecae2ce71cebc9f762014753591ac91bbf40d167797a368a90f50b44ecb46a48d3f23058b315c944a5f9c5370c73856443445a9d9a976286cfff5cbf7a437610ec2292c3acf82195b8e028b94b2062012a387b364e78cb7841649e4214ccb95fc5dc3709056fcfcd1b4d95e501ed12b335b9f200d0049330d1b023a44e9c7ed39cfd9b4b43d71b0111e807ea563748315ba59d4f4baea5449ac199b6360eefedf8c605d92a575966e69b5cabec10f7c90c08bab53cf4b86531ccc7c3f71cf9e467743598037bde3f78a0179f4db7338c32c353caa596bed2db619236828e074e45ce37fa36183e79c69d20b6b8487ae52acb0279a658d701effe22f55c95c60ee39694f530f7d3854eb56c7596c346e93b10c9b748b2cc14ab1b16c8d0eb6bcdcd8e3c236bd461c85e540be541a8699a5a17dfc9a71275a2607261d1b229789af0cdc883ff28c08ac5bdad202aacdade4baa2d65be1bb68fa6a96756c179eade465d681b0f697f1557a448835fcfc45d3739c3330623e0eaeb41b4bf60b0f3a23f80468c7ead42f53df68d45a6cedb3c90b2bc0f7d2fdd906a66b51888e8ff8657c5f3d9be80a208908bce5e61ebd8885706a5e2828a59c9e7b466032600806d6cd0a4c4d787f489f4f1b9f8915078a43f74f9a554f2d529fd0d5070af220d99cdd45585eb39fb4e766e386a26e1ca5ed89cf4f5c416a9be31e82841f037ac485c7c328fc2242ce3028d202d73cb6de114c750f126b9c9b4d27edd822f3088bfa128ad30f62f075d4a235d44f0c5b7558e74d9029ce906882b27440acc2d781872e3efdc05b62f68e7c4e64a673722c9420f23c050d71d4aaf727c14288f88b78c78814a4188032890ee0cb0619a959a1f27b4d19535f4100a52f93547ba18a85f77827648df7886e4a078b122f62546f68a1de123d13402e48ab5f7892cefb75f33766907aec58670931ff038eafa29bed30c42527a08f37d3ecdd31b2b3b9e549e1fbb52524765178d9967f048b3c6275ee174c96ab8d64a18960885103405a1cab03d7c6ff3e711f4e7b6a7f753594f6b139124808e861000246e7906dfc314de662f4d1d7d90599e940452f800a85117216f747a995eafda51173a7dafc5555a6f646cf4f94264fa0e1b3962bccb8304f352c7a4f1d2ceec69efd30813fd23b66f0f1acb62cd154bedfc534702a2e3856d9624dcc80f571aca32e02d36066fd6f454c8346c5bf00bf812d77f68b3d8462fda0d0d9cbe33a7b6dd9bdd5853285b5b20b5f6fe426416383addb15472b02f312988be71d8f946823aea9b811614bf1e1d09e45bf9c091aad09453fb2b618c993474be2e6c3fe7f9d16a23c9407716fe0babc18f50a7c5b22da2ef8872c817c125ef333d22a6cc3cfa18e3faf3466ddb50221c6ff6dcc76e4cd7604cc4c85dda3d6d5a006e4dc71d60afa77dab2f3334d221d6992f11de5e964a418f36c9cac0f8b996e76544bf91ca04e3556d88f5ec08f779048e4069d2e277a321ef3a4effc457322ee64fc56abd3d36fc7a9fd88ade9cc2f37840f74680d1ad56ec8a28bc3325b48994b53d9dee23ff9f6f1f16053fca41bfda8c87383e0e4e0e5addb0d81b1e81e93ecadd9e1743603f19ec757715f9046ae6d190fca7934322d6d7f15de819bc7f1979b811046855c9d756affb36dfa81769addf80f9720d54d315388f6ee4273efb7c4ca5d3501d1b7793f2c6dacc77e6bf5a3c985b7bffcdd8683bf88331afd199a390fb09d7bb97d7ea4a8e09f557ba21d32f8d5fe04e3ae17d644eff21561f547182bee769b727abf83eb6d1dc22e070f15db7465b99c13c7e2b75975c3aca065defb179b185efd3c4e976134af0fc0ee2de178212c8a97cbc6a7aa573b04f4ea6e6626802bbb8c3a9fa8c7c344b2930eb278c12b480903bd5b379bf5f1b5903786555cf97b1607bcae047f950a354d3235931e0d634a7e086408589aa53a06fb4ddae62bbbe0363a54d15451017c44e28d8e8d78a002bb21edfd84ecafae729c34b70dfbfb740569d46f068b37c89846567a4744b6af8bd5cc4362013a7a77e7468126116a813c4ba199d479340733f07645f8d42c8c0e3cdc3ccc3e859261a67010a3428c452e623c35cbe8a2fe245bfebdbc8bb3c2e58072b7406c86730b368556a77fb71544fa09b7158e38d5fefe61c63534b54e2892881733b8ffa8f1068eb3f217a14da48536c272158eb8b61cc000d546949f8a7fb860f65468823a2db2fd830760dbbffea97caacc1e3a71c16052339c84f7071217427e9c634a96707f8982bca223bcf7f1a85ab95e84a6ad1d6fba01116e83a368bd9019038189982c51346d43b9220e662597d02bee1f0c987c02605ed9d4da295017c873efe04139386161e867acb9aa9ae6501be63282119cc427d0693ca7f497a262d3d114ec1f345d873eada17c361f3f071d3723405bca610af2502f1758234abc98c7f4e0c958ba2ed81e2bd6934d9b5d8534007ab63a8ad875bab3ad781ab767af9396bfdd0f0442e850384f8025243beefd0ee92e94edc75404479782ffa55701288cc2c9befc36056cc867bff6c3fa376b9d94cf146bb2137fd42745bff68c13a853f02b709e51ff111e2e2798ff4cd00a9f6d2587fb87eb0ef39543996ebf2e13818aed4fc8ce0efeb78bfe846040ca6b5aac4bf4ef3b58b6eb9eaf4a1e1d65ffe984a8350bd35f0faad13bcaf23f29c46fb77aa57260f7da85e9b5117cd3d51fd88d72bffc2d1cea137383f0135c7a07fe93b9fb63aa6beb2507f14590d805ab1eb9d86e963f3ed725ebac742cac972103497f3e42c0d1bcb506858fb9e5412332711a41f61ceb288a83e9ac744b39ddaa816e57d05b31933f18d3183a4b0bf7d03432c336854c7a24871d7ea6ee2f48d9ed3a2453bbf273250493e2275fb565e5546a55a658499150e9315679da5f34180208c29328c314a8a4a38c35498d98120da47356f7f841e2105d10a7988b380351aee8fc5114e49190e5680486c0db4025c3cc06b39d2f08fc4c5927a7952c12e35022837e1c379040a2313d5fe9bc71e9603e0c9089fc3c21612160acd51c1caa847e7ba073ea8f6331311e5ac263f121b4feacd33cb6d92f655fdd9a0d46e138dfa55b812523fd2bb6018d76a610777e1d3bb706ce27e317b04bfeee5cab593b299370a8aec17b8ea93c8e302d21b92f9bb4ab857af4ca1b2b1d5fe5d3612fcbee1ca254f5bf03b3d40074e83b1a1ee4bad0b8b8c3dd4de9b3ba6956323e79e1d1f6ea06ee8822191ebfe179bf4335f92297ab916893f05c24d2ea4496d9a6401fcc6099a878a8a80c7b1311a25315e25ac3f16b46efea3cf23fe9ba7d8d13c8482f4bcbb1abee5a2b1477572c22f8e061b22ae4a14d3411b60aa3f283cec46fbab0945bb8e5c78bfcf2b029cf21eedca24c5989eae49e5037652c74cb865041fdcbf01f105d2382e157ae7455290d481b22d07bb19119b6fc317def6562d017a9af8598e1304b1cc8d41f0bad8fd1ce87a8736a7fdcaefbb0164258e101bcc3730c770fbdb9c69262ce6964ee453002713566d0b75993b6589b7cb7f49dd834d40d15a260ffdd802ca7f03404aceea18aea4abe3e093386a4e75ceff03aadd7df1e7b23a4e8e43e2f43926e0250f75250673628de1473cf8d4b6c789bc38db43764577c4e1d9a75ebdeb82c67c84ac08115e84bc132fb925581c74dee4cd583392b1e22ff8607bd552c8bf4b24dc2458b7eb49846d6320cd9d103a7a0060f3304b46d1c57c751c7f4dd69595868232fc56108ddec08cff8e275cc105ee824f69e36751d9d938842dc6caeb90ddd94f5b453c2e960f36e819388f039ad587bbb301774e45f4321fe1f01b73dcaa68794e4b06323c8ea2d9875f07bb437c07321f10b2690a1101d512dee762b1453ea1c017f9d000cfada28b4c37b3f810af0b481ecd5d9ba47bcc5e877f63e1be6bf8c3281e05159392e43e00a42fe7be6e5ce46e66c6fe23b35e988315e03ff67b9cb129625494b870095892d32ef1a5b8c21e5c00fe5ea5aa21d0b1c7c9a9954f32869e2e9d1711939c5924bc38c8d979438dd2469de0bc5e6d093ca6a02670d319054f1e3e1004c70ba78be82bd", 0x1000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', r3}) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0xef, 0x0) 01:15:35 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x4, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x840, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)={0x1}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x2, 0x102}) [ 227.321155] QAT: Invalid ioctl [ 227.342291] QAT: Invalid ioctl 01:15:35 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:35 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x100000000) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f00000000c0)=""/161, &(0x7f0000000000)=0xa1) 01:15:35 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000080)=r2) clock_gettime(0x0, &(0x7f0000000040)) write$evdev(r0, &(0x7f0000000080), 0x0) r3 = dup2(r0, r0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 01:15:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") syz_emit_ethernet(0x58, &(0x7f00000000c0)={@local, @link_local, [], {@llc={0x4, {@llc={0x4e, 0xff, "d5", "23759ade210033fea942fb25fab05695b0db74f5876e6474ca7eb990a1bc0c87d07b82c5262c4721a6dd24001f74944f4e9a950bdf1c5ca638dc6d5bfb15319455d809c3f43a0c"}}}}}, 0x0) 01:15:35 executing program 1: r0 = socket(0x0, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:35 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x73) r1 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r2 = userfaultfd(0x0) close(r2) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000400)=""/100, 0x64) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}, 0x401}, 0x1c, 0x0}, 0x0) 01:15:35 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000200)={0xa96, 0x5, 0x6, 0x5, 0xa3a}) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000100)="360fc79e174b66b8007000000f23c00f21f8663501000d000f23f86766c7442400cbd700006766c74424020c0000006766c744240600000000670f011c240f01ba0000f3c08b009009b82e000f00d8650f01cf0f20c06635100000000f22c0369beab70a0601", 0x66}], 0x1, 0x40, &(0x7f0000000200), 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f00000000c0)={0x3ff, 0x0, 0x8, 0x100}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000040)="0f425f69f20f38f10b650feda5000066b9800000c00f326635004000000f30b80d008ec86666de3c0f01cf260f01cb2665660f3a618c0060540fc76b39", 0x3d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) 01:15:35 executing program 2: symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80001, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB='^\x00\x00\x00\x00\x00'], &(0x7f0000000080)=0xa) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x401, 0x6, 0x7, 0x2, 0x8}, &(0x7f0000000100)=0x14) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 01:15:36 executing program 1: r0 = socket(0x0, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:36 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev\x00') ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000100)={0x5, "4852b11c2b9538dc94011ca8531487de31703a55ee629e53a3465fd54a70f6c0", 0x3, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$TCSETSF(r1, 0x5100, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_wait(r2, &(0x7f0000000200)=[{}], 0x1, 0x0) 01:15:36 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) unshare(0x400) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x100000001, 0x9}) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 01:15:36 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xb7, 0x200) write$cgroup_int(r1, &(0x7f0000000040), 0x12) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x100}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@int=0x800, 0x5c606b4c6b00204a) 01:15:36 executing program 1: r0 = socket(0x0, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:36 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) r2 = gettid() fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x3, 0x0, 0x5, 0x5, r2}) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1, 0x0, 0x2}) write$FUSE_LK(r1, &(0x7f0000000140)={0x28}, 0x28) creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x1) 01:15:36 executing program 2: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x1d, &(0x7f0000000040), 0x4) 01:15:36 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev\x00') ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000100)={0x5, "4852b11c2b9538dc94011ca8531487de31703a55ee629e53a3465fd54a70f6c0", 0x3, 0x1}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x3, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$TCSETSF(r1, 0x5100, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_wait(r2, &(0x7f0000000200)=[{}], 0x1, 0x0) 01:15:36 executing program 1: r0 = socket(0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:36 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x400, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000001140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x38, 0x0, 0x0, 0xfffffffffffffffd, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, [], "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"}, 0xc1d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000000)=[{0x80, 0x1, 0xffffffa0, 0x0, @tick, {0x0, 0x100}, {}, @time}], 0x30) 01:15:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xb9\xb3\xf8h>\xcf\x89\xde\xe9\x01\xd2\xdau\xc0\x1f\x02\x00\xf5\x8d&\xd7\xa0q\xfb53\x1c\xe3\x9cZ\xee\xffP\x83\xcf\a\xddFE\\\x91MJ\xff\x1e|\xf7\xedW\xc0\xc2\x05o\\\xa9\xfc\xf0<\xbf\x82\xbd\x13SG73\x92E\xd3\xc7\x06A\xbeb\x81\xd7\xe1\xb4\xb7\t\x91\x14\xc5q\x87\"\x98\xdd\x7f! \xe2\xb6\xfa*.*,\x9cn\x004u\vya\xfa,\x15\x84\xc0\xb5\xa5\x00\xae\n\xc3\x9b\xc7jx\xd9\x15\x82fu\x9fvj>\x8c\x84\xc0\x9c\xf3\xad\x88\x82\x94\x7f\xfa\x1f\xb4\xc0Pr{\xeb\x12\xc5~\x06\xffY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89$W\x8a\xd4\x9e\xa1\x14LtH\xd6@\xaa\x88\xa6jq\xb7}s\xa9$\xff\x02\x7f\xdc\xb5P\x16\x16S\xd4\xcbW\b\x83\x85$\x82\x86\xf5\xbe\x9d\x87f\xc7\f)\xe6\xf5\x06=\xfet\xa1\xb0\xb5 y\x15\x90H!\vM\'\x1a\xc9L\x88\x9b\x06<\xa3J\tW\x9a\xf061\xf1(\xe6\xdd,\x96m\xae\xcd|o~\x0fN\xbc\xaf\x80%\f\xfa\xb0q\x84\x83\x80x\xc7\x1d\x80\x9d\x06\xdc\v\xacu\xdb\x81E%\xd1\xd1\xac\xafL\xb6\xf4\x89\x0f9s\x82\xaecf\x97\xf6\x88\tN8\xdb\\\"w\x0fS\alc\r\xf9\xbbL\x14\x91\x89\xff\xa9u\xf5 \x871\x1c[\xaa\xfc\x11\xc9\v\xdc%\xfc\x80;q\x15=\xdc9\x95\xb2\xdfI\xcd\xd7\x84\xbc[\xea@\x86\x10p\xda\xdb9^\x85\xc9<\xdf\xa0\x8e') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xfffffffffffffffc, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x4000, 0x0) getsockopt$inet_int(r1, 0x10d, 0x2000000fd, 0x0, &(0x7f0000000240)) 01:15:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80000000, 0x10000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'caif0\x00', 0x0}) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, [], 0x18}, 0x4e22, 0x7ff, 0x4e24, 0x2, 0xa, 0x0, 0x80, 0xff, r2, r3}, {0x32, 0x1, 0x6, 0x0, 0xcd, 0x8000, 0x7, 0x3ff}, {0x0, 0x1, 0xbf, 0x3}, 0x18, 0x6e6bbc, 0x2, 0x0, 0x1, 0x2}, {{@in=@empty, 0x4d4, 0xff}, 0xa, @in6=@ipv4={[], [], @rand_addr=0x619}, 0x3503, 0x2, 0x0, 0xf38, 0x0, 0x5, 0x4}}, 0xe8) getpeername$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x1c) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x2d, 0x105}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 01:15:37 executing program 1: r0 = socket(0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0463042840040000"], 0x0, 0x0, 0x0}) 01:15:37 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x1b4, 0x1bc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x280, 0x4) 01:15:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000180)) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r1, 0xb01}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x5f050000, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x2f, 0xffffff1f, 0x0, 0x0, {0x1, 0xf000000, 0xae05}}, 0x14}, 0x1, 0x8001a0ffffffff}, 0x0) [ 229.260596] binder: 10512:10514 unknown command 671376132 [ 229.266460] binder: 10512:10514 ioctl c0306201 2000dfd0 returned -22 01:15:37 executing program 1: r0 = socket(0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}, {&(0x7f0000000e80)=""/30, 0x1e}], 0x2}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 229.342710] binder: 10512:10514 tried to acquire reference to desc 0, got 1 instead [ 229.352012] QAT: Invalid ioctl [ 229.368683] QAT: Invalid ioctl 01:15:37 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x1d) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@routing={0x3b, 0x10, 0x0, 0x800, 0x0, [@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x27}, @mcast1, @local, @loopback, @mcast2, @remote]}, 0x88) 01:15:37 executing program 0: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000000)='\x00', 0x1, 0xfffffffffffffffe) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f00000000c0)={0x1, 0x1, [0x1, 0x1, 0x3, 0x5, 0x7ff, 0x9, 0x20000, 0x3956]}) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r0, r0}, 0x0, 0x0, 0x0) 01:15:37 executing program 4: r0 = semget$private(0x0, 0x7, 0x8d85229b7da85df) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000000000)=0x1c0000) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7, 0x202080) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@ipv4={[], [], @initdev}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000480)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000d40)=0x14) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000dc0)=0x14, 0x800) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000f40)={@rand_addr, 0x0}, &(0x7f0000000f80)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000fc0)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f00000010c0)=0xe8) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000001280)={@dev, @empty, 0x0}, &(0x7f00000012c0)=0xc) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001700)={&(0x7f0000000080), 0xc, &(0x7f00000016c0)={&(0x7f0000001300)={0x3b0, r2, 0x62e, 0x70bd29, 0x80, {}, [{{0x8, 0x1, r3}, {0x26c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4f591ea7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r9}, {0x50, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r10}, {0x40, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0xde, 0x8, 0xffffffffffffffff, 0xfffffffffffffff9}]}}}]}}, {{0x8, 0x1, r11}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x80}}}]}}, {{0x8, 0x1, r12}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x20}}}]}}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x8000}, 0x810) r13 = socket$can_raw(0x1d, 0x3, 0x1) getpeername$packet(r1, &(0x7f0000001740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001780)=0x14) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f00000017c0)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000018c0)={r1, 0x50, &(0x7f0000001840)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001900)={r14, r1, 0x0, 0x17, &(0x7f0000001800)='*locgroupcpusetsystem[\x00', r15}, 0x30) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x12, r13, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000001940)={{0x3, 0xa64d}, {0x1, 0x6}, 0xae, 0x6, 0x4}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) fsetxattr$security_selinux(r16, &(0x7f00000019c0)='security.selinux\x00', &(0x7f0000001a00)='system_u:object_r:udev_var_run_t:s0\x00', 0x24, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/nullb0\x00', 0x80, 0x0) pipe(&(0x7f0000001a80)={0xffffffffffffffff}) recvfrom$unix(r17, &(0x7f0000001ac0)=""/43, 0x2b, 0x1, &(0x7f0000001b00)=@abs={0x0, 0x0, 0x4e23}, 0x6e) fremovexattr(r17, &(0x7f0000001b80)=@random={'btrfs.', 'team\x00'}) ioctl$BLKIOOPT(r17, 0x1279, &(0x7f0000001bc0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/rfkill\x00', 0x1, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000001c40)={0x4, 0x5, 0x64e31a39}) 01:15:37 executing program 3: unshare(0x20401) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x4040, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140), 0x4) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)=0x40000001) r2 = dup3(r0, r0, 0x80000) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000000)=0x1) fanotify_init(0x8, 0x400) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000000c0)) 01:15:37 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:37 executing program 3: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) 01:15:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0xffffffffffffffff, r2, 0x0) dup3(r0, r2, 0x0) 01:15:37 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x100, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000000c0)) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)={0x0, 0x4, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d41713aa"}, 0x0, 0x0, @fd, 0x4}) 01:15:38 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:38 executing program 3: clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0xffb, 0x10a000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgid(0xffffffffffffffff) write$binfmt_aout(r2, &(0x7f0000000100)={{0x108, 0x7, 0x58, 0x8e, 0x1a6, 0x5, 0x1cb, 0x86}, "bac8e04a33f5a4f82bd8042263f335197c7b9b331837a6917d1ec20a417d10ce1d2ef530b99e8143eec717963b033c67a069e2d61d02326e5655861dfcecdde81f259edff69611282dfe7c838f494cc7b219d271860edb4fe67e2f47da5ca6ca5c6232f0fe0ad8cb11c72d28525994309a768101ff65", [[]]}, 0x196) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) tgkill(r3, r4, 0x41) 01:15:38 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:38 executing program 0: pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) unshare(0x8000400) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x8000, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x4, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/4096, 0x1000}, 0x0) r1 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) preadv(r1, &(0x7f0000000180), 0x202, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x119481, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000040)={0x20000000000003, 0x6}) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000080)={0xffffffffffffffff, 0x1000}) syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x7, 0x800) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0xffffffffffffff0a, 0x7, 0x0, 0x3, 0xfff, 0x100, 0x98, 0x4, 0x5921f0d, 0x9, 0x1f, 0x4, 0x0, 0x8, 0x8, 0x4}}) 01:15:38 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeda, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) clone(0x0, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x1, 0x40401) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000540)=0x5, 0x4) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000001c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000640)="63c4baafc286eb3d415bbeb54188f4d313c1136ab9fa5ba9f5270ef05a946e8256726fa76178bb1d356de2583751214c1cd11730d2892fbaff9e5606d03bde02042ea3b50fb91dee26c5009569c0874882aa91d7687426ff1df215e831c25884321df2439a495c703e070ad197c030ecbd0c8de6cff45b672aae910f66a4328045bd27d82e999f4e02a5f5b84d15034262728864261eb115c4f303c7972cb85b", 0xa0}], 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="38ed15b07d068bdf7a7914a454f76f6d03de930cd31ff96bed54283b12b27875b7f9cc457ffc903b6b8865fb27de520d5f565a6bd360ca95fbde594eed"], 0x1}}, 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x48, r3, 0x700, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffff1c9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x80) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x50, r2, 0x80000000) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f00000000c0)=0x1e) 01:15:38 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 230.763208] IPVS: ftp: loaded support on port[0] = 21 [ 231.173403] chnl_net:caif_netlink_parms(): no params data found [ 231.268333] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.274925] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.283148] device bridge_slave_0 entered promiscuous mode [ 231.294495] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.300961] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.309180] device bridge_slave_1 entered promiscuous mode [ 231.343252] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 231.354378] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 231.385425] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 231.393723] team0: Port device team_slave_0 added [ 231.400003] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 231.408475] team0: Port device team_slave_1 added [ 231.417138] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 231.425617] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.676714] device hsr_slave_0 entered promiscuous mode [ 231.902353] device hsr_slave_1 entered promiscuous mode [ 232.824000] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 232.831695] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 232.906985] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 233.014756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.038822] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.066613] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 233.075264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.083071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.106949] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 233.113239] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.147597] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 233.154874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.163527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.171719] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.178162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.191236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 233.206692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 233.215565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.223546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.232077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.240060] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.246530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.255268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 233.274414] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 233.281445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.302740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 233.314080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 233.322450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.331219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.339866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.348745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.365084] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 233.377033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 233.386786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.396518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.407949] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 233.417693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.425938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.434312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.443007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.451308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.477202] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 233.489117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 233.504525] 8021q: adding VLAN 0 to HW filter on device batadv0 01:15:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0xfffffffffffffffd, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x8) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000040)) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0xffffffff}) 01:15:41 executing program 0: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$packet(r0, &(0x7f0000000380)={0x11, 0x5, r1, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="226a92c288f379746f7d52c0a5043c913687fb33953b974723d3165b360a1ee657edcb2cc182b098a00d82c885fca90a97b7aea1b772297be310d84f2dbba04c79d1d6af7382dcb2d7410f6e9f4b40ab69de1a43196ea8cf54eda6fa18b57b53ab91"], 0x62}}, 0x0) recvfrom$unix(r0, 0x0, 0x61, 0x2040, 0x0, 0xfffffffffffffee3) 01:15:41 executing program 3: clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0xffb, 0x10a000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgid(0xffffffffffffffff) write$binfmt_aout(r2, &(0x7f0000000100)={{0x108, 0x7, 0x58, 0x8e, 0x1a6, 0x5, 0x1cb, 0x86}, "bac8e04a33f5a4f82bd8042263f335197c7b9b331837a6917d1ec20a417d10ce1d2ef530b99e8143eec717963b033c67a069e2d61d02326e5655861dfcecdde81f259edff69611282dfe7c838f494cc7b219d271860edb4fe67e2f47da5ca6ca5c6232f0fe0ad8cb11c72d28525994309a768101ff65", [[]]}, 0x196) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) tgkill(r3, r4, 0x41) 01:15:41 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:41 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeda, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) clone(0x0, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x1, 0x40401) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000540)=0x5, 0x4) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000001c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000640)="63c4baafc286eb3d415bbeb54188f4d313c1136ab9fa5ba9f5270ef05a946e8256726fa76178bb1d356de2583751214c1cd11730d2892fbaff9e5606d03bde02042ea3b50fb91dee26c5009569c0874882aa91d7687426ff1df215e831c25884321df2439a495c703e070ad197c030ecbd0c8de6cff45b672aae910f66a4328045bd27d82e999f4e02a5f5b84d15034262728864261eb115c4f303c7972cb85b", 0xa0}], 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="38ed15b07d068bdf7a7914a454f76f6d03de930cd31ff96bed54283b12b27875b7f9cc457ffc903b6b8865fb27de520d5f565a6bd360ca95fbde594eed"], 0x1}}, 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x48, r3, 0x700, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffff1c9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x80) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x50, r2, 0x80000000) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f00000000c0)=0x1e) 01:15:42 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0), 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:42 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x2}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) 01:15:42 executing program 3: clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0xffb, 0x10a000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgid(0xffffffffffffffff) write$binfmt_aout(r2, &(0x7f0000000100)={{0x108, 0x7, 0x58, 0x8e, 0x1a6, 0x5, 0x1cb, 0x86}, "bac8e04a33f5a4f82bd8042263f335197c7b9b331837a6917d1ec20a417d10ce1d2ef530b99e8143eec717963b033c67a069e2d61d02326e5655861dfcecdde81f259edff69611282dfe7c838f494cc7b219d271860edb4fe67e2f47da5ca6ca5c6232f0fe0ad8cb11c72d28525994309a768101ff65", [[]]}, 0x196) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) tgkill(r3, r4, 0x41) 01:15:42 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000001e6, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2d000000370200030600000000000000fc90000000000000", @ANYRES32=r0, @ANYBLOB="0f006d696d655f74797065707070302b5b"], 0x2d) 01:15:42 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:42 executing program 4: unshare(0x10000000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000500)=""/97, &(0x7f0000000300)=""/127, 0x1}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4040, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2f, 'io'}, {0x0, 'memory'}, {0x2d, 'rdma'}, {0x2d, 'memory'}, {0x0, 'memory'}, {0x2f, 'cpu'}]}, 0x27) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) 01:15:42 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='/\xcd2\x02\x00d\x00T\x92\x1e\x81x\x18\xd0,', 0x2761, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='\xd1s\xb4\xba\xb9\x1b\xd2\x85\xa7ld(\xcc\x82\x99\x84\xa9\xc6\x8ba\xf0\xda\xaa!q\xaa\xd8x;!o\x9f1\xf7\xb1', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0x7250c0c91f34015f) sendfile(r1, r3, 0x0, 0x20000000006) 01:15:42 executing program 3: clone(0x0, &(0x7f0000000100), 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0xffb, 0x10a000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgid(0xffffffffffffffff) write$binfmt_aout(r2, &(0x7f0000000100)={{0x108, 0x7, 0x58, 0x8e, 0x1a6, 0x5, 0x1cb, 0x86}, "bac8e04a33f5a4f82bd8042263f335197c7b9b331837a6917d1ec20a417d10ce1d2ef530b99e8143eec717963b033c67a069e2d61d02326e5655861dfcecdde81f259edff69611282dfe7c838f494cc7b219d271860edb4fe67e2f47da5ca6ca5c6232f0fe0ad8cb11c72d28525994309a768101ff65", [[]]}, 0x196) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) tgkill(r3, r4, 0x41) 01:15:42 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:42 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3ff, 0x44000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x5}]}]}, 0x20}}, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)) 01:15:42 executing program 0: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="5039f5ab0e5eacb271f8c79fe8c56910", 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x4e0000000, 0x8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x4000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x402, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xc3}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800) pwrite64(r0, &(0x7f0000000100)="01b6c5ce393da3e17285ce749e81cb0a1ecfb3c926fa1f909f9434b6a8db8b99e21dba479d2992fb100f457ad60bd03d11563fe813bf0e371c4ff5e3f092672ab06cd415f985694fd3806339ed468329a024f936356476f4eec6930128bd2a3d8bcd631ef1c02014d4e5404c69cd0c41594799b6ce9558e0f10650df507af196814df1eacf", 0x85, 0xb) [ 234.984312] netlink: 'syz-executor4': attribute type 2 has an invalid length. [ 235.042338] netlink: 'syz-executor4': attribute type 2 has an invalid length. 01:15:43 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeda, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) clone(0x0, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x1, 0x40401) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000540)=0x5, 0x4) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000001c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000640)="63c4baafc286eb3d415bbeb54188f4d313c1136ab9fa5ba9f5270ef05a946e8256726fa76178bb1d356de2583751214c1cd11730d2892fbaff9e5606d03bde02042ea3b50fb91dee26c5009569c0874882aa91d7687426ff1df215e831c25884321df2439a495c703e070ad197c030ecbd0c8de6cff45b672aae910f66a4328045bd27d82e999f4e02a5f5b84d15034262728864261eb115c4f303c7972cb85b", 0xa0}], 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="38ed15b07d068bdf7a7914a454f76f6d03de930cd31ff96bed54283b12b27875b7f9cc457ffc903b6b8865fb27de520d5f565a6bd360ca95fbde594eed"], 0x1}}, 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x48, r3, 0x700, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffff1c9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x80) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x50, r2, 0x80000000) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f00000000c0)=0x1e) 01:15:43 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x4ec, 0x80000) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f00000000c0)=0x8) r2 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x8000802) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0x102}) 01:15:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000040)='./file0\x00') sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKMODE={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x9, 0x200400) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000140)=[0x8, 0x8, 0x2, 0x2, 0x1ff, 0x6, 0x2, 0x7, 0x3], 0x9, 0x6, 0x5, 0x1, 0x2000000, 0x3, {0xffe3, 0x9, 0x8, 0x8, 0x81, 0x20, 0x1, 0x7f, 0xfff, 0x200, 0x2, 0x3d, 0x887c, 0x7, "c65b901582beea2e26acff6469d6cc8d1effe4af2980f01c728226610f18695a"}}) 01:15:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000200)={0x40, 0x0, 0x3}, 0x10) r2 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x100000001, 0x10140) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x100) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/rt6_stats\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000004) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f0000000080)={{0x8, 0x7fffffff}, 'port0\x00', 0x30, 0x120000, 0x0, 0xffff, 0x9a, 0xffff, 0x401, 0x0, 0x5, 0x5}) getsockopt$inet_dccp_int(r4, 0x21, 0x1f, &(0x7f0000000000), &(0x7f0000000140)=0x1fd) [ 235.686133] team0: Device ip6gretap0 is up. Set it down before adding it as a team port 01:15:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r1, 0x206, &(0x7f00000001c0)={&(0x7f00000000c0)=""/249, 0xf9}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x1, 0x9}) getdents64(r0, &(0x7f00000006c0)=""/61, 0xfcef) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000200)={0x3, 0x100, 0x7, {0x3, 0x1, 0x7f, 0x7ff}}) 01:15:43 executing program 0: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/current\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000002c0)) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100, 0x202200) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x80000001, 0x2, 0x8, 0xefc4, 0x3ff, 0x0, 0x3, 0x7, 0x0}, &(0x7f00000000c0)=0x20) r3 = memfd_create(&(0x7f0000000180)='/\x00\x00\x00\x00\x00\x06\x14\xe7sdq\x00\xb4\x8f\xa8\xef\xe1\x1e,\x0e\xbd\xf3@4\xbeJI\np\x92oqAX\x10K\x99\xc4\x9dZ?\xc4\x0f\xebO\xc6\x02\xdb\xdc:4\xddL\xce\x9ai\x04\a\x81f\xe7\x1fh\x11f\x10/\x17U\xfe\xf7\xa2\x87\x98\xabK7\xba+\r]\xd6k!\xc93\xb2g\xb0\xc2.e\xb6T\x06\xe0u\x00^iJ.\xfc\xe3)u\xb5\x13\x9a\x05\x81E\xd0_\xc4\xcaY\x8a\x18\xd5\xa0\x1e|\x18\x01\xff\xf1\x88j\x98\xf4\xacs\xec\x12[\xde\x8b\x1bS\xd2\x81\x80N\xee\xda\xfe\x82\x01.\x81\x19\x12\xc8`\xf2y~f\x166eR\x1f(e\x8a\xd5v\b3t]\xb42\xe3\x1a\x1a\x90\x02\xe6\xcc\xfceB\x0f\xc0\xed\xdf\x16\x00\xe8\f\xc9,n\xfd\x9f\x1a\xd6\xf5\xb4\xa4\x80{\xeej\x9b\x04\xd8\xb25\xe5;Y', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000300)={0x2, 0x3, 0x9, 0x0, 0x7, 0x4, 0xfffffffffffff12a, 0x800, 0x69a0ff53, 0xabb, 0xd62, 0x5, 0x0, 0x7, 0x6, 0x12fc80da40, 0x7, 0x8, 0x6}) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r5, 0xc058534b, &(0x7f00000003c0)={0x100}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x7ff}, &(0x7f0000000140)=0x8) r6 = socket(0x11, 0x84, 0x0) r7 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r6, &(0x7f0000000a40), 0x400000000000224, 0x101d0) 01:15:44 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000040)) r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x40000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{}]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000480)={&(0x7f0000000440), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "44324fbf4c0daa7188210f367bf722dcdea9ea7cc4098380f63486a003b10c91"}}) 01:15:44 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}], 0x1}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:44 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x80000) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYPTR64], 0x8) 01:15:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) ptrace$getregset(0x4204, r1, 0x206, &(0x7f00000001c0)={&(0x7f00000000c0)=""/249, 0xf9}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000000)={0x0, 0x1, 0x9}) getdents64(r0, &(0x7f00000006c0)=""/61, 0xfcef) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000200)={0x3, 0x100, 0x7, {0x3, 0x1, 0x7f, 0x7ff}}) 01:15:44 executing program 0: unshare(0x20040600) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x400000000014, &(0x7f0000000000)=0xfffffffffffffffd, 0xfffffffffffffeac) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'vcan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000040)=@llc={0x1a, 0x1b, 0x4, 0x89, 0x1000, 0xa87}, 0x80, &(0x7f0000001580)=[{&(0x7f00000000c0)="64cb343230841a9d182557f0f452d0a717427465640c104a62b15658d3cf67e0db71b686fd5a78b92ffeccb3e5da41310124155263514ec0f27c45918fbd6b19fcca2b60d659de6ef83c4c91bb103316ade8f6581dda1630d83f8ca79e1028ed9672bc728ce23f3b576b9917c4fb2bdeb6677de22db84b25f2e1c8a5232236722f466ecb138d4feae88c4de74b856b7060f70cbda374f24b534bb75a", 0x9c}, {&(0x7f0000000180)="f9dc2be0d8882158498fae53c3a2bad0561da612bdf9e065850a98c096494763a867d83092617bb4f30a1ddc878180ed8237814c47c0012ad70fc1b22333dca07d5ff269c2414470413852323b8cb05324add3b66742c63700dd1a94d1a868afe12f032cd158bb517b8aa0b2dccdf68957278df3627c72a7d24bb5113999c6bebeab927c1d05509673fa1d2d62166bedfcb67412b39ea393d19ac87da0ea4083d590dc5f965c38cd5520ca2dfe74316a72064f5efc94cb65192e8e2c68543909f2b4e61533bfd355d121dedf65462cec7e50cb563f824122dfa57dce4200b890b4a5f6a7ba5d0c697070201ab6b516827169fa8991", 0xf5}, {&(0x7f0000000280)="eaeeaf56a1c7bccd2933df87b199ef8777acf04dac7b684bd66d34b091d50706d132841fa22b2240f7fdd94679b3ce70441c3e3114be00487ad0ae1944b0e35095c797f8d0fbff9c928ef94c32831f56f66553a058ec828642cbcc9c3bd6598789d12d57849f84af846170091632ac72423c8abd315c129d060ddaff21995a2924cac85483f85a65c42781c12125ff2ad061ce396831ffee6acc4eab450ab6bca17d0e3face81c474b736722101faf3ed8d52260f993569321647924b36468d53528768c023ee5cdce3e3b828f81af697e3e857f21bb24e02034284b7a3fcf1db7837836b234ad0dc8f00651549afbfb51dd7130b41d42e992d8bb490b0baccd5bedb6b1a97320307e3b945b60ebebc18a273b4012b2fad37a112937a58baf1f5fb63897ebbca456e1482aa73d7414425d3ccc9be49d5700f65f7bbc7332fff36226e4e35537f57378c03e7a2dd200cd3822147e43566770fd8a9ab6f0a6766aa9421cae356ae27c626eaba5245d2fa2163725f1fa3f6fdbcd2a732e03f798317ddbfc200679bfbb05de3d6c609d4e4e3441a750d604e5dd9c4573c881234fd7399213f26d44d17d4d5d3611ed8a7af8f4f3b049cc5d3b41f41e29cf65d656af1bf36af309624237c324904a7d6fb5e460d5da5359f8c73cf45b319efe022981b4344fbe18e779e38cb2b14650cad54218d5b1db4d1e22aac33d03baeff72dcc951a5b121bf4a1177a6e3751a544d901ed251ab425dadd9336ce9a91ef2c5104f01953a4944cbbed8761275cf678e181413e969ede18a923a6ac9e692a7e97f4e7da0b0f9b9c2e0ba6ed0635197f9b6f6383419b986bb966dc734ad0868064ebbce779b646002391a3dd124b4fdf2eed16998fc92a9db5b8e9961e3d7b2b6300d59b56c71d1c8067d8a770ede2d167dc4ebb0d11df07c13a8bb3f8811d44ede416cb3a784cd5a0786b9591a64ca179453d8d336cdef0ca13481af972e8461103c9224a34e9500cbfa265283f01114999eca5b09c501cff49449d24b2e4d899daaf282a5d4bb35d8c63751d52c3fe2cfae3836eb7ef18d6e4b0da5df650078676c027155dc46a656d1d2a5f13d99f3506a2b77b55a57188c27bf393ebb50e1a0e2964b11cf30aa8abd172502a129f95d0427599755fb82ddb22b0ada19bc6969905ba7449d28b257214adfef203257ae9d2590ac02dde86c0e461361241c54df65c1934eb0eb99c38a271ceaabb7241ef12f8288c6841d39ea3cc15b7d7ffff8da44f317b86cff49701133e5bb28f6ec13da2363a64741d77c65363e41fe1c4ca03339f6248d47a3afbc92e25531d1226062b497eceb3459e02054b824dc20c2287593c68d6c16c2c82f4bf1dd017e9283aef144473592bdaea16932b379943c674e9c6b61510d70427820a844f3226cd1c567801613190fad2d73e9f7513d5668cf675dbfcc1952341e6eb4a81cbff7b697071e1baffab5a8c47f9c4ea304f51f90dab84b7e8a94be70c3d105a6af27ae403b70b15bb479c0703114f2c3c2049049234b15dd99bb98ed3f7fe6c7008af6eb795c167f436e8af1767eeea31f20f032e6c25b4cef5002f1cb2dc571ac63b1c77ce5ac6eb4dd2063d02bed70c763109669cbcd8242e5bffca290c2fb88140cb3bed0f932ff39a44a07d68d94984569b49b2d2d79280c364cd897d63ba51274d44ce37ce023b57ad4599b4a5b809cf0d80e18f7ff245e97c14519a617cb023bc172366068c7956c3a0323a493318bec491b63261f3c004825b0375fc9e76928281fba5bed74a62b8200427c93d163c9856cfc5d602a9fc8f647e8a40ee5912f3c06353cbc6d4de3e3a59d39093cfc99eb4a55a31c7bf4ebfb487fbd634c93bf7a9aafba0b731ede90bbe22e8f344a1a30f6103bf7347aa122555d44d593603cd734a24ca33bd4b93ebca4706f3e7c9d68315592bcc6253130e2b418d203795c77e8311973d9170f4c20768ea7229f0a0ce93c2656e971f455767155d6cdcb9a7a2dcfc750500500bac6cc4d2c65187fb4084c09bb9a208474293818e543256b0a609dfb05e5364259be0cb42b1b1ae41822fdcf16a3addc97bf05426e7a71bc7360c4ad05290e8b591cc289a600a5572ee93a936fa237b6a01fbe4cab8f55561facc1aa77f6a8758e53f2257c0687ac521e4437a3911452be6455845db631d67e1d59d791ca1ac01dae6cc4d4d11e16c30283a1538f257d3fd5829eb79bb0ab8b2f918b35da2a96453dfbe951afb3d25bd60bf0b78bc5970f3900e540fc160f81c10c234506d1a8250c4cae723bfc3fa424e46e55f57ff327f364b13066e50394765cf59d727ee9b0cd31672dc7130a372033bfa4088787d32d262d3dcec0df357daa97dac0a9f2256a794517db6e14bdc5439d510bf8e2302aad835db75c03e9102ebb5d1a1511faf317db2806335841ccbbeaea55f8281d87737e609ecce2510dcf5c83f3d411acc39c7619d19b18264f2e56fffad90b3de9dfbe11ba1d69060fe27d92995681be769d52d4e0f909f14cda4ad2743cf54e162a3dda9e8b5be9459b345b591be8ac59beb104eaa719e49715490be051dc153754748fe70cef98f972fc68e8eb6f70538a25d03387f9b6fe45b0c7461240468c9dc5c0bac7dbf20631f9656da7479741a594b6b4b59b7c7e1e7c5de4cfc7e00db05b94135b3835e961a0cba3e95398b53c7dee2cf0d05dfa297971825e6a22208aa4a3b1868da4d6ea3f32c2e71843c54bb56177e8f1c545b991cc5571dc4772bf4ed8881835495001e6c935c537aee4ab1cb1ca44c4453eb2db81725b5604bf0bf9de9162bb4082e63fb3f165344884061a90ff98c9db9d242645f5e839982e296343e56c1535e6067eb6f4fb93c1fa36fc232a29c16142199e07b31ddaaae68f7295fa5bf37a8f47e02018c686a34aca5548f572a38ee704b1d80935a3a7b1ac2d2b86a72a7ab9342a720a7bbae8d7b0fa85253e3bc8c39cd2aea0af9b7f3ea035a52599a7a688a8bda77fbb90a448b209cc585729fa364de58a89b065bbfcc6035ae89b33b8c655a03668a4ed664cc2852cb22a1e3ac98ab53ff11119392b53f419aec88c0fef856f43ac28a3a82e09dc446793e263a0d7a1caf859e65144aa9ca177877ac2c1790e989dfd96d88421317ad4b7bc6a3dce67ec4928ed2b1395db73a6cde94a9234405df06c0c23361629b0f19ba9db74428a383b8938617eb133e961dede4776250ee6ffe80da40173314eb20a29da7973678aafe73bbe7f8d84a37f2e12d1800d66b82cc518cdc2c1b788d952adb0266a22361830d40e16c93ae415d7d3b14e4388a5bc1ae2673437c5feb69edd69990024154b05a9a4b885c2b4a28e343bbb412f6bf5225e021c917526ae3f8af480c38b31d46509b6ce769ca857b4406f856a994e96626cbf6aaddafe01f27fdace0f51809834ba14cac1427c2991b317adb5f3ae2b60917cc341242791a88f7a45a04cb555ec7f3035e3ca971c3385e895aa4d0f623ff12806e96151670303f8d14dc6e35865dd9498efc544d60ced95cbee9a1bd59cc1a2678173f864872bd3640ba5d2ac6a9e2cadeac9eb477f4070c5b3754d2f53cd0dad2412bbd2639423f107f16468cc3f8053405bb956f75389ec604cad4fd79610598c4f4ef8337341846b9ee90382c9c7d9bc9048fb84933096661e23ab5c896814316a2a8cefa360e564898e8df5a31090a78bab6acbd4b37017c72910ded7a3dbb4b8fcee73ff86455958d289cfdd44918f377f7291aa1a3c60f394086b18448113bf822afb3337643742a2743a0a2e6b87c961a52c6d390ef8716c0c531d81c5b54677aa556a86a48054944db6dfc01cf8f659c1495f08130347cc60f680b7e24fb012fe363dcc268b24c6cfd7fbfdfe0a3449ec9abbca5e71842f9835dc1a672e0c877ef447a720712e9b3ceed5ed065b9b22c0f0871b58d34f520b5012cc268a3f218f29e2f148677e7da705b511a849c58a434d2665acff909f51ffa4c3b184cb206113519148545c85c63d02a9b624fff61cd17e0575d4b99f451fa60fee037d81e49560077320ae59ace3bdf819581adbf96b271995e45b79769b99b483c1e63db584a65e36d79277105c9d57215068282af1557f93bc0185a7929d9006491810d22051d0745e971bd4dc693f1dbc07d559febc717afcdd0ebd66a14e562186800072860649330dcc71a5f7d6179869f8f5ee9125c7d3fc59b6abc8ec61921f94894c3ddfdbae452c316aad5f2e8ef807c73e95b326cfc9bb392c97569bd908364c6c6589d9b0021c54424a96dbb99a2629220bf56d141f49fbce6b992e2a833ccb407adcbba588a53e7a8048aff1114b651502889b9576e0bda83dbc0b099b3c9d4745f7a363e2e8f53f943da386d9a13d5eb92d7fd260222287ef7a3b3a2d647d38a4e2112bb76609e34c53faa7feb501250635baf86dcdbd79e16b2c3c03ed3f9d8f28118748b435a62bed04df8b4d35090e82be8374e25ea67ce6e360af506b9e32e9eb22951508716a675c968203a56550e836927242686e448d6077e684b50d6f91e6047b6af4607731f5d1dce14bd536061e006c2eab4949c39ac085586ce564d67f10a6761993e05a7b9911922623666a30cf324d8749bf2e72ee011302fa7609fa79623df5434af2ee653aad62b99574725b1c0e6f71d4105c2221348b93b8b085b1a86cf0cb9e8892147444761a489dd00361f99bcf32729860140f8192d13903b05c36b8a9962bc64f5387c75911947937937b2ec15a0b5ba00e489584f5d99eae7d9d10f874e5d5c65cee64f453fdb5607db2b61caf62de29d97deef4165ead396614c3628b99a4f1c6573a66032c27b216aab3ea69dd71c00ffc60969a56d70b194b1f6150231bd356bc21e9a3b8cea4b1ea24ae71587aca287699057cd408d4fc2f2626666dd58b43dfefec170576418de1f68e14fb03ec1f8265e2236cedb0877c7b38a07b2402f8a049c264f88280965e18b723e6a383a9e3c27803eac8d7db1729f078dcda8ab36b11bf7be106d7782f94a681a11464e53b1ff8bfeeb780279db45757fba8c61b27131cb97084720b6f08b9b7f02ab1b90d90b3ea243c252f9364492e50f18077eb4e275607f8cd6b85635ff031f4ce859fe43ce2fb448b43f7cd696825b4e5d6277a918a52fdbde8695b7c9193105903183edfc10f934e15bc3d36655f63ef653e82f17ca1e4141a13bcf12e96a3402e539e705db6901a9b0bda48181d544b713d5b29b41a29372d3bd30edb8b5d4947d3f4d6dbb4e4760abbdd60f26bf0698f399baf4b37cc7692b99917818299e968837d7f14388ccef5c398127b29da9f29548b7474e1f05292d612f82f83ebc353644e8cac502b2795aecf831e708d35974f5913603a7d4b1a43756e7de944c10f7868714161f582326c801be87782f156311055feddef23bed2e70e2ae2bc3e1e881c87f328913af824f2e91433893c43df30f72e1af36e62b6ed1367914ef2a38ae5b42150715b0b60c8ae42de973f7be84989b155566099b3799179b457e62a51bb23520014962ae934ea0523b7849d8932877da1030537a18b6fa90dcf87eef6d1542a7052405ac2bd532ce4d5f6c7f5bcb014d6ee3385b9dd344363bd528406b2410352b896d43e3447e4a141aa37bcc848c491255228c0d87cd3d095d9d76e3da20de861328b661c24a136746030a2e980ab4beaa379a9adf1ffecf9da9b99eb25cb4bfd09adb247631b3b67427f855de2356af4ed11ca5d30db894ab5ac2054d5e", 0x1000}, {&(0x7f0000001280)="96a4069dbcc43649890ff548f76c7a3737438faa516ec53a273cc2343b2dc9e76903a0b87794ee5b4de584a818085a9378900dc26dfb7c72320165734d1e6e2de758ca765e0421c025db54a51a53827e97a90075a5f67437c6a9bd1097878e57e0e5e1ac19d227a730d3d7e6493e672200523a2fcea2fd560923e3d2caba9c632a89beaa9b09a8e37632d1e275c234dcdc5be22bd8521b35b96bc329fab6952322b5323456a08599389fea83ca3f110a1003fbac5daf50a54c2668c995867df3b1e56073ddc47bffb085a5faa43f20c7b5648674abb447692b3cf1347473b5685bf53f1b60f54286b07e6c3af3ff4832a4570c122fe788", 0xf7}, {&(0x7f0000001380)="46c29a719e10fa8ef3b5facdbf2c9ff37df900db3efb2230357fb5e662cdd1c1e7e78b80396a9370c5b65cee18b8cf70f309825a33f215cb3223b0b650249292ce4f6d1abad4ed64893faa75cfd5e727929b77f5f220d11fafb154f35032b7ac6269bb39aba6a5", 0x67}, {&(0x7f0000001400)="fd1d25899bd8ae1dfe757aca440e55c35b4595088fb29c5619d35116a55081cb720635c293fc3255b379f1838e985bf524b0f9d21b248e14f77dd8e492e9e6c759c1c512f43e045e3f4f1c9fbe5a4f4acf9b1ee73f53511fa3cc8973b8a3529bff9928997de04ee0a3a5b7d06ec99b5a03b9bcfaee1e9be8a2aa632574e139b843f814b3e88708f281e257eec4f8c884529ccb6bc61ca37c6f1f89b675879c8a5c44022bc5bdebd30bacc7c09c0716c0f2032a5ca382cd9dd787ef67b184", 0xbe}, {&(0x7f00000014c0)="1d2c65d7005af19b4a2a70052e50e4b42c8cc2726e2250be422bcece394263d7662a781de770f2a51c698cf0933897f83e212998ec75f11308ed89c4d8bc6c768b3dda42adf45ad53671e2e9350bfc2dc3574dc65d0cea4ac75de4cde5c6cd5849a0e3ee145ab45e7466caa7b213eec7ee7968c3f96f807422a6d9dc580eb9fa46701fae6fcaa8677afc708e935e8bbecdf98c", 0x93}], 0x7, &(0x7f0000001f40)=ANY=[@ANYBLOB="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"], 0x238}, 0x6}, {{&(0x7f0000001880)=@ll={0x11, 0x5, r1, 0x1, 0xdd, 0x6, @dev={[], 0x26}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001900)="ef886f1cdf587d2d2821633b738af349ac88f2dc33cd5d2cd45abef1bdf9c33b65db5b5df3fc92798b90f72e4f29cebad40f2b4a30839404c7e1b9a96a2ff2b33bb87abc2b487495b2fa8ddcf7a2809e1b9218fb9ac316ad1c90ad65cdb736e46eab4cec7483a86c29f95316995f72765b8bbc9f559f9bdca65f4d904058a5abc7e72329a83b6af557c15c91b54c6186ed8c48b0c617d7e2f943c480817e8a", 0x9f}, {&(0x7f00000019c0)="536d9646b349cd3ef5592c453f7263f665af3e8fc801efc5f1134d129cc01c309a2ca26746dc73327b15faf472a902a9274a5a46f9c2e5694046be5d5748b9c2451fc69b28eed758009898cde0f465da492a6519810cab4b23dae5102aa8fa39aa9a1cf8006bd81285e691cbb15f2bfaeb1c675980493e01a8444e942c", 0x7d}, {&(0x7f0000001a40)="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", 0xfe}, {&(0x7f0000001b40)="da078d145509aab06497449e03a1b77e039df1a95333eabdba3d96bbb6a1bc85e857a6e1b7efdcc4ac3c573a0496371988f29972836063a9d0859ccdb6f4d87a31ba99d829eeb4c367a653fb6832f7152bb82a38b97c8e183ef9eebfe2e6320d9b03c1ac848fc0288db72a4816bfadb3f0d397a0ceac365ef4a393", 0x7b}, {&(0x7f0000001bc0)="68dc9118e0a6e05f0065d81c52712c78a4d962a11001a3473a1bc62d74a664b3609f8d24ba65e907813ff18ba4608b21f167f4bb98a6ac011ab6bc01e4fea4f015eb130d26accc4c24b8a6c5333a96929e2d5bcea17b704b7d811c89d624ed083eb9f9204a1857fdc33aa9174757b9834c78f8b7a0889562e36da31ab04b6642aaefc60e66b9c97feb35b569bb2cd5ab3c6cd521004ffabf49f06ec2ef8c57c6", 0xa0}, {&(0x7f0000001c80)="9fc5df81ab348356881e8b2090ebe6eb02d8b38d0313b7aabc6700353e40d13681f2054b95e6493a9c37fbf8b1e0f4e28a3be2172b96f911fbd3177e661793d5b71aedce", 0x44}, {&(0x7f0000001d00)}, {&(0x7f0000001d40)="bdd5ab233b1d8ed3557d7d742706fe75d34aa9140071e0d95a944cf48395226affb600f2caf73c1aacf768531dc58bd8fc76657090a56d8733d2cac83b464aa97f7d135b66cfc01db92ee3450f9a7fcc53e2f4e1426a91c16323618b8e585668cdebc356e556243a8b1e552e9d8a79d619c7745a7c27af5558082544f3bede7fde38a022dfcbf2e057467f55ef6c9347dd8c81226874c2be4256bbdf8cadf6f7b93d28ad7caa7d83f180f07064076913c1815240f3366f980807fa59543cadc57b77a328c06e132984ad6229068c3bdeaa73ea4a13be72a775a5e8581bcb35", 0xdf}], 0x8}, 0x1000}], 0x2, 0x8040) 01:15:45 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeda, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) clone(0x0, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) r2 = syz_open_dev$vcsn(&(0x7f0000000380)='/dev/vcs#\x00', 0x1, 0x40401) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000540)=0x5, 0x4) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f00000001c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000640)="63c4baafc286eb3d415bbeb54188f4d313c1136ab9fa5ba9f5270ef05a946e8256726fa76178bb1d356de2583751214c1cd11730d2892fbaff9e5606d03bde02042ea3b50fb91dee26c5009569c0874882aa91d7687426ff1df215e831c25884321df2439a495c703e070ad197c030ecbd0c8de6cff45b672aae910f66a4328045bd27d82e999f4e02a5f5b84d15034262728864261eb115c4f303c7972cb85b", 0xa0}], 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="38ed15b07d068bdf7a7914a454f76f6d03de930cd31ff96bed54283b12b27875b7f9cc457ffc903b6b8865fb27de520d5f565a6bd360ca95fbde594eed"], 0x1}}, 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x48, r3, 0x700, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffff1c9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x80) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x50, r2, 0x80000000) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f00000000c0)=0x1e) 01:15:45 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}], 0x1}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 01:15:45 executing program 4: r0 = socket$inet6(0xa, 0x80003, 0x8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x60480400}, 0xfffffffffffffd32) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x8464}}, 0xe8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x80000001, 0xfffffffffffffffd, 0x10001, 0x3, 0x92fa, 0x9, 0x4, {0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x9, 0x3, 0x4, 0x3, 0x4}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYBLOB="9b4beca1329d9dda3292fc025a8bf9940b37288f36de0c2c69bf8d6d0a129f8fb9519b17cb6d97a62957be2752d7b29fe6c6358e457e474b99d2211d4bbd34352865eb109868665deab965851d302ece684fc55c137eb2a4a4083ccb44e5546ef52d28ad974099785a64b7681816091bd250ee43b5847cbc0440c20013bf50639f83110749441faf0fe8950c31cb15feb7c05fc80000"], &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={r3, 0x3}, 0xc) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4}, 0x1c) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) 01:15:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) r3 = getpgrp(0x0) rt_tgsigqueueinfo(r2, r3, 0x25, &(0x7f0000000140)={0x14, 0x3, 0xb7}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80000, 0x0) r5 = gettid() write$cgroup_pid(r4, &(0x7f0000000040)=r5, 0x12) 01:15:45 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x40801, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="66af20f76a906da148ef0cd2c7c5c7e3", 0x10) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000440)=""/4096, &(0x7f0000000100)=0x1000) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000400)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XT\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf\x1f\x02\x00\xf5\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZ') sendfile(r0, r1, &(0x7f0000000180)=0x100000, 0x8402) close(r0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000040)='TRUE', 0x4, 0x1) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000001440)=""/4096) 01:15:45 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x2, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x40, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) 01:15:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x28}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000280)={{0xffffffff, 0x7ff}, 'port1\x00', 0x20, 0x8, 0xfff, 0xffffffffd9db8dc7, 0xa, 0x0, 0x100000001, 0x0, 0x5, 0x3}) sendmsg$key(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120000000000000000000000000006000000000000000000000000000000e000000100000000000000000000000000000000000000000000000000000000030006000000000002000000ac14ffbb0000000000000000030005000000000002000000ac14ffbb0000000000000000bd749dd3bd4d9a14f1df3789eb3e863de6eb1ebd1613d13c99118c279119b2ef5cc6dd04dc55a29ceb5b0a601f972418e3c2833d3c819291d9606803fcf329a56b83c3687f8755cab201f7ee000f70213f86aca4d759c54764d6c6e0c054a8e56f8bcdd000caf2f65fe05fff3869e5c45c48a66c41338f01546b1eae9ca74c182ff32e98783a545df10a52a5952914c1107200d760096564b120184f27d70589a251f9b71603f22d35be956a3791a77949"], 0x80}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10, 0xa919f9c2be, 0x600000000000000}, 0xfffffc66, &(0x7f00005a6ff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010003000013070000000000000000000000000000000000000000000000000000000000000000000054207f9cc200000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000000006c000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001000000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x138}}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000340)={0x7ff, 0xd5b17e775d4ee44e, 0x1000, 0x7fffffff, 0x0, 0x5, 0x6fb, 0x200, 0x5, 0xfffffffffffffff7}, 0x10) 01:15:45 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000740)=""/29, 0x1d}], 0x1}}], 0x1, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f00000007c0)=""/129, 0x81}, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f0000000a40)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x1c}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5, 0x0, 0x87, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 237.738431] ================================================================== [ 237.745866] BUG: KMSAN: uninit-value in __vunmap+0x141/0x910 [ 237.751667] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.0.0-rc1+ #7 [ 237.758240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.767605] Workqueue: events free_work [ 237.771576] Call Trace: [ 237.774178] dump_stack+0x173/0x1d0 [ 237.777816] kmsan_report+0x12e/0x2a0 [ 237.781628] __msan_warning+0x82/0xf0 [ 237.785436] __vunmap+0x141/0x910 [ 237.788901] free_work+0xbb/0x130 [ 237.792354] ? alloc_vmap_area+0x15f0/0x15f0 [ 237.796775] process_one_work+0x1607/0x1f80 [ 237.801120] worker_thread+0x111c/0x2460 [ 237.805212] kthread+0x4a1/0x4e0 [ 237.808584] ? process_one_work+0x1f80/0x1f80 [ 237.813089] ? schedule_tail+0x1b2/0x410 [ 237.817162] ? kthread_blkcg+0xf0/0xf0 [ 237.821062] ret_from_fork+0x35/0x40 [ 237.824783] [ 237.826403] Uninit was created at: [ 237.829958] kmsan_internal_poison_shadow+0x92/0x150 [ 237.835071] kmsan_kmalloc+0xa6/0x130 [ 237.838878] kmem_cache_alloc_node_trace+0xb59/0xc70 [ 237.843991] alloc_vmap_area+0x210/0x15f0 [ 237.848140] __get_vm_area_node+0x3e6/0x7f0 [ 237.852458] __vmalloc_node_range+0x315/0x13a0 [ 237.857055] vzalloc+0xd8/0xf0 [ 237.860252] alloc_counters+0x99/0x8d0 [ 237.864150] do_ip6t_get_ctl+0x7da/0x1030 [ 237.868303] nf_getsockopt+0x481/0x4e0 [ 237.872193] ipv6_getsockopt+0x279/0x510 [ 237.876274] tcp_getsockopt+0x1c6/0x1f0 [ 237.880250] sock_common_getsockopt+0x13f/0x180 [ 237.884917] __sys_getsockopt+0x489/0x550 [ 237.889074] __se_sys_getsockopt+0xe1/0x100 [ 237.893397] __x64_sys_getsockopt+0x62/0x80 [ 237.897718] do_syscall_64+0xbc/0xf0 [ 237.901439] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 237.906625] ================================================================== [ 237.913983] Disabling lock debugging due to kernel taint [ 237.919429] Kernel panic - not syncing: panic_on_warn set ... [ 237.925319] CPU: 0 PID: 5 Comm: kworker/0:0 Tainted: G B 5.0.0-rc1+ #7 [ 237.933284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.942642] Workqueue: events free_work [ 237.946614] Call Trace: [ 237.949210] dump_stack+0x173/0x1d0 [ 237.952848] panic+0x3d1/0xb01 [ 237.956077] kmsan_report+0x293/0x2a0 [ 237.959886] __msan_warning+0x82/0xf0 [ 237.963693] __vunmap+0x141/0x910 [ 237.967159] free_work+0xbb/0x130 [ 237.970618] ? alloc_vmap_area+0x15f0/0x15f0 [ 237.975044] process_one_work+0x1607/0x1f80 [ 237.979403] worker_thread+0x111c/0x2460 [ 237.983507] kthread+0x4a1/0x4e0 [ 237.986878] ? process_one_work+0x1f80/0x1f80 [ 237.991374] ? schedule_tail+0x1b2/0x410 [ 237.995465] ? kthread_blkcg+0xf0/0xf0 [ 237.999361] ret_from_fork+0x35/0x40 [ 238.004234] Kernel Offset: disabled [ 238.007859] Rebooting in 86400 seconds..