[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 99.108242] audit: type=1800 audit(1551674929.156:25): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 99.127459] audit: type=1800 audit(1551674929.166:26): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 99.146933] audit: type=1800 audit(1551674929.176:27): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.45' (ECDSA) to the list of known hosts. 2019/03/04 04:49:04 fuzzer started 2019/03/04 04:49:10 dialing manager at 10.128.0.26:33709 2019/03/04 04:49:10 syscalls: 1 2019/03/04 04:49:10 code coverage: enabled 2019/03/04 04:49:10 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/04 04:49:10 extra coverage: extra coverage is not supported by the kernel 2019/03/04 04:49:10 setuid sandbox: enabled 2019/03/04 04:49:10 namespace sandbox: enabled 2019/03/04 04:49:10 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/04 04:49:10 fault injection: enabled 2019/03/04 04:49:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/04 04:49:10 net packet injection: enabled 2019/03/04 04:49:10 net device setup: enabled 04:52:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x70000}) syzkaller login: [ 305.387040] IPVS: ftp: loaded support on port[0] = 21 [ 305.555975] chnl_net:caif_netlink_parms(): no params data found [ 305.647420] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.654183] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.662751] device bridge_slave_0 entered promiscuous mode [ 305.673019] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.679569] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.688050] device bridge_slave_1 entered promiscuous mode [ 305.725796] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 305.737144] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 305.770274] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 305.779267] team0: Port device team_slave_0 added [ 305.786330] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 305.795182] team0: Port device team_slave_1 added [ 305.801411] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 305.810186] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 305.998017] device hsr_slave_0 entered promiscuous mode [ 306.173136] device hsr_slave_1 entered promiscuous mode [ 306.434250] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 306.442129] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 306.476113] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.482735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.490056] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.496716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.590042] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.599001] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.624736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.639038] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 306.652644] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 306.658932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.666829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.681762] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 306.687973] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.703450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 306.710585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.719505] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.727978] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.734513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.747426] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 306.755364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.764147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.772516] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.779048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.793672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 306.800679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.818256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 306.825796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.843384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 306.850956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.860392] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.871208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.886652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 306.894789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.904800] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.920454] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 306.927691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.936281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.952942] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 306.963814] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.975562] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 306.981626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.991191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.999737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.033289] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 307.056639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.256048] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 04:52:17 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7709, 0x0) 04:52:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x541b, 0xa07000) 04:52:17 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_newaddr={0x2c, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}}]}, 0x2c}}, 0x0) 04:52:17 executing program 0: socketpair$unix(0x1, 0xffffffffffefffff, 0x0, &(0x7f0000000440)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0) getpid() openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044941, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) 04:52:17 executing program 0: socketpair$unix(0x1, 0xffffffffffefffff, 0x0, &(0x7f0000000440)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0) getpid() openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044941, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) [ 307.808571] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? 04:52:17 executing program 0: socketpair$unix(0x1, 0xffffffffffefffff, 0x0, &(0x7f0000000440)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0) getpid() openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044941, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) [ 307.917123] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? 04:52:18 executing program 0: socketpair$unix(0x1, 0xffffffffffefffff, 0x0, &(0x7f0000000440)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0) getpid() openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044941, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) [ 308.010443] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 308.086370] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? 04:52:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getrandom(0x0, 0xfffffffffffffec2, 0x0) getpeername(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f00000000c0)=0x80) getresuid(0x0, 0x0, 0x0) write$P9_RXATTRWALK(r1, 0x0, 0x0) 04:52:18 executing program 0: r0 = socket(0x11, 0x803, 0x300) r1 = socket$inet(0x2, 0x80003, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x44, 0x4) recvmmsg(r0, &(0x7f0000000080), 0x0, 0x0, 0x0) 04:52:18 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup2(r0, r0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x8004543c, 0x0) 04:52:18 executing program 0: mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8000000000008, 0x32, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x25d, 0x200280) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000180)="795b638bcb5e7e3caa79af59dddd35d593a8bf3f989188b1db9c7a9a6cf6e618790e963e786890d532936ce6e3874ccb2d16936353579f63647c0ee06e5ea8fe76448f41ad775990a772365537ecb5c7ab2fc3699c893c198d60887419bf978e028e60ff58843545c534baf6a57824d008ede1c31144c0136601346be009f33fc3ce08420bce143517040e4adfde504855bcf8ee3ae1a9c5bea2cafee687f31d6ad9b83c090379266147814992b8c6a50eafe595febc88cfa397e3bb4c3c3865d52ef4aa5de1644d85c243a64da0f66bc694bf113f96fddf82477c52807f74c3da49a83e6648a4334a") fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) mbind(&(0x7f0000ad4000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000100)=0x70c3, 0x2, 0x0) mremap(&(0x7f0000bca000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00003e1000/0x1000)=nil) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x0) 04:52:18 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x180) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000200)={0x9}) 04:52:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000200)=""/4096, 0x1000, 0x1, &(0x7f0000000140)={0xa, 0x4e20, 0x2, @empty, 0x3}, 0x1c) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xf9, 0x2000) ioctl$TIOCSTI(r2, 0x5412, 0x8001) r3 = socket(0x10, 0x3, 0x3) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001280)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000001c0)={@mcast2, 0x4f, r4}) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write(r3, &(0x7f0000000040)="2400000032001f0014f9f407000904000a00071008000100040000000800000000000000", 0x24) 04:52:19 executing program 0: r0 = socket(0x40000000015, 0xf, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000001c0)=0x1, 0x3) r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3ff, 0x100) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x200, 0x5, 0x28fe, 0x0, 0x2, 0x7cde, 0xa}) close(r0) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @rand_addr=0x101}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @rand_addr=0xb91}, @in6={0xa, 0x4e21, 0xb8, @remote, 0x8001}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0xffffffffffff44da, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, @in6={0xa, 0x4e20, 0x8, @ipv4, 0x80000001}], 0x84) 04:52:19 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x40040000802, 0x0) write$P9_RATTACH(r0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0004, 0x2) 04:52:19 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) ioctl$VT_DISALLOCATE(r0, 0x5608) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) wait4(r1, &(0x7f00000000c0), 0x81000002, &(0x7f0000000100)) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000001c0)="8f812d9bdaf2fa8b40c89edcca79c2a1b72e66794ef2ba7ff8c4d6074c3ae870f99fdef3b2ebb308b2faf3541b1f95ab63a6af11fc82f5e7d333e6b24db5dfbcd86f50b1930fc9fbba4a344ff18d858e28d1e6") ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000240)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/30, 0x1e}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/40, 0x28}], 0x3}, 0x10000) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000480)={r2, 0x1, 0x6, @random="ea36b95ef48b"}, 0x10) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000004c0)=r0) sendmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000500)="3de64ee35d3f52de4a6f983833ceceec31d177ea683f36730d06e62cad5625c5176ac359e192f8f6714f21871bc58b4d511a63e386abca32b9b4659848392728fbe2626833ae5fe948e54bc1f4011403293607ee3b293e7f4871e5cd69a13ee99a3e5fb19858669f6f594dbee210b0193fc5a920578ab7024d182a92fc2bad8a8650b1370f013aa3c3bfca8821ae0bc019c3db6f830847a86bece6a0aa5c1dae7956f36d408539cb1c058b9e0533ee777ea4ceec0f901e8e3d06ba9416008bfbc010eec5d91259da20a0c210c7729a6b03b51a6d9a176ca384b2fdac40aa81a01b7bd7555c1b59eab3a8ae1e15ee", 0xee}, {&(0x7f0000000600)="a1220f19fcd0f5371017dadf5597d8df5c56d861e482618621b8c677f21375acc492304a11f60dd59821ace607ad17249d4e52421235257d1bb159cb9d7a4cb9b63cee8e0ff5b09230337917016a764a48196f50b18e7f221361f462726aef468f3dcbb7bbdeeaac35fb446831dfbf0b980d2028c8777235b46361a43ef405a7338a1936a499d410335f479734e619a570c236bea8e7b5e43b598a29de5d84afd3ae50975c55c924f05ba57a1c3a4c89b79fa6e946a9ffd6d265359265dc15724f5e40a729f6326bfbf93d89b83ba17172f8ea0ba43b8134ed17b7160be85e2ea7c23b7bb9ce3149705255", 0xeb}, {&(0x7f0000000700)="54b637050cfb20a594756a67aed94d20feff089194d94928b95dfbd7b4c59ac1f95ebe9b1a9531e2c9ee4bf176bd72b9a1f38d354d36d8d3d0c753d34c879761d67e4ca4974e4537941929c0f69add415b9c65ec723c78cc941a084f25c8405fc2d2e1bd8e754dfc70353a0fe0", 0x6d}, {&(0x7f0000000780)="f1d018e742b2ffa1eb2c287fcf9b2060a7d695729b0a099a295a456d2e13361d11918283765f5e3c84781ce110b8c9040c6f6b8d6bac2f9b0b2332", 0x3b}, {&(0x7f00000007c0)="23813833085449e189daa06a4a", 0xd}], 0x5, &(0x7f0000000880)=[{0x108, 0x84, 0x1, "459eae6fb14fa78e20638290a5dacf27c6f171bb9fced6d14e7653d201f6980dc8658bb9b9db4e3ad27a661b934f74c3a6899a5e7f14e2c4966faee0dfd13db55c92f113f874032b51871892a7891543c811815c0b110bf6fb9a55f375d21a121544bfe999dde8b411409d2daaabaab3bf20cfa8df0777486e79b1e1520e5f8fb2f47189649bbe2203658c99b93faebbe9bb4616d500a01b7e5dd774ba498d96627f3cc926651481354b64f4f0d68a454334804c15ee36805c1a4e26f148273460280ce4eef6c1af950d6c68c6bdac00176fc17bf15436c04e41afe0d5c5889584b99f2975acad3316bec2ab591c7aa1df2d3b56abd3"}, {0xc8, 0x0, 0xffffffff0000, "cb3e36142e3f4de8a4ddf39ddde1f2d4a9b41a80864e2cfc90b0cda3469afca6d41d430dcbd6f6aaddec389b32e1d999eb015110345377eb295151f85b788bc5f4e9a8f3404945435d30762e937e81834cb972903d78da3eb73891d0be439ee3e6919e77e70c6eeab3331dfb1045803fb9262395235583b29617b64fe635f30ee75ff61360a79d20741dcdc72ec1fb65c3de852b2c77b99c91a5b55f534f5f26adc5ae4dc11a7d6568089492b54fc07a147decff"}], 0x1d0}, 0x40) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000ac0)=0x7) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000000b00)={0xf000, 0x4004, 0x7f, 0x6}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x88080900}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xbc, r3, 0x420, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffffffffc30}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000d00)={'teql0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000d40)) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000d80)={0x2, 0x0, [{0xc0000001, 0x3, 0x4, 0x0, 0x7, 0x7, 0x3f7}, {0x40000001, 0x2dc, 0x4, 0xb6ed, 0x4, 0x23, 0xf5}]}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) write$P9_RATTACH(r0, &(0x7f0000000e00)={0x14, 0x69, 0x1, {0x8, 0x4, 0x5}}, 0x14) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000e40)=r0, 0x4) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000e80)) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000ec0)={'dummy0\x00', {0x2, 0x9a, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/video35\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000f40)={0x0, @aes256}) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000405}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r3, 0x120, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001080), &(0x7f00000010c0)=0x4) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001100)=0x401) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001180)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000001240)={&(0x7f0000001140), 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x34, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 04:52:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket(0xd, 0x80005, 0x59) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x40}}}, 0x10) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x500) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x10000, 0x2000, &(0x7f0000018000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$sock_buf(r3, 0x1, 0x0, &(0x7f0000000080)=""/164, &(0x7f0000000140)=0xa4) [ 309.763871] IPVS: ftp: loaded support on port[0] = 21 04:52:19 executing program 0: r0 = socket$inet(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80000, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) 04:52:20 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1, 0x9, 0x8}, 0xc) ioctl$RTC_AIE_ON(r0, 0x7001) [ 309.995712] chnl_net:caif_netlink_parms(): no params data found [ 310.087468] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.094159] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.102744] device bridge_slave_0 entered promiscuous mode [ 310.112949] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.119449] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.127966] device bridge_slave_1 entered promiscuous mode [ 310.163549] bond0: Enslaving bond_slave_0 as an active interface with an up link 04:52:20 executing program 0: r0 = socket$inet6(0xa, 0x202000000802, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000001200)={0x30, 0x5, 0x0, {0x0, 0x3, 0x3, 0x8e33}}, 0x30) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f68000)={@dev, 0x800, 0x0, 0xff, 0x8001}, 0x20) r2 = socket$inet6(0xa, 0x802, 0x0) r3 = socket$inet6(0xa, 0x5, 0x5) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001100)='/dev/sequencer2\x00', 0x202000, 0x0) dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$PPPIOCDISCONN(r4, 0x7439) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000001240)=0xf5, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000001140)={{0xd8022faaf544a53b, @broadcast, 0x4e24, 0x1, 'lblcr\x00', 0x10, 0x898, 0x64}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x10000, 0x9, 0x9, 0x7fff}}, 0x44) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000001280)={{0xa, 0x4e23, 0x101, @remote}, {0xa, 0x4e20, 0xffffffffffffffff, @mcast2, 0x4}, 0x1, [0x4, 0x1, 0x0, 0x4f7, 0xac, 0x100000000, 0x816, 0x10000]}, 0x5c) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x20) [ 310.217348] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 310.250891] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 310.259811] team0: Port device team_slave_0 added [ 310.274266] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 310.283201] team0: Port device team_slave_1 added [ 310.289383] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 310.297954] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 310.377152] device hsr_slave_0 entered promiscuous mode [ 310.423270] device hsr_slave_1 entered promiscuous mode [ 310.454633] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 310.462482] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 04:52:20 executing program 0: socketpair(0x2, 0x0, 0x5bc, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000000c0)=0xd, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 310.536694] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.543302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.550531] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.557162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.662657] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 310.668819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.692756] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 04:52:20 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f00000001c0)="03aa4772772c83c2e05e4d1703a5afb06203deb024af2e3e34cf7e", 0x1b}], 0x1) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x400042, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0x6, 0x4) [ 310.707201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.717896] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.727273] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.749139] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 310.778828] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 310.785573] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.820898] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.830637] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.837228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.886056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.894710] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.901266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.911807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 310.949312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 310.959202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.971570] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 310.984283] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 310.993418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 311.003609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 311.012505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 311.038493] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 04:52:21 executing program 0: r0 = socket$inet6(0xa, 0x801, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x2, @remote, 0xfffd}, 0xfffffffffffffcd6) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x2005}, 0x1c) [ 311.059360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.073730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 04:52:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000440)={r2, 0x9}, &(0x7f0000000480)=0x8) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xfffffffffffffffd, 0x1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x3, 0x0, &(0x7f00000000c0)=""/151, &(0x7f0000000180)=""/69, &(0x7f0000000200)=""/110, 0x5000}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x8100, 'nr0\x00', 'team0\x00', 'vlan0\x00', 'veth0_to_team\x00', @remote, [], @remote, [], 0xd0, 0xd0, 0x100, [@vlan={'vlan\x00', 0x8}, @connlabel={'connlabel\x00', 0x8}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0xb, 0x0, 0x0, 'bond0\x00', 'team0\x00', 'bond0\x00', 'veth1_to_bridge\x00', @remote, [], @broadcast, [], 0x70, 0x70, 0xa0}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}]}, 0x2a8) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000002c0)=0x8, 0x4) 04:52:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2}, 0x1c) connect(r0, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @dev, 0x7}, 0x80) connect$netlink(r0, &(0x7f0000007600)=@unspec, 0xc) syz_emit_ethernet(0x437, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000775000)) 04:52:21 executing program 0: socketpair$unix(0x1, 0x40000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xa) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x820000000000012) clone(0x0, 0x0, 0x0, 0x0, 0x0) 04:52:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x1e) 04:52:21 executing program 0: clock_settime(0xfffffffffffffff7, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) wait4(r0, &(0x7f0000000280), 0x0, &(0x7f00000001c0)) r1 = syz_open_dev$vbi(&(0x7f0000001900)='/dev/vbi#\x00', 0x1, 0x2) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000001940)={{0xa, 0x4e23, 0x6, @remote, 0x7}, {0xa, 0x4e20, 0x14c, @remote, 0x9}, 0x4, [0xfffffffffffffff8, 0x8080, 0x9, 0x3, 0x3ff, 0x7, 0xbe9, 0xfffffffffffff9a8]}, 0x5c) [ 311.635199] input: syz1 as /devices/virtual/input/input5 [ 311.655007] input: syz1 as /devices/virtual/input/input6 04:52:21 executing program 0: unshare(0x8000400) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10031, 0xffffffffffffffff, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=0x0, &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x5, 0x9, 0x2, 0x3, 0x9, 0xc8be, 0x4, 0x101, r1}, 0x20) r2 = mq_open(&(0x7f0000000080)='-$\x00', 0x6e93ebbbcc0884f4, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0x71a, 0x0, 0x0, 0x4}) mq_timedsend(r2, &(0x7f0000000040), 0x174, 0x0, &(0x7f0000000040)) mq_timedreceive(r2, &(0x7f00000021c0)=""/4096, 0x1000, 0x0, &(0x7f0000000380)) 04:52:21 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000001a80)="220000002000070700be000001000701020000690b000000dadb97f1050013800100", 0x22) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1b1080) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001ac0)=0x0) getresuid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0)=0x0) r4 = getegid() r5 = gettid() lstat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() sendmsg$unix(r0, &(0x7f0000001a40)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001740)=[{&(0x7f00000000c0)="75655051791505a74f26be02b98a7f606c6cc50c3376ccd9b5a5a1dadf22c2392449061faeefa32c9007705a8dadcd3d5d785b97eae6c7f23d22b935b945aff08b44f858eb0071ef9e6be5df", 0x4c}, {&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="c4fc5ab3d816cf20c24a10e4e29c9b5d9b35ebe30d19d9cde3be0fb17c94c52484147e464b940f5283ca", 0x2a}, {&(0x7f0000000280)="7ba5449bcc1da903a6e305a0df0bdf2f0535a3560717bea96153854e30ae7b00ad0ea3c445da5b70793bcec9707576cd57c62374b75b7a9e9574e1fdbbec6bb3aa696f8f52e27a410d6626f648c261ebe66807f311d45ed7ede491ad42411e9cea3e3a067f2f7def461b", 0x6a}, {&(0x7f0000000300)="c8155b32919a1dcb6b10bc77e2eab478ba80c3d155b253644198c2abcc2db2f0bd7b1609077ca986c9aa24b530c66747a9fd2c2032e2fe1d2b2a94b762f059fcef848b71f3446647c5d8e32a88a4a15754a884e29f8d25d62c94810f792b95a2592e2d768cb6435245aa89de795d173c8d6e1bec90697a167570b88065f6dfc5039b6342080822a86961b0e7ce7f6fbd9e3174b5b80f2ba4c36eea782417c2dd57a7f4a8d81d9f32b70470f6e305bed698508e1f91799caef2172f99ffbf6b2deef97b001041126d4df5628bf9cb9d32a27e8372cddac66784306e209bf99bdafcb34871a0aa075543f2db61dff5d57bebfc74ee3d61ae988fabf322eeb97264b0a2ada3bd0bd00b8c872db40f72a4c12e32b45ff6f9cbbbd5e5158a611439d87df6497ae27708b114221fd288af44346b550e47f28c33c7d6f0023825605d21c0487c2f1079b2b1b54dd2070337629ffe39e63c720a6ae5135fd8e5c1d4c7a980fd2bbd74df0be7bf4ad22c9778c8454cadf5ad0b0187bba88ab8559c03a4e00b680a0ec2fb629515c8efb8c824d73a8ef87c703e38e272fdeba0d6c4fbf465d10eb9dd0beda45767c5263ea7d569f9c1f17191baf8c435260ae0af7e1988c885386a93495676f761cb2dffb9c2097b12d195165dac77fe515a0e3b59dc8aace31e12499751ef45aed0c47e731ec39502672eedb53b7725fe4798be6680d4e15a1a01aa929368c557390d47a83ce920dfb050bb468251aa66fc006883d8e21a37fc8a7a836ab12735747a896b5fcf254431a0b2e971caeb2b552f86f97ff70795563b764ee69e0826aedde6cad3a39f405d33ba6916f9e22ea494ed2a32e12bb5596c77d78fd5d5f5cfd6bbd0764d822a44ce806fc7434c7f82f59f5a4a6885c063b6fd2ab5875066cd3fe81b044a4ede38893df1c1198ebfaa8051a92120c7bf19696fb4a580a84ae016297b6553490e56f0586b31c4d1ebe9d59f693d77c327ee68fe48fe4a09dfafe85a0d95551536a124fafdc46cec671a4b93f599870d1676149d1e8054e0600241dcbbc89a28de57d4cb59c2f6b2b39848e99536fc1a3cf60f070b556e2e296f3e7cc425566d31e93a92242f425bdc86d20c06136ad8195ab160fd59f09e9fc988f934200b8499bb6e575449d23557a49415830739ccd98ca2415df1c70dde07b70f7bcefae3030a4578d7fc7f2eb41ad0cca03c375342ed00f1c63922866a5b59a35fcff4105e69b86271a24aabba0b5a37cf094fca7873beb1f87878576e9f557e4e9f7ed3daceaaa9895e7d5d406806654979250b975a6799b7a472cedb91b183890cc11f01a556db7a1f8a930723c5d8fd430fd3463a1365377619831bbd166c183182c4701d9c73ffcfbaf3949804845eb276617e41afe7f65f5982b457d214b7cdd3150593e652d601f251cc00d906d7af2e6c369735e0b9fd195d77d9d7f0beff2fbd0cae88caffcf8a94380a1fbc954ceddca69c7c83e89a26a3270a868ccf0f8f7caaae710e0d745741f9ae05e2d6becdeea2ac0506a9438e80051c220834469d3b33077a587dd416c65577c51e8f50af55fe04b4d70c40c2d667c1627908895c160392a9477317e489836ac4dd7c41e92b0ce8e43bcd22c97f1f3595c6969f2f93fb1926a823c264a4ad9e254efd45a6132a1644f9902766a30c1e4fd038ec186669ca15d1b0b186a173707edcb56b3776786e1c2d6b4ff48063dede954e4ac5391815bb832d7bc39805115c70b780b74227271ac629861f20c0d3802089a9005499077ea1a90fed182c34a97c36d895932f6f029bf856a93d31e329546c2af93dc227f0a0117dce05474d79412d36c256ac74add0c94ad96a4421642c52eb62247dcb97794755868ebe739d7c26561da5f2be4c908f6155b8433b8ac0ab71e6ab4677775ec9a0f641194e05b73e3061da32430f86aeeb02403693f38a44e6bde13e3897d8064e9c9f5d3ace688c73627671b4f2a6a063b683520b64f8fe87c683e77b4039859f582123b44b18ced06b08209e5a839aead042ab64ada01cf829a91d708e1cf60f551abedceaef0c6f405a536abbdc0ad237f1fdcc13ddaba97c95e031d18dcfb5fbaf8bbd16ad9f9d153eacd7c6b3fca6d331385a8faa0f35549110d2d0a324a6e46088c738ca99aeb598af01a036451cddc9aaddb83288f7f79738854a7cba82eab160f7bb27987bfe3f77d68d28172a00eac25dba9172affa327449e8ad9f833d6d0249a5c2dec84ce0652db28dd9a1d73be591875449fa6b2238d911229181b322b81c416270d9dd1d437b57305ce2fe6e1af03fc3b76ded6d88ba0e0f5539803b4a555089d631c2637dbbbb80722df2c4a9e3c69d781bef0c25e3c3001af8a5af3258ee3ab6cb76682fec81ea7d131f5e3d46bc7f5e6b0c9f109af6d857b0b125b971833cf1cc4d27aed2479b5db9e6bddc2056f379698644edfcb12ff3ee5bba5bc1aa901f95d5887ec56d9eb099351be42084ac4dcf301057d380e975604a81d05da88df0b6497fa755cb61cb8b4af07fd79771b7b2151e63c4d251e7ccbd503928b96e9ebf6e700555b3b6ccaf024d8f3f8d09725db417553259baa3dac306fb1fce71112af221598e0f1234bfa3fd4183692e6bdf1de5e7e4ce5c9dc7ba04708e0dbd2ddf8d9a923b7409793bbfe505e271ad8d69179f45331c68ad2be745bb94316cfa79c49ae2368bd7592fa3c55cae81a3753956402e153503d5f9bbb0374660edf395c1e1cb7174536270b0e9eabc1899ab9d77bcdfa64b4a8a745539ac43fefbb0c0453ee22021a5c35af1e7b9adfbc723aeae8c6045aa4ee9fa5843f7aa89e266dbe0f8f9dfa35293a972aec6bfb9a818e518bd04befff23d08ba58d02f38527db8d750aeb2561ad446a2f6e57dfec5851a5f67ef3671c27121a509cd6ac7a4e0f70d68891fa0dd231ebdba1d4d0665171a554fa1d6e3836bc85e8e0ba5ed2ca7879b61ef1be55561770cfb618bcadea666bb02f32a3234b818202cc47a4e03dd2177cde7881b13787a9164e128c196b52476c620ddb82f8c63ec20ddc10a09288ca98e75d25b3393ae15aaa37525a41cf4ab38e3cbe32b5a969ca60e02715f6bc119bc6de1a20fa5ad35a041bf9baae75fb8fabadc9406d5159269052b1f887289bbba3737d7a72d89e27029ec07b5689e2dcef9f02f76de44963b3c0a37d2f9e5122b471cc61d7bdbbe0127be4801fe55e805dbbcdfbe4b3859a406b4fa70748e4e48a985a97d065d66f89e8daf97bd8957e8eba58aaecb866b5c6769baef92d2420d3937d1cf7b57de8229235d400e673bfa653a4e94cc7fd8187bc8de26fbeda2d3150f74931ca0e342ae8f523afcd797f3346f055bb6acf8dc590a18bb94efe56358bf8cfdbf03099f035ceb05b5f23fda92b9d902e035cbcb8d9b965f5523957c1bd39385de8fb07c5f6acb7c66dca3fec1cf8dff0e56b510ca71e637ce0f1505c6f3dd17eafd94dd2a7831dd3f89a701a13c3e40d75fb1a52f4f7dc98974fa4a362fe60e4194fb984c77d9acf2892900ee539f85d215ce9e045b58012e2c38100484c788a58209f2eabeadac0b4f2541417d1f9c17378cf64887ab3c97c037b4775010422efc2143611f4da60eec4a2eeff4d034f15c96133b9d885f5703c83a080c4a4e09bc6d25096330dd9e405ea253e485bbc9d39ad52db306c41cee5f34da088de13e3e2e9ed83571f60c14aaa6921502b29bd6f9b472e7e2d0f2d42846a58b8adaa158a2de5958d09dd5f356d49ac982fd1e650cd709cb00ccfdc35bc8f93396fd219df0e9189400ae79ab733752fe57fe4d3d1dbc214d977203023e931aa725ee761a52169c944f8d9d8a120930f92896300a295957787b0ffeb6568e89bc50b6ba68c492cdf0e532ee003a1a28ee5f72712db5d85a568002389b189ed349873334e8c07113290075f5da641cdce8af221f422818f55b1e196d250c9323e38dc4494cd8ceb6e331929b50bbf2910c56e557c166276f80a8bf2fcaa78165c69cfebdd4ccc0ff4352f0fe85d2c12b378328939ff7aa2f41352ac3b16ca6be1a01019688d5c19375b5051a05f33bf1bac6d81a97e33452d3a6e6845a5c542c3b92080f02ce9841227fa0594abc14ec2f3a55600db50a471448627017018f0b6b98fd54fce736fb670b0e3439bdc00348c7627cf9b66bb1f7bafb9c1c7e8846c792739f3180cc4c7487934a9bf572021f03db9a6ef6ac20b44fe37c82ee6ac9bcf6e7993aaa2db6437e31023e91e94763bf30ec8633512e64503b56837c55eebb733e0222a9144325d2e7dedc9ad96e60499589e9f98ae3fa61cf840be02b0fb9ff9a1fb41f539026395da21526adcf61246424fbf1071e33adbb06969bf122771a9779535ab29e482c9a4958cb95d5054c6f138c72d11c5844801d3696d746f3c029ab9c92e168dded407ae8f2ad24deb61838237e1d493fb24cc651b96b8b01fcf5d53bdb45549f7ab4d2ce894b49fd708464a6160a35c982d6a32284c521377e4311cd33be6d78f1e7a3cfba5574912661d1efd215e9012b28fd936d98c9912a06a1ab988fa123edc60f46c3109d48792e4a98e5f2b32e457a6772e19bfe8cfaa4343c4c5005f15225d7d35788334bb9154da611b3f8b70f7bf55d078b1cde60e0cddc704ce52e12cae6c9bace5445b9c17b1fdecb61da97d5ea1d6fb481934ebfafdc00951e3387fe5a97151024374f30a4490e77cb0c363814f9a3b06a1f18decde88ebff803659bbb41b1c3df81ea8cc42f2bb4091f4a653662f79ede5c388057d3fe85fa1cce3a5b815372bff515e06bd4b4883d86f65b66867c1691b1a2006411f234017bd14e9d81444a77e2e654b63b634ac5fc5fa97e7950ef12e5fb2d583166164d87ba805c76e3affca56011e3097863ffa2a2b5981075786f7593bdeaa6b1668a9e07462df0cf5f529069449d85e0eb62470971216c9bf04c305189301931271433ce9fc42487ceca38e25ab2e94694654d53c23dd86363f3cc490e1235dc0c1b04c543b4b31e0ad3e341ddd984472243a02aafe765520196e6b959f2fbeb2a40e96ee271e08f72d4846ee82ea689214a6e1604814801dfcd1b1fe96a4f77c4bb4a3d3876a5e2eb13294f04650039bc23493fbc1e37979f7e53bfecae6e436edadc072942d03b66fe28f1c26a505ee1805ceb53463bad622bbf9035948b2745ae77e399708c344b78b516c6fb56181068ae36d8e4397266c2927960a711ee0293f297a9024a0e25f45f540eb9cb02826e9208d7b7f24d29a2bdce0bad75ebe040ede31c9d8bbd9a57258ecce168c4faa53cebcd98e65c5b614f853f8078cb348adcfcdb40aab7e4edbcb4b630462366f0970972c149e9a805497bf328e5a8b40c5734f791f72dd7f41a2e1bfde54ac50e462cc2d7224be89bfee9e2887213e94530673af5aa75f04a0f1403f2d8ee9f598563d554527b8dffce29a3257bf78e129c93eed7d8d0342b86316c8f7b02707bcbc532957e30ffc973091de0d64c1feb36132586d906ebe538143b0c8d3aa54971b1f246b284bdf94de7a19e6be57c14075a45ea5c4cd19a7bef357ea303f351e4aff793143c9e6b9094e3af89151114ce49f11995fd52e7ad1e3e8fd2c5f722de58cd0bfae8ed822cdfabe2b750fd9f3dcc64590a640d1fb89d3adf62fd2966364849a219a14f4bf926f3ddd39dc575768b894edc30d33d48a33c7ae4c39130ea867b55909acac9e8e90de7975c71eeab1766e8a5f9e64e655a5efda049a757ae0ccd0707709c", 0x1000}, {&(0x7f0000001300)="18c2ae4bd564158c59b3a7819e7805438768685d76314ea288a6919bc2219b99451c23ff03d2272428f9dc2146c5e129db8c6c0f5cdb665fd0c73a3bc401749543a26b881d74410f7ae5b48804e20b50e3a128f890c015e5fa8bd9da9cd29f920736f8b87b8fb75323d2d624584168361548278c2fea2b0bdc8deb3b19edb9645a84f668be3d8e1c269d76ff4fc8bb94fae4e845395a538a6828b0357ba5a79accadd3419fd32a089a9d4760e71573ef4afb4098d1598b90139f066c90ccb0ed32c606a7aca04ad0b9d6d6651a0562c02149f6e30674ab4f", 0xd8}, {&(0x7f0000001400)="42f366b7a94a4e68e65684c79489c564b58e291ef7a3d8ea1acb03f783ce5836cf9ba31c7008d4e88189953acba958c5a1c7c2db53b98186a9f01250e324401002e2edfe44c300339ce8522e2ae2335e75887ed652ca8c4089f09adc9ae671e385268f41d552c134201bb3105df0c8f41230df2f909229ed319664a104e69c319c2402ccedd955b5113ec02750dba500ca24ace7a284df25981100f28ca8754d6423276a0b5c903fb59fcc7e1ae2b45e2066a01e26f4d58766e38902c1b2a4cd", 0xc0}, {&(0x7f00000014c0)="d1d874d03008316f6e7911412e9c1bb4bae2a65ae7798a11851c4f4c22045a34fd158db5e1bdadd8b4d07a6febd8070bbce56cd6c9f9f991504263cd1375d0aa9a456faa5f07f7d4bd9d6804bf132aa084f5381d135f0835dc959f84ae5137bb09c9d95a29e7b909d05bdcd8bd43ee5341574f6bd211e7c0dd846ec3fa15edc1e8ce318d1f4c1e679dd9310171e4402a903abfa7c3c4cdd2d9aa7f72cd283f7168e33a61e9b1779bb242838b6ac9d38beaa0d2f30adc78cabfdd65f838915fb8b74852", 0xc3}, {&(0x7f00000015c0)="96acf1fab88e1dcf152a45545641b32b438c62aff66c41c3ebc0452cbfa7de286a39251b868597932a05514698c8a09c91052b4fe11df02221db3562c9605ea4db25997ca7672dd258d414b57a9cc8c1c846546904ea1cca6fba47c2199f1262094165a8ee25717b46c26b135eb54211a8d9e3905e66ab05c5c1701769623e883788ae76dfdacc633d8b3e942958f098624b5f25c6193a3bb9d13a50a20c5eb333323d7733e7e49567abaa54c51af3fa414499e4fbe3454d109e41741d56137fb232", 0xc2}, {&(0x7f00000016c0)="4429141a4f820a18277025c0cab60c9cf243644af7d3db89278e1a489566636fe3285c525d680cbb247bb5b56f1e809bb95a066deffcf275bb749471b29569362a99ff543a0b71c9d9ea65d4e68f163bc89100bc136f09558ade9b", 0x5b}], 0xa, &(0x7f00000019c0)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x58, 0x4040}, 0x810) 04:52:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x2f, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 'sed\x00', 0x3, 0x4, 0x3c}, 0x2c) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001400090500000000000000000a000000", @ANYRES32=r3, @ANYBLOB="1400060002000000ffffa9447d3f50c736bf0ca0ffff000000000000000014000200fe800000000000ef5b76360000000000"], 0x40}}, 0x0) 04:52:22 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff9000/0x3000)=nil) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x6, 0x1f}) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x6ffd) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6) [ 312.117797] IPVS: set_ctl: invalid protocol: 47 172.30.1.1:20003 [ 312.147235] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 312.173899] IPVS: set_ctl: invalid protocol: 47 172.30.1.1:20003 [ 312.208050] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 04:52:22 executing program 0: mkdir(&(0x7f0000001340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) io_setup(0x1f, &(0x7f0000000300)) getdents(r0, &(0x7f0000000480)=""/124, 0xce1c) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7, 0x8082) mknodat(r1, &(0x7f0000000340)='./file0\x00', 0x1000, 0xfffffffd) r2 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x3, 0x4000) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x270dc3f6, 0x14, 0x1, r2}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x288, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb56}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7f49}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9d0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x95}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xec, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @local, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0xc34a}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3aa8}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc56}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbe8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r4, 0xc0385720, &(0x7f0000000040)={0x1, {0x77359400}, 0xc57f, 0x1000}) 04:52:22 executing program 1: r0 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="1f115c056e04ceed0cf89c879650252a06e71e355f175c274267e50c35be85cafb5958fd495aae474c5e48cd5c544f37032d303f86c03d093dfee92508cc72c0c117acadd12b4d4e2fb1194fab6d571b37b7b17d213baba54d71a1b2a86a758a5797f632dd490d", 0x67, 0xfffffffffffffff9) r1 = request_key(&(0x7f0000000100)='cifs.idmap\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='(\x00', 0xffffffffffffffff) keyctl$instantiate(0xc, r0, 0x0, 0x0, r1) 04:52:22 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$KVM_NMI(r0, 0xae9a) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$netlink(0x10, 0x3, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00') ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x9) write(r1, &(0x7f0000000080)="2400000024007fffffff9e000000770bdc148aff0100000000000000ffffffff0100ff10", 0x24) 04:52:22 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendto(r0, &(0x7f0000000040)="fc", 0x1, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000400)='b', 0xfffffe78}], 0x1}, 0xffffffffffffffff) close(r0) socket$can_raw(0x1d, 0x3, 0x1) 04:52:22 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='nr0\x01\x00'}, 0x30) sched_setscheduler(r1, 0x7, &(0x7f0000000080)=0x1) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 04:52:22 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$CAPI_GET_SERIAL(r1, 0xc0044308, &(0x7f0000000040)) flistxattr(r1, 0x0, 0xffffffffffffffee) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@v2={0x7, 0x0, 0xe, 0x200, 0xd9, "2d4eeb9e594c4979cc31fb0f08a683a2f2a2b46825340ffcee372f11df94b4035511d01697b073741974f8262149062521afccfb487f599182b357851a236d0cef9e14ceeca9f6c47dce9381c507727f68576d31b72aa0106665be36b933562f176cbbbfb3867f32959526b31995025b78770610f7af526a660d388b0f8d2f947ea58c4947a9acb0fcacf525c668d6c3aae6a9ef557976c7ecf3b4eff0065d10b0a579570955431ed1c24adc63c419a907eba645a217cc36f43c0ea4019fc220de872c13040e3ae06eaa259cd5d0264e9ff2c054dc01fb626d"}, 0xe3, 0x1) 04:52:22 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr, 0xfffffffffffffffe}, 0x1c) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/31, 0x1f) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f00000002c0)={{0x0, @remote, 0x0, 0x0, 'wlc\x00', 0x0, 0x7}, {@broadcast}}, 0x44) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0x36, 0x4) 04:52:23 executing program 0: keyctl$set_reqkey_keyring(0xe, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000380)={0x2, @win={{0x0, 0xe7}, 0x0, 0x0, &(0x7f0000000140)={{}, &(0x7f0000000100)={{}, &(0x7f00000000c0)}}, 0x0, &(0x7f0000000200)}}) 04:52:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000000)=0x1000000000007d) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 04:52:23 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = shmget$private(0x0, 0x2000, 0x60, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f00000000c0)=""/21) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f00000001c0)={0xfffffffffffffff7, "6f6538e4bd7c7c8b1c198f96f44634c002cb04865894b957c4537324bc8262b4", 0x40, 0xdd, 0x100000001, 0x14}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") close(r0) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="020b010d0600000025bd7000fddbdf25040000000900000008000000ec08000008000000000002000300000000000000"], 0x30}}, 0x4000001) r5 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0xfffffffffffffffa) r6 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r5, 0x0, 0x7, &(0x7f0000000300)='self\\@\x00'}, 0x30) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) tgkill(r6, r7, 0x8) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r8, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="2b090000000000000401010738000000070cff010164f3ffffffffffff06000000000000000600000000000004000000000000000200000000000000070000000000000000010005020040c204000000000000000000006b32971a0f65cdf83bdb3580fef1e23df9b9a9c4effcf47387c14d1ee6442767893b408ceb"], 0x58) 04:52:23 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000000100)="2936d80f31e7079921f824b7080f42dad8ca4260b4e310640d9978d3659c162627e24ce1e12f57fe2277c9598e6381c33c663a3d31f98fb6fc2edf2331d40007db4ea45e2dbcb151866e8dcb5d9ddd029d168b1350f0193a6d9aaeb27db4f5efe81538bc027b167a513fcae5bbd251c9bd92c1f729f09e2c302b6d1dac68502e9cbda1cb2b11c946850dd2e44716732b9f92b3fe5fd938d348b994a75a379fb26285ed11ccd7f37376d887e3da238e72003ad19f7b36bc4f00456ac49a133eea351788bd6d141b20bd38071146ada9ec874dcefd241775b1") ioctl$sock_proto_private(r0, 0x89e1, &(0x7f00000000c0)='F') 04:52:23 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000000)={0x0, 0x4, 0x4, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f7ffffff"}, 0x0, 0x0, @offset, 0x4}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x18000, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 04:52:23 executing program 0: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x5, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x2, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e60], 0x0, 0x0, &(0x7f0000000e00)=[{}, {}, {0x0, '\x00', 0x1}]}, 0x108) bind$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @host}, 0x10) 04:52:23 executing program 0: r0 = socket(0x10, 0x1000000000000003, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video36\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)="220000003100070500e80000004c038502080303010000000800010041024fc1076845d6958b2cab403d1283f1ec53395f0ee26575b89e7213eeb96fe067ec68bf1d9defb9ad9d6269204fef275543dcfc963624fdc072d7f2f98ba4e8ad4fdf52fcb3f5c1e34cdcbb50f73a2c0ea22bf2efc2d0fe88f103f64faf46aab167ecd62380660db40856b36e8a967bb84ee7643b2b2ac72f39c576597885659d78a573c6be3ca7c9c249e740", 0x3b4) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000000)="07513f13c78bbbe94bca991ad5da6b0367731f47ad28f9da34e0e5505ca056394f27498d0c7b73998c5df1f4151acfc7450d871e4c6a81832804b1") r2 = dup2(r1, r1) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000200)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x10001) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x5, 0x204040) write$P9_RRENAMEAT(r3, &(0x7f0000000180)={0x7, 0x4b, 0x2}, 0x7) [ 313.820632] kernel msg: ebtables bug: please report to author: Chains don't start at beginning [ 313.834711] kernel msg: ebtables bug: please report to author: Chains don't start at beginning 04:52:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r1, &(0x7f0000000000)=""/93, 0xfffffffffffffe9f) 04:52:24 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000063de2c)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev}, {@in6=@mcast2, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 04:52:24 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x23fffffffffff) writev(r0, &(0x7f0000000000), 0x0) 04:52:24 executing program 0: unshare(0x20400) r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40, 0x200400) mq_getsetattr(r1, &(0x7f0000000080)={0x24000, 0x9, 0xffffffff, 0x4, 0x9, 0x2, 0x30000000, 0x2}, &(0x7f00000000c0)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000200)=0xffffffffffffffff, 0x296) 04:52:24 executing program 0: unshare(0x20400) r0 = socket$rds(0x15, 0x5, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40, 0x200400) mq_getsetattr(r1, &(0x7f0000000080)={0x24000, 0x9, 0xffffffff, 0x4, 0x9, 0x2, 0x30000000, 0x2}, &(0x7f00000000c0)) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000200)=0xffffffffffffffff, 0x296) 04:52:24 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r1, &(0x7f0000000280)=ANY=[@ANYRES64], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f"], 0x1) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000040)=0x6, 0x4) splice(r0, 0x0, r2, 0x0, 0x3fff, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'rose0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}}) 04:52:24 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000140)={{0xfffffffffffffffe, 0x9, 0x8, 0x8, 0x9, 0x4}, 0x576f, 0xd991, 0xfd, 0x800, 0x5fbf, "a55caa56837ef53f116d89a0840e5f40ca13cfc99c6db6b585c1ddce2267c87b448f836e19c0dd0379890a329912772101d55a24ae679593649f2aab47ab3145354a7bae04df4e9d3e9447196eaf724794c84abfb63f9b622246f8594246d1c00e4711fb938c04dd47bdfac2da3dfc70634fd01d644cdd2dd2a1e0873975f935"}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x7bd6, @dev={0xfe, 0x80, [], 0x15}, 0x401}, r2}}, 0x30) r3 = socket$inet6(0xa, 0xb, 0x9) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, 0xfffffffffffffffe, 0x13a) 04:52:24 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = semget$private(0x0, 0x7, 0x700) semctl$GETNCNT(r3, 0x0, 0xe, &(0x7f0000000180)=""/243) tee(r0, r2, 0x3, 0x0) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="f578c5f5", 0x4}], 0x1, 0x0) 04:52:25 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000180)) r0 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f00000009c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000a00)='asymmetric\x00', &(0x7f0000000a40)={'syz'}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r2}, &(0x7f0000000380)=0xfffffd72) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfff, 0x40042) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000340)={'ah\x00'}, &(0x7f00000003c0)=0x1e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r4, r5}}, 0x18) 04:52:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x10121102, 0x0) io_setup(0x4, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000008, 0x0, r0, &(0x7f0000000000)="10000000060000000000000017", 0xd}]) r4 = fcntl$dupfd(r1, 0x0, r2) accept$packet(0xffffffffffffffff, &(0x7f0000003ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003b00)=0x14) clock_gettime(0x0, &(0x7f0000003b80)={0x0, 0x0}) sendmsg$can_bcm(r4, &(0x7f0000003c80)={&(0x7f0000003b40)={0x1d, r5}, 0x10, &(0x7f0000003c40)={&(0x7f0000003bc0)={0x5, 0x4004, 0x40000000, {r6, r7/1000+10000}, {0x77359400}, {0x2, 0x20000081, 0x800002, 0x200}, 0x1, @can={{0x1, 0x2, 0x7, 0x8000}, 0x4, 0x1, 0x0, 0x0, "9313db6fe7abc4a5"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0x20040011) 04:52:25 executing program 0: msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x3, 0x2f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x10) 04:52:25 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x80) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/139, 0x8b}], 0x1) rt_sigtimedwait(&(0x7f0000000280), 0x0, &(0x7f00000002c0)={0x0, 0x989680}, 0x8) pwritev(r0, &(0x7f00000000c0), 0x100000000000015b, 0x2000000019) 04:52:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3ff, 0x2) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x800) write$evdev(r1, &(0x7f0000000080)=[{{0x0, 0x2710}, 0x2, 0x0, 0x2}], 0x314) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) 04:52:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2000080000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x80800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x2, &(0x7f0000000580)) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='lapb0\x00') ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000040)={0x0, @data}) 04:52:25 executing program 0: r0 = memfd_create(&(0x7f0000001fc1)='#vmnet1nodevem1\x00', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0x7f) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xdb7, 0x2) mount(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x0, 0x1000, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 04:52:25 executing program 0: io_setup(0x4, &(0x7f0000000040)) io_setup(0xffff, &(0x7f0000000000)) 04:52:25 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x800000000006) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0xff, 0x1}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x2, 0x3}, 0x20) close(r0) 04:52:26 executing program 1: r0 = inotify_init() creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000280)='./file0\x00', 0x80000002) read(r0, 0x0, 0x2302) close(r0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) 04:52:26 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mtu(r0, 0x6, 0x1e, &(0x7f0000000000), 0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) 04:52:26 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f000000cfe4), 0x1c) sendmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x60, 0x29, 0x3b, "e10984fa3279d7a9e03a22b169d736c06ab11a96f7d25adf9166e34ba01ef80187324065bcda06ab9013268169230973698dc95dde627650790df783841dcbb38ed04b54d5375b9d6a"}], 0x60}}], 0x1, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0xf6, 0x7, 0x4, &(0x7f0000ffc000/0x3000)=nil, 0x8}) 04:52:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x1, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000240)=""/27) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000080)={0x0, 0x0, @pic={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x400000003], 0x0, 0x680}) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x200, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:52:26 executing program 2: r0 = getpgid(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x4, &(0x7f0000000000)='lo\'\x00', 0xffffffffffffffff}, 0x30) rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000080)={0x36, 0x2400, 0x9}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8001, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000140)={{0x6, @addr=0x21e9ed15}, 0x8, 0x4, 0x1}) write$vhci(r2, &(0x7f0000000180)=@HCI_EVENT_PKT={0x4, "05fb6ba715baef16c9e4ac8358d76d0b1a0fd5c7810e48383e194b8270972129d8175438d6a5bc8241261c936a6b9caba2e32524b9e6426977a52cb5f578b7c900800ece48f230fc51e016f8b402acbe98f3baad238837447a2af236e77af0b77bf44078394d3011f5e9a2f6cc7e467d1926e2e7888f30aaa9c0e7eff072405e58dd33d4260913bd685828cba202589091c27b"}, 0x94) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/userio\x00', 0x400000, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000280)=0x4000000) ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f00000002c0)=0x1) recvfrom$rxrpc(r2, &(0x7f0000000300)=""/179, 0xb3, 0x0, &(0x7f00000003c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x90, r4, 0x8, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xdc8a63586529b05e}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x22}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x35}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x1) write$vhci(r2, &(0x7f00000005c0)=@HCI_SCODATA_PKT={0x3, "5d5ebdc4de7b3b2c05a6c6cb0ccaea0af1eb03bd8335ce5f0d49825fc389d6c63fc11f5b0953ef1eef823043e707ee63ab8601720ab225a3bae35a2e28b0ecc3d398462b1bfac1299d5a3de6c1b53cc8a6769bbe24941914cf34e7de71"}, 0x5e) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000640)) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000e80)) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000ec0)=0x2) r5 = syz_open_dev$media(&(0x7f0000000f00)='/dev/media#\x00', 0x6, 0x802) syz_open_dev$video4linux(&(0x7f0000000f40)='/dev/v4l-subdev#\x00', 0x1000, 0x400000) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000f80)={'raw\x00', 0xb5, "670645cb82a68b9e603df26e5128a3db8e19f2d24812fadaa305dbbab81401b42ae380d18cf6b7c8f90a5fa803a0f51247103e70387fe082a8b4043d910316523d45d43fda828ac8ec80b74ec40012a627c6ab6eda3ed6dd9b3d7d664a2a5ff1eaf54f18cba6b84219155f52fee14ab8ce04e7a7a8a52d3be7d4f49b5869401de3f14f379a5bd8a4e394bf1b09d29ff3190eb48e46f7c054ba574c1d08bad5ccfd02162a698bfec7c9034a03fbb493dc1c8825a803"}, &(0x7f0000001080)=0xd9) prlimit64(r0, 0xf, &(0x7f00000010c0)={0xdcf0, 0x65}, &(0x7f0000001100)) syz_open_dev$sndctrl(&(0x7f0000001140)='/dev/snd/controlC#\x00', 0x0, 0x507100) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000001280)={0xf9, &(0x7f0000001180)="73e984e99055ddb864f2c1e0960544e1c375a90bf4657cedd106315c884ae6076a707f9ab0cd77b6e3ebb0adab8f04e85621979730e5c998abd8e32314699e614a633ef629ada43859ea8c7b07cd251bf772a175bca04bfc19719146f35ae0c23bf81dc0b1e03fa15a925999bf309565b26628041700def3db8d2ae6f17f9911b291b297183fa457296ab87689a043b4d90d609a99c33e9d120b27c121245cf6bb7da9a246562c61ff43ac74b8262c2bc7162d5f960df51f45c52451ee1a0349dbe5cbd3f01570f86b12c2c79ef799722eb102c32f6399416bf3783e6098687dcc73a1dec5fe75012c5913b3b23bdee40f92ea3b1b44164ba9"}) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000012c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000001300)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000001400)=0xe8) stat(&(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getuid() setresuid(r6, r7, r8) stat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x24, r4, 0x500, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4103}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 04:52:26 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000200)={0x80000000000001, 0x2}) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x100000000, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0x0, {0x3ff, 0xe1eb, 0x4, 0x100}}) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x8001007, 0x8}) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000280)}}, 0x10) accept4$inet(r2, 0x0, &(0x7f0000000180), 0x800) 04:52:26 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) sendto$inet(r0, 0x0, 0x0, 0x20007ffe, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'nlmon0\x00'}, 0x18) setxattr$security_smack_transmute(0xfffffffffffffffe, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x3) 04:52:26 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x40, 0x8000, 0x8}]}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x8000, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) 04:52:26 executing program 1: waitid(0x0, 0x0, 0x0, 0x401000004, &(0x7f0000000440)) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x40, 0x10000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sched_getaffinity(r1, 0x8, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040)) [ 316.881505] kauditd_printk_skb: 3 callbacks suppressed [ 316.881539] audit: type=1326 audit(1551675146.926:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11412 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 [ 316.951584] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:52:27 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000100003a7c000000000000000000000000fc0000000000000000006811ed686d36244057c252"], 0x29) [ 317.098911] IPVS: ftp: loaded support on port[0] = 21 04:52:27 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8d) accept(r1, &(0x7f0000000040)=@sco, &(0x7f00000000c0)=0x80) [ 317.294057] chnl_net:caif_netlink_parms(): no params data found [ 317.406791] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.413491] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.422141] device bridge_slave_0 entered promiscuous mode [ 317.433495] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.440009] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.448515] device bridge_slave_1 entered promiscuous mode [ 317.486221] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 317.499447] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 317.554236] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 317.563054] team0: Port device team_slave_0 added [ 317.580353] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 317.589265] team0: Port device team_slave_1 added 04:52:27 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x22001, 0x0) write$sndseq(r0, &(0x7f0000000140)=[{0x81, 0x6, 0x0, 0x0, @time={0x77359400}, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0x30) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 317.610138] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 317.634138] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 317.673267] audit: type=1326 audit(1551675147.726:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11412 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 04:52:27 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='loginuid\x00') read(r0, &(0x7f0000000100)=""/254, 0xfe) write$cgroup_pid(r0, 0x0, 0x127) 04:52:27 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2e, 0xa, 0x0, "17ff030000000000005a0f9cc0fbda7643ed12de15d5036177e48500", 0x2}) [ 317.759237] device hsr_slave_0 entered promiscuous mode [ 317.795109] device hsr_slave_1 entered promiscuous mode [ 317.834785] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 317.842549] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready 04:52:28 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x100, 0x0) bind$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x3, @my=0x0}, 0x2b2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="45000000000400000000000000455c7462d65178fa8b302690fb6c0f5847e0560472a9880d4cce6991ef65502cacf05b29197ddf711a3f4b2438843c99268a8307d1997b73d11f3954a73b67e135d34f4e5c5db8679d25dd142f083fd8a11e03964d841a56d971b8b51b964a43"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x921, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr="3161f513ed311a4dd2d6eae9ae062e2c"}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) [ 317.925789] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.932408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.939666] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.946331] bridge0: port 1(bridge_slave_0) entered forwarding state 04:52:28 executing program 0: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc100) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=@sha1={0x1, "0da8936d7606980dbcd3db2b65b6b1e87c221962"}, 0x15, 0x1) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="d09a0e63c9476288", 0x8}], 0x1}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') [ 318.114461] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 318.120617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.165240] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 318.182627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.225774] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.245451] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.275039] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 318.304474] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 318.310585] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.325965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 318.333329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.343785] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.352137] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.358640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.379173] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 318.393315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 318.406251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 318.414083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.422953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.431288] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.437846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.447064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.456361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.487394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 318.494516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.505008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.519265] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 318.527271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.535679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.544717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.561229] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 318.568391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.576898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.592818] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 318.602881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.611253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.622403] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 318.628503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.656063] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 318.678340] 8021q: adding VLAN 0 to HW filter on device batadv0 04:52:28 executing program 2: r0 = socket$inet(0xa, 0x4004, 0x5) sendto$inet(r0, &(0x7f0000000080)='y', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = semget$private(0x0, 0x0, 0x400) semctl$SEM_STAT(r1, 0x4, 0x12, &(0x7f0000000280)=""/137) listen(r0, 0xaa7f) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x5) accept4(r0, &(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x80, 0x800) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000340)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000480)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000700)={0xa0, 0x0, &(0x7f0000000580)=[@reply={0x40406301, {0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30, 0x10, &(0x7f0000000380)=[@flat={0x77622a85, 0x0, r3, 0x4}, @flat={0x736a2a85, 0x100, r4, 0x3}], &(0x7f00000003c0)=[0x40, 0x40]}}, @transaction={0x40406300, {0x4, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)=[@ptr={0x70742a85, 0x1, &(0x7f0000000400), 0x1, 0x2, 0x35}, @ptr={0x70742a85, 0x1, &(0x7f0000000440), 0x1, 0x1, 0x1}, @flat={0x73682a85, 0x100, r5, 0x3}], &(0x7f0000000540)=[0x18, 0x0, 0x28]}}, @enter_looper, @dead_binder_done, @increfs], 0x8f, 0x0, &(0x7f0000000640)="b36407756d667a4cc57e4bd6b65be705dde01a1f7bf926bffa3ed4de6baf0d56f0f762ee302d52c92c5a1ecd75bab6069bce5731c6f8c855b4a532763cf8d2078f6ffe41028ed58cd954359c2bbba00c51984ef499a231e20e1bc4f1c6d874fe6332e64fb1ee6c38d93ce1e78ab8f6ed66124e331c4ff22c76d5795c33aaaf05427315b906735b861f9928f06e5fde"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x1e, 0x0, &(0x7f0000000040)="cee9e8cfcad0f953873e84d393ac2aa29d5ead7645f66ecf7078ac6d471d"}) 04:52:28 executing program 1: setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x20) 04:52:28 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000e94000)=""/62, 0x3e}], 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xdfe}, 0x1) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xffffffff, 0x101000) 04:52:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x12080, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x81) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2, 0xc, 0x9, 0x5, 0x28, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_key={0x19, 0x8, 0x5f8, 0x0, "07ad4c8564f3bd3e0c4e4c2c252bdde903bef83c38a20358097786805dcc3d30d49a2f76d692570aa4f3522fe54711e644fe4f5b5cad607e8621bb90118f2d88d1fc4bb99d2e0a38c75750176ecebb7793292de5c07e3aaa3eeef5496d2ece940070276b97c6f086a6aeaf6b5f1bf811125b75bd97fcd8a6db707e1b0aeba38f86e17e7ab8845e92ace13f92ec4aa6c585b98c41f3a5de4a92552f9ce275943da66465a63e9e5c124604c80f3c81718900ed87feb84b1d2020ae66e7330ccc"}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in=@local, 0x9, 0x10, 0x4}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x7ff, 0x122d, 0xec, 0x4, 0x20000000}]}, 0x140}}, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7c, 0x20000000000001, 0xa, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000ffff000000000000000018180000", @ANYRES32=r2, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000000700)=""/4096}, 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) r4 = getpid() perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0xb, 0x200, 0x5, 0xfff, 0x0, 0xf7e4, 0x40000, 0x4, 0x9884, 0x7e40000000000000, 0x80000001, 0x11, 0x401, 0x0, 0x1, 0x81, 0x9, 0xf9b8, 0x80, 0x0, 0xb7, 0x81, 0x800, 0xf3b, 0x8000, 0x6a, 0x8, 0x1, 0x8000, 0x7ff, 0x962c, 0x4, 0xc87, 0x80000001, 0x7ff, 0x5, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x8}, 0x400, 0x0, 0x3, 0x1, 0xffffffffffffff80, 0x0, 0x77}, r4, 0xe, r0, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r3, 0x100}, 0x8) 04:52:29 executing program 0: mmap(&(0x7f000090c000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x2a27fc, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") readlinkat(r0, &(0x7f000090fff8)='./file0\x00', &(0x7f0000728000)=""/145, 0x1a) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)='eth1\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r2, 0x4) 04:52:29 executing program 2: mprotect(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x62000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readahead(r1, 0x3, 0x3) ioctl(r0, 0xffffffffffff0002, &(0x7f0000000040)) 04:52:29 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x101000) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000080)) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x8, 0x0, &(0x7f0000000180)=0x16f) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x100000000, 0x4) 04:52:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0xffffffffffffffee) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r1, 0x1) connect(r1, &(0x7f0000000000)=@in6={0xa, 0x4e24, 0x10000, @local}, 0x80) 04:52:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @remote}, 0xffffffffffffffee) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r1, 0x1) connect(r1, &(0x7f0000000000)=@in6={0xa, 0x4e24, 0x10000, @local}, 0x80) 04:52:29 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) close(r3) dup2(r2, r4) write$P9_RWSTAT(r2, &(0x7f00000037c0)={0x7, 0x7f, 0x4}, 0x1) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) r5 = dup2(r0, r0) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, 0x0) setsockopt$inet_udp_int(r5, 0x11, 0x66, &(0x7f0000000040)=0x3, 0x4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000080)=0x0) process_vm_readv(r6, &(0x7f00000012c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/187, 0xbb}, {&(0x7f0000001180)=""/68, 0xffffffffffffff0b}, {&(0x7f0000001200)=""/192, 0xbe}], 0x4, &(0x7f00000036c0)=[{&(0x7f0000001300)=""/253, 0xfd}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/233, 0xe9}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/147, 0x93}, {&(0x7f00000035c0)=""/232, 0xe8}], 0x6, 0x0) 04:52:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) finit_module(r0, &(0x7f0000000300)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adcd8123c88b070000000") ftruncate(r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffffd4, 0x0, 0x0, 0x10}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) 04:52:29 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000000), 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0xa37f, 0x2, 0x0, 0x0, 0x3f, 0x1}, &(0x7f00000000c0)=0x20) listen(r0, 0x0) 04:52:29 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7f, 0x20000) prctl$PR_SET_UNALIGN(0x6, 0x1) sendmsg$tipc(r0, &(0x7f0000000580)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}, 0x1}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000080)="ed4c2614c8b3e6de0d80064b45bea3c4a44b4eb45f030f192bbd00b585c02fceb4e513f834bf4ce373b117eb342e9f414258adfa29c55c8bb9f9b04f9086e28d1117e83ac2db3d7165f02c06642131d50d4abd3dff280f7c0a80e9d8956367034bcb5e7d557871b6a2f26bb2486a4124bccd5d23254e7e3139db21aea8a4ce", 0x7f}, {&(0x7f0000000180)="5bc9737617a308eda489050cd78efc2c7e483406afb23dfcd7558b6c4b4805dfd685edad2b6370be3804a65bfca028f044ec7123421478b2104a37797961e3ab0ba18f4605ced11d5ab519e85ac76c0430d6290a61648fb49f54216f169d7b96641ffa266fd62ca1aa610f3652d7549f21b003c6fddcea7f4b242be0a905e9895b3370692e3c558b76f2fa2a27bb6d5a85ff50aa9a7196036e6d5e93f1c0149678c48ad95f43c3dac342289a793642106b32925cafba4352046aa8156f796fc6e4850a9d8c3818b18220e22a95d19cecf961952f", 0xd4}, {&(0x7f0000000280)="00e1254ab68345958ceb7ebe2e1c89349716d4a21d", 0x15}, {&(0x7f00000002c0)="f219b909b94f8517d211e12efec3f60bdb89829aa5eb3844c0e09f09ac7597076ddc2ca70a3b702942efbe4d54f186695526098b3a67a7c53da7cec75ee8c2ddb01dbbf7b0f60aa5595b9782db5dc595cdef65459c99bb6833478c6d0e01684c557e38e3eb41f217a11eb35003cc5bff551c", 0x72}, {&(0x7f0000000340)="fd81baf6faecc1fc50d10a1a22dd89ea96797f7ce2fee942f9c8d07c92f91d62e3c8e756d5aa7f11ca2e5191dacd5ad38b3e401aaefc5e916ad921162970923f7f990b4f5685523517bfcf7eec6cbd240c2ee6957afc53fc6043ca1abffc94448c8efa16e4971f145dc7f2941b8ac3801aa3b1a77ac5f8eba9831dc201c2157b0d5adc1b4c27e3ee7b2891e3414b81cd474746354c9c94d2eb224085ea4d78559dc2362ebd4610cd40064fb9d6b347f731a532f5107125eb3a86aef0a79f07e47ca060554954e07e29fed0279325329ab77227af", 0xd4}, {&(0x7f0000000440)="2f62338e3b2d7234696799fd100ba302c3001a93f3f114b3c4cdd39789e2f0303b05fd3da81ff1aefb8f49e0bc2b23bf27", 0x31}], 0x6, &(0x7f0000000500)="9e500abe873a7d914b86590c4455b0e19f108bb54e0737b780885ae6e321b91468031d5f775c7bf8a10c24f973add95c32691460a15d5b9bcfc7e4b858d7dd51ed537bf3a30e4eaaa477f469d29255349ee6922dfb38cf91f78a33a5d3b4e3eccbc3c29121760d453b1078c81946514ec78bf4f2bd702f279975ef1fa7", 0x7d, 0x10}, 0x10) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000180a43ba5d806055b6fdd80b40000000060001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) 04:52:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x301000, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080)=0x8) accept4$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14, 0x80800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0xffffff7f00000000}, 0xc, &(0x7f0000003b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000010000108000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001800445e22c0bd954d405416d73c154834febe3dabc6f0ad5a5b05fa25d784865f1ad58b9635c00c4c2fb18620cb92168e3e5eab7b32414417c71e9acdd53c5e1bd828d868fa4277895c6407c93fe948f5a3e0810fdb6b6f97d73c9a53660d7c3109a4eb2d14c73f03cb0a47fa468928493d6ae3f3d408fbed1d92d24eccec16b0ae72f64e36745d34b0f6afe57475b6defb17844d380e"], 0x2c}}, 0x0) [ 319.955457] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.996572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:52:30 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r0, 0x20000000000000) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local}, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, 0x0, &(0x7f00000000c0)) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) [ 320.076254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.143648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 04:52:30 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000002380)={0x0, 0x0, 0x0, {0x9, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000000)={0x0, 0x1}) 04:52:30 executing program 2: r0 = socket(0x1e, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x8, 0xa000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000001380)={r2, &(0x7f0000000380)=""/4096}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfffffffffffffed9) r3 = socket(0x1e, 0x805, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000240)={0x7f, 0x2, 'client0\x00', 0x1, "7a930a63c4bf8bbb", "4e23eb0a3e83b85a9f8bd425a7f5362c83ee7e6b0ff239a2c6ba0cf51d768bba", 0x7, 0x8c}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r4, 0x0, 0x2, &(0x7f00000000c0)='%\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r4, 0x0, 0x1, &(0x7f0000000180)='\x00', 0xffffffffffffffff}, 0x30) sendmsg(r0, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) r6 = gettid() dup3(r5, r0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r6, 0x401104000000016) 04:52:30 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000180)={@remote, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x1, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000140), 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000f4dff4), 0x4d9, &(0x7f0000000040)={&(0x7f0000000080)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [], @multicast1}, @in6=@dev}}, [@migrate={0x10c}]}, 0x15c}}, 0x0) 04:52:30 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) recvmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{&(0x7f00000000c0)=@vsock, 0x80, &(0x7f0000001640)=[{&(0x7f0000000140)=""/176, 0xb0}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/188, 0xbc}, {&(0x7f0000001440)=""/111, 0x6f}, {&(0x7f00000014c0)=""/243, 0xf3}, {&(0x7f00000015c0)=""/99, 0x63}, {&(0x7f0000000200)=""/61, 0x3d}], 0x7, &(0x7f00000016c0)=""/236, 0xec}, 0x7}, {{&(0x7f00000017c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001840)=""/176, 0xb0}, {&(0x7f0000001900)=""/161, 0xa1}, {&(0x7f00000019c0)=""/73, 0x49}, {&(0x7f0000001a40)=""/31, 0x1f}, {&(0x7f0000001a80)=""/218, 0xda}, {&(0x7f0000001b80)=""/228, 0xe4}, {&(0x7f0000001c80)=""/97, 0x61}], 0x7, &(0x7f0000005b00)=""/132, 0x84}, 0x200}, {{&(0x7f0000001e40)=@generic, 0x80, &(0x7f00000023c0)=[{&(0x7f0000001ec0)=""/55, 0x37}, {&(0x7f0000001f00)=""/104, 0x68}, {&(0x7f0000001f80)=""/99, 0x63}, {&(0x7f0000002000)=""/195, 0xc3}, {&(0x7f0000002100)=""/171, 0xab}, {&(0x7f00000021c0)=""/92, 0x5c}, {&(0x7f0000002240)=""/177, 0xb1}, {&(0x7f0000002300)=""/148, 0x94}], 0x8, &(0x7f0000002440)=""/18, 0x12}, 0xb000000}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002480)=""/187, 0xbb}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/217, 0xd9}], 0x3}}, {{&(0x7f0000003680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003880)=[{&(0x7f0000003700)=""/199, 0xc7}, {&(0x7f0000003800)=""/46, 0x2e}, {&(0x7f0000003840)=""/44, 0x2c}], 0x3, &(0x7f00000038c0)=""/146, 0x92}, 0x2}, {{&(0x7f0000003980)=@can, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003a00)=""/242, 0xf2}, {&(0x7f0000003b00)=""/209, 0xd1}], 0x2, &(0x7f0000003c40)}, 0x4}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000003c80)=""/11, 0xb}, {&(0x7f0000003cc0)=""/177, 0xb1}, {&(0x7f0000003d80)=""/161, 0xa1}, {&(0x7f0000003e40)=""/242, 0xf2}], 0x4, &(0x7f0000003f80)=""/160, 0xa0}, 0x80}, {{&(0x7f0000004040)=@nfc, 0x80, &(0x7f00000050c0)=[{&(0x7f00000040c0)=""/4096, 0x1000}], 0x1, &(0x7f0000005100)=""/174, 0xae}, 0x80}, {{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f00000051c0)=""/101, 0x65}, {&(0x7f0000005240)=""/247, 0xffffffffffffffea}], 0x2, &(0x7f0000005380)=""/17, 0x11}, 0xa0000}, {{&(0x7f00000053c0)=@nfc_llcp, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005440)=""/92, 0x5c}, {&(0x7f00000054c0)=""/249, 0xf9}], 0x2, &(0x7f0000005600)=""/254, 0xfe}, 0x9}], 0xa, 0x40000000, &(0x7f0000005980)={0x77359400}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001dc0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000005ac0)={&(0x7f00000059c0)={0x10, 0x0, 0x0, 0x900083}, 0xc, &(0x7f0000005a80)={&(0x7f0000005a40)={0x1c, r2, 0x80c, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4000) r3 = syz_open_procfs(0x0, &(0x7f0000003c40)='fdinfo\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r4) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "1073ec6f7d4ebfd1083180ac773dd07a3fb4c3e2299b4516eeaa96200000000000000041a0f4b744c70533947ec04a118d7eab00", "6e45410d610e2ea7a9ef71fea55b328d0d84f7bcf9e1c27c0f30cca408c37b3f13bfc4c038f43d1cbad7050be54263bca1164eda7ed6431d8be5a72030899f92", "c87e5c0168c4ad7ba5a4d725b89c09767070249bbc848cf24c5c6f674450172e", [0x4]}) 04:52:30 executing program 2: r0 = socket(0x80000000000000a, 0x10000000002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f00000002c0)='\xa6M\xcc\x1a*\x86\x96IX#\xfa\x9d\xc7\x99\xbd\xdc\x7f\xdbK\"\x84\xda\"\xde\xc9Q\xcb\xdcl\x1a\xe2f\x8a\xe5\xeb@k\xf6\xc1Ct\xb1P\x12\x8b\xe2\xdcz.?z\xbbn\x00\x05<\xbb\x1f\x00\x00ae\xb8\x01\xc0rT\x1a`#\x81\xc8\x83$\xd8\x03)Q%e\x9e\xe3\x927\xb2\xc79\xd9\xf9h\x19>@G\x8f\xea^\xe9\n\x03Ai\xb6\xee1A\x19l\x95\xb4\t\x02\x89><\xa2\x03\x83!\xfd:\x18\x04\xcc\xc1\xe8\xba\x17\xe3\xe2V\xaf\'\xcd\xf4f\x89\x1b\xf1c\x1a\'f\xb2&\x9c\xfa(\x8d\x97\x8c\x84\x16;\x99C\xa6\xaf\x9d\xfa\xa2\x9f\xab\x12+\xe2\xa0\xe3\xa3\x01\x84\x18R\x84\x97\xd2\xaa\xd2\xbe\x82\\\r\xd82\xcb\xed\xc8\xac\xff\xbe{\x88$', 0x0) write(r2, &(0x7f00000001c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)) connect(r0, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x2, 0x2, {0xa, 0x4e23, 0x6, @remote, 0x1f}}}, 0x80) 04:52:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f12f041b10788a070") r1 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/46, 0xfffffffffffffd2e}], 0x1) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000000c0)) r3 = dup2(r1, r2) write$evdev(r1, &(0x7f000004d000)=[{{}, 0x0, 0x10000001}, {}], 0xff91) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, 0x0) write$FUSE_DIRENT(r3, &(0x7f0000000180)={0xa8, 0x0, 0x1, [{0x6, 0x2, 0x12, 0x5, '/dev/input/event#\x00'}, {0x5, 0x9, 0x1c, 0x8, 'vboxnet0$ppp1\xfd,vmnet1system#'}, {0x6, 0xb8, 0x18, 0x7662, '.vmnet0-user^}eth0md5sum'}]}, 0xa8) r4 = socket$inet(0x10, 0x3, 0xc) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000000707031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 321.094372] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 321.874663] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 04:52:35 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0x100020040000}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 04:52:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0x0, 0x8000) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, 0x0}], 0x0}}], 0x0, 0x10000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x25, 0x0, &(0x7f0000000040), 0xffffffffffffffac, 0x0, 0x0}) 04:52:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="00ac703916b500"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000100)=""/67, &(0x7f0000000000)=0x43) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x7, {0xfffffffffffffffb, 0x3, 0x5}}) 04:52:35 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x101000) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={0x0, 0x1f, 0x5, 0x50, &(0x7f0000ff9000/0x4000)=nil, 0x80000000}) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000080)={0x9, 0x0, [{0xc0000001, 0x6, 0x1, 0x800, 0x80000000}, {0x0, 0x10000, 0xffffffffffffff00, 0x5, 0x1}, {0x40000001, 0x2, 0x1, 0x6, 0xfa}, {0x0, 0x3e5487ab, 0x3}, {0x0, 0xf2, 0x0, 0x7, 0x7}, {0xc0000005, 0x3f00000000000, 0x7, 0x3000000000, 0x4}, {0x7, 0x9, 0xecc, 0x8, 0x100}, {0x80000007, 0xfffffffffffffffa, 0x8, 0x5, 0x1f}, {0xc0000000, 0x7, 0xffffffffffff0001}]}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000001c0)=0xfff) recvfrom$rxrpc(r0, &(0x7f0000000200)=""/229, 0xe5, 0x100, &(0x7f0000000300)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0xbfba, @rand_addr="2204af9be1e379b5f53f6809c492a0a6", 0x9}}, 0x24) flock(r0, 0x6) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000340)={0xffff, 0x7}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x40800, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000003c0)={0x3c, 0x28, 0x14, 0x1c, 0x5, 0x8001, 0x1, 0xad, 0xffffffffffffffff}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video2\x00', 0x2, 0x0) listen(r0, 0x6) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000440)=@sack_info={0x0, 0x6, 0x8}, &(0x7f0000000480)=0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000004c0)={r3, 0x10}, &(0x7f0000000500)=0x8) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000540)={0x10, 0x46, 0x15e5}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000580)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000005c0)={@local, 0x4, 0x2, 0x1, 0x8, 0x6, 0x5}, &(0x7f0000000600)=0x20) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000640)=""/166, &(0x7f0000000700)=0xa6) r5 = add_key(&(0x7f0000000740)='dns_resolver\x00', &(0x7f0000000780)={'syz', 0x2}, &(0x7f00000007c0)="eff39e0b891f7ef6c3368c162ffeade56fc1d8a149250d074e9099c72b16e43c9fea7bf4a4a3ef564e4d01b7154d27a7fba6b6d466e84e5f38e6890964c86c32e269f9e9ba459ec8a3e00bda0b5062d55e28921545eb6946ed17ada3e9c9f9fb89dccba2eac206f003570e102cf1dccde602f3b3d1b3961886f7d5d7e557044948d0137f9e957deb3eef5dd3e260df7bf4086c8a410bf73c6100d12413ecbe67825f5b2e2984e2bb7562d6b28f5c29c1a7b36bb6949deccff0c70e7224f867826b9980372bf59eb61c5b51e20541d8e9a25b17713094089008c05524", 0xdc, 0xfffffffffffffffa) keyctl$set_timeout(0xf, r5, 0x6) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000008c0)={r4, 0x4}, &(0x7f0000000900)=0x8) socket$inet_udp(0x2, 0x2, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r5, 0x2, 0xfffffffffffffffe}, &(0x7f0000000980)={'enc=', 'raw', ' hash=', {'cbcmac(sm4)\x00'}}, &(0x7f0000000a00)="eb7881c6d378f294d72ed6901cfab829ad85e5e1770497757019b7e7631cf3ed4516592aed0fe21a94f3aa60d18f80aac787cc1bcdc44c739eaf8407d16772ab81d3e8c2b8665ffb7f0481a9a9023bfb759f07f1956ce02000c729e9a8b89efad9c67080c53ebff590fb17a62de3a8440540e5aaeb422b33c4aac73eb6e7e62c9761a1be0ae044569ce38ab88746c4ff9309ff58fe8e1215c7d59a4205762b95dcd2c64b0bb299faba745d04ccaeaaaee0882505be6834b0298bb3cec4f852de146c475cd5d917bdac813b3eee", &(0x7f0000000b00)=""/16) r6 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000c80)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000d80)=0xe8) getgroups(0x3, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xee00, 0xee01]) sendmsg$unix(r0, &(0x7f0000000e40)={&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000bc0)="8697aaed77ffa3983e22373525504eb7d56f06b61debce2d636f06ea1866afa299d4de4b5b8687a2960e02416792b1f1af91a60dfe35e069e5af67a0b229597e56be346f0f229919e7b29a867cf8a80f2d07f6e92e4d927871", 0x59}], 0x1, &(0x7f0000000e00)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x20, 0x1, 0x1, [r1, r2, r1, r2]}], 0x40, 0x800}, 0x4000) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000e80)=""/143) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000f80)={&(0x7f0000000f40)=[0x6, 0x9, 0xa49, 0x7fffffff, 0xffffffffffffae46, 0x40, 0xcf2, 0x2, 0x1000, 0x6], 0xa, 0x8, 0x1, 0x80, 0x9, 0x100000000, {0x3f, 0x7fff, 0x101, 0x1, 0x5, 0x61, 0x7, 0x2db, 0x1000, 0x20, 0x4, 0x2000, 0x332bdb72, 0x8, "7386d19e7cd781952997b5c9a22b5b7b0995a819893e2bdf0d61b493da8d3f8b"}}) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000001000)) [ 325.806774] binder: 11549:11553 unknown command 0 [ 325.811757] binder: 11549:11553 ioctl c0306201 20000000 returned -22 [ 325.878248] binder_alloc: binder_alloc_mmap_handler: 11549 20001000-20003000 already mapped failed -16 [ 325.919106] binder: BINDER_SET_CONTEXT_MGR already set [ 325.924575] binder: 11549:11553 ioctl 40046207 0 returned -16 [ 325.944814] binder_alloc: 11549: binder_alloc_buf, no vma [ 325.950433] binder: 11549:11562 transaction failed 29189/-3, size 40-0 line 3035 04:52:36 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet6(r0, &(0x7f00009a9000)="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", 0x6b1, 0x0, &(0x7f000011b000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006a7ffc), 0x4) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x5) sendto$inet6(r0, &(0x7f0000ba3ff4)="d0", 0x36c, 0x4040004, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xfffffffffffffffd}, 0x82) r2 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)='\x00', 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r2, 0x5, 0x6c0}, &(0x7f00000001c0)={'enc=', 'raw', ' hash=', {'crct10dif-pclmul\x00'}}, &(0x7f0000000240)="d98e0bb3c32aadb0c3dbf452c0e1aa42be48c379b86418b400db04d81b44e62e731269bb8717352e7e79cc69988358c212e69b2eaf01ea56118fcd9d8970e80a1a7685", &(0x7f00000002c0)=""/224) setsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000080), 0x4) sendto$inet6(r0, &(0x7f00004b7fff)="8c", 0x1, 0xfc, &(0x7f000048ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 326.018096] binder: 11549:11553 unknown command 0 [ 326.023199] binder: 11549:11553 ioctl c0306201 20000000 returned -22 [ 326.052587] binder: release 11549:11553 transaction 2 out, still active [ 326.059483] binder: undelivered TRANSACTION_COMPLETE 04:52:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x2) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7a, 0x0, [0x570, 0x0, 0x40], [0xc1]}) [ 326.087556] binder: undelivered TRANSACTION_ERROR: 29189 [ 326.093258] binder: send failed reply for transaction 2, target dead 04:52:36 executing program 2: clone(0x10000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x48) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x5, 0x4) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = fcntl$getown(r0, 0x9) sched_getscheduler(r1) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x0, 0x1, @start={0x10001}}) ioprio_set$pid(0x0, 0x0, 0x0) 04:52:36 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1f, 0x0, 0x4, 0x3f, 0x18, 0xffffffffffffffff, 0x7fff}, 0x2c) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 04:52:36 executing program 1: prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x840, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x18}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x0, {0xa, 0x4e20, 0x7, @ipv4={[], [], @multicast1}, 0xf9}, r3}}, 0x38) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r4, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(r4, 0x80047453, &(0x7f0000000180)) 04:52:36 executing program 2: unshare(0x600) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000080)="30154a5f4b992b0831a6b77498cc11259373f577128ea0969daa5b61468fb1824e92993d05ac2193b3369ce31c97850b93af", 0x32) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, 0x0) [ 326.801967] IPVS: ftp: loaded support on port[0] = 21 04:52:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x80180, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = add_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='/proc/self/net/pfkey\x00', r2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x200]) semop(0x0, &(0x7f0000000100), 0x2d) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x6}) r4 = semget$private(0x0, 0x7, 0x1) semop(r4, &(0x7f00000000c0)=[{0x0, 0x6, 0x1000}], 0x24d) 04:52:36 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xffffffff, 0x80000) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001640)="24000000100007031dfffd946fa2830020200a0009000300001c85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x2, 0x9, 0x4}) 04:52:37 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$DRM_IOCTL_MAP_BUFS(r2, 0xc0186419, &(0x7f00000022c0)={0x5, &(0x7f0000000000)=""/56, &(0x7f0000002240)=[{0xfffffffffffff53f, 0x1e, 0x3, &(0x7f0000000080)=""/30}, {0x8, 0x1000, 0x9, &(0x7f00000000c0)=""/4096}, {0x6, 0xaf, 0x101, &(0x7f00000010c0)=""/175}, {0x3, 0x1000, 0x9, &(0x7f0000001180)=""/4096}, {0x5, 0xa8, 0x100000000, &(0x7f0000002180)=""/168}]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x80001031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mlock(&(0x7f0000222000/0x1000)=nil, 0x1000) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000002300)={0x4, {{0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}, 0x88) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2000000000002) 04:52:37 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0xcd5, 0x800000, 0x0, &(0x7f0000ff7000/0x9000)=nil}) writev(r0, &(0x7f0000000040), 0x1000027a) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) write$FUSE_DIRENT(r1, &(0x7f0000000200)={0x68, 0x0, 0x8, [{0x3, 0x4, 0x0, 0x5}, {0x1, 0x8, 0xc, 0x9, '/dev/radio#\x00'}, {0x1, 0x6, 0x0, 0x5}]}, 0x68) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x4a, 0xb3, &(0x7f0000000080)="103dea87088c73045b1c99cb0355e6443291c6363eddd42013794e8ad78119a8a12aa2cfd69f762a351059386247af89308e68c91e52c5583393f4d82a17c04d77c5ec67d04a10773150", &(0x7f0000000100)=""/179, 0x7f}, 0x28) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffff9c, 0x40086602, &(0x7f0000000280)=0x80000) write$P9_RSTAT(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="4b0000007d01000000440003000500000014000000000700000000000000000000420100000003000000490600000000000001002100000c002f6465762f5e6164696f23000400656d3123"], 0x4b) 04:52:37 executing program 0: futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/capi/capi20\x00', 0x250000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000000)={0x7f, 0x6000}) futex(&(0x7f000000cffc), 0x5, 0x200000005, 0x0, &(0x7f0000000080), 0x0) [ 327.186623] chnl_net:caif_netlink_parms(): no params data found [ 327.308161] mmap: syz-executor.2 (11603) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 327.355683] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.362319] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.370584] device bridge_slave_0 entered promiscuous mode [ 327.401832] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.408522] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.416849] device bridge_slave_1 entered promiscuous mode [ 327.449596] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 327.463977] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 327.497376] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 327.506354] team0: Port device team_slave_0 added [ 327.526814] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 327.535554] team0: Port device team_slave_1 added [ 327.555191] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 327.576632] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 327.666821] device hsr_slave_0 entered promiscuous mode [ 327.724641] device hsr_slave_1 entered promiscuous mode [ 327.765161] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 327.776765] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 327.817790] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.824362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.831533] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.838193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.942860] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 327.949056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.966903] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 327.982906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.995178] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.004627] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.019967] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 328.055922] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 328.062158] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.095530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 328.105852] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.112449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.139149] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 328.148661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.157454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.167309] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.173857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.200447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 328.209971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.231017] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 328.238123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.257127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 328.268280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.278234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.296781] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 328.307151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 328.315704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.325035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.346313] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 328.355172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.366265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.384446] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 328.395591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.407826] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 328.414104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.426298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.435036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.467328] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 328.490188] 8021q: adding VLAN 0 to HW filter on device batadv0 04:52:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000009c0), 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000001600)=[{{&(0x7f0000000140)=@sco, 0x80, &(0x7f00000006c0)}}, {{&(0x7f0000000740)=@rc, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000a00), 0x2e5}}], 0x2, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xd6, 0x8000) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0x400, 0x1000, 0xffffffffffffff80}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="66c5f6bac7a4e68ad0ea8fbdb00005ac7e0ee52dd8a44e6296e0b3f21caa98003d535c45e404becc09fc345d03d8136820595d091b5b7398b2671846da2f0068e65a4b21361caacbacc1047ff605668707f7255084b3e6145d576221eb78bf35177fe917f18bb19ce9bf6818cd5ae83784868a096cc51d75da45110acbc73af1e0064ee73b06b36eaef2ef3a4bc393ca78dbc62e30bc1d769059f0f48538c2a41f1870af9f4dc4ce01292d37f26228168e689e2b27ffd2d55d9b5edc06d5cc05285cb04691b7c3b19d7c3cb1d874b1a5d5217f275a2ca0da25f7969bab5b35ebe83b45a6a3513417727dbc3f806eefb9039b94e715", 0xf5) 04:52:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x200) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x1e, 0x10, 0x7, 0x8}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={r3, 0x8}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000600)={"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"}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x1, 0x0, [{0x0, 0x3, 0x0, [], 0x1ff}]}}) 04:52:38 executing program 0: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x0, 0x5, 0x0, "c6dc30e048bef86208773abb3b1252a5bfe9bd2f8d3a7e18c7396eee06a10287a59a7d9c5651910649651357790fac7dfa108496eb4937eaaacc8c0bfab896c2c6170878cf8618a5a26d278099733b87"}, 0xd8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x1c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x121042, 0x0) write$uinput_user_dev(r0, &(0x7f00000003c0)={'syz1\x00', {0x2, 0x200, 0x8000, 0x4}, 0x24, [0x3, 0x9, 0x8000, 0x9, 0x1b59, 0x6, 0xfffffffffffffffe, 0x80000001, 0x2, 0xc27, 0x9, 0x9, 0xff, 0x7, 0x7fffffff, 0x3ff, 0x7fffffff, 0x100000000, 0x7fff, 0xd0, 0x0, 0x7fa, 0x3, 0x3, 0x7, 0x100000000, 0x6, 0xc5dd, 0x0, 0x8, 0x3, 0x8, 0x1, 0x6, 0x3, 0xcf8e, 0x714b3e49, 0x2, 0x3, 0xffffffff, 0x1000, 0x3, 0xffff, 0x101, 0xff, 0xfffffffffffffffd, 0xad41, 0x5, 0x92, 0x5, 0xfffffffffffffe01, 0x7, 0x7, 0x6, 0x2, 0x3, 0xffffffffffffff06, 0x9, 0x100, 0x1000, 0x80, 0x8, 0x40, 0x400], [0x8000, 0x9, 0xfffffffffffff25e, 0x1ff, 0x4, 0x1, 0x3ff, 0x5, 0xd, 0x7, 0x401, 0x0, 0x2, 0xffffffffffff5803, 0x4, 0x1, 0x0, 0x9, 0x8, 0x5, 0x8, 0x8, 0xf2af, 0x178d, 0x37d7, 0x800, 0x6, 0x2, 0x7, 0x3f, 0x1000000000000000, 0xfffffffffffffff9, 0x4, 0xef82, 0x7, 0x1f, 0x3, 0x1f, 0x3, 0x5, 0x0, 0x3ff, 0x4, 0x8, 0x9, 0x80, 0x80, 0x5, 0xc93, 0x1, 0xfc, 0x3, 0x7ff, 0x2, 0x1d9033d5, 0x96d8, 0x88, 0x8001, 0x9, 0x3ff, 0x5, 0x18, 0x271, 0x8], [0x49c9c4ff, 0x7a3, 0x1, 0x3, 0x3e8, 0x1, 0x101, 0x5, 0x6, 0x4, 0x8, 0x5b, 0xe5, 0xfffffffffffffffa, 0x92c9, 0x6, 0x1b62, 0x3, 0x100000001, 0x2, 0x5, 0x600000000000, 0x4, 0x6, 0x8, 0x8, 0x6, 0x7, 0x100000001, 0x1, 0x8, 0x40, 0xffffffffffffff09, 0xda0, 0x7, 0x3, 0x4, 0x8, 0x7fff, 0x2, 0xffffffff, 0x3, 0x1f, 0xffffffffffffff00, 0xffffffffffff7fff, 0x1, 0x401, 0x1, 0x4, 0xcf5e, 0x1, 0xfffffffffffff533, 0x1, 0x400, 0x6, 0x7, 0x0, 0x101, 0x5, 0x10001, 0x8, 0x4, 0xfffffffffffff55b, 0xffffffffffffffff], [0xa8, 0x5, 0x100000000, 0xf45, 0x2, 0x1, 0x0, 0x0, 0xd9, 0xcaac, 0x8000, 0xffff, 0x15e5, 0x2, 0x3, 0x40, 0x5, 0x7, 0x32, 0x6, 0x10001, 0x2, 0x3, 0x4, 0x812, 0x4, 0x3, 0x2, 0xfff, 0x800, 0x2, 0x4, 0x800, 0x96, 0xf, 0x2, 0x3, 0x4, 0x7fffffff, 0x5aac696a, 0x9, 0x1f, 0x100, 0x6, 0x2, 0x5, 0x1, 0x100, 0x299b, 0x1000, 0x603d, 0xffffffffffffffc1, 0x200, 0x5, 0xe3b9, 0x100, 0x8e, 0x1, 0x10000, 0x5, 0xffffffff, 0x100, 0x6, 0x8]}, 0x45c) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000040)=[0x2, 0x1], 0x2) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000380)=0x801) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x0, &(0x7f00000000c0), &(0x7f0000000100)='syzkaller\x00', 0xffffffffffff8001, 0x1, &(0x7f0000000140)=""/1, 0x41f00, 0x1, [], r1, 0xb}, 0x48) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(0xffffffffffffffff, r2, 0x0, 0x10000) 04:52:38 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x2000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000000c0)={0xf644, 0xa482}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x2, 0xc28, [0x0, 0x20000940, 0x20000970, 0x20001538], 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"]}, 0xca0) [ 328.748202] x_tables: eb_tables: redirect target: used from hooks FORWARD, but only usable from PREROUTING/BROUTING 04:52:38 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4000000005) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x6) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=@md5={0x1, "72b4621d893974c226c58e7695c85317"}, 0x11, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x800, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x801080}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r2, 0x201, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRET={0x4}]}, 0x3c}}, 0x14) 04:52:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={0x0, 0x0, &(0x7f0000bd7000)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES64=r0], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYBLOB='f@ya', @ANYRES32, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="b925ceaae81df2a0f330e6c8d3b66460b2334727a84237804d96f3891b8b69a4b0cff1d6d65e3e64a6f5a2a87269a290b91872722504435b878deab79e3c9bf0f56353ced7bb0327b620beda7d06910ad5ba6d1427a3ea0f80dee388c957701ab36f7059cac87899761f01b939c38b0ff99c4228b410c8de204cce39ca34038b7f49b18b7b55342f304c51b3adfc2c93e1cbee8a48022dc9137fb1aa414c535f35cc30d030e88b72a63c824dab9b493e4783"], @ANYBLOB="434fd93f37c31bdecdd165383521405b35f65b2c8c7e00d11a580e546a1cb1f238770abcf398ed220ed33a07118cf0a04f36a01eea71734707513ed009abcf391a7b6b3ec78a2a555c95c71f848a8be117957988fc1454376b4470202ea11bc9fed60c57a328a043b55e5f09536c1b22d428abbba6aef131ef896c19616611633618c4abbcdba6f6ac32cfed6fd788e6c738118191bdf05a93ff672555ef7ceaa68d37e267a3108aaa76eab04207cb0088536e7198783754cc9515ceb912867f730bf1", @ANYRES32=r0]], 0x4}}, 0x0) 04:52:39 executing program 3: socketpair$unix(0x1, 0x41, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_ATTR(r3, &(0x7f0000000140)={0x78}, 0x78) splice(r0, 0x0, r3, 0x0, 0x400000a7b, 0x0) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x793d) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) 04:52:39 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x0, 0x0, 0xffffffffffffffb1, 0xfffffffffffffffd, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x24880) readv(r0, &(0x7f00000012c0)=[{&(0x7f0000000140)=""/20, 0x8}], 0x1) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x7fff}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r2, 0x80000, r1}) 04:52:39 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x7655) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000240)={0x10300}) 04:52:39 executing program 0: syz_emit_ethernet(0x72, &(0x7f0000000200)={@link_local, @dev, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote, {[@timestamp={0x44, 0xc, 0x7, 0x3, 0x0, [{}, {}]}]}}, @gre}}}}, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40100, 0x0) getpeername$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000140)) 04:52:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x12) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000240)=0x6, 0x4) fanotify_init(0x30, 0x40400) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000180)=""/9) r3 = socket$inet(0x10, 0x2, 0x0) finit_module(r0, &(0x7f00000001c0)='bond_slave_1\x00', 0x1) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="24000000120007041dfffd946f6105000a600000fe00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f0000000000)='bond_slave_1\x00'}) mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1000000) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000e) 04:52:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup3(r0, r0, 0x80000) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000000)=""/32) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000001600), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="20000000000000008400000008000000fe8000000000000000000000000000aa18000000000000008400000018000000ad1414bb00000000"], 0x38}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 04:52:39 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='md5sum\x00', 0xffffffffffffffff}, 0x30) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)={0x0, 0x0}) r1 = socket(0x1, 0x2, 0x2) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f00000000c0)={0x1}) perf_event_open(&(0x7f0000000400)={0x5, 0xffffffffffffff8d, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x3, 0x5, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x480}, r0, 0x0, 0xffffffffffffffff, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) 04:52:39 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x41, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000080)) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x400000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'ip6_vti0\x00', 0x3}, 0x18) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000000)=0x1) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='bond0\x00') 04:52:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x128) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x81f3, 0x4000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000140)=0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x1ad) 04:52:39 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x18040, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') write$P9_RLOPEN(r1, &(0x7f0000000200)={0x18, 0xd, 0x1, {{0x10, 0x1, 0x2}, 0x9}}, 0x18) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="74020000", @ANYRES16=r2, @ANYBLOB="00012cbd7000fddbdf251500000004000600100007000c00030001000000010000003000060008000100358e0b62040002000400020008000100010000000800010045000000080001000900000004000200c80004003c000700080001001b00000008000100100000000800030000020000080003000600000008000d0000000000080002000500000008000100140000002400070008000400600000000800030000000000080003000800000008000300fcffffff1c0007000800040009000000080002000100000008000400018000000c0001002ecfea898d6ef9e92d73797a31000000000c00010073797a31000000000c00010073797a300000000024000700080004000300000008000400120000000800010003000000080001000f00000038000600080001000100000008000100000000000847ec000000000000000100030000000400020008000100590000000800010000100000e00004001400010062726f6164636173742d6c696e6b0100240007000800020000040000080001000000000008000300ff07000008000300090000000c00010073797a31000000001400010062726f6164636173742d6c696e6b00000c0001c62739a1ae36191d00340007000800020005000000080002ff010000000800040001800000080001001b00000008000100060000000800020003000000140007000800010010000000080004000700000024000700080001001e0000000800040080000000080004000700000008000400020000000c00070008000400240c00003c000100180001006574683a6272696467655f736c6176655f310000100001006574683a726f73653000000010000100696281a06f8ebf8871902d444136ea4259066478d9eb9a777a261d821a79fed2d88f"], 0x274}, 0x1, 0x0, 0x0, 0x880}, 0x20000010) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000140)={0x2}) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000480)) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000001c0)) 04:52:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000180), 0x13f698e4b9e296e3, 0x4007ffa, 0x0, 0xfffffffffffffe8c) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000100)={0x1, 0x0, {0x4, 0x8000, 0x9, 0x5}}) 04:52:40 executing program 1: pipe(&(0x7f0000000340)={0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f00000004c0)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000500)={@remote, 0x4d, r1}) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa8000002}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x100, r4, 0x500, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x200}]}, @TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_LINK={0x54, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf993}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x4000844) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)) syz_open_pts(r3, 0x0) close(r3) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, 0x0, 0x0) 04:52:40 executing program 0: unshare(0x14010800) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0) [ 330.233397] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 330.272963] protocol 88fb is buggy, dev hsr_slave_0 [ 330.278582] protocol 88fb is buggy, dev hsr_slave_1 04:52:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') pread64(r0, &(0x7f00000000c0)=""/246, 0xf6, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x1c0, 0x0) 04:52:40 executing program 0: syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x101, 0x3e77) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x10f2, &(0x7f0000000100)={@local, @broadcast, [], {@mpls_uc={0x8847, {[{0x3f, 0x7, 0x200, 0xf3ef}, {0x6, 0x2, 0x700000000000, 0x5}, {0x0, 0x1, 0x4, 0x1}], @ipv4={{0x1c, 0x4, 0x0, 0x1, 0x10d8, 0x67, 0x7, 0xf1b, 0x2, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xb, 0x1, [@remote, @multicast2]}, @cipso={0x86, 0xe, 0xffffffff, [{0x7, 0x8, "6288b46b9c09"}]}, @end, @ssrr={0x89, 0xf, 0xfffffffffffff801, [@broadcast, @local, @multicast1]}, @cipso={0x86, 0x2f, 0xc49, [{0x0, 0x8, "5f67d3846402"}, {0x0, 0xa, "f7530820cdb6bde0"}, {0x7, 0xd, "3659328c87e32438390d67"}, {0x7, 0x8, "042e30150779"}, {0x6, 0x2}]}, @noop, @noop]}}, @tcp={{0x4e22, 0x4e24, r0, r1, 0x2, 0x0, 0x1a, 0x1, 0x1, 0x0, 0x0, {[@fastopen={0x22, 0x10, "5dabfc11d280d020610a46caa85b"}, @mptcp=@mp_fclose={0x1e, 0xc, 0x3, 0x80, 0x7f}, @md5sig={0x13, 0x12, "2b448a2376b8af5bbc17e8a692215144"}, @fastopen={0x22, 0x8, "f648e707f987"}, @timestamp={0x8, 0xa, 0x7ff, 0x1}, @md5sig={0x13, 0x12, "daeeeb002b6788bddd333dad7375632f"}]}}, {"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"}}}}}}}, 0x0) 04:52:40 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) socket$xdp(0x2c, 0x3, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x1, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000080)={0x9, 0xffff, 0x3ff}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x1}}, 0x28) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) 04:52:40 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) getsockopt$inet_opts(r0, 0x0, 0xe5683778f828d0e4, &(0x7f0000000080)=""/12, &(0x7f0000000100)=0xc) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x28) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:40 executing program 0: r0 = socket(0x10, 0x802, 0x0) fcntl$setpipe(r0, 0x407, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f00000000c0)=0x2, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x9, 0x8000, 0x80, 0x1, 0x10000, 0x7f, 0x63, 0x0}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r1, 0x4) 04:52:40 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) getsockopt$inet_opts(r0, 0x0, 0xe5683778f828d0e4, &(0x7f0000000080)=""/12, &(0x7f0000000100)=0xc) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x28) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:40 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000600)=@framed={{0xffffffb4, 0x4000, 0x0, 0x0, 0x6800, 0xffffffd5, 0x0, 0x20001}, [@ldst={0x7, 0xa0ffffff, 0x9}]}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0x351, &(0x7f000000cf3d)=""/195}, 0xff3f) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000080)}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x10000) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000100)=r1) [ 330.795601] Unknown ioctl 1077980789 04:52:40 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) getsockopt$inet_opts(r0, 0x0, 0xe5683778f828d0e4, &(0x7f0000000080)=""/12, &(0x7f0000000100)=0xc) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x28) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = userfaultfd(0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 04:52:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x1, 0x4) write$binfmt_elf32(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) sched_getattr(r2, &(0x7f0000000100), 0x30, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000000)=0x9, 0x7, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4002, &(0x7f0000000040)=0x7ffffff8, 0x0, 0x8) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 04:52:41 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) getsockopt$inet_opts(r0, 0x0, 0xe5683778f828d0e4, &(0x7f0000000080)=""/12, &(0x7f0000000100)=0xc) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x28) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:41 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3f, 0x10000) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000140)=@sha1={0x1, "6257579317e30013ab37b09af23facd64eac0211"}, 0x15, 0x0) sendto$inet(r2, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r2, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x8034}, 0x100) 04:52:41 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) getsockopt$inet_opts(r0, 0x0, 0xe5683778f828d0e4, &(0x7f0000000080)=""/12, &(0x7f0000000100)=0xc) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:41 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x101800) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e22, 0x5, @loopback, 0x100000998}, {0xa, 0x4e20, 0xace, @local, 0x1}, 0x1, [0x1, 0x1, 0x8, 0x38, 0x3f, 0xfff, 0x2, 0x2]}, 0x5c) getpgrp(0x0) gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000240)=0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000380)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)) recvfrom$packet(r1, &(0x7f0000000400)=""/34, 0x22, 0x10000, 0x0, 0x0) r2 = getpid() r3 = getpgid(r2) migrate_pages(r3, 0x1, &(0x7f00000001c0)=0x5, &(0x7f0000000200)=0x1) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000440)={@empty, @local}, &(0x7f0000000480)=0xc) setresuid(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={r4, 0x6}, &(0x7f0000000340)=0x8) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) [ 331.546119] Unknown ioctl 1077980789 [ 331.591343] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure 04:52:41 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000200)={0x4, 0x7, {0x53, 0x3f, 0x8a4a, {0xfffffffffffffffe, 0x7fff}, {0x10000, 0xffffffffffff8001}, @ramp={0x6, 0x11d22e8f, {0x7, 0xd8, 0x1000, 0x8}}}, {0x51, 0x5, 0x0, {0x8000, 0x101}, {0x6, 0xfffffffffffff5a1}, @cond=[{0x6, 0x8, 0x80, 0x9, 0x1, 0x10001}, {0x9, 0x8, 0x20, 0x3, 0x0, 0x8}]}}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = memfd_create(&(0x7f00000001c0)='\v!GPL\x00', 0x0) splice(r1, 0x0, r2, &(0x7f00000002c0), 0x400000400003, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)=0x0) kcmp(r4, r5, 0x0, r3, r1) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) write$cgroup_pid(r2, &(0x7f0000000040)=r6, 0x12) 04:52:41 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) getsockopt$inet_opts(r0, 0x0, 0xe5683778f828d0e4, &(0x7f0000000080)=""/12, &(0x7f0000000100)=0xc) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, r1}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_FLAGS={0x8}]}, 0x28}}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000140)=0xffffffffffffff80) 04:52:41 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) getsockopt$inet_opts(r0, 0x0, 0xe5683778f828d0e4, &(0x7f0000000080)=""/12, &(0x7f0000000100)=0xc) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') sendfile(r0, r1, 0x0, 0x734) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@int=0x46, 0x4) 04:52:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000)=0x3166, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 04:52:42 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) getsockopt$inet_opts(r0, 0x0, 0xe5683778f828d0e4, &(0x7f0000000080)=""/12, &(0x7f0000000100)=0xc) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:42 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) getsockopt$inet_opts(r0, 0x0, 0xe5683778f828d0e4, &(0x7f0000000080)=""/12, &(0x7f0000000100)=0xc) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:42 executing program 2: r0 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2c) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 04:52:42 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:42 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x5, 0x9}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x0, 0x30}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1, 0x2172, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x5, 0x80c0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x9}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x1, 0x8005, 0x9, 0x8, r4}, &(0x7f0000000240)=0x10) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000002000/0x4000)=nil) 04:52:42 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x800, 0x181000) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000040)=0x2a56) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0x6, 0x8) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000000c0)=0x2) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4) mq_unlink(&(0x7f0000000100)='vmnet1)trustedvboxnet0-\x00') getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000140)=""/68, &(0x7f00000001c0)=0x44) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x401) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000200)="040c118b75d4813a3b70324c81b9fee9875529f44b6530afd60aacbe6760016047521a4ce4d156fb5da08762b25f7a929caeec4b638eadc449fff7e6a37ded56d4b3c8468f63a5981cad21b1a652130a092aa2da2b801c3d7d878f76f0e7a3b05207acacb940ece8f8b48cb93ad5bcf0a132d2bf328e22fce3a9af3870ef3404dded0242bdfc85fbe0274e7a706fa6cdad", 0x91}, {&(0x7f00000002c0)="b7cd55330a2d6416b1de", 0xa}, {&(0x7f0000000300)="e8bd22dc5e119e1b90ecc6b2e6a2323c1b7308297259826a9d44d50e7eee4651f6ec1dc2e3b64340eec32557d972c631e36be4e4c77ccbe02b3ae2630dad5ecc87180748f9ada41e5e85ebbb36319cea6b80eb2e949463c3ae5d233a842152b6766d24ed087845e538f9fb65948ef09986b136f8ce17de32", 0x78}, {&(0x7f0000000380)="e47c442ecc0ff1f4d7f0976dcf42ad68990a3fe330bcd31fd95e2bba4eae07fe41dd935ea8374082c49d68fd609193cc58004f172822f96c0a6039e77675edd9348ee9", 0x43}, {&(0x7f0000000400)="10bdda0aa6b2796c0a174f54dd2ba3c41cfc0db7152b6d580ed1f2c3abbcbfdf9288dba4785a6fc6322f0a12dd60fbdb05fda7b63b3ff22d32bf3ce5ca196467c6ce4add4cdf5b96c1149098cbe3e8d9", 0x50}, {&(0x7f0000000480)="c3f7bb5a1cc38e778ac68e249b9a523676b872f333c1c093872e6e9457b9e1a4656c150b88bef9c594259a6c136d6e1c1b669095729209c659212e8de1becf7805971b5e5bff24989be3b99a6444ae96ae1d80dc922f119c0cfcf9667631230a688dfedefa90889c7f85d7d586454077f546039e7179961d9a626302daabc672dafffe518766635e602b422e2e28bbb7577bb0deabf2370a23a1699fbf066d5cc0d4dbbf7518939b959254233aae6f418b9a7458", 0xb4}], 0x6, 0x5c) ioctl$KIOCSOUND(r0, 0x4b2f, 0x9) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000600)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40004000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x80, r1, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffbcb}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x34}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x401}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3ff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x400}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000740)={0x1f, {0x7, 0x7, 0x682, 0x9, 0x0, 0xd2}, 0x2}, 0xa) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000780)={0x0, 0x3f, 0x20, 0x2, 0x8}, &(0x7f00000007c0)=0x18) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000800)={r2, 0x1d4f6180}, 0x8) write$FUSE_DIRENT(r0, &(0x7f0000000840)={0xa0, 0x0, 0x8, [{0x2, 0x7, 0x18, 0x200, 'vmnet1)trustedvboxnet0-\x00'}, {0x4, 0x8000, 0x0, 0x80000000}, {0x2, 0x1, 0x0, 0xffff}, {0x4, 0x400, 0x18, 0x40000000000, 'vmnet1)trustedvboxnet0-\x00'}]}, 0xa0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000900)=0x8, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000940)={r2, @in6={{0xa, 0x4e20, 0xc5e6, @remote, 0xcc}}, [0x7, 0x7ff, 0x9, 0x800, 0xa8e4, 0x1, 0x3, 0x2, 0x32260cd6, 0x1, 0x81, 0x2, 0x7fffffff, 0xfffffffffffffff8, 0x9f]}, &(0x7f0000000a40)=0x100) ioctl$VT_WAITACTIVE(r0, 0x5607) r3 = dup3(r0, r0, 0x80000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000a80)={0x0, @reserved}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000b40)=""/121) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000bc0)={r2, 0x1f}, 0x8) io_setup(0x0, &(0x7f0000000c00)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000c40)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000c80)={0x4, 0xfffffffffffffff9, 0x3, 0x10001, 0x7}, 0x14) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000cc0)='trusted.overlay.upper\x00', &(0x7f0000000d00)={0x0, 0xfb, 0x97, 0x4, 0x0, "81cf9a6a5132cc837d72b7900d8c6d90", "45df6c2a4869afe727b773d6bb61e37baebafdddabf2095ff77799980d033fe83418585be7734a97c0db1a0e4a0e25806dad403c4b09f7f58f7c71566859492c8e0407c9cd7cf88ccf1d52b89615310b4d25d04341f878295a0916b6e4a56e3ecdb6398bea163d41fd57767ec8261192c352ca567e41211261bbc1131259da0351de"}, 0x97, 0x2) getsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) setsockopt$inet_tcp_buf(r3, 0x6, 0x21, &(0x7f0000000e40), 0x0) 04:52:42 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x2, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r1) 04:52:42 executing program 2: socket$netlink(0x10, 0x3, 0x8000000004) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x100, 0x0) 04:52:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400221) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) ioctl$SG_SET_TIMEOUT(r4, 0x2201, &(0x7f0000000040)=0x9) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000080)={0x7b, 0x600000000000000, [0x4000009f], [0xc2]}) 04:52:42 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x40003, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) r2 = dup2(r0, r0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20811}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x80000001, 0x3, 0x14c, 0x7}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) 04:52:43 executing program 2: r0 = socket$inet(0x10, 0x800, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000010407041dfffd946fa283000c200a0009000600031d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 04:52:43 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x10, 0x2, 0x2) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x101001, 0x0) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000300)) r4 = accept4(r0, &(0x7f0000000100)=@x25, &(0x7f0000000000)=0x80, 0x800) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x181204}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r5, 0xb00, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x16, 0x0, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x840) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="24000000120007041dfffd946f6105000a600000fe00000000000800080006000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 04:52:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='nsQ/cgroup\x00') ioctl$VT_RELDISP(r1, 0xb701) 04:52:43 executing program 2: r0 = socket(0x6, 0x7, 0xc) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x24d, &(0x7f0000000600)={&(0x7f00000001c0)={0x228, 0x40000000001a, 0x201, 0x0, 0x0, {0x3}}, 0xfe61}}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x5}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r2, 0xf37}, 0x8) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000240)=""/35, &(0x7f0000000280)=0x23) r3 = fcntl$getown(r0, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000640)={0x2558, 0x27, 0x1, 0x70bd27, 0x25dfdbfb, {0x2}, [@typed={0x8, 0x87, @pid}, @nested={0x1238, 0x2a, [@generic="137620ad6d9cfc837cc2013d60d3ca36dfe756700c81906ca638c3919f1d412e790884be4b50693eb41ca1ebc90f713b1bb6248416bb716c8f906d9b856e51a644fb70f391618a49a911e14b4c50c4e882807eaa29e57a9f7802c174521fb4a61661c1539f7aac764973da66ee49aad20357caa7b3aecaebaeffc739234c50a6f8647703ff7952920296adcf402708804f589902b6a91f3a425879b547845d1821824163b1f154eea187120331487b9e9390d88ca7947a7d1a99808cbf3790fe51cfdddc1cfc643c02078983b1a9963762f4cd522a8786dc7fa4c7e2c8a20fcefe44521be3332735d4", @generic="9704bf25853224479fd2bdca9716d13ea74c2eff31570834e462540d437ce26b23197cb25afc13453dd60f28a8cbd77ec8735f4f6dc3ac9e2463d513b9d0c36bdc7010602bfc8cf1803f7594c77729312852abc39df21c006bdf9fa738f6a5209fd5a581458ba1", @typed={0x8, 0x13, @pid=r3}, @generic="421d24e14fcd9cdbe479ed5fe33e873caaf7ce3c334d009e7cac5e94fb76533e69fd34b1ea01b88288110b49d581e7edac4b3b87553ec7ad5337750fea826e8c11276fe65cad26b46b3c962849a10d038cb284898866eb8c820870335ab6e86d489e3e7da24049dffe4065418782481ff9d4907f3d67c277c68b1684ba769774a3552e0b8aece10de4bf5af2e06329d8567d0777034c0b39ee6fbc0eb299219500c891137e27672cc84d69b39672be4bbccdbf8811313a9656a64239af896ce0fe1fa38f3af44de1782ca16dee", @generic="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", @typed={0xc, 0x7d, @u64=0x4b5609a6}]}, @nested={0x84, 0x5e, [@generic="f9750fe2ca8958847305eb65884b315bd50daf0b194b719890ff5c7a0fb6ae25aac652c2ad08cd09593abdeccc876aa9aa2c983584d43b2c4017dcf9043856f8835fca38b18170104523c15125ca8b1284b6b511be6196afbbf7aba5750108d0fd78d15c4f34158d1447e350d7e22365ec2196", @typed={0x8, 0x2c, @u32=0x85}, @typed={0x4, 0x53}]}, @typed={0x4, 0x4c}, @typed={0x1004, 0x2f, @binary="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"}, @nested={0xe0, 0x23, [@typed={0x8, 0x94, @ipv4=@dev={0xac, 0x14, 0x14, 0x19}}, @typed={0x8, 0x8f, @str=',\x00'}, @generic="057c7739ddd389b0a82a59c2295ea08ca424a92de11075179a", @generic="873950cda781494d11a476c389465bf9b604b5550f78ea6349937b1f4f31c0ad3516eb5449c84c0b9bd585baf0267fe1757fb81195471f75e1dcced3baa440b160d350041101fcc00d0a7614441c4c0e57a1a08981d0f7d0371c85b0fad2ce93b390664b5928a1d3323f2a5eedca3d60307da3378012b6297d0e008ea4f75d8ad136ef17d9e17b2adf82d3ad85c3ca0626c98038d02afd8a78d616fe0726874354e4513afa6bba0c", @generic, @typed={0x8, 0x53, @fd=r0}]}, @typed={0x8, 0x56, @str='${\x00'}, @nested={0x18, 0x49, [@typed={0x14, 0x69, @ipv6=@dev={0xfe, 0x80, [], 0x28}}]}, @typed={0x8, 0x61, @str='\x00'}, @nested={0x170, 0x63, [@typed={0x70, 0x21, @binary="5c79f2b32bf01b00158f89f5ea1ed8938787edc3a6261ad879c8fd24c21467a9fbd2ae659a99345f4b84ce20dbe2211f2879c0f9d43548bddb4c720ec37059bd7d64fee5d846ed5085ff5160f71e0cb5399cb49e919553085809e496ea349bb8fd716fcbed6c11b704f0"}, @generic="e19082e5061d22ea792def9ceee7c496c511727853b22d57ccc82dea4243df88ff411fda044735a4e117989b016ffcda1d6871f25bca6a9cd152d051d108cbd600a7fa4ceadeaa06323bf3e7804e654f03240e63962a0dc62e2b7d63f4ce6ac07f565aad14cd12f05224cc6b48a09645716349f8a84279eaa04c117b962f92bb55a0171b33eae5e16c2d51ec6ccf50c666e8775d5a2e5d4a20764ef41057bb5f92eed43c2cbd8a703027dc3748d5e670c8a4ca41490e9aa4521a2569eca6424314a9c5177e4e12ce0a2cba0934e48e6506fc279b9fb29dcc5de6f1e8350f9b6d63fdfee12791e0f54e5d884c30a7d99947ecb33783eac64308"]}]}, 0x2558}, 0x1, 0x0, 0x0, 0x4}, 0x800) 04:52:43 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 333.808263] IPVS: ftp: loaded support on port[0] = 21 [ 334.186663] chnl_net:caif_netlink_parms(): no params data found [ 334.271930] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.278571] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.287162] device bridge_slave_0 entered promiscuous mode [ 334.297468] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.304106] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.312797] device bridge_slave_1 entered promiscuous mode [ 334.352934] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 334.367416] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 334.401621] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 334.410602] team0: Port device team_slave_0 added [ 334.418552] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 334.427515] team0: Port device team_slave_1 added [ 334.435269] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 334.444045] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 334.608279] device hsr_slave_0 entered promiscuous mode [ 334.652843] device hsr_slave_1 entered promiscuous mode [ 334.823885] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 334.831667] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 334.867966] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.874544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.881744] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.888376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.996820] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 335.003511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.033495] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 335.049754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.060101] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.072012] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.087412] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 335.106833] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 335.113020] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.132463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.140777] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.147367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.217911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.226469] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.233052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.244603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 335.254370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 335.263442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 335.282616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 335.297267] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 335.314692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 335.323415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 335.339960] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 335.346650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 335.379756] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 335.404749] 8021q: adding VLAN 0 to HW filter on device batadv0 04:52:45 executing program 2: sched_setaffinity(0x0, 0x391, &(0x7f00000000c0)=0x11) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000340)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r1, &(0x7f00003aefc8)={0x0, 0xffffffffffffff73, &(0x7f0000847000), 0x1f2, &(0x7f000048a000)}, 0x0) sendmmsg$alg(r1, &(0x7f0000008fc0)=[{0x0, 0x1000000, &(0x7f00000030c0), 0x0, &(0x7f0000003100)}], 0x1, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1e) close(r0) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x80000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 04:52:45 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x101480, 0x18) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80a092b61c6c9b2e548559eb5b1cc2ac49bfcbd272b8de3aeba46d53677de658a89ea17e9779efc590c9d566b6cc7340a5a0a83d5ea8e94d63f9f21bfcca6c20f3e2747a642672573bfa00394bd6be183436a0308c"], 0x56) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 04:52:45 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2a, 0x400) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x9, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e20, @remote}}, 0xfffffffffffffff7, 0x6, 0x5, 0x400, 0x88}, &(0x7f0000000240)=0x98) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0xeff8}, 0x13a) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000a00)={&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000580)="c0", 0x1}], 0x1, &(0x7f0000000940)}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @dev}}}, 0x84) 04:52:45 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8ac2, 0x2900) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000039000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000140)="0f01c966ba2100ed260ff1860e0d0000c4e17dde000f20e035080000000f22e00f2082b9dd0800000f32c74424005582380ec74424020000c0fec7442406000000000f011c2466baf80cb8cc564080ef66bafc0c66ed0f01ca", 0x59}], 0x1, 0x0, &(0x7f00000001c0)=[@cstype0={0x4, 0x4}, @dstype3={0x7, 0xe}], 0x2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0xffffc}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f6ff6fa0c1d60"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 04:52:45 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000000)='./file0\x00', 0x0) link(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='./file1\x00') r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) unlink(&(0x7f0000000080)='./file1\x00') 04:52:46 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:46 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b0000000000000000000000000300000000000000000000000000000000000000ffffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000eddb00000000ffffffff00000000000000000000000000000000070000000000000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f000000000000000000000000240b048e6582d3ea00000000000010000000010000000000050000000000a85f001a4b0000000000000005000000aaaaaaaaaa0000000000000000007000000070000000a0000000000000000020000000000000020000000000000000000800000000000d00000000000000000000000000000000000000"]}, 0x1a1) r1 = socket$inet6(0xa, 0x100000002, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 04:52:46 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000000)=@l2={0x1f, 0x5865, {0x6}}, 0x80, 0x0, 0xffffffffffffff8b}, 0xfffffffffffffffe) [ 336.194611] kernel msg: ebtables bug: please report to author: Wrong len argument 04:52:46 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 336.250578] kernel msg: ebtables bug: please report to author: Wrong len argument 04:52:46 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x3, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000080)={0xfffffffffffffff7, 0xffffffff7fffffff, 0x981, 0x0, 0x101}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0x0, 0x6, 0xcef7, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="bca2ecbec190", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0}) 04:52:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/202, 0xca}, {&(0x7f0000000180)=""/221, 0xdd}], 0x2, 0x42d) 04:52:46 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x2, 0x20000) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x30, 0xa, 0x0, "17ff030000000000005a0f9cc0fbda7643ed12de15d5036177e48500"}) 04:52:46 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:46 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$int_out(r0, 0x80804535, &(0x7f00000000c0)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200100, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) 04:52:46 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x75, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000080)=0x6) mmap(&(0x7f0000008000/0x3000)=nil, 0x3000, 0x2000002, 0x10, r1, 0x0) close(r0) 04:52:46 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0af51f023c123f3188a070") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x80ffffff, 0xb, 0x0, 0x0, @tick, {}, {}, @addr}], 0x30) 04:52:46 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x201, 0x0) recvfrom$unix(r0, &(0x7f0000000200)=""/4096, 0x1000, 0x40002120, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffbf, 0x0) 04:52:47 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:47 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:47 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah\x00', 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vxcan1\x00', 0x10) 04:52:47 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x8, 0x35, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local}, 0xc) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x10, 0x0, 0x6) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) 04:52:47 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x3) r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000001140)='\'', 0x1}], 0x1, 0x1081804) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x5, {0x6}}, 0x18) inotify_init1(0x80000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) accept4$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x80000) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 04:52:47 executing program 0: r0 = socket(0x200000000000001f, 0x2, 0xfffffffffffffffe) sendmmsg(r0, &(0x7f0000005c00), 0x0, 0x40080) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 04:52:47 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:47 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000580)='./file0\x00', 0x0, 0x5) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000400)) r3 = fcntl$getown(r0, 0x9) kcmp(0x0, r3, 0x1, r0, r0) prctl$PR_SET_KEEPCAPS(0x8, 0x7) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000300)=0x100000000, 0x4) tee(r0, r1, 0x4000000000000003, 0xffffffffffffffff) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f00000001c0)={0xffff, 0x80, 0x80}) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/autofs\x00', 0x1, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@mcast2, @in=@multicast1}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@broadcast, @in=@remote}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000340)=0xe8) getuid() getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000440)) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f0000000000)='syz0\x00') getegid() clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) 04:52:47 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x1000000000000005, 0x80ffffff, 0x0, 0x0, @tick, {}, {}, @control}], 0x30) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000080)={0x0, 0x0, 0x44ed, [], &(0x7f0000000040)=0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000140)) [ 337.863423] protocol 88fb is buggy, dev hsr_slave_0 [ 337.869397] protocol 88fb is buggy, dev hsr_slave_1 04:52:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000b000)={&(0x7f0000000000)=ANY=[@ANYBLOB="7800000013000904000000000000000000000000", @ANYRES32=r1, @ANYBLOB="000000000008001b000000000050002b004c00010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x78}}, 0x0) [ 338.025571] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.058430] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. 04:52:48 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r2, 0x4, 0x2801) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000380)='\n', 0x1) close(r1) fsetxattr$security_smack_transmute(r0, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1) 04:52:48 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00004aeb5c)=@isdn={0x22, 0x9, 0x5, 0xfffffffffffffffb, 0x9}, 0x80, 0x0, 0x217, 0x0, 0x2f7}, 0xfffffffffffffffc) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000241ff0)=[{&(0x7f00009a9fff)=""/1, 0x1}], 0x1}, 0x0) 04:52:48 executing program 0: r0 = socket$inet(0x2, 0x3, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f00006ed000), &(0x7f0000000000)=0x4) 04:52:48 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000560081aee4f80b00000f00fe078bc36f16000072fd670c87594d0063dac37b", 0x23}], 0x1}, 0x0) [ 338.544019] print_req_error: I/O error, dev loop0, sector 0 flags 801 [ 338.544256] print_req_error: I/O error, dev loop0, sector 256 flags 801 [ 338.557752] Buffer I/O error on dev loop0, logical block 32, lost async page write 04:52:48 executing program 0: prctl$PR_SET_NO_NEW_PRIVS(0x22, 0x1) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffc00, 0x490040) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) getsockopt$inet_mreqsrc(r0, 0x0, 0x2e, &(0x7f0000000080)={@empty, @loopback, @multicast2}, &(0x7f00000000c0)=0xc) 04:52:48 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x3) r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000001140)='\'', 0x1}], 0x1, 0x1081804) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x5, {0x6}}, 0x18) inotify_init1(0x80000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) accept4$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x80000) sendfile(r0, r0, 0x0, 0x2000005) ioctl$LOOP_CLR_FD(r0, 0x4c01) 04:52:48 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair(0x1f, 0x80000, 0x3f, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x400, 0x0) r4 = socket(0x1e, 0x5, 0x0) r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x4}) epoll_wait(r5, &(0x7f0000000080)=[{}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x2, @remote, 0x8001}, @ib={0x1b, 0x8dce, 0x7, {"3c43d4c60a631afa0818be343549e502"}, 0xbe, 0x86f8, 0x3}}}, 0x118) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x6}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, r7, 0x208, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xc}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x15, 0x200, 0x70bd28, 0x25dfdbfe, {0x1e}, [@typed={0x8, 0x8f, @ipv4=@loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000200)=[@cstype3], 0x1) 04:52:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000939ff4)={0x2000201f}) epoll_wait(r1, &(0x7f0000000140)=[{}, {}], 0x19e1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000000)={0x3ff, 0x6, 0x0, 0x7, 0x0, 0x80, 0x7ffffffd, 0x40, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r3, 0x1e, "eeac5c205a0a705f3d7252eac13f9d0162a8ac6b10ec9f372abafc0d18c2"}, &(0x7f0000000100)=0x26) 04:52:49 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x7fff, 0x34734752, 0x8197, 0x80000001, 0x2, @discrete={0x4, 0x3}}) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xffffffff, 0x4000) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000000700000000000000000000000000000000000008000000000000000000000000000000"]}) [ 339.173195] print_req_error: I/O error, dev loop0, sector 128 flags 801 [ 339.180096] Buffer I/O error on dev loop0, logical block 16, lost async page write [ 339.188272] print_req_error: I/O error, dev loop0, sector 136 flags 801 [ 339.195225] Buffer I/O error on dev loop0, logical block 17, lost async page write [ 339.203227] print_req_error: I/O error, dev loop0, sector 144 flags 801 [ 339.210157] Buffer I/O error on dev loop0, logical block 18, lost async page write [ 339.218168] print_req_error: I/O error, dev loop0, sector 152 flags 801 [ 339.225112] Buffer I/O error on dev loop0, logical block 19, lost async page write [ 339.233116] print_req_error: I/O error, dev loop0, sector 160 flags 801 [ 339.239981] Buffer I/O error on dev loop0, logical block 20, lost async page write [ 339.248060] print_req_error: I/O error, dev loop0, sector 168 flags 801 [ 339.255071] Buffer I/O error on dev loop0, logical block 21, lost async page write [ 339.263131] print_req_error: I/O error, dev loop0, sector 176 flags 801 04:52:49 executing program 2: getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) getgroups(0x1, &(0x7f00000000c0)=[0xffffffffffffffff]) chown(&(0x7f0000000000)='./file0\x00', r0, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sync() getgroups(0x7, &(0x7f0000000140)=[0x0, r1, r1, 0x0, r1, r1, 0x0]) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dsp\x00', 0x200000, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) fchmodat(r2, &(0x7f0000000180)='./file0\x00', 0x80) r5 = socket$inet(0x2, 0x20000000, 0x80000000) write$cgroup_type(r4, &(0x7f0000000480)='threaded\x00', 0x9) r6 = openat(r5, &(0x7f00000001c0)='./file0\x00', 0x2, 0x16a) fchmodat(r6, &(0x7f0000000200)='./file0\x00', 0x101) sendmsg$unix(r3, &(0x7f0000000440)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000280)="c145e039f6555da2842c8e6cccc91174cbfabfce38c8dff469d9275a2ffd8252eb098936417233046f126ca13be96da53d387fee8da5a5240fa819748540f214f92f28a177045648f0c36bc54285ca7c08c793231b25c9cade69d8d93abd1db5461e8f13233d2d64", 0x68}], 0x1, 0x0, 0x0, 0x4}, 0x1) socket$bt_hidp(0x1f, 0x3, 0x6) r7 = shmget$private(0x0, 0x2000, 0x54000018, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_LOCK(r7, 0x3) shmctl$SHM_LOCK(r7, 0x3) semctl$IPC_RMID(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 04:52:49 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x70, 0x10000, 0x4, 0xffffffffffffff80, 0x0, 0x0, 0xfffffffffffffffd, 0x4890, 0x1, 0x2, 0x4, 0x7fffffff, 0x6, 0x1, 0x8, 0x1, 0x36e, 0x4, 0x1, 0x6, 0x7, 0x9, 0x5, 0x7, 0xb6, 0x3b, 0x5, 0x4, 0x7fff, 0x4, 0x5d, 0x3f, 0x80000000, 0x200, 0x5, 0x4, 0xfff, 0x0, 0xff, 0x4, @perf_config_ext={0x6, 0x10000}, 0x1000, 0x5, 0x8, 0x6, 0x8, 0x0, 0xd4}, 0xffffffffffffff9c, 0xd, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)={{0xcc, 0x9, 0x0, 0x258, 0x2a, 0x4, 0xca, 0x7}, "08c76bf8931be526321dc2b16b97bd9866f62d20c23c6dc30eb629bebc85beb58c1721739716c2c456811ef633f9604dc855", [[], [], [], [], []]}, 0x552) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r3, 0xc0185500, &(0x7f0000000180)={0x100320}) unshare(0x200) ioctl$int_in(0xffffffffffffffff, 0x800000c0045005, &(0x7f0000000040)) 04:52:49 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 339.269986] Buffer I/O error on dev loop0, logical block 22, lost async page write [ 339.278225] print_req_error: I/O error, dev loop0, sector 184 flags 801 [ 339.285180] Buffer I/O error on dev loop0, logical block 23, lost async page write [ 339.293208] Buffer I/O error on dev loop0, logical block 24, lost async page write 04:52:49 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2201, &(0x7f0000000240)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x7fffe, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0xc, {0x4f, 0x2, 0x30, 0x1}, {0x7, 0xc3, 0x100, 0x7ff}, {0x0, 0x80000000}}) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000080)={0xd, {0x7f, 0x40, 0x3ff, 0x100}}) 04:52:49 executing program 4: unshare(0x4000000) r0 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="2ce34da68f8a5fb5444fc5afe55fcfc38dce6a591b678354e4729c8e04e3c8b9399b71de66caad94eb9886e87a7e4d736620a88dd592329ad81440bfe554fc7c484c1d25c53e2d2b9d37df647b84940a411904267c47596952580d384b092e46b4e83b1f1d44041525ce75fd201dda6ad45d1fa11346718ee3d87d4eac67cdaf0c99c7eeed7e9c50afd07cd9b390944bd595cc78c0adf5be6dea0d1520f1e28bbea4553283b4e7c030617485a248a71ad9f529020e8bb5be83e6f31b0a03612826bab10812cb9e207895cd5927f23e9f7210e7e91e6dc70456faf46a89084f2ae7cdf21427aa55df7f7fc5410201129b6a6fcc", 0xfe1b, 0xfffffffffffffff8) keyctl$describe(0x6, r0, &(0x7f0000000180)=""/36, 0x24) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) fchown(r1, 0x0, 0x0) 04:52:49 executing program 1: r0 = socket(0x3, 0x2, 0x800) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) recvmmsg(r2, &(0x7f0000000600)=[{{&(0x7f0000000400)=@hci, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1, &(0x7f00000005c0)=""/62, 0x3e}, 0x81}], 0x1, 0x140, &(0x7f0000000640)) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r2, &(0x7f0000000380)={0x78, 0xfffffffffffffffe, 0x8, {0x6, 0x5, 0x0, {0x6, 0x7, 0x3, 0x5e060c05, 0xffff, 0x3, 0x6, 0x0, 0x100000001, 0x1, 0xb6, r3, r4, 0x3, 0x1e}}}, 0x78) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000140)={0x0, 0x3f, 0x100e, 0x1}) capset(&(0x7f0000000b40)={0x20080522}, &(0x7f0000000b80)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000e00000/0x200000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000e93000/0x3000)=nil, &(0x7f0000e96000/0x1000)=nil, &(0x7f0000e82000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000f0d000/0x1000)=nil, &(0x7f0000e4f000/0x4000)=nil, &(0x7f0000e4b000/0x4000)=nil, &(0x7f0000000000)="497d302e0a352fde56aee3a1455844121d82021a068ed5edc25ae427dc6993c06721b728eff3e606d0202bb3e446651a32c162ea27eabe0d3075b899462f4456c2b4bd4d362b0a6c16fbbdb2a74854b2f0", 0x51, r0}, 0x68) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 04:52:49 executing program 0: unshare(0x400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00006f3ff0)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001fc8)={&(0x7f0000006000), 0x10, &(0x7f0000000000)={&(0x7f0000006fb8)=ANY=[]}}, 0x0) ioctl$KDGKBLED(r0, 0xc0045103, &(0x7f0000000000)) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)) 04:52:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x2, [0xffffffffffffff0f, 0x8]}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e\x02qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;Q\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x48) 04:52:50 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:50 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000380)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000003c0)={0x2, 0x3, 0x9}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000440)={0x10800000011, 0x4004000000001, 0x0, "e5d6643b1bdf5e700ceabd7ce700a1468fe351a06e3de92acc3c00"}) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000001c0)={0x9, 0x6, r3, 0x0, r4, 0x0, 0xffffffffffffc64e, 0x3ff}) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000340)) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$inet6_MCAST_LEAVE_GROUP(r5, 0x29, 0x2d, &(0x7f0000000100)={0x42, {{0xa, 0x4e24, 0x2d, @dev={0xfe, 0x80, [], 0x14}, 0x7ff}}}, 0x88) 04:52:50 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8970, &(0x7f0000000040)={'veth1_to_bond:\x00', 0x0}) close(r2) ioctl$int_in(r2, 0x0, &(0x7f0000000000)=0xe30) close(r1) 04:52:50 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='\x00', 0x0) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000140)=0xffffffffffffffff, 0x1) write$P9_RREADDIR(r0, &(0x7f0000000040)=ANY=[], 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='overlay\x00', 0x2, &(0x7f00000002c0)='\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0xe100, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f00000001c0)={0x0, 0x3, 0x1f, 0x3, 0x2}) 04:52:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x77, 0x0, [0x40000106, 0x0, 0x40000081], [0xc1]}) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64\x00', &(0x7f00000000c0)='/dev/kvm\x00', 0x9, 0x0) 04:52:50 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) r1 = socket$inet6(0xa, 0x80803, 0x2) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x2000001400008912, &(0x7f00000001c0)="0adc1f123c123f3188b070") setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x100, 0x4) write$binfmt_elf32(r1, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x12020, 0x0, 0x0) 04:52:50 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xe2ef, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') r4 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0xffff, 0x40000) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0x33c, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="77764a46a9f5679e0390b05471a12e816f0e0c34dd40906b4e8be513fb3850a65766374f113a91dd1d3327bdaece9cb60e16946d3caa6189c56f1b16843c868d1c32c3d9a7cceddce44a0ffe1589a2903e38dbcc89a5d8cc0899f8589042dc7e35ae0ce4d2b30f85fb42e5a43fe95941254c94975d1947d2cb88c2b8cc8e80794943af36d81e011e473d1252da65196d24017f5ca2fc57730d9e65729390592ef8cda1af482d02df945b641fab98ea10329a78d90eee5dc414624a3935d96687236dbd3f4e2246fc700b38699140d5cee4306c3e8ca52383ee96b231cd32fc62addb0f70acaa9a47aa2193a93b3982ef36d71868", @ANYRES16=r3, @ANYBLOB="020128bc7000fedbdf2506000000380007000c000400000000000000000008000200c9a800000c00040020000000000000000c000400090000000000000008000200030000001800070008000100080000000c0004006800000000000000240002000800020000000000080002000100000008000100010100000800020006000000400001003c0002000800020000000000080003007500000008000400ffffffff080004000100000008000400ff01000008000300f7ffffff0800020000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0x4000041) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000080)={{0x6, 0x5, 0x9, 0xac, 0x800, 0x1}, 0x9}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f00000003c0)={0x7b, 0x0, [0x200000490]}) [ 340.561576] kvm [12072]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 04:52:50 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3b539bd2611a83f39b933a316614ffa46537caf0a17ea0b70e5edc2329ce5090"}) ioctl$RTC_PIE_ON(r0, 0x7005) getsockopt$inet_buf(r0, 0x0, 0x26, &(0x7f0000000000)=""/100, &(0x7f0000000080)=0x64) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0xffff) [ 340.727796] kvm [12072]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 04:52:50 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:50 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x420380, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) bind(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x3, 0x4, {0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0x26}, 0x1}}}, 0x80) r2 = socket$key(0xf, 0x3, 0x2) chdir(&(0x7f0000000100)='\x00') unshare(0x20400) recvmmsg(r2, &(0x7f0000002540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) 04:52:51 executing program 2: r0 = socket$inet(0x2, 0x3, 0x10000000002f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip_vti0\x00', 0x10) sendmmsg$unix(r0, &(0x7f00000009c0)=[{&(0x7f0000000200)=@file={0x0, './file0\x00\x00\x00\x00\x00\x00\x00\x00\x05\xb4\x00'}, 0x6e, 0x0, 0x22c}], 0x1, 0x0) 04:52:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @rand_addr=0x1c00000, {[@rr={0x7, 0x3, 0x276c}, @rr={0x7, 0x3}]}}, @gre}}}}, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000400)=""/4096) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'veth1_to_bridge\x00', 0xffffffffffff8000}) 04:52:51 executing program 1: r0 = socket$kcm(0x2, 0x1000000000003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000400)=@in={0x2, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x1}, 0x0) 04:52:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x17) sendmsg$nl_route_sched(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x3e4, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}}, 0x0) recvmsg(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000480)=""/20, 0x14}, {&(0x7f0000001280)=""/94, 0x5e}, {&(0x7f0000001300)=""/187, 0xbb}, {&(0x7f00000013c0)=""/196, 0xc4}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/74, 0x4a}, {&(0x7f0000001540)=""/246, 0xf6}, {&(0x7f0000001640)=""/153, 0x99}, {&(0x7f0000001700)=""/130, 0x82}], 0x9}, 0x0) fcntl$notify(r0, 0x402, 0x80000032) 04:52:51 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:51 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x4, 0x28000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r0, 0x0, 0x17, &(0x7f0000000280)='posix_acl_access:-%/[#\x00'}, 0x30) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x800, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0x0, 0x1f, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x1}, 0x0, 0x0, r1, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="0800d80072d4cc7331bd5d3075e72fb03c69515e2bb248e523067e16c9ac769d12638090f379c2a8edb0d1b63325cb1d5c9267e77208c67d283c0ecfab64445e1c88a5f562d1f7b6cc5c1c1bda746fea181647ed548ac3f9db84a149582cfdd888c0e1483c14ad14278e220e92187dd3b2fc1f3e2b43016b950a9def4a363c9a3c7936fc5803f49934be42338443b4c30a91ed03960835323f883ee9deac0a2f466045c6caa6aaff0346df9a0a5f7e7655d1c8d3caadd1fb66b93285e7fd6e3c9f3aa3cbe6715fa2de7d8c265509c4176aea644e56c85062d8"], 0xe0) keyctl$update(0x2, 0x0, &(0x7f0000000300)="a8", 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r2, 0x0, 0x4, &(0x7f0000000000)='!))\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r5, 0x4) sched_getscheduler(r4) 04:52:51 executing program 1: r0 = epoll_create1(0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000280)=ANY=[@ANYBLOB="03a5e1cba64225eee100150000000000000000000042dd00000000000000000000000000000000000000000000000000000000001500000000002417b42020fa80edc1477dfe000b0f79824604d121e3f77467af269aefc37883533ea6137f0c25"]) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x200) getsockopt$inet_dccp_int(r3, 0x21, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0x4) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000100)) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) ioctl$KDSIGACCEPT(r4, 0x4b4e, 0x5) 04:52:51 executing program 4: socketpair(0x22, 0x2, 0x11, &(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x5) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x8, 0x9, 0x201c, 0x8, 0x0, 0x7, 0x0, 0x7}}) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000001c0)={'syzkaller0\x00', 0x5}) [ 341.722698] delete_channel: no stack [ 341.726907] delete_channel: no stack 04:52:51 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000003a80)='./file0/file0/file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x1, 0x0, 0x0, 0x0, 0xf44f, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x8}) r2 = syz_open_pts(r1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt(r3, 0x0, 0x2, &(0x7f0000008d00)=""/130, &(0x7f0000008dc0)=0x14c) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) sendto$inet(r3, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) clock_gettime(0xfffffffffffffffe, &(0x7f0000005300)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f0000000280)=""/148, 0x94}], 0x2, &(0x7f0000000340)=""/139, 0x8b, 0x1}, 0xffffffff}, {{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000480)=""/38, 0x26}], 0x2, &(0x7f0000000500)=""/198, 0xc6, 0x2}, 0x1ff}, {{&(0x7f0000000600)=@vsock, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000700)=""/15, 0xf}], 0x3, 0x0, 0x0, 0x7cab}, 0xffffffffffffff64}, {{&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000900)=""/238, 0xee}], 0x2, 0x0, 0x0, 0x9}, 0x40}, {{&(0x7f0000000a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000b80)=""/248, 0xf8}, {&(0x7f0000000c80)=""/29, 0x1d}, {&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/255, 0xff}, {&(0x7f0000000ec0)=""/57, 0x39}, {&(0x7f0000000f00)=""/130, 0x82}], 0x8, &(0x7f0000001040)=""/20, 0x14}, 0x800}, {{&(0x7f0000001080)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)=""/43, 0x2b}, {&(0x7f0000001140)=""/24, 0x18}], 0x2, &(0x7f00000011c0)=""/150, 0x96, 0xfffffffffffffe00}, 0x200}, {{&(0x7f0000003340)=@xdp, 0x80, &(0x7f0000003500)=[{&(0x7f0000001280)=""/55, 0x37}, {&(0x7f00000033c0)=""/151, 0x97}, {&(0x7f0000003480)=""/88, 0x58}], 0x3, &(0x7f0000003540)=""/190, 0xbe, 0x100}, 0x1ff}, {{&(0x7f0000003600)=@nfc, 0x80, &(0x7f0000003800)=[{&(0x7f0000003680)=""/175, 0xaf}, {&(0x7f0000003740)=""/114, 0x72}, {&(0x7f00000037c0)=""/7, 0x7}], 0x3, &(0x7f0000003840)=""/105, 0x69}, 0x10001}, {{&(0x7f00000038c0)=@nfc, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003940)=""/32, 0x20}, {&(0x7f0000003980)=""/216, 0xd8}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/45, 0x2d}, {&(0x7f0000004b00)=""/189, 0xbd}, {&(0x7f0000004bc0)=""/130, 0x82}], 0x6, 0x0, 0x0, 0x2000}, 0x7ff}, {{&(0x7f0000004d00)=@can, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004d80)=""/8, 0x8}, {&(0x7f0000004dc0)=""/228, 0xe4}], 0x2, 0x0, 0x0, 0x7}, 0xffffffffffffe4f0}], 0xa, 0x100, &(0x7f00000051c0)={r4, r5+30000000}) connect(r3, &(0x7f00000012c0)=@nl=@unspec, 0x80) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000005200)='/dev/zero\x00', 0x404040, 0x0) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f00000052c0)) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000075c0)={{{@in6=@dev, @in6=@loopback}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000076c0)=0xe8) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000007700), &(0x7f0000007740)=0xc) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000007780)) lstat(&(0x7f0000007900)='./file0\x00', &(0x7f0000007940)) read(r2, &(0x7f0000000280)=""/1, 0x1) 04:52:51 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:51 executing program 2: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00p\x80\x00', 0x200000000000001}, 0x18) ioctl(r0, 0x8936, &(0x7f0000000000)) [ 341.873775] delete_channel: no stack [ 341.877629] delete_channel: no stack 04:52:52 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x202) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@initdev, 0x0, 0x1, 0x3}, 0x20) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000080)) 04:52:52 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:52 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000000)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000140)={0x0, 0x1}) 04:52:52 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x8000001, 0x0, @value}) fstatfs(r0, &(0x7f0000000100)=""/241) 04:52:52 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000cab5b3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000d6af50)={{0x80}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000c03000)={{0x20000000000080}, '\nL\xea\xa0]\xad\x12n\x00\x00\x00\x02\xa1V\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xd5vX\x97\x01\xa4', 0x77, 0x10000a}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer2\x00', 0x0, 0x0) dup2(r1, r1) 04:52:52 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:52 executing program 4: mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ff9000/0x1000)=nil) mlock(&(0x7f0000ff9000/0x2000)=nil, 0x2000) 04:52:52 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:52 executing program 2: unshare(0x8000400) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x13, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000018c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001900)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000001a00)=0xe8) getgroups(0x7, &(0x7f0000001a40)=[0xee00, 0xee01, 0xffffffffffffffff, 0x0, 0xee00, 0x0, 0x0]) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001a80)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001ac0)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000001bc0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001c00)={0x0, 0x0, 0x0}, &(0x7f0000001c40)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001c80)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001cc0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000001dc0)=0xe8) lstat(&(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = gettid() getresuid(&(0x7f0000001ec0)=0x0, &(0x7f0000001f00), &(0x7f0000001f40)) r13 = getgid() r14 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002280)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000002380)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000023c0)={0x0, 0x0, 0x0}, &(0x7f0000002400)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002440)={0x0}, &(0x7f0000002480)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000024c0)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}}}, &(0x7f00000025c0)=0xe8) lstat(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000026c0)={0x0}, &(0x7f0000002700)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000002740)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000002840)=0xe8) stat(&(0x7f0000002880)='./file0\x00', &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = getpid() r24 = geteuid() r25 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002f00)={0x0}, &(0x7f0000002f40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000002f80)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000003080)=0xe8) r28 = getgid() sendmmsg$unix(r1, &(0x7f0000003180)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001800)=[{&(0x7f00000000c0)="b9b41790652d8394a0cea94822a2486271c5678455131692d42be0f7a9f14e919b89d8624df9073ae3450d2e36f71a3bf81cddaabc7bd202dae9301fc08744bc7a5b1318e10d6f9966c2ed41743a5479ca769214e98226ce84319ffe6275ae07a391d7d7db1b5346ef3ebe3e955355a67b8bdf066df12d6fddb8654167e2", 0x7e}, {&(0x7f0000000140)}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="89faea0b4cc1e35f0d623a5af78b4157f5dd6509f85b4146203a311ebb5176d4a24f00e9b39f5ab9f1b7bb1108c7f1e9e39c11a2b8216581b309eb673ca431b7a8d3f4d45b0dd9167204b55eebc2ad0602ceb8367482f64574ae5d7ab81496cc8a7ce4c58c973bfa2827fe436be296f907d53e667a5943cf6067f34f2a87ffdef63303ddfe423ccb00c7ad4081e6409ced", 0x91}, {&(0x7f00000013c0)="04464751f81c10ccca6587d81da4695d1de6e417cd0177cf0a3246a9c9c7fe76b5d5c793db24e184f91f79bc7f731a532511fa3b0001656e4b0ec8f9114cf7a6de93b93f3b6e4eeb3022d14a835000ba4c30d1dc883625085bfe1222b1ffd44fd030ce094041e2fb2383275a384da63e1fcef16fe278605950ba16f368d9774f96c92c1179a94ce148ae6cfceeac981c33951e4169407f5b6dbf72a82f84daeb349869a072fe18c76d5b81d4214984dd788fe5b8eaa5ead145c61703566ae0737a3e25598a34c5b66d326150217ed8228c78b815d22733f2c941da0e490b7fa2fe1f48264b5b7b308c", 0xe9}, {&(0x7f00000014c0)="b5b30ae485b88abec9a4148105f7c9ebb300cbd03b81cf5706e52fe40e01b30dbba31597566138007e98071559bbbd8ac3aef1281a1a4bceaf9f5c47ed5e5aa9c9f3cd934ac0e7a1905b9e81b4c2a21af063ca6b0e8eb613476034827c70530c230922ebfdfe3e472d80bc94700e70bd230a178eb068bfd5402cc1d2483b40c749dfeb3f4d282beecbd57be77cb97c9ee466520bacfda461fbaae2f12140e6b1b0ed2380537ce8e0916034f8cb788dd5e0f843766729de2f125dff36f14a7c268e34f8133039493cac2f48faf62fecbf15400cca24643cca4130ca24", 0xdc}, {&(0x7f0000000240)="a0fe41752c345d9d32bcc58fbd41af89572d8688d17ecdbfd84f0445ee443f167c5e49f5324158d839de066c83f77d9ea578c656c205eb393ec8b40c502636ae72bfa8d526dd1598415cbb431aa7bb07b5dc74d989194d", 0x57}, {&(0x7f00000015c0)="dc13bf29ef884707a8737ec0551574f5ade2c82a8458617f075a47ec8e8f480883aac808b3a0984df441c9ad4a59b6daf5a1b568bd0c416df1f22632445037643e4d87f9f7e78d628d673474947f8cd6b8fccb058ee4098e4755a11515bc0713ad597406f675fc11feba771da638a56261192d00ea3af8fda89301140cbc234fe04c651a9cc31126e0b390a63806676638665b35036d2e256284c943fe42897e8e2a6b7e1e8a240cbc7e2c9916d4", 0xae}, {&(0x7f0000001680)="8a1adffc01c07a76900cf6616f17db08a7d86baeab7803c6a2bb679c0f2818cf5fb3adb7e8450138352acaabf84a37f6cdd9df7951c0eefda4ce52eaa324e4b38651163e3a05dc9f1b4f64036e23762272b14c080b2833b5966602d16279d4e1cfdd0103fdd252864a729d087c61cf71dd6e7cec600d158aece0ff774c59ec1d05afbfd29f549919c57d4a7da25f9c0ad9afb61ccac8e4828849876b44ced06b53a6", 0xa2}, {&(0x7f0000001740)="ab3c53b6814fbf632f2c33ffe92a5f38aefd5bdba061fcb64c62b12e0e36a9106660dc6ac805d4ba800596e3959d54f75e011f9490005253eaa40b75bd738b5ae71b3d6f63f9660e4693270bae9675cab60d11a2d1f16fed0e5ff975a724fbbd6e8b5ec82a2a3e77cfc92494ab5bc6adb2ad9df6e488de4100780f017250f9838b71", 0x82}], 0xa, &(0x7f0000001f80)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}], 0x140, 0x40840}, {&(0x7f00000020c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002140)="e6d163e3d930e252959596beab5b409f0bf0450191e1c4741c0f130ba96c24d8e343ebac325aec733a536b5803d8fec28f64a59d6533a4eb6fe393f044247e2860df07adf788dfc9b768612e59afd75dc2b01c1910338fde4b620c4f63ff5277edb042eac280dccd7ecb045d819451728337c3c07a513515d44e3edb80d6783aa0dc6f5d9ac8944a846a217320fd17bea4a6010635218d91728876e6055cd2240e73f8a7ecd57ac12c81949d510f9e226f7f54c603cab97d7816ce8fd742a138a33f7b4a31dcd5bc3a08612bdb78201ff094b4be27", 0xd5}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="200000000000a2ac8d9a568400009f1776338a015a1f00000000000000a585c4de20e17f70d3acbe8e80ef25cce7897bab21a852ad14aa3ef3144091183060fae0d08ea4a9a1e6938be11a99417a0ae4dfe4c1c0880870aed4cfb1b14d3dd3df5cd805b4c11df53c28c33117a3481a3e5f3b8ba67eec51552de258276aad14bdfbc4323e48df0a2d21", @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r20, @ANYRES32=r21, @ANYRES32=r22, @ANYBLOB='\x00\x00\x00\x00'], 0xe8, 0x20000040}, {&(0x7f0000002a40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002ac0)="3bfa42fa1f9f87a5db7c9d416d2f9155b249a000aaf2495abb71ca666ba6db2cef3b0042f149e8b095c1e3e758d01da92406a58ede4402f0b999c72aece5c2af2e3fbf8f6a93a7a76343909304dcf590582a4a02a3a84cbf2749b8c3b1d353b3da06c4cec1c03ac4", 0x68}, {&(0x7f0000002b40)="7bd4fc490ccb3e4ffa2fa124c05b05e2a1dc27d7b4842d1328e69f322edfd558a03205f95ccae52d20897c670d5cfb51ef203a45205890bd5fca9a7ff144b411b7a6f0e8fc59982fc53744c0266fa95abf804a3c3730cf4d77d7862f771fcac832b56274536eb6cd25e9aa63706fc178d279b5833007596eb121bb3dc1701c96b1ac2ba283fe5694511142508f04e6821fa048e0afc05c4ec0803601ad53d53e6f1c7b35859be0e6b2deb38fcbca59a4fe2074dc89dd911258680c20a20992ce8c1788c0ec5f7e1a4ca4fd984cafe739d0979bbbdf2a01d3245ae2a183840b0b4b61b0a63c00635594dea86e287ddc7d307073", 0xf3}, {&(0x7f0000002c40)="ec75ce6cc41c6dbd3e085c6ab2da89d56898375738a74021825e02eecda336e145ff7c7bc33e75cff927522131eddb7f3eab8b3eb42e0971810dfbe0ad502b38a0a26729eba742857c1a4283d5f96cc0a6e7bfc8e80dfbd9", 0x58}, {&(0x7f0000002cc0)="e9c0104220d53105eb6e4b15379aae1c62dbf25b4f2e486ae84dafac2df8cedce7525d4d06587e724a97abbc1b46cf548d04986ca11ad15e9baeb0fd8c60ed360ff05c492055d87cf97b3d7777df6e5468f27b200926f758709f5768c2cea4f26d6f2e32e4442cf61d7fb50b6eb601f69e774b53a5f91d38d67e20fc99af4eb52d0aa5520c958148918a955af7eb44960414002bbab02e9ecd035d78ff64c2e1e28018e137435e7533654d4aa41b1deb5f01c9ecd9f9ec20c1b51ed7de87a5730346dec9c5d5aa898040e83c020469b6d30c77c83c87d3ddc07eb4f80f9723", 0xdf}], 0x4, 0x0, 0x0, 0x800}, {&(0x7f0000002e00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002e80)="76aace8c3d40cc16d789d3738475a880", 0x10}], 0x1, &(0x7f00000030c0)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x10}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r26, r27, r28}], 0xb8}], 0x4, 0x40) r29 = mq_open(&(0x7f0000000180)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x6e93ebbbc80884f2, 0x40, 0x0) mq_notify(r29, &(0x7f00000002c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) pread64(r29, 0x0, 0x0, 0x0) 04:52:53 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) r0 = open(&(0x7f0000003a80)='./file0/file0/file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)={0x1, 0x0, 0x0, 0x0, 0xf44f, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x8}) r2 = syz_open_pts(r1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt(r3, 0x0, 0x2, &(0x7f0000008d00)=""/130, &(0x7f0000008dc0)=0x14c) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x22}]}, 0x10) sendto$inet(r3, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) clock_gettime(0xfffffffffffffffe, &(0x7f0000005300)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000004f00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/195, 0xc3}, {&(0x7f0000000280)=""/148, 0x94}], 0x2, &(0x7f0000000340)=""/139, 0x8b, 0x1}, 0xffffffff}, {{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/114, 0x72}, {&(0x7f0000000480)=""/38, 0x26}], 0x2, &(0x7f0000000500)=""/198, 0xc6, 0x2}, 0x1ff}, {{&(0x7f0000000600)=@vsock, 0x80, &(0x7f0000000740)=[{&(0x7f0000000680)=""/89, 0x59}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000000700)=""/15, 0xf}], 0x3, 0x0, 0x0, 0x7cab}, 0xffffffffffffff64}, {{&(0x7f0000000780)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000900)=""/238, 0xee}], 0x2, 0x0, 0x0, 0x9}, 0x40}, {{&(0x7f0000000a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000b80)=""/248, 0xf8}, {&(0x7f0000000c80)=""/29, 0x1d}, {&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/255, 0xff}, {&(0x7f0000000ec0)=""/57, 0x39}, {&(0x7f0000000f00)=""/130, 0x82}], 0x8, &(0x7f0000001040)=""/20, 0x14}, 0x800}, {{&(0x7f0000001080)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001100)=""/43, 0x2b}, {&(0x7f0000001140)=""/24, 0x18}], 0x2, &(0x7f00000011c0)=""/150, 0x96, 0xfffffffffffffe00}, 0x200}, {{&(0x7f0000003340)=@xdp, 0x80, &(0x7f0000003500)=[{&(0x7f0000001280)=""/55, 0x37}, {&(0x7f00000033c0)=""/151, 0x97}, {&(0x7f0000003480)=""/88, 0x58}], 0x3, &(0x7f0000003540)=""/190, 0xbe, 0x100}, 0x1ff}, {{&(0x7f0000003600)=@nfc, 0x80, &(0x7f0000003800)=[{&(0x7f0000003680)=""/175, 0xaf}, {&(0x7f0000003740)=""/114, 0x72}, {&(0x7f00000037c0)=""/7, 0x7}], 0x3, &(0x7f0000003840)=""/105, 0x69}, 0x10001}, {{&(0x7f00000038c0)=@nfc, 0x80, &(0x7f0000004c80)=[{&(0x7f0000003940)=""/32, 0x20}, {&(0x7f0000003980)=""/216, 0xd8}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/45, 0x2d}, {&(0x7f0000004b00)=""/189, 0xbd}, {&(0x7f0000004bc0)=""/130, 0x82}], 0x6, 0x0, 0x0, 0x2000}, 0x7ff}, {{&(0x7f0000004d00)=@can, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004d80)=""/8, 0x8}, {&(0x7f0000004dc0)=""/228, 0xe4}], 0x2, 0x0, 0x0, 0x7}, 0xffffffffffffe4f0}], 0xa, 0x100, &(0x7f00000051c0)={r4, r5+30000000}) connect(r3, &(0x7f00000012c0)=@nl=@unspec, 0x80) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000005200)='/dev/zero\x00', 0x404040, 0x0) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f00000052c0)) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000075c0)={{{@in6=@dev, @in6=@loopback}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000076c0)=0xe8) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000007700), &(0x7f0000007740)=0xc) ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000007780)) lstat(&(0x7f0000007900)='./file0\x00', &(0x7f0000007940)) read(r2, &(0x7f0000000280)=""/1, 0x1) 04:52:53 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @multicast2}, 0x0, 0x3, 0x3, 0x2}}, 0x2e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$packet_buf(r2, 0x111, 0x4000000004, 0x0, &(0x7f0000000100)) 04:52:53 executing program 4: setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x490000, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000100)={'bridge_slave_0\x00', {0x2, 0x4e20, @broadcast}}) connect(r0, &(0x7f0000000080)=@ipx={0x4, 0xe00000000, 0x8001, "21b1630b93bc", 0x2}, 0x80) r1 = request_key(&(0x7f0000000140)='.request_key_auth\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='/dev/audio\x00', 0xfffffffffffffff9) r2 = add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="ca803cf1", 0x4, 0xfffffffffffffff9) keyctl$unlink(0x9, r1, r2) setrlimit(0x9, &(0x7f0000000000)={0xfffffffffffffffe, 0x9}) 04:52:53 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:53 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x9) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8900, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'bond_slave_0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000003100)=[{{&(0x7f0000000780)=@can, 0x10, &(0x7f00000008c0), 0x0, &(0x7f0000000900), 0x37b}}, {{&(0x7f0000000c40)=@can, 0x10, &(0x7f0000001e00), 0x21a, &(0x7f0000001e40), 0xf8}}], 0x2b8, 0x0) 04:52:53 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:53 executing program 1: r0 = socket$kcm(0x29, 0x2000000000000005, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x12000) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) 04:52:53 executing program 4: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r1, r0, r1}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000180)={&(0x7f00000001c0)={'crc32c-generic\x00'}, &(0x7f0000000040)="68d6e1c687d4b258cb2360", 0xb}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f0000000600)=0xc) r6 = geteuid() getresgid(&(0x7f0000000640), &(0x7f0000000840), &(0x7f0000000880)=0x0) getgroups(0x7, &(0x7f00000008c0)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000900)={{}, {0x1, 0x1}, [{0x2, 0x5, r2}, {0x2, 0x1, r3}, {0x2, 0x7, r4}, {0x2, 0x3, r5}, {0x2, 0x0, r6}], {0x4, 0x4}, [{0x8, 0x6, r7}, {0x8, 0x4, r8}], {0x10, 0x2}, {0x20, 0x2}}, 0x5c, 0x2) 04:52:53 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070a07121dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x400040, 0x0) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) 04:52:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) write(r0, &(0x7f0000000100), 0x3407b) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000040)=""/202) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000140)={0x0, @aes256}) 04:52:53 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:53 executing program 4: unshare(0x401) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') ioctl$TIOCGPTPEER(r1, 0x5441, 0x804) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f0000000040)=0x170) 04:52:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="b76eacf892472944beacb7ce87cc9dfc356fd3ed", 0x14}], 0x1, &(0x7f0000000100)="59e8b92be65e80d7b429e8e6b208d7a1a5758cc255bb9266b6337171e5dcd805b539fed0bf11e0cfac383096f4272faa709dd3084b8b847416c3836edc97dee850695b5fb74718ee14baacec3158a40d31e06ea12814f66ae12502ef6432344394b091015d232d10afcd0691115fd3c7525c6593fd8144ab83c5557973835901b60163722aef507475b313a7b8d994ffbf56a8fe9997207f429786e57e56e6421cc2549a9f2ae6926627c8714cca6760f30742bb239f108dfecbb7f7094395119bcd119b9970d5de1ee20782933711019b7495ec90cfa5419bc06405d96f2549", 0xe0, 0x4045}, 0x4840) sendmsg$inet_sctp(r0, &(0x7f0000002880)={0x0, 0x0, 0x0, 0xaf, &(0x7f0000000000)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x18, 0x1}, 0x0) 04:52:53 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x1400000003, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f00000000c0)={0x8001005}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)) 04:52:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_pts(r0, 0x0) dup2(r1, r2) epoll_create1(0x80000) 04:52:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000c, &(0x7f00000000c0)="e5", 0x1) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000937fed)=""/16, &(0x7f0000000340)=0x10) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x240}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x0, 0x70bd2c, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4001) 04:52:54 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x3, @vbi={0x0, 0x0, 0x0, 0x0, [0x3], [0x4], 0x109}}) rmdir(&(0x7f0000000000)='./file0\x00') 04:52:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="24000000000000b79cc7057059cbacb9ccbd9878bf79b3f3c22b498b5c090f009473176e9d050d12315e165fe4668e8abf516531b68ee75a2617bb888e0820a043d1f7c77e696013fdbf45b28f7ac6d73b0d660457fa4cd904ae89a72996c0c3bbface"]}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @in={0x2, 0x4e20, @rand_addr=0x800}}}, 0x90) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f00000000c0)) 04:52:54 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:54 executing program 2: r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000700)={0x1, 0x5, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d4eaf8ab"}, 0x0, 0x0, @offset, 0x4}) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000080)) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x0, 0x4, 0x1, [], &(0x7f0000000000)=0x7}) 04:52:54 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@ipv4={[], [], @multicast2}, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x2a}, r1}, 0x14) accept4$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000180)=0x1c, 0x800) socket$inet6(0xa, 0x80000, 0x4d93) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x79, @rand_addr="c12d354c73423b3bb240afa1943b39ce", 0x3f}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x10000000003) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) setsockopt$inet6_mreq(r2, 0x29, 0x15, 0x0, 0x0) 04:52:54 executing program 4: socketpair$unix(0x1, 0x200000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket(0x14, 0x0, 0x0) 04:52:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)={@empty, 0x0}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001500000327bd7000fedbdf250a0000ff", @ANYRES32=r2, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:52:54 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f00000003c0)={0x4a, 0x7f, 0x7, 'queue1\x00', 0x7}) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000006580)='tls\x00', 0x95d59845436eab44) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r2, &(0x7f00000002c0)="b7", 0x1, 0x8000, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sendmmsg(r2, &(0x7f0000005f00)=[{{&(0x7f0000004980)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001500), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000001a010000010000007d00000000000000cb00bd911ace2ee7060bd39ee7376468"], 0x28}}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x9, "2a8f5865af68c7250671f832f1ce9782bf915349fd66189c3b11b15f24f44d12", 0x0, 0x0, 0x0, 0x70effc, 0x100000001, 0x0, 0x0, 0x0, [0x0, 0x7f]}) 04:52:54 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:54 executing program 4: r0 = socket$inet6(0xa, 0x7fe, 0xffffffffffff8000) setsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f0000000140)="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", 0x1000) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x80200) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000040)={0x5, 0x9, 0x8, 0x8, 0x6}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffffffffffe, @rand_addr="fd136ed5455f218668cb3d2e33780ca7"}, 0x1c) 04:52:55 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x6, 0x20, 0x6d41, 0x8, 0x0, 0x4, 0x40120, 0x1, 0x4000000, 0xffffffffffffed95, 0xe87, 0x100000001, 0x80, 0x17d, 0x7ff, 0x6, 0xfffffffffffffffb, 0x3c000000000, 0x3, 0x9, 0x6, 0x10000, 0x4, 0x5, 0x100000000, 0x7, 0x401, 0x577e776e, 0x7, 0x1, 0x8, 0x3ff, 0x9, 0x7, 0xc1, 0x101, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0xf}, 0x210, 0x401, 0x6, 0x5, 0x3, 0xfff, 0xff}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x9) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x1d0, [0x0, 0x20000100, 0x20000130, 0x20000200], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'ip6gre0\x00', 'team0\x00', 'veth0_to_bond\x00', 'veth0_to_bond\x00', @dev, [], @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'irlan0\x00', 'lo\x00', 'roseK\x00\xceG\xaa\xd5\x00\x04\x00', 'bridge0\x00', @broadcast, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x248) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000300)={0xf90, 0x4, 0x1, 0x1000000000000, 0x7fff, 0x80000000}) 04:52:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000001600)=0x1b, 0xf2) r1 = socket$netlink(0x10, 0x3, 0x10000000004) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000380)={0x7f, {{0x2, 0x4e20, @broadcast}}, 0x1, 0x3, [{{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e21, @empty}}]}, 0x210) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/193, 0xc1}], 0x1) write(r1, &(0x7f0000000000)="2700000014000707030e00e5ef7936c373c02acaaac3e8010822829dfe00158f31e29eef86f92c9f0875d402c6ac7278f25f0579f92147e84acab8d9adad8981d020cf83272d8afa913959d1cf2f83a5b5291ad38ae63313c55955fb281c81977c85171c9381ca822721b8e24b97edd76f23972c120cc8c24ed593d1e7b3f687d74d48e50502e459c4819aa5ea71f7a9f9a3ab43676c03392f2fb839bc4b8b439a555deab102329f1b284c47f175b1116eb3750ae5073380a47dcdd9212a564c2a9152a1a83c92e0195751c7bd952261c7de6f32b1a638a6b2c0", 0xd6) 04:52:55 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x7) writev(r0, &(0x7f0000000000), 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000140)=0x34, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000100)={0x1, 0x8, 0x9}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x60500, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000080), 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) [ 345.177941] QAT: Invalid ioctl 04:52:55 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) fallocate(r0, 0x0, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)={{0xcc, 0x9, 0x1000, 0x71, 0x3c3, 0x8, 0x138, 0x9bf}, "9e6b8d3e08581172a9cae84d75f8233e5b4ea806cab1e0efeec075eb3a6d9f8f8eca536b4eb3bb8d466eee070e74937639bb27b8f04f824a9f0ed0", [[], []]}, 0x25b) [ 345.217576] QAT: Invalid ioctl 04:52:55 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:55 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000000180)=@generic={0xa, "1afcbbaa4e35fd3671428585382db8609790699635da9c0afe8387448cf1e5137a240a5add0bc41bdf1f31f0eb7493c9c5e42c842143d4a0e46ce2821b6bc76db08afd03c7fc1a8c3413fe544ae11e5270a9ab392338b493305347995bd68b62dc11f82e86b65353f6d8c386befea6a8cb90dffb5a6ee47d79393f9298f2"}, 0x80, &(0x7f0000000440), 0x2fa, &(0x7f0000000000)=ANY=[]}, 0x0) 04:52:55 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = socket$netlink(0x10, 0x3, 0xc) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/247, 0xb870ca92, &(0x7f0000000280)=""/118, 0x0, 0x2}}, 0x39f) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) 04:52:55 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x3, 0x2, 0x0, "b708502568e3c02a78c9f423e99b399e9c01c0eca0c2284c1550d0779ac7827a"}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'ip6tnl0\x00', 0x2e9}) 04:52:55 executing program 4: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000440)={0x0, 0x3, 0x7206}, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x0, 0x4, @mcast2}}, [0x0, 0x0, 0x0, 0x3ff, 0x0, 0x101, 0x3, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa47e]}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x400000, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) clone(0x800000001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setpriority(0x2, 0x0, 0x800000000000e6) [ 345.773887] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) 04:52:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x20000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000200)='#v1\x00', 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400001, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000040)={0xb4d, 0x28, [0xfffffffffffffffe, 0xffffffff7fffffff, 0x3ff, 0x8e4, 0xfffffffffffffffb, 0xff, 0x10000, 0x4, 0x4dd61be3, 0x7ff]}) write(r2, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 04:52:55 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:55 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000000000)=0x10000) write$FUSE_DIRENT(r0, &(0x7f0000000080)={0x10}, 0x10) close(r0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4, 0x101000) lseek(r1, 0x0, 0x4) [ 345.989388] binder: 12343:12344 ioctl c0306201 20000440 returned -14 04:52:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x80047437, &(0x7f0000000040)="6287ff62606a8b0bdc65") recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:52:56 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000100)=[{0x10, 0x29, 0x3}], 0x10}, 0x0) r1 = msgget(0x2, 0x4) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/150) sendmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000001600)=[{0xc}], 0xc}}], 0xb, 0x0) 04:52:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x400) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10002, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000040)=0x1) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000003c0)) 04:52:56 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:56 executing program 1: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x80000, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000180)={@loopback, @local}, &(0x7f00000001c0)=0xc) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x7, 0xb844, 0x800, 0xfd, 0xb8, 0x8001}) 04:52:56 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000080)={0x7fffffff, 0x100000001, 0x1400000000, {r3, r4+30000000}, 0x7, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mprotect(&(0x7f000006a000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 04:52:56 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:56 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0029cc00ffc000000000000084e6621db3000200000000066fb000a6dd45000000"], 0x28}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x6f, 0x10) 04:52:56 executing program 1: mmap(&(0x7f0000000000/0x7f2000)=nil, 0x7f2000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00003f5000/0xf000)=nil, 0xf000, 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2200, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/39, &(0x7f0000000080)=0x27) 04:52:56 executing program 2: r0 = memfd_create(&(0x7f00000019c0)='\x00\x8f\xed\xfa)\xe5\x106\xfb[\xb3)\xaf\xf8\xd0B/v\xde\x1f\xc0\xb3>.\xad\xeb\xdf\xed\f1@\x00\x00\x00\x00\x00\x96\xfe\xdf\x9f\'Mx\x9eg\xf4\xbf>\xce\xcc.\x87`\xf0\xbbA\xf0\x9ar\xaf\xbf\x85\x94\xef%U\xac\xd2?\x7f\x84k,\xc9\x04\xfdo\xe1\x91\x1c\x93\x8a\xa8g\xf3\x00^\xc7\x1e_\x96\xfb\"\xd7\x1b\x89\x19\'\x16\xf9|\x1cH\x15\x10\x81\x00\x008\v\x9f\xb8\'\x80o\xd2m\x9a\x00\x00\x00\x00\x00\x024\x18u\xaf]c\x18\x85n>w\x8f\b\xa7\f\xdf\xdd\xf5\x12\xbf`s\x89\xb8\x81\x05\xad$x4\xa6\x9f\x7f\xba\x83\xc5w\x15\xe7\xbf\xef\xf8\x8eb\xd4\xfe;\x01\x8c\x98\xf5\x87\x8b\x04\xce\xc9\xc4Y,\\\xae+\xe0i\x1e;\x85]\x16\xf6\xf2\x8b[\x86\xcc\xe9BR4\xea|\x8e\xff\x10r}\xd9\xae\b\x00\xc2\a\x9b\xe1\b\xb5k\x8d\xc9\xb2\xdf\xd1\xcc\xfc\xf5\x17_\xe3\x954\x7f\x17f\t>S\x05\xe8\xdf4\x84\xd5t\a\xaaq\xec\x98\xf0JX\xb8\xd6<', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet6_tcp_int(r2, 0x6, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x200000005, 0x400012, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0xfffffffffffffffd}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00005eaff8)) syz_open_procfs(0x0, &(0x7f0000000480)='net/netstat\x00') 04:52:56 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:57 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000419948e56d61376b7bcf7500f2b7860022000104000000000000000000000000"], 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@dev}, @in=@multicast1, {@in=@remote, @in6=@mcast1}, {{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb9}}}, 0x128}, 0x8}, 0x0) r2 = accept(r1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@ipmr_getroute={0x1c, 0x1a, 0x401, 0x70bd28, 0x25dfdbfb, {0x80, 0xa0, 0x0, 0x9, 0xff, 0x1, 0xc8, 0x8, 0x800}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) 04:52:57 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x4, 0xfffffffffffffffd, 0xc, 0x0, 0x0, 0x3, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0xfd}}, 0x0) 04:52:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc40003c123f3188a070") r1 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00pI\x00', 0x8}, 0xfffffffffffffedc) ioctl(r1, 0x8916, &(0x7f0000000000)) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x80, 0x5, 0x4, 0x0, 0x0, [{r0, 0x0, 0x8}, {r1, 0x0, 0x100000001}, {r0, 0x0, 0x2}, {r0, 0x0, 0x5}]}) ioctl(r1, 0x8936, &(0x7f0000000000)) 04:52:57 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x6, 0xb237775f, 0x1, 0x401, 0x1, @stepwise={{0x5, 0xee}, {0x1, 0x4}, {0x8fae, 0x3}}}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x5, 0xf, 0x4, 0x8, {}, {0x4, 0xb, 0x20, 0x100000001, 0x8, 0x0, "01a48e18"}, 0x1, 0x4, @userptr=0x1f, 0x4}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000100)=""/28, &(0x7f0000000140)=0x1c) init_module(&(0x7f0000000180)='/eth0bdev\x00', 0xa, &(0x7f00000001c0)='.#]}wlan0trusted\x00') ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000200)) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x40110, r0, 0x0) r1 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000280)=0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) fremovexattr(r1, &(0x7f00000002c0)=@known='system.posix_acl_access\x00') ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000300)={0xff, 0x8, 0xffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000380)={r3, 0x1}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000003c0)=r2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000400)) rt_sigprocmask(0x0, &(0x7f0000000440)={0x2}, 0x0, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'lapb0\x00', &(0x7f0000000480)=@ethtool_pauseparam={0x13, 0x3, 0x6, 0x4}}) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000500)) write$P9_ROPEN(r0, &(0x7f0000000540)={0x18, 0x71, 0x1, {{0x0, 0x4, 0x2}, 0xffffffff}}, 0x18) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x422000, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f00000005c0)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000600)='trusted.overlay.redirect\x00', &(0x7f0000000640)='./file0\x00', 0x8, 0x3) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f0000000680)) prctl$PR_SVE_GET_VL(0x33, 0xb756) setxattr$security_ima(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='security.ima\x00', &(0x7f0000000b00)=@v1={0x2, "e90751db0bd3653ba5"}, 0xa, 0x1) flistxattr(r1, &(0x7f0000000b40)=""/157, 0x9d) sendmsg(r0, &(0x7f0000001180)={&(0x7f0000000c00)=@ipx={0x4, 0xfffffffffffffffc, 0x100, "b032c33d27d3", 0x8}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000c80)="2cfaf27c2e6d8bd748d415da6f546c75996ff2bca5dde5a0179c297011b08a25d5a6453df5e3927914334f3f13d8a71ba7ea8b4be09eaa50d0423cf1d4cc5dc244f6ccb08e9a74db9a32f98909521f5e6aac725e989dcf90f424ba8f38f9756f9d8b947ee8c2676a343ecaa8e8b098c804e18a4201169db2e3b24ee2a66a9420c1600f590997469c4e49f317c97b03ad", 0x90}, {&(0x7f0000000d40)="4702cc4dab2416051f174d48e639ded6a825d69417c05822e6561c05dd9382c042b02214f0f0c10927d7b39265a7fda54974a798d43c5679c9923a8e2381066d6482d72da9728e17c76479c1", 0x4c}, {&(0x7f0000000dc0)="aab69a71e82777f829658e4ce150719e33409e731f5d98c924ba46298c2e448f80cfbeddfd340058dec1e2a5c7cffd68844223cfd576b384c83a7bd05de4c99fd9c65a3aab082ff4f6366d1ee73cc77e25d91055b403c23c4c8e5884a327d6adb2bebbca66c237ba515c5315db525ad6842de6f9e872ecccc4f72f19d4e0a74883825eac2c1d1c3dc9ea31528aeb6ef6e7d22a0a3ad9cecd42d686dc71c248ec7f2dc31149a115778f3bfe47bc04f235b251586b42dc84bb1aeac174203f300d1ee81313d19191aa994976b6bda58c12f6de", 0xd2}, {&(0x7f0000000ec0)="2e3ea26de584a7af59579634e0513d9320c27baa7036562b9b8aff62af7709d5555807b4243bc660e39df6046e39eade3f9c60834991a4ce1a0a597cc820489e803a12d09ffbc4163a5cf954de30e362", 0x50}, {&(0x7f0000000f40)="cd91cc6892af02d6c3d71730a99bc00b42e612bdb09b34390e707ff92188df51615ee513105e09eb6a77f14759db62e2e6ab119304d87c3927767e58cb2faed0c36f84829e63d70870efe58f2d8340f0144773dba5074c4d53b29a72d1314701a6344b9b8e6d4f99052860444d44b945aedb9abb775f92b334dcb6bd844e0c1d0d56ae2ef818acd4375fcb6d621ae4526863075c0901fbbee641ebcc46dc0f7d45233de1d38beba26bb786e3a4c6b64b3ad142ec255b302091dfa06239856d094b56961d70b33be1d935f6efef77d2105d51dbcb77edfb99596b47bea5249f4b1f7e", 0xe2}], 0x5, &(0x7f00000010c0)=[{0xb0, 0x109, 0x8000, "97da8a07f8e102a29fb55f5fd85cf827bb00a2a9bd1c3b040144d452a9bd09a5445fce39ada81f387fb004e6f23ad5d420a1e132a1a29e9047aca39416f618c6d8a64a7c31b4a204e9d96ed0d48c4875f7f2e47577af7ac5e99eb563f9d38a0a9911b1e2f358d72ecde3c42ddc1fb1f6ec3baaa370d18f77826fe885b50f3c2204a980580d29605f630b4c7c38b07b1bfa82f83fdeb88d44326a"}], 0xb0}, 0x800) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f00000011c0)={0xb, {0x6, 0xf2, 0x1, 0x4}, {0x1, 0x6, 0x81, 0x7}, {0x8000, 0x5}}) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000001200)={0x0, 0x1, [0x7fffffff, 0x1, 0x10001, 0x101, 0x4, 0x8, 0xe2d]}) 04:52:57 executing program 2: socketpair$unix(0x1, 0xffffffffffefffff, 0x0, &(0x7f0000000440)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480)="9f322d38e85c1788a1a250db3a99ba628aa0d353ab4b8ccf8310e80705574891a4f07d5e48e3142ba95cb7e101d22f1014898f120a4c7a90582de556079aee210c2eb260f90d9c9c", 0x48, 0x4000, 0x0, 0x0) getpid() r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0x2}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x48041) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000940)={0x30}, 0x30) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044941, 0x0) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) 04:52:57 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 04:52:57 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) 04:52:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r1, 0x201, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'bpq0\x00'}}}}}, 0x34}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) 04:52:57 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)) 04:52:57 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$SG_IO(r0, 0x5452, &(0x7f00000002c0)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 347.776465] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 347.806045] Enabling of bearer rejected, failed to enable media [ 347.898578] Enabling of bearer rejected, failed to enable media 04:52:58 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, 0x0) 04:52:58 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) 04:52:58 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 04:52:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000040)={0x800, 0x4, [0x0]}) 04:52:58 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)) [ 348.628365] IPVS: ftp: loaded support on port[0] = 21 [ 348.739386] chnl_net:caif_netlink_parms(): no params data found [ 348.789668] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.796273] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.804640] device bridge_slave_0 entered promiscuous mode [ 348.813338] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.819828] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.829024] device bridge_slave_1 entered promiscuous mode [ 348.854625] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 348.865105] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 348.889081] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 348.897230] team0: Port device team_slave_0 added [ 348.904406] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 348.913145] team0: Port device team_slave_1 added [ 348.918950] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 348.927454] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 348.986264] device hsr_slave_0 entered promiscuous mode [ 349.024600] device hsr_slave_1 entered promiscuous mode [ 349.063814] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 349.071118] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 349.092039] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.098483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.105713] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.112312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.170788] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 349.177298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.188115] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 349.199680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.208117] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.215777] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.227502] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 349.241751] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 349.247965] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.259599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.267781] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.274334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.293083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.301384] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.307970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.331122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.340691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.357823] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.373269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.388467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.400355] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 349.406672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 349.427953] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 349.443698] 8021q: adding VLAN 0 to HW filter on device batadv0 04:52:59 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000780)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', 0x0, r1) 04:52:59 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)) 04:52:59 executing program 4: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffff000, 0x9}) write(0xffffffffffffffff, &(0x7f0000000040)="1715345d918640c8d9bda8daab52a49723e287e56d8e4311e79e80b73da57c3fd07e60db23c0da29cc88d386a262473778a9b3817c2fcd148ab93490c9398867c906e1f1e0cabaf5ea7ae8a59d03b89be06d8f1d396d07579ee7f5294603918011250e9990ae5b8b0821a522047657d06f1488bd1a1ccf2256", 0x79) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 04:52:59 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) 04:52:59 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0) 04:52:59 executing program 1: 04:52:59 executing program 4: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffff000, 0x9}) write(0xffffffffffffffff, &(0x7f0000000040)="1715345d918640c8d9bda8daab52a49723e287e56d8e4311e79e80b73da57c3fd07e60db23c0da29cc88d386a262473778a9b3817c2fcd148ab93490c9398867c906e1f1e0cabaf5ea7ae8a59d03b89be06d8f1d396d07579ee7f5294603918011250e9990ae5b8b0821a522047657d06f1488bd1a1ccf2256", 0x79) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 04:53:00 executing program 0: 04:53:00 executing program 5: 04:53:00 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0) 04:53:00 executing program 1: [ 350.234987] hrtimer: interrupt took 205689 ns 04:53:00 executing program 0: 04:53:00 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x3fe4, &(0x7f00000002c0)="0adc1f023c123f3188a070") r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x600000, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x7) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) ioctl(r3, 0xfffffffffffbfffe, &(0x7f00000006c0)="bcf3f650055cd9a7b6e0811ffa803028b2268cc912b2087620b51c6c7e64bfb0adb97cb20dbb7b646f62c592d978ba67e62dfad3a3b4003f8eeff007be675a84e245fbcfcd71d246afe8862e7554adfc5728ee5290820d0afa81164d6ae2d5f50bc69b43f3ae5604135e1989c12df0ad0e7f3f7227739c2fb616d6373020c16df00f2e78bd8e700db3b817c499b54801e2dc1c3dda82a434a5980351f1f5d80d829800b2de513aa368c37ba1da9423de1445d9a6e9d47e44af0126af379a007e394f37aecf5829ed5ba8b017bd667a89a1563b385c82d215749cd4e55df8fad2baf31023b3d413") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x1010fe) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0xffffffffffffff18) connect$inet(r5, &(0x7f0000000000)={0x2, 0x800000004e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 04:53:00 executing program 1: 04:53:00 executing program 5: 04:53:00 executing program 3: mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x20000000000006, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0) [ 350.496033] misc userio: Invalid payload size 04:53:00 executing program 0: 04:53:00 executing program 1: [ 350.713679] misc userio: Invalid payload size 04:53:03 executing program 4: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffff000, 0x9}) write(0xffffffffffffffff, &(0x7f0000000040)="1715345d918640c8d9bda8daab52a49723e287e56d8e4311e79e80b73da57c3fd07e60db23c0da29cc88d386a262473778a9b3817c2fcd148ab93490c9398867c906e1f1e0cabaf5ea7ae8a59d03b89be06d8f1d396d07579ee7f5294603918011250e9990ae5b8b0821a522047657d06f1488bd1a1ccf2256", 0x79) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 04:53:03 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0xfc92) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x3fe4, &(0x7f00000002c0)="0adc1f023c123f3188a070") r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x600000, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101001, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x7) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) ioctl(r3, 0xfffffffffffbfffe, &(0x7f00000006c0)="bcf3f650055cd9a7b6e0811ffa803028b2268cc912b2087620b51c6c7e64bfb0adb97cb20dbb7b646f62c592d978ba67e62dfad3a3b4003f8eeff007be675a84e245fbcfcd71d246afe8862e7554adfc5728ee5290820d0afa81164d6ae2d5f50bc69b43f3ae5604135e1989c12df0ad0e7f3f7227739c2fb616d6373020c16df00f2e78bd8e700db3b817c499b54801e2dc1c3dda82a434a5980351f1f5d80d829800b2de513aa368c37ba1da9423de1445d9a6e9d47e44af0126af379a007e394f37aecf5829ed5ba8b017bd667a89a1563b385c82d215749cd4e55df8fad2baf31023b3d413") perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x0, 0x1010fe) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0xffffffffffffff18) connect$inet(r5, &(0x7f0000000000)={0x2, 0x800000004e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 04:53:03 executing program 0: 04:53:03 executing program 5: 04:53:03 executing program 1: 04:53:03 executing program 3: [ 353.209337] misc userio: Invalid payload size 04:53:03 executing program 3: 04:53:03 executing program 5: [ 353.286720] ptrace attach of "/root/syz-executor.4"[12550] was attempted by "/root/syz-executor.4"[12554] 04:53:03 executing program 4: r0 = getpgid(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x38) ptrace$cont(0x18, r1, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffff000, 0x9}) write(0xffffffffffffffff, &(0x7f0000000040)="1715345d918640c8d9bda8daab52a49723e287e56d8e4311e79e80b73da57c3fd07e60db23c0da29cc88d386a262473778a9b3817c2fcd148ab93490c9398867c906e1f1e0cabaf5ea7ae8a59d03b89be06d8f1d396d07579ee7f5294603918011250e9990ae5b8b0821a522047657d06f1488bd1a1ccf2256", 0x79) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) 04:53:03 executing program 1: 04:53:03 executing program 2: 04:53:03 executing program 0: 04:53:03 executing program 3: 04:53:03 executing program 0: 04:53:03 executing program 5: 04:53:03 executing program 2: 04:53:03 executing program 3: 04:53:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ip_vti0\x00\x1e\x00', 0x800201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@dev, 0x0, r2}) 04:53:04 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x6c}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48) 04:53:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x400000000000000, 0x80, &(0x7f0000000140)=@filter={'filter\x00\x00\x00\x00\x00\x03\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00', 0xe, 0x3, 0x2b0, [0x0, 0x20000740, 0x200008d8, 0x200009d8], 0x0, 0x0, &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'bpq0\x00', 'veth0_to_team\x00', 'bcsf0\x00', 'vlan0\x00', @broadcast, [], @local, [], 0xd8, 0x138, 0x168, [@pkttype={'pkttype\x00', 0x8}, @cluster={'cluster\x00', 0x10, {{0x7769}}}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x2, 0x0, 0x1, [{{{0x5, 0x0, 0x0, 'bond_slave_1\x00', 'veth1_to_team\x00', 'veth0_to_bond\x00', 'team_slave_0\x00', @dev, [], @broadcast, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}]}, 0x328) [ 354.184834] kernel msg: ebtables bug: please report to author: Valid hook without chain 04:53:06 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000003ff8)=0x80) 04:53:06 executing program 3: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x1, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x1000000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r3, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300), 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r3, &(0x7f00000000c0)="e6", 0x1, 0x0, 0x0, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000000)) open(&(0x7f0000001680)='./bus\x00', 0x0, 0x100) write$binfmt_elf64(r2, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x8001, 0xad, 0x7, 0x4, 0x1000, 0x3, 0x3f, 0x400, 0x1d5, 0x40, 0x0, 0x0, 0x3, 0x38, 0x2, 0x7fffffff, 0x7, 0x8}, [{0x6474e551, 0x4, 0x0, 0x81, 0x0, 0x2, 0x9, 0x20}], "39593c70466b5d8a8c407141e88e53c7debe3bb6fe9a121d76dd1cab8e69955976d8cc4e19dbcdf5d353d4a9f2da4e7aee3e9f524c51c7108d1c4f554e7935a39612326ba273ff3b030416ec48d21a4881908120e9aab40def15fe30ad3d89312065651307bb8f8b92f2c44758c5f488974665029023fd647e5fd0f61be8568805df096829e9dbf77a3ebef423fd498864a9f0e381685a35dfdc", [[], [], []]}, 0x412) syz_open_dev$loop(0x0, 0x0, 0x0) 04:53:06 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000180)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000001c0)={0x2, &(0x7f00000007c0)="90"}) 04:53:06 executing program 5: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x801, 0x0) connect(r0, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 04:53:06 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x4004510f, &(0x7f00000000c0)={{0x0, 0xfffffffffeffffff}}) 04:53:06 executing program 1: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000180)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f00000001c0)={0x0, &(0x7f00000007c0)="90"}) 04:53:06 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0045401, &(0x7f00000000c0)) 04:53:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 04:53:06 executing program 5: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000080)={0x1}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4008800, 0x0, 0x0) write$tun(r0, 0x0, 0x0) 04:53:06 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 04:53:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffffffffffff1bb}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) 04:53:07 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:07 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="acabcd272879", 0x0, 0x0, 0x0, 0x0, 0x0}) 04:53:07 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000018c0)={0x2, 0x0, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080), 0x10) 04:53:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 04:53:07 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) 04:53:07 executing program 2: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) unshare(0x400) signalfd(r0, &(0x7f0000000200), 0x8) 04:53:07 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000380)="0adc1f123c12a41d88b070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000000c0)={0x1, 0x10}, 0x18) 04:53:07 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000174, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 04:53:07 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001340)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x1000000, 0x0}, 0x0, 0x0, 0xa7, 0x10001, 0x2, &(0x7f0000001300)}) 04:53:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x179, 0x0, 0x0, 0xffffffffffffff9a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000500)) ioctl$PIO_CMAP(0xffffffffffffffff, 0x4b71, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x0, 0x2c}) 04:53:08 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x80000080045017, &(0x7f0000003ff8)) 04:53:08 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:08 executing program 5: r0 = socket$inet6(0xa, 0x800000000000005, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) 04:53:08 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) umount2(&(0x7f0000000240)='./file0\x00', 0x3) 04:53:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x0, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 04:53:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x33, &(0x7f0000000300), 0x0) getpgrp(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x9) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 04:53:08 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x0, 0xe0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="acabcd272879e3664d3e94d1d04afdaddc5055e9481bfae740ec7982b1e88b8fdf119a11a01c1b9ea293cbe52cbbbc5afc16f3dd8df232ae503c71f364750572be35dab0ae00fe086c46bfec58703192a24a97f8e4bc09490cf02da40d80abc82af0e9f571ede92c2bc2ddf3d8b551ef723121c1d58fcc93b0e35fad3c748242d26e5bd83ed879075e33ae8884acd4623874a5f072db7faa3ada728d61cf8e828934ae430305063263e07d78f86122558ca26364e425e4f71d23aacc00a0ff523bc5530d1375fd29c23c616b1dd7d3d306b7c5e50ada486db5117812025531f7", 0x0, 0x2e75, 0x10000, 0x1}) 04:53:08 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$SG_IO(r0, 0x2276, 0x0) [ 358.833027] sd 0:0:1:0: [sg0] tag#7131 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 358.841912] sd 0:0:1:0: [sg0] tag#7131 CDB: Erase(12), Get Performance [ 358.848760] sd 0:0:1:0: [sg0] tag#7131 CDB[00]: ac ab cd 27 28 79 e3 66 4d 3e 94 d1 d0 4a fd ad [ 358.857909] sd 0:0:1:0: [sg0] tag#7131 CDB[10]: dc 50 55 e9 48 1b fa e7 40 ec 79 82 b1 e8 8b 8f [ 358.866885] sd 0:0:1:0: [sg0] tag#7131 CDB[20]: df 11 9a 11 a0 1c 1b 9e a2 93 cb e5 2c bb bc 5a [ 358.875862] sd 0:0:1:0: [sg0] tag#7131 CDB[30]: fc 16 f3 dd 8d f2 32 ae 50 3c 71 f3 64 75 05 72 [ 358.884873] sd 0:0:1:0: [sg0] tag#7131 CDB[40]: be 35 da b0 ae 00 fe 08 6c 46 bf ec 58 70 31 92 [ 358.893842] sd 0:0:1:0: [sg0] tag#7131 CDB[50]: a2 4a 97 f8 e4 bc 09 49 0c f0 2d a4 0d 80 ab c8 [ 358.902808] sd 0:0:1:0: [sg0] tag#7131 CDB[60]: 2a f0 e9 f5 71 ed e9 2c 2b c2 dd f3 d8 b5 51 ef [ 358.911724] sd 0:0:1:0: [sg0] tag#7131 CDB[70]: 72 31 21 c1 d5 8f cc 93 b0 e3 5f ad 3c 74 82 42 [ 358.920704] sd 0:0:1:0: [sg0] tag#7131 CDB[80]: d2 6e 5b d8 3e d8 79 07 5e 33 ae 88 84 ac d4 62 [ 358.929651] sd 0:0:1:0: [sg0] tag#7131 CDB[90]: 38 74 a5 f0 72 db 7f aa 3a da 72 8d 61 cf 8e 82 [ 358.938618] sd 0:0:1:0: [sg0] tag#7131 CDB[a0]: 89 34 ae 43 03 05 06 32 63 e0 7d 78 f8 61 22 55 [ 358.947573] sd 0:0:1:0: [sg0] tag#7131 CDB[b0]: 8c a2 63 64 e4 25 e4 f7 1d 23 aa cc 00 a0 ff 52 [ 358.956523] sd 0:0:1:0: [sg0] tag#7131 CDB[c0]: 3b c5 53 0d 13 75 fd 29 c2 3c 61 6b 1d d7 d3 d3 [ 358.965487] sd 0:0:1:0: [sg0] tag#7131 CDB[d0]: 06 b7 c5 e5 0a da 48 6d b5 11 78 12 02 55 31 f7 04:53:09 executing program 0: r0 = socket(0x20000000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000100)={'bond0\x00', 0xffb}) 04:53:09 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$SG_IO(r0, 0xc0481273, 0x0) 04:53:09 executing program 5: creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xcd84}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) 04:53:09 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x6c}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x4ae, &(0x7f0000000340)=""/207}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xffffffffa0008000, 0xe, 0x0, &(0x7f0000000040)="2504f2ff1f002c6176c5f3343dbe", 0x0, 0xf0ffff00000855}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 04:53:09 executing program 4: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) socket$inet6_dccp(0xa, 0x6, 0x0) socket$xdp(0x2c, 0x3, 0x0) userfaultfd(0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200), 0x0) 04:53:09 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:09 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) tkill(r1, 0x2) ptrace$getregs(0xf, r1, 0x0, &(0x7f0000000400)=""/4096) 04:53:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000040)=0x4, 0x4) 04:53:10 executing program 4: ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000240)={@mcast1}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) [ 360.019766] ptrace attach of "/root/syz-executor.5"[12463] was attempted by "/root/syz-executor.5"[12743] [ 360.078456] ptrace attach of "/root/syz-executor.5"[12463] was attempted by "/root/syz-executor.5"[12743] 04:53:10 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:10 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000700)=0xfffffffffffffffd) [ 360.836431] û: renamed from bond0 04:53:11 executing program 0: 04:53:11 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:11 executing program 4: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @initdev}, 0x10) 04:53:11 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:11 executing program 5: 04:53:11 executing program 1: [ 361.087203] RDS: rds_bind could not find a transport for ::ffff:172.30.0.0, load rds_tcp or rds_rdma? 04:53:11 executing program 5: 04:53:11 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x1ca8400, 0x200}) 04:53:11 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$SG_IO(r0, 0x2289, 0x0) 04:53:11 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:11 executing program 0: 04:53:11 executing program 4: 04:53:11 executing program 5: 04:53:11 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x1ca8400, 0x200}) 04:53:11 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:11 executing program 1: 04:53:11 executing program 0: 04:53:11 executing program 4: 04:53:11 executing program 5: 04:53:12 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:12 executing program 1: 04:53:12 executing program 5: 04:53:12 executing program 2: 04:53:12 executing program 0: 04:53:12 executing program 4: 04:53:12 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:12 executing program 1: 04:53:12 executing program 4: 04:53:12 executing program 2: 04:53:12 executing program 0: 04:53:12 executing program 5: 04:53:12 executing program 1: 04:53:13 executing program 4: 04:53:13 executing program 0: 04:53:13 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:13 executing program 2: 04:53:13 executing program 5: 04:53:13 executing program 0: 04:53:13 executing program 1: 04:53:13 executing program 4: 04:53:13 executing program 2: 04:53:13 executing program 0: 04:53:13 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:13 executing program 5: 04:53:13 executing program 4: 04:53:13 executing program 1: 04:53:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x170, 0x0) 04:53:13 executing program 0: openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x0) write$cgroup_type(r0, &(0x7f0000004980)='threaded\x00', 0x9) r1 = fcntl$getown(0xffffffffffffffff, 0x9) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) chdir(0x0) ptrace$getsig(0x4202, r1, 0x0, 0x0) 04:53:13 executing program 5: 04:53:14 executing program 4: 04:53:14 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:14 executing program 5: 04:53:14 executing program 1: 04:53:14 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000780)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000022000104000000000200000000000000"], 0x1}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000110001010000000000000000e00000010000000000000500000000000000000002f7ff0014000d0000000000000000007796a5353192eea0"], 0x1}, 0x8}, 0x0) 04:53:15 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000003ff8)=0x80) write$capi20_data(r0, &(0x7f0000000140)={{0x10}}, 0x12) close(r0) 04:53:15 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000000)={0x1}, 0x8) sendto$inet6(r0, 0x0, 0x10000000000, 0x4000000, 0x0, 0x0) 04:53:15 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000780)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r2 = dup(r1) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$PPPIOCSMAXCID(r2, 0x4008744b, 0x0) 04:53:15 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:15 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = dup2(r0, r0) sendmsg$unix(r1, &(0x7f0000000840)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x0) 04:53:15 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRESDEC], 0x18) 04:53:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYBLOB="6b5244c14433b36faf70c8e1f6694b8431bd252a91e24f4a827d9ca20933bb50044997079f609ddcc11640c029b2990e78600649cf44101200b655b4626e57e8174bca2223842cd87c3ede587fc1e9772d9028117f08c0cc9d", @ANYRESOCT=r0, @ANYRES16], @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRES16=r0]], 0x10) 04:53:15 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:15 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000780)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x41007701, 0x0) 04:53:15 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000000)={0x1}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4000000, 0x0, 0x0) 04:53:16 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000001200)='net/tcp6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") read$FUSE(r0, &(0x7f0000002240), 0x125a) 04:53:16 executing program 1: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x800083102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', 0x0, 0x0, 0x0) 04:53:16 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:16 executing program 4: socket$can_raw(0x1d, 0x3, 0x1) getpid() r0 = syz_open_dev$dmmidi(0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000380)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) unshare(0x40000000) syz_open_dev$mice(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x4, 0x8000, 0xff}, 0xb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6b, 0x0, &(0x7f0000000600)="bcde3f662e1eaedc1d726f3791f2a785d5eda6935befaa66da0480c4f1215f786f13964ec9acd161820871e98e1e48ffb09f4978ed464df5bb866a0fc121172fadc551c60329c77e7bf05398001b33ac3d7e9bfb9f3e24b2f9dd415b7623efb5cfc23a5b2351d1a12fc991"}) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4008641a, &(0x7f0000000080)={0x0, 0x0}) listen(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={@mcast1, @empty, @ipv4={[], [], @multicast1}, 0x7, 0x7, 0x39e00000000}) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0)=0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'ifb0\x00', 0x205800}) [ 366.319646] IPVS: ftp: loaded support on port[0] = 21 04:53:16 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000024c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f2000)={0x0, 0x0, &(0x7f00006b8ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002200dd3291b52e82e2f22e00000002000004"], 0x1}}, 0x0) 04:53:16 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:16 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000780)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_dccp(0xa, 0x6, 0x0) socket$xdp(0x2c, 0x3, 0x0) userfaultfd(0x80000) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 04:53:17 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:17 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) write$selinux_attr(r0, &(0x7f0000000300)='system_u:object_r:lastlog_t:s0\x00', 0x1f) 04:53:17 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0xf6) ioctl$SG_GET_NUM_WAITING(r0, 0x227c, &(0x7f0000000200)) 04:53:18 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:18 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x0, 0x200}) 04:53:18 executing program 4: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000180), 0x2) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 04:53:18 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000780)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYPTR], 0x8) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 04:53:21 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000780)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000001280)=""/242, 0xf2}], 0x1, 0x0) 04:53:22 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000000)={0x1}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4008800, 0x0, 0x0) 04:53:22 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/169, 0xa9}], 0x1) 04:53:22 executing program 2: move_pages(0x0, 0x3b093216, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000040), 0x0) 04:53:22 executing program 1: ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r1 = socket$inet(0x2, 0x1000000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300), 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000000)) open(&(0x7f0000001680)='./bus\x00', 0x0, 0x100) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x8001, 0xad, 0x0, 0x4, 0x1000, 0x3, 0x0, 0x400, 0x1d5, 0x40, 0x0, 0x0, 0x3, 0x38, 0x2, 0x7fffffff, 0x7, 0x8}, [{0x6474e551, 0x4, 0x0, 0x0, 0x0, 0x2, 0x9}], "39593c70466b5d8a8c407141e88e53c7debe3bb6fe9a121d76dd1cab8e69955976d8cc4e19dbcdf5d353d4a9f2da4e7aee3e9f524c51c7108d1c4f554e7935a39612326ba273ff3b030416ec48d21a4881908120e9aab40def15fe30ad3d89312065651307bb8f8b92f2c44758c5f488974665029023fd647e5fd0f61be8568805df096829e9dbf77a3ebef423fd498864a9f0e381685a35dfdcb3cdc442fa7bdcfdeab8a8431da347a9cb9e28", [[], [], []]}, 0x425) syz_open_dev$loop(0x0, 0x0, 0x0) 04:53:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) write$capi20_data(r1, &(0x7f0000000080)={{0x10}, 0x1, "90"}, 0x13) close(r1) 04:53:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x42801, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000003ff8)=0x80) write$capi20_data(r1, &(0x7f0000000080)={{0x10}}, 0x12) close(r1) 04:53:22 executing program 3: socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) r2 = dup(r1) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000340)=""/246) ioctl$PPPIOCSMAXCID(r2, 0x40107446, 0x0) 04:53:23 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000780)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffffffffffff1bb}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) 04:53:27 executing program 3: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r0) 04:53:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000052001f0014f9f407000904ff0200070208000100fffffffe0800000000000006", 0x24) [ 378.035985] audit: type=1326 audit(1551675208.086:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13433 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ac8a code=0x0 04:53:28 executing program 4: io_setup(0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x27, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) write$P9_RLOPEN(r2, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0xa4, 0x1, 0x6}, 0x100000000}}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/101, &(0x7f0000000100)=0x65) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setxattr$security_smack_entry(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='security.SMACK64EXEC\x00', &(0x7f00000014c0)='{vmnet1cpusetmd5sum\x00', 0x14, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x1000002b3) r3 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000480)={'#! ', './file0', [{0x20, 'mime_typesecurity'}]}, 0x1d) fsetxattr$security_smack_entry(r0, &(0x7f0000001500)='security.SMACK64IPOUT\x00', &(0x7f0000001540)='{vmnet1cpusetmd5sum\x00', 0x14, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) [ 378.376559] IPVS: ftp: loaded support on port[0] = 21 04:53:28 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x19) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="3900554f6677fff79c000038ba794dc640c4d524c602840ed17524c975a2feedfb7349125d01827b008000000000000000ffffff0e1838f63d"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 378.537293] IPVS: length: 101 != 24 04:53:28 executing program 1: socket(0x0, 0x0, 0x0) mlockall(0x400000000007) openat$uhid(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) mlockall(0x4) 04:53:28 executing program 5: ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r1 = socket$inet(0x2, 0x1000000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300), 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="e6", 0x1, 0x0, 0x0, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000000)) open(&(0x7f0000001680)='./bus\x00', 0x0, 0x100) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x8001, 0xad, 0x0, 0x4, 0x1000, 0x3, 0x0, 0x400, 0x1d5, 0x40, 0x0, 0x0, 0x3, 0x38, 0x2, 0x7fffffff, 0x7, 0x8}, [{0x6474e551, 0x4, 0x0, 0x0, 0x0, 0x2, 0x9}], "39593c70466b5d8a8c407141e88e53c7debe3bb6fe9a121d76dd1cab8e69955976d8cc4e19dbcdf5d353d4a9f2da4e7aee3e9f524c51c7108d1c4f554e7935a39612326ba273ff3b030416ec48d21a4881908120e9aab40def15fe30ad3d89312065651307bb8f8b92f2c44758c5f488974665029023fd647e5fd0f61be8568805df096829e9dbf77a3ebef423fd498864a9f0e381685a35dfdcb3cdc442fa7bdcfdeab8a8431da347a9cb9e28", [[], [], []]}, 0x425) syz_open_dev$loop(0x0, 0x0, 0x0) 04:53:28 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000780)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[], 0xffffff2e) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad56b6cc0400fbab65d8b4ac2ca35c6e", 0x10) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 04:53:30 executing program 2: 04:53:30 executing program 3: 04:53:30 executing program 1: 04:53:30 executing program 2: 04:53:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x13, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) close(0xffffffffffffffff) 04:53:31 executing program 3: socket$can_raw(0x1d, 0x3, 0x1) getpid() r0 = syz_open_dev$dmmidi(0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000380)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e20, 0x0, @rand_addr="6ee1a0eb58fbbeb6d907133fc4e1c7f8", 0x9}, {0xa, 0x4e21, 0x0, @remote}, 0x40, [0x0, 0x4d3, 0x0, 0x2, 0x0, 0x0, 0x7fff, 0x100000001]}, 0x5c) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0xffffffffffffff65) r1 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, 0x0) unshare(0x40000000) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x4, 0x8000, 0xff}, 0xb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6a, 0x0, &(0x7f0000000600)="bcde3f662e1eaedc1d726f3791f2a785d5eda6935befaa66da0480c4f1215f786f13964ec9acd161820871e98e1e48ffb09f4978ed464df5bb866a0fc121172fadc551c60329c77e7bf05398001b33ac3d7e9bfb9f3e24b2f9dd415b7623efb5cfc23a5b2351d1a12fc9"}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4008641a, &(0x7f0000000080)={0x0, 0x0}) listen(0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000700)={@mcast1, @empty, @ipv4={[], [], @multicast1}, 0x7, 0x7, 0x39e00000000}) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0)=0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'ifb0\x00', 0x205800}) 04:53:31 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100), 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x18, 0x0, 0x0) close(r1) 04:53:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000014c0)={0x7, 0x2, 0x1ff}) readv(r1, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/135}, {&(0x7f0000001480)=""/25}, {&(0x7f00000003c0)=""/4096, 0x8}], 0x100000000000019c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 04:53:31 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) socket$inet_udplite(0x2, 0x2, 0x88) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x1000000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r3, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300), 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='team_slave_0\x00', 0x10) sendto$inet(r3, &(0x7f00000000c0)="e6", 0x1, 0x0, 0x0, 0x0) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000000)) write$binfmt_elf64(r2, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x8001, 0xad, 0x7, 0x4, 0x1000, 0x3, 0x3f, 0x400, 0x1d5, 0x40, 0x0, 0x0, 0x3, 0x38, 0x2, 0x7fffffff, 0x7, 0x8}, [{0x6474e551, 0x4, 0x0, 0x81, 0x0, 0x2, 0x9, 0x20}], "39593c70466b5d8a8c407141e88e53c7debe3bb6fe9a121d76dd1cab8e69955976d8cc4e19dbcdf5d353d4a9f2da4e7aee3e9f524c51c7108d1c4f554e7935a39612326ba273ff3b030416ec48d21a4881908120e9aab40def15fe30ad3d89312065651307bb8f8b92f2c44758c5f488974665029023fd647e5fd0f61be8568805df096829e9dbf77a3ebef423fd498864a9f0e381685a35dfdcb3cdc442fa7bdcfdeab8a8431da347a9cb9e28e7242afa", [[], [], []]}, 0x429) 04:53:31 executing program 1: r0 = socket$inet(0x2, 0x3, 0xe2) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @initdev}}) 04:53:31 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000780)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x22, 0x0, 0x10) 04:53:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000014c0)={0x7, 0x2, 0x1ff}) readv(r1, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/135}, {&(0x7f0000001480)=""/25}, {&(0x7f00000003c0)=""/4096, 0x8}], 0x100000000000019c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") 04:53:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)) write$cgroup_int(r1, &(0x7f0000000300), 0xfe32) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0x0, 0x5f70b710, 0x0, 0x0, 0xb}) 04:53:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x5571, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x272, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x101000, 0x0) accept4$unix(r0, 0x0, &(0x7f0000000180)=0xfffffffffffffea2, 0x80000) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000040)) sysfs$1(0x1, &(0x7f0000000140)='veth0_to_bridge\x00') r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) write$P9_RUNLINKAT(r1, 0x0, 0x0) clock_gettime(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffe71, 0x0, 0x0) prctl$PR_GET_KEEPCAPS(0x7) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) clock_gettime(0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000ac0)=@alg, 0x80, &(0x7f0000000e40)=[{&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/71, 0x47}, {&(0x7f0000004540)=""/4096, 0x1000}, {0x0}, {&(0x7f0000006a00)=""/4096, 0x1000}, {&(0x7f0000000c80)=""/83, 0x53}, {&(0x7f0000000d00)=""/108, 0x6c}], 0x7}}], 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000942000)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r2, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r2, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x7fffb6ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff000, 0xff03000000000000]}}, 0x80, &(0x7f0000000d40), 0x24, &(0x7f0000000d80)}}], 0x6d7, 0x40400d4) 04:53:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000014c0)={0x7, 0x2, 0x1ff}) readv(r1, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/135}, {&(0x7f0000001480)=""/25}, {&(0x7f00000003c0)=""/4096, 0x8}], 0x100000000000019c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") [ 382.130629] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:53:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000280)='gid_map\x00') writev(r0, &(0x7f0000003340)=[{&(0x7f0000001180)="a2", 0x1}], 0x1) 04:53:32 executing program 3: 04:53:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) close(r0) io_setup(0x0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000140)="3c9875ca592e70161f70d002fa3157dba2ff50a4828c06d0c8de9e4fbe943871e0994b95d60ab83ead87fc701a62e31d45d4122fc57eb602b0d7576eee65bbad492da55140f9126dbb163c9ce5b3d648075332f41d63dc86e07f76e4b7bbff4422207dea2981853f4fe8377b33bce7ad5def901563ec84853ac2be3a3ca15a78a7b7dc74f4cc9318eaeb8088408a4c17566650379189ddbb8bcf6a061c35c5f4b8d812263606d22bcd0087f5", 0xac}, {0x0}, {0x0}], 0x3, 0x0) 04:53:32 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/71, 0x47}, {&(0x7f0000004540)=""/4096, 0x1000}], 0x3}}], 0x1, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0xff03000000000000, 0x0, 0x0, 0x0, 0x0, 0xf0ff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffbedd]}}, 0x80, &(0x7f0000000d40), 0x116, &(0x7f0000000d80)}}], 0x6d7, 0x40400d4) 04:53:32 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000780)='io\x00[\xfcW\x16\x9b\xab\xeeT\xed\x16\xe3\x9ez\x8f\xe4\xb9\x00\x16\xf2f\xe3\xf60xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/199, 0xc7}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) capset(&(0x7f0000000640)={0x20080522}, &(0x7f0000000000)) sendfile(r2, r0, 0x0, 0x20000000001) 04:53:34 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000014c0)={0x7, 0x2, 0x1ff}) readv(r0, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/135}, {&(0x7f0000001480)=""/25}, {&(0x7f00000003c0)=""/4096, 0x8}], 0x100000000000019c) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 04:53:34 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(r1, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0xffffffffffffffff, 0x0, 0x0, 0xde) listen(r1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, 0x0, &(0x7f0000000340)) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000140)={0x101}) getsockopt(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000300)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x40046103, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x6}, 0x28, 0x3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6cc0400fbab65d8b4ac2ca35c", 0xf) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x80000001, 0x0) 04:53:34 executing program 3: syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x17, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="056304400100000000634040000000", @ANYRES64], 0x0, 0x0, 0x0}) 04:53:34 executing program 1: r0 = open(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000180)=0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, r1, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, 0x0}, 0x10) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xbea, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000100)) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000500)={0xb4d, 0x101, 0x3}) socketpair(0x4, 0xfffffffffffffffc, 0x5, &(0x7f0000000580)) r5 = msgget$private(0x0, 0x101) msgctl$IPC_INFO(r5, 0x3, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) r7 = creat(&(0x7f0000000700)='./bus\x00', 0x0) getsockopt$inet6_mreq(r7, 0x29, 0x0, &(0x7f0000000380)={@ipv4={[], [], @initdev}}, &(0x7f0000000400)=0x14) r8 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r8, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000280)={&(0x7f00000001c0)=[0x964, 0x3], 0x2, 0x0, 0x6, 0x5439, 0x0, 0x0, {0x6, 0x1, 0x9, 0x5, 0x80, 0x0, 0x0, 0x81, 0x8000, 0x3, 0x1, 0x1, 0x9, 0x0, "7498961180e1f769f4170bae6fd6ba9271828026da86d2d9cd375a5ba0bc7851"}}) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000004c0)) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x0) io_submit(r6, 0x1, &(0x7f0000000680)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x4, r7, &(0x7f0000000740)="65f338ed717171462cf5441b5058abe7ef2c9d4d4e56757b851c03dbbf09462a0b4e1ba7b0d87f5a953afcfd2dec8e7956fff8184356099f232fa31a95214659eb445ffc0b812c62c05ba0ab7ee06905003289ddcca0fef44f6f1632f5aba3a229874502c7a8a88a8fce954aa4a3b0d8e5393b0114c384999c13efc6e0f1667d7eb416d65e72ea3b04240ac74d75dd23ed88a2487fe1d5d1aedd8cc93a58fb91af23039a721e58da3bac68ef5f2833e2a268bbfea4c29d120c64771b55fc7b8336e83897475b141bc7590736ad2fbca9efdfce330bec", 0xd6, 0x3, 0x0, 0x1, r4}]) write$P9_RSTATu(r7, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}]) linkat(r0, &(0x7f0000000040)='./file1\x00', r0, 0x0, 0x1400) 04:53:34 executing program 0: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000240), 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, 0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0xffffffa2, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x27e, 0x0) 04:53:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000014c0)={0x7, 0x2, 0x1ff}) readv(r1, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/135}, {&(0x7f0000001480)=""/25}, {&(0x7f00000003c0)=""/4096, 0x8}], 0x100000000000019c) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") [ 384.517138] binder: 14383:14385 Acquire 1 refcount change on invalid ref 1 ret -22 [ 384.525219] binder: 14383:14385 got transaction to invalid handle [ 384.531518] binder: 14383:14385 transaction failed 29201/-22, size 0-0 line 2896 [ 384.675488] binder: 14383:14385 Acquire 1 refcount change on invalid ref 1 ret -22 [ 384.679314] binder: undelivered TRANSACTION_ERROR: 29201 [ 384.683548] binder: 14383:14385 got transaction to invalid handle [ 384.695273] binder: 14383:14385 transaction failed 29201/-22, size 0-0 line 2896 [ 384.773122] binder: undelivered TRANSACTION_ERROR: 29201 04:53:34 executing program 4: r0 = open(0x0, 0x8040, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r1 = socket$inet(0x2, 0x1000000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r1, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000300), 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(r1, &(0x7f00000000c0)="e6", 0x1, 0x0, 0x0, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)) open(&(0x7f0000001680)='./bus\x00', 0x0, 0x100) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x8001, 0xad, 0x7, 0x4, 0x1000, 0x3, 0x3f, 0x0, 0x1d5, 0x40, 0x0, 0x0, 0x3, 0x38, 0x2, 0x7fffffff, 0x7, 0x8}, [{0x0, 0x4, 0x0, 0x81, 0x0, 0x2, 0x9, 0x20}], "39593c70466b5d8a8c407141e88e53c7debe3bb6fe9a121d76dd1cab8e69955976d8cc4e19dbcdf5d353d4a9f2da4e7aee3e9f524c51c7108d1c4f554e7935a39612326ba273ff3b030416ec48d21a4881908120e9aab4", [[], [], []]}, 0x3cf) syz_open_dev$loop(0x0, 0x0, 0x0) 04:53:35 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x5, 0x800}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x500) mkdirat(r0, &(0x7f0000000380)='./file0\x00', 0x8) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 04:53:35 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x143) r2 = epoll_create(0x20) r3 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f000000e000)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) r4 = epoll_create(0x4) r5 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000c7f000)) r6 = epoll_create(0x7) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000d5dff4)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f000050aff4)) [ 385.168620] ================================================================== [ 385.176099] BUG: KMSAN: uninit-value in gue_err+0x482/0xb00 [ 385.181916] CPU: 1 PID: 14507 Comm: syz-executor.3 Not tainted 5.0.0-rc1+ #9 [ 385.189133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.198494] Call Trace: [ 385.201086] [ 385.203301] dump_stack+0x173/0x1d0 [ 385.206967] kmsan_report+0x12e/0x2a0 [ 385.210810] __msan_warning+0x82/0xf0 [ 385.214630] gue_err+0x482/0xb00 [ 385.218034] ? fou_build_header+0x690/0x690 [ 385.222383] __udp4_lib_err+0x12e6/0x1d40 [ 385.226647] udp_err+0x74/0x90 [ 385.229864] ? __udp4_lib_err+0x1d40/0x1d40 [ 385.234222] icmp_unreach+0xb65/0x1070 [ 385.238145] ? icmp_discard+0x30/0x30 [ 385.241953] icmp_rcv+0x11a1/0x1950 [ 385.245621] ? local_bh_enable+0x40/0x40 [ 385.249769] ip_protocol_deliver_rcu+0x584/0xba0 [ 385.254601] ip_local_deliver+0x624/0x7b0 [ 385.258784] ? ip_local_deliver+0x7b0/0x7b0 [ 385.263117] ? ip_protocol_deliver_rcu+0xba0/0xba0 [ 385.268061] ip_rcv+0x6b6/0x740 [ 385.271366] ? ip_rcv_core+0x11c0/0x11c0 [ 385.275501] process_backlog+0x756/0x10e0 [ 385.279662] ? lapic_next_event+0x6f/0xa0 [ 385.283837] ? ip_local_deliver_finish+0x320/0x320 [ 385.288796] ? rps_trigger_softirq+0x2e0/0x2e0 [ 385.293385] net_rx_action+0x78b/0x1a60 [ 385.297429] ? net_tx_action+0xca0/0xca0 [ 385.301615] __do_softirq+0x53f/0x93a [ 385.305476] do_softirq_own_stack+0x49/0x80 [ 385.309798] [ 385.312051] __local_bh_enable_ip+0x16f/0x1a0 [ 385.316572] local_bh_enable+0x36/0x40 [ 385.320474] ip_finish_output2+0x1627/0x1820 [ 385.324931] ip_finish_output+0xd2b/0xfd0 [ 385.329123] ip_output+0x53f/0x610 [ 385.332711] ? ip_mc_finish_output+0x3b0/0x3b0 [ 385.337311] ? ip_finish_output+0xfd0/0xfd0 [ 385.341658] ip_send_skb+0x179/0x360 [ 385.345408] udp_send_skb+0x13ff/0x18b0 [ 385.349446] udp_sendmsg+0x3aa4/0x40f0 [ 385.353373] ? ip_copy_metadata+0x1010/0x1010 [ 385.358018] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 385.363292] udpv6_sendmsg+0x1403/0x45d0 [ 385.367457] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 385.372842] ? aa_sk_perm+0x605/0x950 [ 385.376687] ? aa_sock_msg_perm+0x16e/0x320 [ 385.381028] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 385.386240] ? __udp6_lib_rcv+0x3e80/0x3e80 [ 385.390587] inet_sendmsg+0x54a/0x720 [ 385.394422] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 385.399736] ___sys_sendmsg+0xdb9/0x11b0 [ 385.403836] ? inet_getname+0x490/0x490 [ 385.407843] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 385.413063] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 385.418468] ? __fget_light+0x6e1/0x750 [ 385.422492] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 385.427703] __sys_sendmmsg+0x580/0xad0 [ 385.431727] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 385.437189] ? prepare_exit_to_usermode+0x114/0x420 [ 385.442222] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 385.447481] __se_sys_sendmmsg+0xbd/0xe0 [ 385.451577] __x64_sys_sendmmsg+0x56/0x70 [ 385.455760] do_syscall_64+0xbc/0xf0 [ 385.459497] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 385.464702] RIP: 0033:0x457e29 [ 385.467912] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 385.486850] RSP: 002b:00007f6b0f265c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 385.494572] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 385.501855] RDX: 00000000000005c3 RSI: 0000000020000240 RDI: 0000000000000004 [ 385.509130] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 385.516421] R10: 0000000000000500 R11: 0000000000000246 R12: 00007f6b0f2666d4 [ 385.523709] R13: 00000000004c4dd7 R14: 00000000004d8b10 R15: 00000000ffffffff [ 385.531005] [ 385.532631] Uninit was created at: [ 385.536191] kmsan_internal_poison_shadow+0x92/0x150 [ 385.541319] kmsan_kmalloc+0xa6/0x130 [ 385.545126] kmsan_slab_alloc+0xe/0x10 [ 385.549030] __kmalloc_node_track_caller+0xe9e/0xff0 [ 385.554153] __alloc_skb+0x309/0xa20 [ 385.557897] alloc_skb_with_frags+0x1c7/0xac0 [ 385.562428] sock_alloc_send_pskb+0xafd/0x10a0 [ 385.567036] sock_alloc_send_skb+0xca/0xe0 [ 385.571300] __ip_append_data+0x34cd/0x5000 [ 385.575639] ip_append_data+0x324/0x480 [ 385.579634] icmp_push_reply+0x23d/0x7e0 [ 385.583705] icmp_send+0x2e74/0x30c0 [ 385.587423] __udp4_lib_rcv+0x36c9/0x4b70 [ 385.591579] udp_rcv+0x5c/0x70 [ 385.594814] ip_protocol_deliver_rcu+0x584/0xba0 [ 385.599610] ip_local_deliver+0x624/0x7b0 [ 385.603862] ip_rcv+0x6b6/0x740 [ 385.607153] process_backlog+0x756/0x10e0 [ 385.611340] net_rx_action+0x78b/0x1a60 [ 385.615328] __do_softirq+0x53f/0x93a [ 385.619126] ================================================================== [ 385.626489] Disabling lock debugging due to kernel taint [ 385.631949] Kernel panic - not syncing: panic_on_warn set ... [ 385.637856] CPU: 1 PID: 14507 Comm: syz-executor.3 Tainted: G B 5.0.0-rc1+ #9 [ 385.646438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 385.655804] Call Trace: [ 385.658400] [ 385.660575] dump_stack+0x173/0x1d0 [ 385.664233] panic+0x3d1/0xb01 [ 385.667501] kmsan_report+0x293/0x2a0 [ 385.671338] __msan_warning+0x82/0xf0 [ 385.675167] gue_err+0x482/0xb00 [ 385.678585] ? fou_build_header+0x690/0x690 [ 385.682935] __udp4_lib_err+0x12e6/0x1d40 [ 385.687166] udp_err+0x74/0x90 [ 385.690382] ? __udp4_lib_err+0x1d40/0x1d40 [ 385.694734] icmp_unreach+0xb65/0x1070 [ 385.698668] ? icmp_discard+0x30/0x30 [ 385.702493] icmp_rcv+0x11a1/0x1950 [ 385.706175] ? local_bh_enable+0x40/0x40 [ 385.710270] ip_protocol_deliver_rcu+0x584/0xba0 [ 385.715082] ip_local_deliver+0x624/0x7b0 [ 385.719277] ? ip_local_deliver+0x7b0/0x7b0 [ 385.723629] ? ip_protocol_deliver_rcu+0xba0/0xba0 [ 385.728582] ip_rcv+0x6b6/0x740 [ 385.731904] ? ip_rcv_core+0x11c0/0x11c0 [ 385.735999] process_backlog+0x756/0x10e0 [ 385.740160] ? lapic_next_event+0x6f/0xa0 [ 385.744339] ? ip_local_deliver_finish+0x320/0x320 [ 385.749512] ? rps_trigger_softirq+0x2e0/0x2e0 [ 385.754128] net_rx_action+0x78b/0x1a60 [ 385.758150] ? net_tx_action+0xca0/0xca0 [ 385.762249] __do_softirq+0x53f/0x93a [ 385.766087] do_softirq_own_stack+0x49/0x80 [ 385.770413] [ 385.772680] __local_bh_enable_ip+0x16f/0x1a0 [ 385.777201] local_bh_enable+0x36/0x40 [ 385.781104] ip_finish_output2+0x1627/0x1820 [ 385.785556] ip_finish_output+0xd2b/0xfd0 [ 385.789746] ip_output+0x53f/0x610 [ 385.793330] ? ip_mc_finish_output+0x3b0/0x3b0 [ 385.797934] ? ip_finish_output+0xfd0/0xfd0 [ 385.802296] ip_send_skb+0x179/0x360 [ 385.806061] udp_send_skb+0x13ff/0x18b0 [ 385.810100] udp_sendmsg+0x3aa4/0x40f0 [ 385.814012] ? ip_copy_metadata+0x1010/0x1010 [ 385.818622] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 385.823846] udpv6_sendmsg+0x1403/0x45d0 [ 385.828006] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 385.833399] ? aa_sk_perm+0x605/0x950 [ 385.837246] ? aa_sock_msg_perm+0x16e/0x320 [ 385.841603] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 385.846826] ? __udp6_lib_rcv+0x3e80/0x3e80 [ 385.851173] inet_sendmsg+0x54a/0x720 [ 385.855475] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 385.860694] ___sys_sendmsg+0xdb9/0x11b0 [ 385.864821] ? inet_getname+0x490/0x490 [ 385.868884] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 385.874143] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 385.879525] ? __fget_light+0x6e1/0x750 [ 385.883536] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 385.888754] __sys_sendmmsg+0x580/0xad0 [ 385.892795] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 385.898269] ? prepare_exit_to_usermode+0x114/0x420 [ 385.903310] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 385.908548] __se_sys_sendmmsg+0xbd/0xe0 [ 385.912644] __x64_sys_sendmmsg+0x56/0x70 [ 385.916812] do_syscall_64+0xbc/0xf0 [ 385.920561] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 385.925783] RIP: 0033:0x457e29 [ 385.929002] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 385.947913] RSP: 002b:00007f6b0f265c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 385.955662] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 385.962942] RDX: 00000000000005c3 RSI: 0000000020000240 RDI: 0000000000000004 [ 385.970222] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 385.977505] R10: 0000000000000500 R11: 0000000000000246 R12: 00007f6b0f2666d4 [ 385.984780] R13: 00000000004c4dd7 R14: 00000000004d8b10 R15: 00000000ffffffff [ 385.993011] Kernel Offset: disabled [ 385.996643] Rebooting in 86400 seconds..