[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 94.291045] audit: type=1800 audit(1552431228.349:25): pid=10372 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 94.310280] audit: type=1800 audit(1552431228.369:26): pid=10372 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 94.359775] audit: type=1800 audit(1552431228.409:27): pid=10372 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.210' (ECDSA) to the list of known hosts. 2019/03/12 22:54:01 fuzzer started 2019/03/12 22:54:07 dialing manager at 10.128.0.26:42025 2019/03/12 22:54:07 syscalls: 1 2019/03/12 22:54:07 code coverage: enabled 2019/03/12 22:54:07 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/12 22:54:07 extra coverage: extra coverage is not supported by the kernel 2019/03/12 22:54:07 setuid sandbox: enabled 2019/03/12 22:54:07 namespace sandbox: enabled 2019/03/12 22:54:07 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/12 22:54:07 fault injection: enabled 2019/03/12 22:54:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/12 22:54:07 net packet injection: enabled 2019/03/12 22:54:07 net device setup: enabled 22:57:27 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='memory.swap.max\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = gettid() write$cgroup_pid(r1, &(0x7f0000000400), 0x12) perf_event_open(&(0x7f00000004c0)={0x3, 0x70, 0x7fffffff, 0x800, 0x1ff, 0x0, 0x0, 0x3, 0x18004, 0x0, 0x6, 0x2, 0x80000000, 0x8001, 0xdff4, 0xffffffffffffffff, 0x4, 0x5, 0x924, 0x14, 0x0, 0x401, 0x2, 0x7400000, 0x80000000, 0x80000001, 0x0, 0x1, 0x0, 0x1f, 0x0, 0xed3, 0xffffffffffff18a3, 0xff, 0x10, 0x7fff, 0x1ff, 0x7f7, 0x0, 0xfffffffffffffff9, 0x4, @perf_config_ext={0x0, 0x80000001}, 0x0, 0xff, 0x9, 0x0, 0x4, 0x10000, 0x4}, r2, 0x0, r1, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r1, 0x0, 0x26) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x8000, 0x0) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000440)) openat$cgroup_type(r3, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) socketpair(0x0, 0x2, 0x3, 0x0) syzkaller login: [ 313.725041] IPVS: ftp: loaded support on port[0] = 21 [ 313.892281] chnl_net:caif_netlink_parms(): no params data found [ 313.969627] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.976997] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.985632] device bridge_slave_0 entered promiscuous mode [ 313.995094] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.002321] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.010709] device bridge_slave_1 entered promiscuous mode [ 314.046239] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 314.058367] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 314.093468] team0: Port device team_slave_0 added [ 314.102379] team0: Port device team_slave_1 added [ 314.297349] device hsr_slave_0 entered promiscuous mode [ 314.552380] device hsr_slave_1 entered promiscuous mode [ 314.827927] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.834656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.841943] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.848492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.894552] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.904406] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.974144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.996899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 315.004807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.019331] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.033664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.042759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.051381] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.057949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.114688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 315.123745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.132453] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.138951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.146777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 315.156042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 315.165327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 315.174781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 315.183975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 315.193423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.202592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.211229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.219973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.228721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.242099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.250274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 315.293923] 8021q: adding VLAN 0 to HW filter on device batadv0 22:57:29 executing program 0: r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)) [ 315.591178] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 22:57:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x800003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x11) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, &(0x7f0000000280)=r0, 0x706) 22:57:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x7f, 0x2000) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000600)=0x80000001) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000580)) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000380)=0xfffffffffffffdaa) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000002c0)) r3 = dup(r2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000080)=[0x800], 0x1, 0x400, 0x6, 0x8363, 0x1, 0x20, {0x8, 0x9, 0x6, 0x200, 0x9, 0x1000, 0x200, 0x0, 0x1, 0x5, 0x401, 0xfffffffffffffeff, 0x600000000000, 0x100000000, "fec9822691a2ae0ac92ce2ae0fcf4dce5a0c0dc9acbafc22189d7f151e9c3842"}}) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x2000000c, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) sendfile(r3, r4, 0x0, 0x8000fffffffe) [ 316.038662] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 316.162321] hrtimer: interrupt took 32913 ns 22:57:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f00000000c0)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000300)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tun\x00\x9c;\x98\xfc\x06\x9f\x9fU\xd1\xc2\xec\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000240)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0xaaaaaaaaaaaac41, 0x0, 0x0, 0x181) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:57:30 executing program 0: r0 = gettid() clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x8, 0x0, &(0x7f00000003c0)={0x0, r1+10000000}, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1004000000016) 22:57:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x143001, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000240)={0x9b0000, 0x3, 0x5, [], &(0x7f0000000200)={0x99097f, 0x2, [], @p_u16=&(0x7f00000001c0)=0x81}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x1b, 0x4}, &(0x7f00000002c0)=0x0) io_setup(0x6, &(0x7f0000000440)=0x0) io_cancel(r3, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x4, r1, &(0x7f0000000480)="030112a7a39b96601f435120624c1d7c016f0b18718f830e0c9cc03e060c480ef5255a75fc4565d3ea5a692bfb2d57675927e34f006da041de9e20995840d97d9499365c07ae2c0880d204a576cb4c82cc7633b3751177fc1035082cc99921dfbfc6815dfc67f1746efcb166b24c4e3c0dab68ee9d01825e8d23401f689085f6318054c9a41211df582757ee4eb1ed2198d75ab099ec4cbf53439ae64bfefce474624d3e72670d8f580c53886396d6dffcc87178cdc0ef62bf5fdea00f8b86c174d9f2616c1630fa274f4da207dfb2d3bf22176c24b16ebe57427c916a9a6da11ba61f16d21993189453611ae5eee5989facc2a2f9fb40938b60b402dfae78b4ba70fbec51cb1635d7b1230207c20e570fa0ecd1696b78875e40194e0e296682a1337b532b4378fe8d3dc0dd8fcb1c8b3f41b93fe8ab97df03cfe441be6ca4d8db89675bbaaf32be7e6c45fe6a7a9c79cb5c8e09671bb67682bd99f2998c4673b6d10f133a404220fb330e369a22addf937b2dca7439ad2004a00acfa387ced6002ba5413c99a07e9ccf740d6119c3aaf8da6db8d259c1c5fcc84e4a83451b5a187bc4898d815a3932b63e90501a34d4cf6d8b1c9187e948f9d86c206cc5533b6a32bdb3e300f17c74bccce21dd5be6342ef29481f84b38ef72697bfa1c630532a2dd228ecfade517f4974285963aa97276fc73dd2cd4c920c6472f6850c84ffd03ac9161b6ff6ec441b9ff3c6c510ab49b008f19fa014d8f8446cb589e8d848f5772e59b8c492e4885ba2527c1dc17fa77b38921e01ca36c94c625fcfa85967621570c164524fde074a859b980ad4dbe6895a67592f07d66d66799a5f3f4e9f7add0332a4fe7bd6b9d4ddfc3eb60847e2c1e981a2be4f4fbdbc721543e330a305edf12a10da0c977b6dcb05fcfbee27fee37aa6aedcda7e1dbc68cc4d3a9658442e377466ff614297006ec515d0c8e8d04c2e3a9a047e6a6f3be2072a71faf49b51ca888382fc5845aa3f1e6cbb0260e7d2215bb5665f7ea0b5dc3472a3cbefe397b8cd5a31630bb64f15e6708ee8c82a84dd6b1538ba3295192fbf2755481ef975ae3aa5df5da59f5fedd68c5bec80c841b296d60ad2b64c23bcae7e4c8784843b117508cf9b3b2745e673953bbb976a0de4520b2782ea2705ed0cede9bfdc25c6910babb21a5e892b66484db540f91325b76abca4e5db3fbb4d654911bf8f4ce275ac326f64de879169805d6e975d4066ae6c9d1d85da17d322eb25a538aa7b5d1415c41bbcdc8c7d9a02e05f6e70e4be2dd9d5a7b910675fae8a72a0d3cab1653e3555e19b58ea63bad347e9b361b4d2389f8f1d75e4ff31f207525b437ebae05f687add257a9e7d727d29d7518d6fc81b3fc130a300f84f7ae3a63b92028c8c145ef455e4fb4d14c23d4d364dc3ca514f8b271bf760d40499992b8ce90044ef0e6aed6f72ede8d3aa7fd95b2a178c85913fc28f27567d0b7f5a9ce09756b385f59697c88647721805d9843cb0ca74ae8331f9bb5d9362bf048739c58ee6c43c36d04de97901339b2d46709881e74ced0463d8f74426c3fc21eb54d1b41133dd3bd2d9b3912af7dfae132b5abc083f55d4144c47485d22f346f26935b68cd56ec0673130020e36b9269f09e724df25b3ef33168e518629efdc69aa3ac7d0855480912b2586c15bedfa4794477cb9530ccc97645db709be64fd191295892e3fb804dc9d0bf42fb8dc2d31be5aa3253fa4610227c92ce2361193b5605a7a577b61f22b19cec81e6ec45476de956390e60732c23bcfd302b8b6e10f78e38e91f101c6b68a885d8e6043caaf69f374b94c7229a96f6bdae129cbdbd4f1d44fc668560d15c1bee76c01bc2aec169f407e29d5e1aafdf74627fc4f4c787c4f2b94612d7bde635dc713e278a57516228eb86ba2a84b08081b0e1b635b549cb8b77b5cfa27aa43359ce485b1d2ae4741527c52e67312dcac6add4db38e2d60b2df414351cadce4e78270a20966db2d25cc209ab9c1cb8fb41a291424c61388c8c34aa6b7bf9be530eddbb18f37291feb33dbf63dbe3c361100c67da852445853d6c99cc9b8ff07c93c3e9a27e55a87a9f2c994ee25a2fa23e60b02dbc853d7f6051e8253b9251de3a6b860d0137315cfcb5f15a83bc8d3d3de2f7d1c4ec617b16014f5243d88a3d627be65728929f92c4543642aa055d3006d5dbf534a1c0bac712e99abdba38695e6795f9c4905ab4361bf8f8395ce4665bfe0bc7b9fd028a8a1cd0b3d33d600e2f2943cbe8d9aafca13f5e5b1b8a3fa5abd9c187c11d101ff22d3a8790c96bb7af504e1c5e335b0c7d04300ee39ea396b8c1aef050b6f8ede970502477d0bda63f3dcf5538c1269117d53efc782c498427be52fa790a0a1bc0b915dd1890fb408b64ec4416a37ac0ab01038aa1b98922a56b0d7d37b8cfbd4fc67b8321098f0c73bf8a52cbc7d9e155b151e70de054650265f31e0194e903e36c838545556d2fc311cc4297ad13afbd62bd27287cfb46f69d0a83c3abdaedca051b3963a67ed59953a1c7864e20d946bb420c2bca1e55adfe622638c9cbe835a85fb68073d61c730263aed850877aed2b1d2fbad026db2771c8af252a960269add2182aeaf9d0e832da411f17d658b3887d43d006ea5d3e4ab4b1dce057e3d5c05f7ab67432c57e81edfe22b7bc476b96e45d1227c02965c1fcfbd9ad509008d389a0d04fba920d88dd619f2220ecf5dc1dbe4f27a02218aef2c42cc096294a5de816ba5e62160565d5dd51da7c230757633061c9217d016d1b2209607ef63850d0a60555fce2f0edc61aa81c3cd4d514e4d2b44ec445aa489ab34591d307e579f67e94dc3edc9c0c96898bc47735d5fd181fa1fe40aec2645408b3d039afe467de2910e6d00a14a1b5fdf6659a9e1b7968e72d27078ee1f12e36fbdbd35e35d077ed9c2c46b2199790d07be1346b14cee73210a016047d3330202405cff7ccc55058c20cbe5146bd7ed9d6667792b85b0855c4a81837c3e014af2d8092fc6a02eac11c5a345cc92491dd447c831c481c02f97013b4499b5a8722afe372836a552192075a811e80fbbbb18c245186bbf1cbc30db4a606800940876ea1bcab09c68fe0ebaf25cf5b6c6aeb9dc7bd4758a8b903a0e9f40defd6ed96fa61ea7e4031df0409dd80d0dd4f897955547cebfa785fb444a8eca5a49fee26d190fa165535396ca361f50383799dd3846c22eadd14766e9ade60568aff070f9395e037eeebda20b09d4edc03beb87abc2e90e4b0e7f27fe2aa198565221eedb6b622da5496fc89e0bc337b4e6c53e9fec5cd290f97c785cde09149281cb5a27564e527d798543c977dcfe9264975c7dd37b58d6a79fc88c5bd53a4fe41314275b1444197c3946c0c438db18b65b7aafd4e69d9a7ac1f169b3abfe24b2b5aca971054b8c497c2936d5630374c0ef96f73375e5fae7774ec723e35b89049aae0dc2226cb348e09e6be07859e496a4a6faf450a6033871a6fe7d5fc640a001e47cbf5bb9307a8137f77d3bf729fddd5105ea6a95605349ee12bc9f6f692ca4b5316a5e475cf84292003ff3afa3e82017d48f28dfff262e3789453941db2763dba941a956d48c53b20cd0ce475bc60dc58ea0fc8f78f522c3bf9e21a50392ed0b1eb2b24d935819e07d5df8d0a633b3cb6f9e39af7ef4969b0d8b501edc3d92f997bd1dda2a2f6065c620cbd2d55be964176ec9acb14efb7f63ae82c925d7a52399816e799f538a31d6f95b76856a44f37b8104f6fcaf0bab19303c26fb2b99ca376c0acafaa2f89ab32d1ecd979ec0bd6bbdb7b7987bbd9d333736abd6a7c2f1d65433f2b250ed046e9308f8c761f23714753b4ef264ce3de9ed63f497e5e1977e0323164731e5826ba2c22c598abdd62b45f11f3af1a9183933c1d4acd26f074f3c12a13ab36d6a64bbce877e25e8bd787783c90679b4726e4aa05caf38f09701ef5ad87b67253df27ca12ef7a2d61db825151ee15f1c8dc1ac10ad44ca9f7c6bac47e19396e5626098ab2f79fc298360658171f518545d2a0b28531aa51521e57f409e03d28b61d22cdc8855751aca405aeccaac71964a13ac253482c6cce39d7672489b6ef00789389b4205105f50e5838fb9871e7b885b7792b2c8a659205fddaeaa3f6c77aab7dd67f00dc16a39b7933f9ac3771b5579bd42b14e63f9e813b90f34311ebe86151036c80f6e033fc552ad09995218795f43cd58dddb76199329b954cb2bab8e0121c87cabf260906b64a0be9008234e3617a1e7df0e37674731907d68b71adfee9c3635959c68673ac5220d89b201348d4716588c19d4f6809be33712e7171f52e7a384f354deeb8b52965d11ec0d24ba5143e2cef98752dc13de46986296140bfca33aaa211ba566d642a834dc84f71fff07155b1eb15beebfaddd6a37ab549d1ebacb3b3bbceab10d5e3fc5310a14a60b6db7b0b951c40be9b1c057ff23a21ae2f481fa8f8b5a849906eb3dbd32b0a5abdd9fd5f31b7d0398d12211a1fff8e6544838e67c72c8be988d2d9ed607843507fb432e9fba01f7d46d69ca24dde175458f180c38c71157dc65c1832d9e223497da5ba0b4919dc033cb4c5d2383ee73bbba52c321cef19b9720b604d6d7c5be3e47c4a744bd97fd752e9b6089a3d77c55e438869fcba224ffe929f825554e1724470ddd578d3fbb6db7d55d76b670c7953fdeb97e50e96bbce9d59be025010db6dc3b6ad4eb5ceeae68de8ff66f79c67d7d9c6d8bd0b297cd321937427bcf47ccd1500c19296ae279787c5ba146e9b3ee87863b44db2ad27189b3561fa9199e3d7b6a042cd2beda0ce6daa6ea6ffc914839655a86d60aea21089220748ce54e2b8f384b9a0bf707cc7a9981231f924851da579bfe767ce38509c73b66fe29040fa762defc9e5848fe3690002937dab1128f50b94969fb5ce39f1ada616ef08e9a7912ded81b6488c924002f7334275ad0dae06bff0577204fed536bd9acde65056e83f91c412dcf49415f227c808ea2262f5585117e742b3c10f2127cde1c94be06329c7f88df5c34341a47b7ac6a5f4dec577be09752916977512775f016b495ee1cb92f98e3122511b401476e2622d632872eca6557c18f6cf9e7b244a59067645daaa5f218e4284a9bd05122696c7e0266ec748063300586012e5cd6d430ca46139f0f3a5bc5b6a99b9b6e3ffc0142c26ebfe2175d107169f7c7b40e2a4dd42b085ee1d8b21dc867a1f5b68897e2f2653a5a663f72cd4974ae76061b3f924f6636754d5a653c906274fee7ba9b48bfdbe39d9ae74f65a73efcc20a3edee61eca3f0a0b0d75e50da3f719fe0489d2821b73a169339ffe8eb562be6124dad3376fafd3877d090ff272fef46ad29233ad3e55ff6ce500c55c77e0352900b6969d6a5df44013754998a5db16ef5d536124d6126a6391dfbbc2f5b748e5d9e1023aa98d0b0d7d58865db6d574aa6363d26ee8b23e8721337b32db158ad80c2d646a9adacceb6262cdef2acd828b89c0fa74a0eafd76481717cd5243c125a0398eb48cdfbe7ab43cd1e8dae378e5cc9d6a70a80091f0f9a617ae8c457cc06f4cb2dd7d2d43ab3f060b7950f9ed372dd5a7cb7199942e94707f50e19fe37086d064b343725383d122ec46c5cf50bdefce2d1ad5a17a51772cd7c544b993a80159d9c329df0f6f59c15c4b82e5e63106d0271f8324c6e016f797ed9fc46ba5e352b562ba660dad613a6c78283685def46c2bad8e0aae4a04618e19b9ae65f394d6a2db101c519dc42efefced770a6d04", 0x1000, 0xffff, 0x0, 0x3, r1}, &(0x7f00000014c0)) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x77359400}}, &(0x7f0000000340)) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000380)=0x80) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) timerfd_create(0x7, 0x800) r7 = socket$can_raw(0x1d, 0x3, 0x1) mq_timedreceive(r5, &(0x7f0000000100)=""/30, 0x1e, 0x8001, &(0x7f0000000140)={0x77359400}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000003c0)={@empty, @ipv4={[], [], @loopback}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xbbf, 0x0, 0x2, 0x400, 0xfffffffffffffffd, 0x20, r6}) getsockopt$bt_hci(r7, 0x65, 0x1, &(0x7f0000cbc000)=""/244, &(0x7f0000000040)=0xf4) ioctl$FICLONE(r4, 0x40049409, r0) [ 317.379141] IPVS: ftp: loaded support on port[0] = 21 22:57:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000004c0)=@fragment, 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x2b}}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x3a, &(0x7f0000000100)="4b39168e", 0x4) sendto$inet6(r0, &(0x7f0000000140)="a840f1e2ce80b5f17dbd92fd910b67ae53948d9edee13d4960a71e7f01a73c6a8555a44b4ce89afa6d90ff877a0b07c055cd46a54939025868fb8133588d62302ad40ccb29638d8ceae7920000000000", 0x50, 0x11, 0x0, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/61, 0x3d) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x101000) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) [ 317.549491] chnl_net:caif_netlink_parms(): no params data found [ 317.665463] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.672185] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.680523] device bridge_slave_0 entered promiscuous mode [ 317.696666] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.703311] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.711730] device bridge_slave_1 entered promiscuous mode 22:57:31 executing program 0: unshare(0x400001fe) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') setns(r0, 0x0) clone(0x70024100, 0x0, 0x0, 0x0, 0x0) [ 317.747839] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 317.787704] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 317.831504] team0: Port device team_slave_0 added [ 317.846187] team0: Port device team_slave_1 added 22:57:31 executing program 0: getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)=0x36e) [ 317.937280] device hsr_slave_0 entered promiscuous mode [ 317.983278] device hsr_slave_1 entered promiscuous mode 22:57:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "b4d3207dfce0cc7d400fb26d0a4fd71f1f26c6a85e4281864f56e06a208bed9c0a1a94911a72a58c81b3bd77a795f14f"}, 0x34) writev(r0, &(0x7f000079e000)=[{&(0x7f0000000300)="2900000020001980013d7524000a002102000016000000800000000009000600000011e010315aec20", 0x29}], 0x1) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x100) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000080)={0xe, 0xdc6, 0x3}) [ 318.057488] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.064151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.071299] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.077933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.199240] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 318.206989] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 318.245696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.252811] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 318.260328] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 318.283838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 22:57:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000040)=""/4, &(0x7f0000000000)=0x20c) r1 = socket$inet(0x2, 0x806, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x81, 0x800) [ 318.313939] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.326269] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.345742] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 318.387085] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.411106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.420483] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.427076] bridge0: port 1(bridge_slave_0) entered forwarding state 22:57:32 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f00000000c0)=0x3) socket$kcm(0x29, 0x5, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0, 0x0}) recvmmsg(r2, &(0x7f0000005840)=[{{&(0x7f0000003f80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000004000)=""/65, 0x41}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000004080)=""/66, 0x42}, {&(0x7f0000004100)=""/144, 0x90}, {&(0x7f00000041c0)=""/48, 0x30}, {&(0x7f0000004200)=""/248, 0xf8}, {&(0x7f0000004300)=""/42, 0x2a}, {&(0x7f0000004340)=""/47, 0x2f}], 0x6, &(0x7f0000004400)=""/137, 0x89}, 0x800}, {{&(0x7f00000044c0)=@nfc_llcp, 0x80, &(0x7f0000004980)=[{&(0x7f0000004540)=""/181, 0xb5}, {&(0x7f0000004600)=""/68, 0x44}, {&(0x7f0000004680)=""/216, 0xd8}, {&(0x7f0000004780)=""/51, 0x33}, {&(0x7f00000047c0)=""/145, 0x91}, {&(0x7f0000004880)=""/194, 0xc2}], 0x6, &(0x7f0000004a00)=""/129, 0x81}, 0x401}, {{&(0x7f0000004ac0)=@vsock, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004b40)=""/253, 0xfd}, {&(0x7f0000004c40)=""/130, 0x82}, {&(0x7f0000004d00)=""/245, 0xf5}], 0x3, &(0x7f0000004e40)=""/73, 0x49}, 0xffff}, {{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000004ec0)=""/60, 0x3c}], 0x1, &(0x7f0000004f40)=""/232, 0xe8}, 0x4}, {{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000005040)=""/34, 0x22}, {&(0x7f0000005080)=""/81, 0x51}, {&(0x7f0000005100)=""/199, 0xc7}, {&(0x7f0000005200)=""/147, 0x93}, {&(0x7f00000052c0)=""/74, 0x4a}, {&(0x7f0000005340)=""/222, 0xde}], 0x6, &(0x7f00000054c0)=""/184, 0xb8}, 0x744}, {{&(0x7f0000005580)=@nfc, 0x80, &(0x7f0000005600)}, 0x7fffffff}, {{&(0x7f0000005640)=@caif=@dgm, 0x80, &(0x7f0000005780)=[{&(0x7f00000056c0)=""/150, 0x96}], 0x1, &(0x7f00000057c0)=""/86, 0x56}, 0x7}], 0x8, 0x2001, &(0x7f0000005a80)={r3, r4+10000000}) clock_gettime(0x0, &(0x7f0000003ec0)={0x0, 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f0000003e00)=[{{&(0x7f0000000440)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/185, 0xb9}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f0000000640)=""/65, 0x41}], 0x3, &(0x7f0000000700)=""/244, 0xf4}, 0xff}, {{0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f0000000840)=""/4096, 0x1000}, 0xf2bc}, {{&(0x7f0000001840)=@l2, 0x80, &(0x7f0000003cc0)=[{&(0x7f00000018c0)=""/32, 0x20}, {&(0x7f0000001900)=""/134, 0x86}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/220, 0xdc}, {&(0x7f0000003ac0)=""/245, 0xf5}, {&(0x7f0000003bc0)=""/225, 0xe1}], 0x7, &(0x7f0000003d40)=""/178, 0xb2}, 0x8}], 0x3, 0x0, &(0x7f0000003f00)={r5, r6+10000000}) connect$can_bcm(r2, &(0x7f0000003f40)={0x1d, r7}, 0x10) tkill(r1, 0x1000000000013) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x9, 0x103080) setsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000140)=0x7c, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000200)={0x400, 0x1, 'client1\x00', 0x1, "3527a7e90d1c484f", "a9ad757d1523ddbc2dc4ab0ad36605ec4a7c11c8a9064db7ceca00ef892e6097", 0x7ff, 0x1}) 22:57:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0xe93, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r3, 0x2, 0x30, 0x10001, 0x6}, &(0x7f0000000100)=0x18) ioctl(r1, 0xfff7ffffffffffc6, &(0x7f0000000000)) [ 329.843182] FAULT_INJECTION: forcing a failure. [ 329.843182] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 329.855426] CPU: 0 PID: 10901 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 329.862484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.871874] Call Trace: [ 329.874600] dump_stack+0x173/0x1d0 [ 329.878377] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 329.883638] should_fail+0xa19/0xb20 [ 329.887431] should_fail_alloc_page+0x212/0x290 [ 329.892164] __alloc_pages_nodemask+0x4a2/0x5e30 [ 329.896988] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 329.902247] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 329.907668] ? __update_load_avg_cfs_rq+0x105/0x10b0 [ 329.912859] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 329.918135] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 329.923396] alloc_pages_current+0x69d/0x9b0 [ 329.927878] __get_free_pages+0x33/0xc0 [ 329.931909] mem_rw+0x14f/0x8a0 [ 329.935253] ? security_file_permission+0x521/0x660 [ 329.940340] mem_read+0xc6/0xe0 [ 329.943687] do_iter_read+0x8e0/0xe10 [ 329.947563] ? proc_pid_cmdline_read+0x1050/0x1050 [ 329.952553] do_preadv+0x3a8/0x5b0 [ 329.956179] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 329.961687] ? prepare_exit_to_usermode+0x114/0x420 [ 329.966756] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 329.972025] __se_sys_preadv+0xc6/0xe0 [ 329.975990] __x64_sys_preadv+0x62/0x80 [ 329.980016] do_syscall_64+0xbc/0xf0 [ 329.983865] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 329.989108] RIP: 0033:0x457f29 22:57:44 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0x6, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x1, @pix_mp={0x0, 0x0, 0x33565348}}) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x10000, &(0x7f00000000c0)=0x4) [ 329.992355] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 330.011314] RSP: 002b:00007fcbb7e9dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 330.019353] RAX: ffffffffffffffda RBX: 00007fcbb7e9dc90 RCX: 0000000000457f29 [ 330.026759] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000004 [ 330.034082] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 330.041387] R10: 000000002000107c R11: 0000000000000246 R12: 00007fcbb7e9e6d4 [ 330.048693] R13: 00000000004c4a33 R14: 00000000004d8310 R15: 0000000000000005 22:57:44 executing program 0 (fault-call:2 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 330.395250] RSP: 002b:00007fcbb7e9dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 330.402974] RAX: ffffffffffffffda RBX: 00007fcbb7e9dc90 RCX: 0000000000457f29 22:57:44 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000300)={'ip6tnl0\x00', @ifru_map={0x89, 0x7fff, 0x20, 0x3f, 0x4, 0x1}}) r1 = socket$pptp(0x18, 0x1, 0x2) close(r1) r2 = dup(r1) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) write$input_event(r2, &(0x7f0000000280)={{r3, r4/1000+10000}, 0x5, 0x5, 0x5}, 0x18) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/245, 0xf5}, {&(0x7f0000000100)=""/40, 0xffffffffffffff75}, {&(0x7f0000000140)=""/106, 0x6a}], 0x3, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f0000000200)=0x4) fsync(r2) 22:57:44 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) [ 330.413567] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000004 [ 330.420850] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 330.428129] R10: 000000002000107c R11: 0000000000000246 R12: 00007fcbb7e9e6d4 [ 330.435420] R13: 00000000004c4a33 R14: 00000000004d8310 R15: 0000000000000005 22:57:44 executing program 0 (fault-call:2 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 330.843924] RSP: 002b:00007fcbb7e9dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 330.851647] RAX: ffffffffffffffda RBX: 00007fcbb7e9dc90 RCX: 0000000000457f29 [ 330.858935] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000004 22:57:44 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x501240, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000080)=0x400) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000000100)) clock_gettime(0x4, &(0x7f00000000c0)) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000000), 0x0, 0x0) [ 330.866216] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 330.873506] R10: 000000002000107c R11: 0000000000000246 R12: 00007fcbb7e9e6d4 [ 330.880783] R13: 00000000004c4a33 R14: 00000000004d8310 R15: 0000000000000005 22:57:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:45 executing program 0 (fault-call:2 fault-nth:3): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 331.415794] RSP: 002b:00007fcbb7e9dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 331.423567] RAX: ffffffffffffffda RBX: 00007fcbb7e9dc90 RCX: 0000000000457f29 [ 331.430876] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000004 [ 331.438653] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 331.445982] R10: 000000002000107c R11: 0000000000000246 R12: 00007fcbb7e9e6d4 [ 331.453305] R13: 00000000004c4a33 R14: 00000000004d8310 R15: 0000000000000005 22:57:45 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:46 executing program 0 (fault-call:2 fault-nth:4): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930x0, @in6={{0xa, 0x4e24, 0x4, @rand_addr="2ab974b83590234e9a415dec49ba10a4", 0x8}}, 0x2, 0x1f, 0x8, 0x800, 0x100}}, &(0x7f0000000300)=0xb0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000340)={r4, 0x1}, 0x8) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000080)=""/172) [ 332.114659] FAULT_INJECTION: forcing a failure. [ 332.114659] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 332.126546] CPU: 0 PID: 10956 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 332.133482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.142863] Call Trace: [ 332.145480] dump_stack+0x173/0x1d0 [ 332.149143] should_fail+0xa19/0xb20 [ 332.152905] should_fail_alloc_page+0x212/0x290 [ 332.157609] __alloc_pages_nodemask+0x4a2/0x5e30 [ 332.162399] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 332.167793] ? rmqueue+0xbe/0x13e0 [ 332.171391] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 332.176662] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 332.181889] kmsan_internal_alloc_meta_for_pages+0x80/0x580 [ 332.187630] kmsan_alloc_page+0x7e/0x100 [ 332.191722] __alloc_pages_nodemask+0x137b/0x5e30 [ 332.196588] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 332.201976] ? __update_load_avg_cfs_rq+0x105/0x10b0 [ 332.207127] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 332.212346] ? update_cfs_rq_load_avg+0x5e1/0xa10 [ 332.217297] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 332.222517] alloc_pages_current+0x69d/0x9b0 [ 332.226964] pte_alloc_one+0x5a/0x1a0 [ 332.230802] do_huge_pmd_anonymous_page+0x86f/0x27e0 [ 332.235936] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 332.241188] handle_mm_fault+0x43e4/0xa4d0 [ 332.245436] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 332.250704] __get_user_pages+0x1aca/0x2790 [ 332.255122] get_user_pages_remote+0x2a7/0xac0 [ 332.259766] __access_remote_vm+0x29c/0xa10 [ 332.264152] access_remote_vm+0xf0/0x100 [ 332.268250] mem_rw+0x545/0x8a0 [ 332.271578] mem_read+0xc6/0xe0 [ 332.274897] do_iter_read+0x8e0/0xe10 [ 332.278757] ? proc_pid_cmdline_read+0x1050/0x1050 [ 332.283709] do_preadv+0x3a8/0x5b0 [ 332.287301] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 332.292768] ? prepare_exit_to_usermode+0x114/0x420 [ 332.297802] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 332.303025] __se_sys_preadv+0xc6/0xe0 [ 332.306960] __x64_sys_preadv+0x62/0x80 [ 332.310954] do_syscall_64+0xbc/0xf0 [ 332.314695] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 332.319896] RIP: 0033:0x457f29 [ 332.323102] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 332.342020] RSP: 002b:00007fcbb7e9dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 332.349749] RAX: ffffffffffffffda RBX: 00007fcbb7e9dc90 RCX: 0000000000457f29 [ 332.357032] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000004 22:57:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) [ 332.364318] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 332.371596] R10: 000000002000107c R11: 0000000000000246 R12: 00007fcbb7e9e6d4 [ 332.378885] R13: 00000000004c4a33 R14: 00000000004d8310 R15: 0000000000000005 22:57:46 executing program 2: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/1}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) dup3(r0, r1, 0x80000) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000000)='\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bond0\x00', 0x841c}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000140)='sip \x00') 22:57:46 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:46 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x7c69c7ef69df4fb4, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000200)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x80000001, &(0x7f00000000c0)="b56cee1e274e9e890bf51f023c12c2") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x10, &(0x7f0000000000), 0x10) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x280) openat$userio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/userio\x00', 0x400, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x103040, 0x0) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000140)={'sit0\x00', 0x97c7}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r3, r3}) 22:57:47 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930x0}, &(0x7f0000001940)=0x14, 0x80000) sendto(r2, &(0x7f0000001880)="36df1fc88f654dbbdd6a58738e61c1df34b5096e998dc1de7a8b5474a720a1e93863caa4e65de016a6f0956c82ad5ca2f8992c27cd874c330c0d2bcac8e4297319b6a9a47652b36e3f5cba29da7a8236887f67", 0x53, 0x4008090, &(0x7f0000001980)=@can={0x1d, r4}, 0x80) sendto$packet(r3, &(0x7f0000001a40)="f051eb2181f582d59070bb3221eb4daa23310a0a7cb6577bee728b380fdd124e184965b2799fd73f7c43eb35a44b114d00fc84ee69d8541fe34136ea8e1d6f6905cf113b00455fcd40539133fad2cb945a36471610979f1e9e3b7971a2de357bd4543cc74e6f9b57fb7dd9308a2db7ec6f42242e3c1c48ffb4ea9bf38359b149cd577d2fd3a4ac20e4040d78d758e32485dd28fb9a7490e17224c71eafe97b59fcddeb", 0xa3, 0x84, &(0x7f0000001b00)={0x11, 0x1e, r4, 0x1, 0xffffffffffffffe1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x14) 22:57:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:47 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007600)={'vcan0\x00', 0x0}) creat(&(0x7f0000000000)='./file0\x00', 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x328) bind(r2, &(0x7f0000000380)=@xdp={0x2c, 0x1, r1}, 0x80) 22:57:47 executing program 2: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xf2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000000000)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0xa00, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0xbc09) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x18000000000, 0x1, 0x8, 0x7f, 0xffffffff}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r1, 0x2, 0x9}, 0x8) socket$l2tp(0x18, 0x1, 0x1) 22:57:47 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:48 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x109801, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x6, @mcast1, 0x1ff}}, 0xcdd771f, 0x8, 0xafc4, 0x757, 0x4c}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0x72, 0x9}, &(0x7f00000001c0)=0x8) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000200)=0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x2, 0xfffffffffffffffd, 0x7, 0x5, 0xffff}, 0x14) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000280)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) ptrace$cont(0x18, r2, 0x9, 0xffffffffffff0000) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000340)={&(0x7f0000ffb000/0x4000)=nil, 0x800, 0x2, 0x41, &(0x7f0000ffb000/0x4000)=nil, 0x7}) shmget$private(0x0, 0x2000, 0x440, &(0x7f0000ffb000/0x2000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000380)={'team_slave_1\x00', 0x8001}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000003c0)) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000400)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000440)={0x48, 0xba56, 0x4, 0xfff, 0x7, 0x5, 0x9, 0x8001, 0x3a3, 0xfff, 0x0, 0x2}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x3, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00'}, &(0x7f0000000540)=0x44) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000005c0)={0x4, 0x1, 0x4, 0x8, {r4, r5/1000+30000}, {0x4, 0xc, 0x4, 0x4, 0x5c7, 0x7f, 'mj9M'}, 0x44c, 0x2, @fd=r3, 0x4}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000640)) times(&(0x7f0000000680)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000006c0)=@assoc_value={r1, 0x80000000}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000740)=@assoc_value={r1, 0x4}, 0x8) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000780)) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={r6, 0x3f}, &(0x7f0000000800)=0x8) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000840), &(0x7f00000008c0)=0x60) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000900)={0x1, 0x8, 0x1}) syz_open_dev$swradio(&(0x7f0000000940)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000980)={@initdev, @local}, &(0x7f00000009c0)=0xc) chdir(&(0x7f0000000a00)='./file0\x00') 22:57:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4000004e23, @loopback}, 0x7) sendto$inet(r0, 0x0, 0x2ec, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='vxcan1\x00\x00\x00\xf8\xff\xff\xff\x00', 0x28) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendto(r0, &(0x7f0000000040)='\x00', 0x1, 0x0, 0x0, 0x0) 22:57:48 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:48 executing program 2: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x28, 0x6, 0x0, &(0x7f0000000000)) r1 = dup(r0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80dc}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e21, 0x7508, @rand_addr="1a2444dc69038b6d8b8287fd3a6b32d8", 0x8000}}}, 0x84) 22:57:48 executing program 0: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x0, 0x400000) write$smack_current(r0, &(0x7f0000000200)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930x0, @in6={{0xa, 0x4e23, 0x6, @mcast1, 0x1ff}}, 0xcdd771f, 0x8, 0xafc4, 0x757, 0x4c}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0x72, 0x9}, &(0x7f00000001c0)=0x8) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000200)=0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x2, 0xfffffffffffffffd, 0x7, 0x5, 0xffff}, 0x14) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000280)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) ptrace$cont(0x18, r2, 0x9, 0xffffffffffff0000) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000340)={&(0x7f0000ffb000/0x4000)=nil, 0x800, 0x2, 0x41, &(0x7f0000ffb000/0x4000)=nil, 0x7}) shmget$private(0x0, 0x2000, 0x440, &(0x7f0000ffb000/0x2000)=nil) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000380)={'team_slave_1\x00', 0x8001}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000003c0)) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000400)=0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000440)={0x48, 0xba56, 0x4, 0xfff, 0x7, 0x5, 0x9, 0x8001, 0x3a3, 0xfff, 0x0, 0x2}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x3, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00'}, &(0x7f0000000540)=0x44) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000005c0)={0x4, 0x1, 0x4, 0x8, {r4, r5/1000+30000}, {0x4, 0xc, 0x4, 0x4, 0x5c7, 0x7f, 'mj9M'}, 0x44c, 0x2, @fd=r3, 0x4}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000640)) times(&(0x7f0000000680)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000006c0)=@assoc_value={r1, 0x80000000}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000740)=@assoc_value={r1, 0x4}, 0x8) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000780)) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000007c0)=@assoc_value={r6, 0x3f}, &(0x7f0000000800)=0x8) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000840), &(0x7f00000008c0)=0x60) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000900)={0x1, 0x8, 0x1}) syz_open_dev$swradio(&(0x7f0000000940)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000980)={@initdev, @local}, &(0x7f00000009c0)=0xc) chdir(&(0x7f0000000a00)='./file0\x00') 22:57:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:51 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x2) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000400)={0x8001, 0xfffffff800000000, 0x6}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x117}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000100), r1, 0x1}}, 0x18) write$UHID_DESTROY(r0, &(0x7f0000000480), 0x4) r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xff, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, {0x3018}}) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000003c0)={0x4686, 0x100000001}) 22:57:51 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x111000, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000100)={0x4280000000000000, 0x2000, 0x400, 0x6, 0xb}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x820c, 0x10001, 0x49, r2}, &(0x7f0000000140)=0x10) 22:57:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:52 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x400, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x200, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000001c0)={r1, 0x200, 0x44fc, r2}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000200)=0xfffffffffffffffb, 0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000080)=',\x00') 22:57:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) setsockopt$inet6_int(r0, 0x29, 0x7, 0xfffffffffffffffe, 0xdf) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 22:57:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:52 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, 0xffffffffffffffff, 0x0) unshare(0x40000000) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) getpid() getgid() socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @initdev}, &(0x7f0000000200)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @rand_addr, @multicast2}, &(0x7f0000000280)=0xc) getsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f00000002c0)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000300)=0xc) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@mpls_getroute={0x68, 0x1a, 0x110, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x20, 0x10, 0x200, 0xff, 0x4, 0xff, 0x7, 0x800}, [@RTA_TTL_PROPAGATE={0x8, 0x1a, 0x2}, @RTA_OIF={0x8, 0x4, r4}, @RTA_OIF={0x8, 0x4, r5}, @RTA_DST={0xc, 0x1, [{0xfffffffffffffffb, 0x100, 0xffffffffffffffda, 0x6}, {0x1, 0x4, 0x2, 0xffff}]}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x6}, @RTA_OIF={0x8, 0x4, r6}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0xc42}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x7ff}, @RTA_TTL_PROPAGATE={0x8, 0x1a, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x4880) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f00000008c0)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\xfc\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xf4\b\x1a~\x91V1s\xe9\xbe\x9e\x9b\'\xcde\xb3\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1cO\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xf24\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') read$FUSE(r0, &(0x7f0000000b00), 0x1000) 22:57:52 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:52 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r1, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 338.810203] IPVS: ftp: loaded support on port[0] = 21 22:57:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) [ 339.002933] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 22:57:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:53 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000100)=""/168) r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup(r1) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f00000001c0)) 22:57:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:53 executing program 2: write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x0, 0x7}, 0x120) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x200000010002, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000380)=""/228) r1 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x800, 0x3, 0x3, 0x3f}]}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {0x0}, {&(0x7f0000000580)=""/155, 0x9b}, {0x0}, {&(0x7f0000000000)=""/102, 0x66}], 0x5, 0x0) ioctl(r1, 0xc2604110, &(0x7f0000000000)) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000240)={0x7, @vbi={0x6, 0x8, 0x4, 0x3b7f7f5b, [0xffffffffffffffc0, 0xfffffffffffffffc], [0xe8, 0x20], 0x3}}) 22:57:53 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1, 0x9, 0x3d, 0x8000000001, 0x15}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x77fffb, 0x0, 0x820005, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000600), 0x0}, 0x20) socket$key(0xf, 0x3, 0x2) 22:57:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:53 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x200, 0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000400)=""/217, 0xd9}], 0x1) r2 = dup3(r0, r1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) tkill(r3, 0x1080000000013) 22:57:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCFLSH(r1, 0x541b, 0x712000) sendto$unix(r2, &(0x7f0000000000)="02cffb1df5a9679f623f5af47ea673cfa77e27d84ad432b8abadbbeed596e4d118ff8c113c82a7d67bc707233cf0249b1e04cd2c52829701dd79e26db3cd40b0a18e602d10dc4c8c00ae68e6005a368dcf", 0x51, 0x44000, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 22:57:54 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930xffffffffffffffff}) close(r0) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x1, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x5, {{0x2, 0x4e20, @multicast1}}}, 0x88) 22:57:54 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xffffffffffffffc1, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0xfffffffffffffd30, 0x0}) 22:57:54 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001080)='/dev/qat_adf_ctl\x00', 0x220c0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001100)={r0, 0x28, &(0x7f00000010c0)}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x8010800000000084) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) recvfrom$rxrpc(r2, &(0x7f0000000040)=""/4096, 0x1000, 0x40000161, &(0x7f0000001040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x2a}, 0x7f}}, 0x24) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) bind$inet6(r1, 0x0, 0x0) 22:57:54 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:54 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24048014) r2 = socket$nl_generic(0xa, 0x3, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x81, 0x8, 0x9, 0x101}) setsockopt$netlink_NETLINK_RX_RING(r2, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2, 0x0, 0x29, 0x8}, 0x1c2) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x80002, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="726177000d8c0d0a9db6f604a0000000000000000000000300000000000000000000670000009f70258c7b1f7e2cf8478f6fc9c98a307d82bfc7e598f67a7b367453e12987383d2f88d088c50d1dab0ecfe1cc8cdd8f3efa63506c48f7dd708a6d4408ef356bbbce7e5b1e750200001abde4afb6027d2eac47b4807886dc210c5add6104e8a03e44c12dc9e1c7"], &(0x7f0000000100)=0x8b) 22:57:54 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = gettid() fcntl$setown(r1, 0x8, r2) dup2(r0, r0) ioctl$UI_DEV_DESTROY(r0, 0x5502) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=""/210, 0xd2}], 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) 22:57:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(0x0, 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) [ 340.954324] input: syz1 as /devices/virtual/input/input5 22:57:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) r2 = getpgid(0xffffffffffffffff) fcntl$setown(r1, 0x8, r2) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, r4, r5) [ 341.096022] input: syz1 as /devices/virtual/input/input6 22:57:55 executing program 2: pipe(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000140)={'ipr\xf3\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe8\x00'}, &(0x7f0000000040)=0x1e) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f00000000c0)={0x4, "c4570046aa8233a908cd2beefc02b3f5425dbbd3111b8506944c303c2a7493f2", 0x1, 0x1}) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000080)={0x3, 0x31e}) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) read$FUSE(r1, &(0x7f0000005740), 0x1000) 22:57:55 executing program 0: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000700)='e\x1e\b\x82\xf8c&\xbe}\x13\bnviron\x00\x93\"\x91!\xc1\x0e\xa2\xdb\xcct\xb0\xc7\xf1\x14\xebX\xb2*K\x8a\xbc\xcb\x94\x1f3b\xb3\xc0\xdc\x13\xf8g\xd8\xef`\x9f\x14V\xec6\x8dc\x8f\xca3V<&7\xc3U\x97\xc5\x91\x98\xed\x87ho\xe4\xe5\fD\xff6\x8c\x04\xcf\xef\x808\xec\x05\xb6+\x91;\xc1X\\\\\x94`\x10baXh\x19_rg#IE\xf4\xc6\xd5C\xff\x9a\x95Ur\xf3\xaf]\xd2_\v\xe5\xa9T\xe7\x97\xf6\x91\x86UH\xe5|\xdb\x1eg\x99\xdbb\xa2A/\xd1g\xdeP\x18\xec._ \xf45\xee<\xba\xd2\xa4\x97{n\xf5\x9b\xda\xf3M\xe0\xf8\xdb|\x96\xa7\xa4*S\xe2\xbc\xb1\xef\xc6x<\xbb\xe5\xe6{\xda\b\x05\xd5\xc4\xc5h\xdb\xd3\xba~\xcb5\x88\xe9\xd1\x82i\xde\xd0\xb7\"\xfe\x90\xf4\xcb9V\xbc\xfc!\xfb\xa5\x12F[G\x80\xf8\x86\x15\xfb@\\\x80\xe4Z\xe7\xee\xba\x86\xaa\xb6W\x95\xc0\xb6*\x0f%\xab\xa6\xb3\x016\x18\x14c\xb5\x1e\xed\x98\xf6\x0f\xbc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/81, 0x2000032c}], 0x1, 0x2000107c) 22:57:55 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(0x0, 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team_slave_0\x00'}) r2 = getpgid(0xffffffffffffffff) fcntl$setown(r1, 0x8, r2) getresuid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, r4, r5) 22:57:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930xffffffffffffffff}) connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, {0x11da, 0x6, 0x1ff, 0x9, 0x10001, 0xd0a3}, 0x9}, 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930x0}, &(0x7f0000000240)=0xc) r3 = getegid() mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x80000, &(0x7f0000000280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xb000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@appraise_type='appraise_type=imasig'}, {@audit='audit'}, {@context={'context', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@context={'context', 0x3d, 'user_u'}}, {@dont_measure='dont_measure'}, {@appraise='appraise'}, {@appraise='appraise'}]}}) 22:57:56 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) shmget$private(0x0, 0x9000, 0x78000002, &(0x7f0000269000/0x9000)=nil) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000000d000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) 22:57:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930x0, 0x4, 0xe4, 0x40}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x4}, &(0x7f0000000180)=0x8) r3 = openat$cgroup_ro(r0, &(0x7f00000001c0)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/81, 0x2000032c}], 0x1, 0x2000107c) 22:57:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = dup2(r0, r0) recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x7, 0xfff, 0x9, 0x20}, {0x7ff, 0x9b79, 0x7ff, 0x1}, {0x7fffffff, 0x8644, 0x4, 0x4}, {0xa446, 0x1000, 0x4}, {0x7ff, 0x9, 0x80, 0x1840000000}, {0xff, 0x20, 0x3ff, 0x8}]}, 0x10) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r3 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12}, &(0x7f0000044000)) dup2(r1, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x15) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, 0x16, 0x100000000401}, 0x14}}, 0x0) 22:57:57 executing program 0: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000300)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000001900)='net/udp\x00') r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='mem\x00aS.cur\x89\xc9J\x01\xe3\xfarent\x00\x00\x00\x00\x00\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000000c0)={{0xffffffffffffffff, 0x0, 0x2, 0x1, 0x9}}) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000280)=""/113, 0x5b}], 0xfffff65, 0x2000107c) preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000480)=""/147, 0x93}, {&(0x7f0000000540)=""/226, 0xe2}, {&(0x7f0000000640)=""/169, 0xa9}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/148, 0x94}], 0x8, 0x0) 22:57:57 executing program 2: mkdir(&(0x7f0000000140)='./control\x00', 0x0) r0 = inotify_init1(0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0xc8300, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) mkdir(&(0x7f00000001c0)='./file0\x00', 0x104) inotify_add_watch(r0, &(0x7f00007a7000)='./control\x00', 0xa4000960) rename(&(0x7f0000000100)='./control\x00', &(0x7f0000000040)='./control\x00') 22:57:57 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:57 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000040), 0x1000) r3 = open(&(0x7f0000001140)='./file0\x00', 0x4000, 0x80) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001180)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000001240)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000012c0)={r4, 0xac7d}, 0x8) write$FUSE_ENTRY(r2, &(0x7f0000001040)={0x90, 0x0, 0x2, {0x20000000007, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9}}}, 0x90) 22:57:57 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x8000, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000050200"], 0x7) sendfile(r0, r2, &(0x7f0000000000), 0x800) 22:57:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x76, &(0x7f0000000240)={0x2a2d}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(r2) close(r0) 22:57:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f6ff697c6b2d4092c5967937dd326524a8e66b44b98ac9b169d4b85e5cddf884d3c519cec801b37fb6aa8a0b7736507a4c3951fd61f11b5c1de63ab8f26dc18faf9f0e2639b53d8ce068e5e7bf75410836d62000b3872eddcb6000100000000b1ea2948df7c86dd0539c6aff00ce5959e13b4869beaf9619018aef3ca5ae614510daa51ad2be887b0fab35177a32122462f9cf63e572399bb21dd1ce7f6576d2b7f84c96480aec1577af453198c9a645066"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 22:57:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r1, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:58 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x600000, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x8, 0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x200, 0x3ff, 0x8, 0xd7, 0x610, 0x9, 0x2, 0xfffffffffffffff7, 0x100000000, 0x7, 0x1f, 0x100000000, 0x8, 0x9, 0xffff, 0x1, 0x5, 0x7, 0x10000, 0xb3d, 0x26c2ff89, 0x7f, 0x8, 0x2e5, 0x8, 0x0, 0x2, 0x9, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x2080, 0xd1, 0x200, 0x9, 0x7, 0xa3f, 0x6}, r0, 0xc, r1, 0x9) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x5c, 0x8000, 0x76ec, 0x0, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r2, 0x1}, 0x8) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000200)={r1, 0x401}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000240)) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280)=0x8, 0x4) r4 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x20000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)={r2, 0x3dc, 0x3, [0x1f, 0x8000, 0x2]}, 0xe) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x11, 0x5, 0x7f7a, 0x3, 0x14, r0, 0x5}, 0x2c) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000380)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f00000003c0)={0x1, {}, 0x3, 0x9}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000400)={r1, r0}) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000440)) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000480)=0x17, 0x4) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f00000004c0)) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x90, r5, 0x42c, 0x70bd2a, 0x80000000, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x13}, 0x100}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x27800000000}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1af}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000740)={0x2, &(0x7f0000000700)=[{}, {}]}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000780)) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000007c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000840)={{0x1, 0x3, 0x3, 0xc782, 'syz1\x00', 0x9}, 0x3, 0x20000040, 0x1ff, r6, 0x5, 0x1, 'syz1\x00', &(0x7f0000000800)=['/dev/vbi#\x00', '/dev/cachefiles\x00', 'em0\x00', '/dev/dri/card#\x00', 'TIPCv2\x00'], 0x34, [], [0x1ff, 0xff, 0x3, 0xfffffffffffffffa]}) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000980)) write$UHID_INPUT(r1, &(0x7f0000000b40)={0x8, "4ea07c02aad07abd387a750a3b02f21c2066183dbd5aa802ca989c66e4eaae431f825ac26a5f73623dc49ded1062d3af9bfa8d3a0a4f0eeab007cc9c4c49f84802e16dc86c95805e165fc1300c46de49dd766d0d585b3661de1cecf33af7af18ad15b0a95aefd520d8204a7df9968181513754dc33d6c01bef59e314f6f9dfbf42026c89b5e53168196c2e0591059c73a790706606d65dfa1600adeb4a7677d9c76a9f5b85cf61cddd700dcc9bf0ed300f825f5e5b70161caa681978a9b08d9c5a6f208b4ae6b15a882512591312e6895cab345613bb00fa44b46bd21ae69141338edb9971976a2d159ce1ebfb3c7c066eb8936bcec599378642522fe434c425aa355be4c005b92fe0b42d99d01ec9715944fc0ffd9be3426c898fd2340cac45b5ac37a144063510e27e9c8609c942bd590598dfba24e3604eb043a7ab114c048322ebb101257183e106734fa134edd2560ff202301381cc9c9014d7879da8472399377d8c03d40c266905788b93ff61767daa41f66e1906e8553cb06921b5aff34b45f409ae3d4f6f97c499c786140cb04dea192bebcf0f9e107e3afa700825723546649b5013ac1ff13a119289b80a4e96fd66925b4c0966dade3f287e115d123dcda7797e8f07b4c1c92a64750448420c0cda0f9230ef6e398e8a37337c7d062bdf78ac637976deaf55d5249cba96d8d49f9b9fd67f17295e70327e44784a9efe5e943168936a99aa438734547cd6be314972cbeefffa4ac8352d681bec562b5d4a8a20dca0be4e31238bfe51aa543320b7d4b7ea6c7ab256d44c7e31094509845eec6d00caaea8ea5ab8f25de5a25a086c493665cace380ec306cee5a23b72d3129cd2abd1b947129a4fd97abac8ad3bd7f4d734059ea4c3d0e96239d71ee4d03f14a069d157ca86424c133cd150aa818550441899ee573c3311e3bfcf16ed1d1557afac4ae66e60408b80d9b9e69ce0439fbfd1b1f2c90be4740941a1661ffe3f5755687b2429b058d7d5aa0062956719017d39997f6098d6bf244435474bae96c2c040fa495b9c3f208fd4a6230e7691e64e0a5e90768c9ba04c9b768201782f246a00a45d88362a0c236b7588cdfe5cba0547843ed3b222ec37c2f0d646debd93597c48871f5d2248404fa549025fb35d4521d6e572ba043e728f92dde20fb9296c221882179342d088fa3878fd9def2db1063851f0fa1a3eecb6828fd7b5ed2c4eef95aa8365a894249856fb806fe31038b6ed3d43d7e4ce5c86c06f75e5dc1bfb0d45e71d4149d9b3a5f730247cb0f93884c920070e2dee5e6040557396328776b69b7bf4ca8cd546d0912526df20466b3079e6768237c8292920dd7fd35dcfa293ded85bce83700808a318e3ca4035c66e6e64796661c1f98a5af3aedb5b22b0bb89081625329d463850e59435c7c1ae904f995adad73a9097fa195955da2c3662b67d81b09d2d2904a6c418ffdec280b70a0a376676538a34c988c59aa5d538954f39009cdd87623c0b33e253b9cc26896bb7c1ade75a7cbcccab74e2d860c1bf98b594c88f28da2d266bb182aa59ffec3941e087c6c0150145d7765c3120954571d2fb34824f93688d41c12028b81b4eeae073b99311af11ef8259caf904ecd9743c6e6663e22006dbf3902db994066787f73ef28dc80bbdea01b582691dfa0332720b61c6204b44029b5ddfdf69ed4085d389b8d15abae80c04f9387cf2f13ceac0f911d21143e3f1ce1956c83503a732829b2cb8e6a9df2787e822dee09f98c539eabcb274fecbdb0574332ba03a49a9e0454a36155d154f3e03aa8d766ef976bdf99a6658134a7e97f99cf49afee8547f896624a76fcb6ac5c35856342afbdb34bb903e4bfe8a975fefde9c230fd214afd2d75c02cb978456e17816790c21d3c75400ce762f23e0db2105c8266a1f4f0e412f68dcc451af27e3e1a6145aa449c2780b93e92b8a8912d6d21736681a8444851e20ba11843fd4207eb4813464d5093d9601d460545af1e20c283f25c2bee7f772a5d572b3e3bd034a5626b61ee99e8b80c215c34335e89ea4af1b243354236c25a0b3d6ced3da504a0c2e5982ea0839324cf6f311e48c73dc49b5a8df792d97dee02f98035367b3f672c342498f50c4e5056c8ba1104b04991c166569b8cd4818aa10d43f204e9ba7bba156d5c49dabd1207ce5ee3b751e23f0f8a7e7e0ed4031638f813427fe6a576b972ddcc1b04e0cd62daf12e34d90038e1da29960559a1c5138d6597e453a4b014cde98db2bd40474a33b1c7c198ca93ac50a5bba2da22b3b5e0e293d3a30fc32fe89219dd1bfdf5d92e06a15c827c2a426cb65ae8128ee5e1e1df5134fad7ca84fcbb75484e163a682f61cb72128d94bda0aa01b97b725f07e912d00cfd3ba6de9febe7752af879b8002981e9540ada35612f060c9265140d716081bac45cfc5456095055057ef75331c640f95fb7903277c43625dc1cd43fc07e2933d576de0358e1d1ce894fac1013573f7e3946d8a782bca40ce4251ae102976a2c5cd6db6171998dbc32f0e38f654d7da7e2d7b10a8e2dba94e557c2cdb65f2f235ae9b16e13491a8d9fe1343a67273024154338d6f3f605f5cdc07f2800cd79acc706ee42eb568d34b124d915003b15ef27966eb3b96887920760b1ad1b98a5b80c3191fa8be8019b4c808844ea88dc037d6259630e7dda02638e486cc5e4b30d9217ef6cf22a7996911673a5da9b554022e499fb821df67265b3e6572197b73989a3e5357fbdd676f98859c20a2720821d49be0d7094dccb882186360d1b2c00176e7c2fefa5bb2d8d5ba3b6c62a01bf17e5c062e60e5d98b6f78a986b75b392f14affa378b524ca0f3c3a1a35062d4754a7fac06f74c04135b39d033b41831fa2dea9340971569cc4e046771545f5e40697d88db4a6ebc48e9d0c20ec428b22bc93aa9692bcce4e380a17320ec497e6612f750bfc0aebf3fb7df42dba9c6dab637c7f7d0b8cfb02342e2737e221c229e668c854a976e361b63bd5e668f2400fa9a340742115b2524f2968700c0f40079a4b311c7909e6d5ae62b980582d08b2b8e41bcc40ca88eef330e1136df4299c0dcaf9b986883fd3486639f10b627fa8e4d2f967e51fd0a3c2bd0e1a08e9694ff41d4045db3b60b0a9bd3e3ab4adfac381e079a6af8a61e8c97e0aa44cae77ae7c31b0e8e63a9dcdbc733d8596175efc86d27acd2e6b46abbee15faa0a36f7d61095f8a04d8a7e903c5e44132d15031a730b769aac56f9fb49af7b9d2ccd3ae71a8d141a530f8df8f1e8fdc7e7a6f0ba3102fc3e97050bf13375e03df73d4beaea4cc6125ac8d2aa5b0c39d7b028087d5d3f32ddedcdc96533a78e0784fa0a96e23c140229af99df375f0f29df4c4e2f00b1da39fe27331662a9bb3b33d69a22e76aadde91dbba97ba11e71edf2b229af14ba95465938776c6e29d20b788511df5f1bb1fb246b056bf7258f1d0d7a0e092fc1de51013cce108117b3a3c1151a73f4396b2c06ca1d814745a29a2bea175818617dc2decd6ad31320218c380a16825db437824899cd57701eac088ffbc09c65b9ea3036fd13ee420191810eb5771d120cdfceb24ddbc5f95487141b160717a05cb685e2401781896104e3a5d9720643118f72f8912822ccfd578a858dd424596bcf3b01e2d0b44959fb3f1f95608a00175d23ce4adc2e8be1e5bb3aac04d25e9e04ed78f92d1e685267eeddd6f6d2557ff9252be1f0f28d0aac9591819bd659b601d73703c6ebf8dc6247fd53054c6d93f8ee0d9ebb1b36edaa78dbf0946b681f1408b6019e2a1d143e5e3771183ba7657a55f418782f4bb1057cd1523b48a756eb69cad58e474d6aa4b13a30187596b40b75bf385731cddf7e42c8c110b4a8fc7b7d882cef0f17cf46628e2c63bb0b2a290d614b2851ffab25a45dc336a5c41a79442bd689006581558c4a28bc9c4c015253b434319a51e21148a90844c54da98b30cbbc890796daf516aab01549eca4ba6a3bed4ab2546d0c4ec35112900ede7b8719171ec002764122710074983f67f933e5debe98e822b25db40f5eceb1ace943d83805ca448681882ab80e0d31e8a2dc9461fdf303aa85383f0f7e268abe29bf94ca958ae946dd78683ff343a89a5c32cf1792e47ad45bdcb608f7167b317c693fcdb2f3793acc1d4c9a9e3838ca45c096e1a74feebb8f41debe46eb2ed44356328b6cb2a72b29551d7ac15e09e779866368c80438400899761c2024923953eee8f19e81cd8092bbac6aef865f86e6983832a7902e89bc3815b8db7876a1708246d8b8977bd1b69e2a6ea395c075169daf30418026f59f62065932eb5e2a53548f8244b3b10486d35ec47c39feb8d691fbe83dd14d39742000c2082eaa69669838a6c15dd276f94459d9d470454560c321e66e8edfae7fd11d319cda522a983031f8cc009979a3c1132c2c71db917a9b91b3fefe1ecc9a9d9f32d0ae6ae86e851cabe38654088e2a12b116c13719312150bdec628840d162053c644cae78d65e15a0cbdc3d76137a721793f72ed9544bb41bfb3ed45ef507ca506cfcd63cb7bdb9c3ff10a156a96d18d4919c6b28f96e38227ef9bc54c0bbd7b8511a150bbeb1892953c0e19a8705ec7c688eb88a28618da40cd46e77f96eab40d658a6738e9d9ad75cc4a46de7f3a92ef482ddf0f7659bbe080349814e87f165b74aecacdfe1733e788eebcaa7da921fcec89f69a0138de6b4129330474e956e7825357a355ebeeaf855a0939b034c647d1458d377c8e461f8c008f81b5708907e988abe898b99aae6d410343bcafadacee8dca57d4c6563921de3abc14dca57f27a1a66c245581bbb94d913e2454db57bbc522453a973675e37f36156517b2442249fb2a14a396f7deed9ca6243627ad5a3b3a8abbb3cd338b3fef0d3c889d1e545a4171c2d83b9e540c456e720bfd85d9ee579184c1fb6b702bb268fe97d96fb1b5b94e78e38cdad674099cc28facafcf9b5723e8ec81c0dce953c773e0de392e4bf35f4672e3f97860f3b9545084a780e22eb34257e41264b7f34afc5b2f01a2357214729f10871b02f73d66b01b2c4c131653343493c43b1cff3631df7b3436101f35789052b68829326ebf3b985f5d8ab1c126e90657a27de5dcbb1bc27dcf4b5c856bea19df87392bf9645c5ab263f0ea05c39bcdb2a0cc9af9641242cc52c122ffa0ccfaa164422697e20114690f132f0f8bd2e96ec08cd4e34e30756e32626b9bd8c5035c431aeeda6b02b4f95886a0076c231a7fd5c9d589b8074fe5528ce4cd8ddb409d4d22ca2b1e6f5b642c1d61eb3aee181b8040c5ff387528f87c88753fe35f8023d0b0b4951a19b935833348cb6384b253035a811fcd2655e17aa718bd0532f93f94b45a9b7e956a1dbc0bd1480a8822a7e6ce50542609575474f4bdaa9ede97e52c8a129a2c79a448d854c508f7f4c6f012d04f02eae2453ccdaccf016bd6c9dfd244b56f84f9a6041fcec2954e42d1200d7fa8c9497348fdd9b4b3ab9ad45ed2a1f95c55175e0b1aabae4ad2ef17da9a141f4e14687ab7df612eced81cf78346a16d7718a2960f2f46596b24287f384bcaa746ab8138e8a6cc66b684fb6a827eb8d9b69528047856a3bfa9d81a2ed48f6cd29ca44ae41a9e81f47f48c106d187b0d91d823955a43e631ce4b983d404627b77eeeef7c3ee7305d2799640cc99c169118eea5403cce4cdaeddbfd729c5739306d619bcdc6deb8f8e6d5d7f0a7c91409ff0a545e4c3b02ca521d470d266847f73c197241bb3ce67f", 0x1000}, 0x1006) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000001b80)=0x81) r7 = syz_genetlink_get_family_id$team(&(0x7f0000001c00)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000005800)={'eql\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000005840)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005880)={'bridge0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000058c0)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f00000059c0)=0xe8) getpeername$packet(r0, &(0x7f0000005a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000005a40)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000005a80)={0x0, @initdev, @multicast2}, &(0x7f0000005ac0)=0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000005b00)={'nr0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000005ec0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000005e80)={&(0x7f0000005b40)={0x30c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x7c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}, {{0x8, 0x1, r10}, {0x1e0, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r13}, {0x84, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) 22:57:58 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r1, r2, 0x82}) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x5) syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff8c, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 22:57:58 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000100)={{0x3, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r1, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:57:58 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r1, r2, 0x82}) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x5) syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff8c, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 22:57:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x100000000014b03e, 0x0) ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f0000000100)={0x0, 0x0, 0x69c4}) write$FUSE_STATFS(r1, 0x0, 0x190000) [ 347.478343] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.4'. 22:58:01 executing program 3: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x10000, 0x0) pipe(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x2) close(r1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) epoll_wait(r3, &(0x7f0000000140)=[{}], 0x1, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000080)={0x0, "fed9bc2880a48b4d15174863ba5fe1e6b58741c222ab25cba8659f34fdeb64dd", 0x3, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x2008, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @empty}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r5}, 0x10) 22:58:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000280)='/dev/snd/controlC#\x00', 0x5, 0x80) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) fcntl$lock(r0, 0x26, &(0x7f00000002c0)={0x3, 0x7, 0x5, 0xfff, r1}) r2 = socket(0x10, 0x803, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000e80)=""/30, 0x1e}], 0x1}}], 0x1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000000000)=""/5, 0x5}, {&(0x7f0000002180)=""/223, 0xdf}], 0x3, &(0x7f0000002340)=""/110, 0x6e}, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) sendto(r2, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x1, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) 22:58:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0x40, 0x6, 0x4, 0x10, {}, {0x2, 0xc, 0x1, 0x401, 0x4, 0x5, "d195ecae"}, 0x4, 0x1, @fd=r0, 0x4}) fchdir(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000000)="e6") 22:58:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, 0x0) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:58:02 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0xffffffffffffff12, &(0x7f0000020ff0), 0x1, 0x0, 0xfffffffffffffe27}, 0xfffffffffffffffe) 22:58:02 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x82102, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x4080, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x9db, 0x80000) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000002c0)={r1, 0xfffffffffffffe00, 0x251, r2}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000acc000)={@multicast2, @multicast1, 0x2}, 0xc) r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x3, 0x100) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r5 = semget(0x0, 0x7, 0x200) semctl$SEM_INFO(r5, 0x4, 0x13, &(0x7f0000000040)=""/11) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', r6}, 0x10) ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0x9) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1, @multicast1}, 0x9) 22:58:02 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet6(0xa, 0x800000020000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000080)={0x1}, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x4004000, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f00000000c0)) 22:58:02 executing program 0: prctl$PR_GET_SECUREBITS(0x1b) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x391) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{}, {0x20000000304, @link_local}, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, '\x00\x00\x00\x00\x01\x00\x00\x01\x00'}) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'gretap0\x00'}) 22:58:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="94"]) chmod(&(0x7f0000000040)='./file0\x00', 0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80004, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x202, 0x7f, 0x81, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140)={r4, 0x7fff, 0x110a, 0x2, 0x7, 0x8}, 0x14) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:58:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000240)='ifb0\x00') fcntl$setown(r0, 0x8, r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x121000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x3e1) ioprio_set$uid(0x3, r3, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{}, {}, {}, {}, {}]}) epoll_create1(0x80000) setfsgid(r4) ioctl$RTC_WKALM_RD(r5, 0x80287010, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f00000002c0)={{0xffffffffffffffff, 0x3, 0x3, 0x3, 0xab82}, 0x0, 0xbc9a}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x20000, 0x0) 22:58:03 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x7fff, 0x0) read$eventfd(r0, 0x0, 0x0) 22:58:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x0, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:58:03 executing program 4: mkdir(&(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000280)='./file0\x00', 0x2) renameat2(r0, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000340)='./file0\x00', 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'nlmon0\x00', &(0x7f0000000080)=@ethtool_eee={0x45, 0x81, 0x80000000, 0x3ff, 0x6, 0x0, 0x5, 0xffffffffffffffff, [0xff1, 0x9]}}) 22:58:03 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rt_acct\x00') epoll_wait(r1, &(0x7f0000000280), 0x0, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x60) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x1, 0x30}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r4}, &(0x7f0000000200)=0x8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x8200) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) 22:58:03 executing program 4: r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0), 0xdc632df870a7771b) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) unshare(0x60020001) r1 = dup3(r0, r0, 0x80000) semget$private(0x0, 0x1, 0x40) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f00000001c0)={0x0, {0x2, 0x4e20, @loopback}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x4e24, @broadcast}, 0x100, 0x0, 0x0, 0x0, 0xdb, &(0x7f0000000180)='team0\x00', 0x9, 0xa51, 0x1}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000002c0)=0x1d, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="899a432a97b238dab1509e6813c37a40a6f487926ed8e64784aa495235754dc357", @ANYRES16=r2, @ANYBLOB="04012abd7000fedbdf250e00000008d65982b29d28084e00050081000000080004000600000018000100080002007f0000000c000700000000003700000089885a680375992b840bff5ac8dc9788022f8dbf748fa276845147c53e6bc4816d6380cd3779a9332d066f85a8606b1447a9be5a71cd13aaceffdb2a56734d08f99d1697469c5be0aa58c208944e361d75e6bb66427565042eeb8a4c4435fcd54ac6f8cf5ccaf5f1ad93ff786e63c61d8d"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8814) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000280)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000240)=0x2) 22:58:03 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, 0x4, {0x7, 0x1c, 0x73ba, 0x40000, 0x8, 0x6e0, 0x173e, 0x5}}, 0x50) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x78, 0x1, 0x0, {0x0, 0xc49, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}}}, 0x78) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000080)={0x2, 0x40, 0xffff, 0x4}) 22:58:03 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x0, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:58:03 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000001c0)={0x0, 'yam0\x00'}, 0x18) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/239, 0xef}, {&(0x7f0000000300)=""/95, 0x5f}], 0x2, &(0x7f00000003c0)=""/79, 0x4f}, 0x40000160) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x100, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000100)={r2, &(0x7f0000000080)=""/66}) 22:58:04 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/97, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000580)=""/156, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000001c0)=0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000080)=""/86) 22:58:04 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x0, 0x1, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:58:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x1e00}) splice(r0, &(0x7f0000000040), r0, &(0x7f0000000080), 0x6, 0x7) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast2, @remote, @multicast2}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 22:58:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930x0, 0x3}, &(0x7f0000000180)=0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000240)={0xfffffffffffffffd, 0x20, 0x2}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0xffffffff00000000, 0x7, 0x9, 0x101, 0x2, 0x4, 0xfb3, 0x3, r2}, &(0x7f0000000200)=0x20) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2d, 'rdma'}]}, 0x6) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) r4 = dup(r0) read(r4, 0x0, 0x0) 22:58:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x400) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x16f) r1 = msgget$private(0x0, 0x20) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000000)=""/101) 22:58:04 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930xffffffffffffffff}) accept(r0, &(0x7f0000000000)=@ethernet={0x0, @dev}, &(0x7f00000000c0)=0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') 22:58:04 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x401, 0x102) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x3) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f00000001c0)={0x0, 0x1, {0x9, 0x5, 0x3009, 0x0, 0x0, 0xfffffffffffffffc, 0x3}}) 22:58:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x0, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:58:05 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000002a00)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6}}, &(0x7f0000002b00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002b40)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000002e80)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000002f80)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000002fc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003000)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003040)={'hsr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003380)={'vlan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000033c0)={0x0, @local}, &(0x7f0000003400)=0xc) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000003440)={@loopback, @local, 0x0}, &(0x7f0000003480)=0xc) getpeername$packet(0xffffffffffffff9c, &(0x7f00000034c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000003500)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003580)=0x14) clock_gettime(0x0, &(0x7f0000006500)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000006380)=[{{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000035c0)=""/93, 0x5d}, {&(0x7f0000003640)=""/28, 0x1c}], 0x2, &(0x7f00000036c0)=""/4096, 0x1000}, 0x7f}, {{&(0x7f00000046c0)=@ll, 0x80, &(0x7f0000004740)}, 0x80000000}, {{&(0x7f0000004780)=@x25, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004800)=""/30, 0x1e}, {&(0x7f0000004840)=""/20, 0x14}, {&(0x7f0000004880)=""/64, 0x40}, {&(0x7f00000048c0)=""/240, 0xf0}], 0x4, &(0x7f0000004a00)=""/118, 0x76}, 0x2}, {{&(0x7f0000004a80)=@isdn, 0x80, &(0x7f0000005b40)=[{&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/46, 0x2e}], 0x2, &(0x7f0000005b80)=""/190, 0xbe}, 0x10000}, {{&(0x7f0000005c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000005cc0)}], 0x1, &(0x7f0000005d40)=""/5, 0x5}, 0x400}, {{&(0x7f0000005d80)=@alg, 0x80, &(0x7f0000006200)=[{&(0x7f0000005e00)=""/145, 0x91}, {&(0x7f0000005ec0)=""/28, 0x1c}, {&(0x7f0000005f00)=""/86, 0x56}, {&(0x7f0000005f80)=""/116, 0x74}, {&(0x7f0000006000)=""/73, 0x49}, {&(0x7f0000006080)=""/29, 0x1d}, {&(0x7f00000060c0)=""/105, 0x69}, {&(0x7f0000006140)=""/150, 0x96}], 0x8, &(0x7f0000006280)=""/207, 0xcf}}], 0x6, 0x2000, &(0x7f0000006540)={r17, r18+10000000}) getpeername$packet(0xffffffffffffffff, &(0x7f0000006580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000065c0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000006640)={'ipddp0\x00', 0x0}) recvmmsg(r2, &(0x7f000000a880)=[{{&(0x7f0000006680)=@alg, 0x80, &(0x7f0000007980)=[{&(0x7f0000006700)=""/4096, 0x1000}, {&(0x7f0000007700)=""/67, 0x43}, {&(0x7f0000007780)=""/6, 0x6}, {&(0x7f00000077c0)=""/127, 0x7f}, {&(0x7f0000007840)=""/28, 0x1c}, {&(0x7f0000007880)=""/115, 0x73}, {&(0x7f0000007900)=""/105, 0x69}], 0x7}, 0x8d8}, {{0x0, 0x0, &(0x7f0000009000)=[{&(0x7f0000007a00)=""/52, 0x34}, {&(0x7f0000007a40)=""/131, 0x83}, {&(0x7f0000007b00)=""/134, 0x86}, {&(0x7f0000007bc0)=""/226, 0xe2}, {&(0x7f0000007cc0)=""/190, 0xbe}, {&(0x7f0000007d80)=""/164, 0xa4}, {&(0x7f0000007e40)=""/4096, 0x1000}, {&(0x7f0000008e40)=""/200, 0xc8}, {&(0x7f0000008f40)=""/53, 0x35}, {&(0x7f0000008f80)=""/75, 0x4b}], 0xa, &(0x7f00000090c0)=""/44, 0x2c}, 0x3}, {{&(0x7f0000009100)=@isdn, 0x80, &(0x7f000000a280)=[{&(0x7f0000009180)=""/210, 0xd2}, {&(0x7f0000009280)=""/4096, 0x1000}], 0x2, &(0x7f000000a2c0)=""/121, 0x79}, 0x40}, {{&(0x7f000000a340)=@hci={0x1f, 0x0}, 0x80, &(0x7f000000a640)=[{&(0x7f000000a3c0)=""/159, 0x9f}, {&(0x7f000000a480)=""/232, 0xe8}, {&(0x7f000000a580)=""/168, 0xa8}], 0x3}, 0x400}, {{&(0x7f000000a680)=@in, 0x80, &(0x7f000000a800)=[{&(0x7f000000a700)=""/36, 0x24}, {&(0x7f000000a740)=""/138, 0x8a}], 0x2, &(0x7f000000a840)=""/47, 0x2f}, 0x7}], 0x5, 0x20, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f000000a9c0)={0x0, @initdev, @local}, &(0x7f000000aa00)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f000000aac0)={0x0, @loopback}, &(0x7f000000ab00)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f000000ab40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000ab80)=0x14) accept$packet(0xffffffffffffffff, &(0x7f000000abc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f000000ac00)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f000000adc0)={@remote, @dev, 0x0}, &(0x7f000000ae00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000000ae40)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f000000af40)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f000000afc0)={0x11, 0x0, 0x0}, &(0x7f000000b000)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f000000b040)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f000000b140)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f000000c400)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f000000cdc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000cd80)={&(0x7f0000000e40)=ANY=[@ANYBLOB="1c090000", @ANYRES16=r5, @ANYBLOB="000828bd7000fddbdf250300000008000100", @ANYRES32=r6, @ANYBLOB="480102004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000800000084000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000054000400ad9a0808050000000900010709000000000007030700000004000508000000000300000020000000200009030400000001440805010001000000320176380000030001c67f000000ef6d0108010000803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="d801020038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040000010000400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400a001000008000600", @ANYRES32=r9, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004007f0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000400000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000800000008000100", @ANYRES32=r13, @ANYBLOB="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", @ANYRES32=r14, @ANYBLOB="6c02020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000800000008000600", @ANYRES32=r15, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e6104006573000000000000000000000000000800030006000000040004000800060086f5009badd81435a4643491ba5c37e346d944837effe0899bcc10f75733449057cc8d8a4c2e6ff9ce77e9b50200486bcc1a3021f37087b5e3f3689a2e547d573ee863a3c507d41b10fa00447343082aefa434ac56637b2839a427dcfe9a23bbff5f5004127fe71a2936817ef1b5383a641cfedd011553531fc55322ca75b35e009a72e469f7190c277584ab02679b664e846953c25369889519e58a41037e55fdc0e4e5e205497aff", @ANYRES32=r19, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ffffff7f08000600", @ANYRES32=r21, @ANYBLOB="52000100240001007072579dc67d5fb6e94d000000f4ff006c51000000000000080003000e00000008000400000000000000000000000000000000008a1901991283bd688b83d8292d5c7cd6f5d0675d5de7b7e3eb881cc725d18b3ec88e60c9e5020c21ddce11f1d2cb32a2bb37a144255b6e65267e4e71e4d5d660cf885f0e604657a9f4b3087fee206083e8999407189fe8c4788724d7045a02e34088719e0c2d52ccbb37", @ANYRES32=r22, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r23, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=r25, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000900000008000100", @ANYRES32=r26, @ANYBLOB="bc0002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r27, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000500000008000700000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c000400000005200100008008000100", @ANYRES32=r28, @ANYBLOB="9401020038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000700000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r29, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r30, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400090000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r31, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400c472d562"], 0x91c}, 0x1, 0x0, 0x0, 0x20040040}, 0x4041) r32 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', r32, &(0x7f00000001c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={@empty, @dev={0xfe, 0x80, [], 0xe}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2, 0x7d, 0x10001, 0x500, 0x43000000000000, 0x200, r33}) fchdir(r2) 22:58:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x101000, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xf}}) 22:58:05 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x0, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) 22:58:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setrlimit(0x400000000000007, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\x00') 22:58:05 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x1, 0x4400) lsetxattr$security_smack_entry(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.SMACK64\x00', &(0x7f0000000300)='{wlan1systemppp1\x00', 0x11, 0x2) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffff, 0x100) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x40, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x6c6600, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x10000, 0x0) syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x8, 0x40) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x57c4ea97290fdca1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x8000000003) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)) 22:58:05 executing program 4: mount(&(0x7f0000000000)=ANY=[@ANYBLOB='\x00dev/sg0\x00'], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='ncpfs\x00', 0x1080, &(0x7f00000000c0)='}\xbfem0[selfbdev\\lo\x00') prctl$PR_SET_THP_DISABLE(0xe, 0x0) 22:58:06 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) r2 = getpgrp(r1) r3 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) rt_tgsigqueueinfo(r2, r3, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x7}) read(r4, &(0x7f0000481000)=""/128, 0x80) 22:58:06 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8\xa1\xa3\\J\xab\xe7\x9fB0\xaaM*\xe4)\xf8\xc6\x8abg\xb2\x1bu\xd0;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\xea;P\xb5w_2\f\xe5\xcc`\xa0v\xbbI\xdf\xfe\x13\xd9\x1a\xd6;\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13\xeb\xbc\xff\x7f\x00\x00x\x9c\x02\xa6p?\x12\x89\x80Q\x8e\xf2\xf0yX\x9b\x96\x1f\xb1\xa3_\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x84v,~\x89P\x0f{dr \xb4\xc6{\x80Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000140)=',mime_typevmnet0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r3, r1, 0x0, 0xd, &(0x7f0000000200)='^nodevcpuset\x00'}, 0x30) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@empty, 0x417f, 0x0, 0x0, 0x4, 0x101, 0x80000000}, 0x20) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)=r0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/81, 0x2000032c}], 0x1, 0x2000107c) 22:58:06 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'vcan0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = getpgrp(0xffffffffffffffff) syz_open_procfs(r3, &(0x7f00000000c0)='personality\x00') connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'sit0\x00'}}, 0x1e) 22:58:06 executing program 4: r0 = socket$inet6(0xa, 0xa, 0x2) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)='batadv0\x00'}, 0x30) waitid(0x2, r2, &(0x7f0000000100), 0x1, &(0x7f0000000180)) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x1c5000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x117}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x4, {0x484787c3, 0x8f, "f2955121d2b8cc802b215f3a2492a1ef3c316c652bc5c5b416e935bf35924c8e8fbfaa0bad17b79bbb612eddd499b2c3d4716922d7c9aa76407027e58b2dce3c4c82e7cf1365911e16f2edf6f6f30990f9b2a7e7ee515d82f0e0307bce23f1f0a60c12d0c6928a038f58bba854c48ed1dec5744892b69d1256530db1eb20e4a543d919c8aaaec6b63714aeb6ea4aed44341bef3ddd45f35e22a135e681f389b330c409431289fafdb21e665301fcd4afa51066b258f4848ce8040e4e91ca505da905a6582eea03402b8a77d900cccd0ea7f8c26d81e5753e62e4680668ada0f589e64ee1729259e715d089b81b948d5f5631cc13a91b250ced59afc9edb12778", 0xfd, 0x2, 0x95ca, 0x8, 0x6566, 0x6, 0xf8ed, 0x1}, r4}}, 0x128) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000001000008000400004de630d3af810ef3469be5ebc89aeaa7ede896952b9cb93366c449d5c907cbb635da141325bd"]}) 22:58:06 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000002c0)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000100)={{0x3, 0x0, 0x3, 0x0, 0x7}, 0x80, 0x100101}) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x10048) [ 352.386168] ================================================================== [ 352.393605] BUG: KMSAN: uninit-value in __se_sys_waitid+0x32c/0xb30 [ 352.400039] CPU: 0 PID: 11619 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 352.406977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.416692] Call Trace: [ 352.419310] dump_stack+0x173/0x1d0 [ 352.422981] kmsan_report+0x12e/0x2a0 [ 352.426833] kmsan_internal_check_memory+0x9f4/0xb10 [ 352.431991] kmsan_check_memory+0xd/0x10 [ 352.436081] __se_sys_waitid+0x32c/0xb30 [ 352.440204] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 352.445692] ? prepare_exit_to_usermode+0x114/0x420 [ 352.450742] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 352.455969] ? syscall_return_slowpath+0xb2/0x650 [ 352.460857] __x64_sys_waitid+0x62/0x80 [ 352.464865] do_syscall_64+0xbc/0xf0 [ 352.468614] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 352.473823] RIP: 0033:0x457f29 [ 352.477037] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.495968] RSP: 002b:00007fbffa5aec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 352.503692] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457f29 [ 352.510973] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 352.518259] RBP: 000000000073bfa0 R08: 0000000020000180 R09: 0000000000000000 [ 352.525542] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fbffa5af6d4 22:58:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x83}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000001c0)={0x0, 0x400, 0xfffffffffffffdbb, 0x1, 0x7f, 0x5}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x280000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40a85321, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf00]}) [ 352.532838] R13: 00000000004c6d82 R14: 00000000004dc5d0 R15: 00000000ffffffff [ 352.540143] [ 352.541779] Local variable description: ----__pu_val120.i@__se_sys_waitid [ 352.548707] Variable was created at: [ 352.552443] __se_sys_waitid+0x18c/0xb30 [ 352.556518] __x64_sys_waitid+0x62/0x80 [ 352.560492] [ 352.562128] Bytes 0-3 of 4 are uninitialized [ 352.566540] Memory access of size 4 starts at ffff8880372cfe78 [ 352.572515] ================================================================== [ 352.579879] Disabling lock debugging due to kernel taint [ 352.585343] Kernel panic - not syncing: panic_on_warn set ... [ 352.591254] CPU: 0 PID: 11619 Comm: syz-executor.4 Tainted: G B 5.0.0+ #11 [ 352.599576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 352.608940] Call Trace: [ 352.611561] dump_stack+0x173/0x1d0 [ 352.615229] panic+0x3d1/0xb01 [ 352.618514] kmsan_report+0x293/0x2a0 [ 352.622354] kmsan_internal_check_memory+0x9f4/0xb10 [ 352.627520] kmsan_check_memory+0xd/0x10 [ 352.631608] __se_sys_waitid+0x32c/0xb30 [ 352.635727] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 352.641203] ? prepare_exit_to_usermode+0x114/0x420 [ 352.646251] ? kmsan_get_shadow_origin_ptr+0x60/0x440 [ 352.651478] ? syscall_return_slowpath+0xb2/0x650 [ 352.656363] __x64_sys_waitid+0x62/0x80 [ 352.660367] do_syscall_64+0xbc/0xf0 [ 352.664120] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 352.669329] RIP: 0033:0x457f29 [ 352.672539] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 352.691462] RSP: 002b:00007fbffa5aec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 352.699249] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457f29 [ 352.706531] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 352.713815] RBP: 000000000073bfa0 R08: 0000000020000180 R09: 0000000000000000 [ 352.721106] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fbffa5af6d4 [ 352.728390] R13: 00000000004c6d82 R14: 00000000004dc5d0 R15: 00000000ffffffff [ 352.736476] Kernel Offset: disabled [ 352.740145] Rebooting in 86400 seconds..