8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:21:10 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = memfd_create(&(0x7f0000000040)="2b8b8a16114fdddf6b284699df92d53e6f4a02759b9461ac", 0x2) write$binfmt_misc(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r0, r2, &(0x7f0000000340), 0x200000000ffff) fcntl$addseals(r2, 0x409, 0x8) shutdown(r0, 0x1) 00:21:11 executing program 4: r0 = eventfd(0x8040010000) write$eventfd(r0, &(0x7f00000000c0)=0xffffffffffffff90, 0x8) readv(r0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/212, 0xd4}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x40, &(0x7f00000001c0)) 00:21:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x2, 0x0, [0x49, 0x1]}) 00:21:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0xc2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000200)={0x6, 0xda0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:21:11 executing program 0: timer_create(0x7, &(0x7f0000044000)={0x0, 0x1000000000000017, 0x0, @thr={&(0x7f0000000280), &(0x7f00000002c0)}}, &(0x7f00008ec000)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, r0+30000000}, {0x77359400}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000100)) [ 386.492036] unchecked MSR access error: WRMSR to 0x49 (tried to write 0x0000000000000001) at rIP: 0xffffffff812e77d0 (vmx_set_msr+0x2af0/0x3f90) [ 386.505706] Call Trace: [ 386.508419] ? vmx_get_msr+0x1b80/0x1b80 [ 386.512821] kvm_set_msr+0x4a1/0x590 [ 386.516628] kvm_arch_vcpu_ioctl+0x4b68/0x73a0 [ 386.521326] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 386.526975] kvm_vcpu_ioctl+0xca3/0x1f90 [ 386.531140] ? do_vfs_ioctl+0x187/0x2d30 [ 386.535532] ? kvm_vm_release+0x90/0x90 [ 386.539695] do_vfs_ioctl+0xf77/0x2d30 [ 386.543868] ? security_file_ioctl+0x92/0x200 [ 386.548465] __se_sys_ioctl+0x1da/0x270 [ 386.552706] __x64_sys_ioctl+0x4a/0x70 [ 386.556669] do_syscall_64+0xcf/0x110 [ 386.560539] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 386.565956] RIP: 0033:0x457569 [ 386.569207] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:21:11 executing program 2: capset(&(0x7f00001e4ff8)={0x20020071026}, &(0x7f0000001fe8)) lookup_dcookie(0x0, &(0x7f0000000080)=""/223, 0xdf) [ 386.588361] RSP: 002b:00007f1edcb54c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.596344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 386.603838] RDX: 0000000020000280 RSI: 000000004008ae89 RDI: 0000000000000005 [ 386.611173] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 386.618753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1edcb556d4 [ 386.626278] R13: 00000000004bfedd R14: 00000000004d0208 R15: 00000000ffffffff [ 386.765962] capability: warning: `syz-executor2' uses deprecated v2 capabilities in a way that may be insecure 00:21:11 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) wait4(r1, &(0x7f0000000200), 0x0, 0x0) 00:21:12 executing program 0: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000001021f001cfffd946fa283005b580a000900020009000000010015000404ff7e", 0x24}], 0x1}, 0x0) 00:21:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0xc2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000200)={0x6, 0xda0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:21:12 executing program 2: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40141042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[], 0x2e7) ioctl$KDENABIO(r1, 0x4b36) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000001c0), 0xa198) 00:21:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000380)={0x1bacf914c1bb05a, &(0x7f0000000300)}) semget(0xffffffffffffffff, 0x6, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000300)={0x5, 0x0, 0x9, 0x0, 0x6, 0x2, 0xfffffffffffffff9, 0x3, 0x0, 0x10000, 0x1, 0x6}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x0, 0xa}}, 0x20) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)) [ 387.169275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. [ 387.178090] netlink: 5 bytes leftover after parsing attributes in process `syz-executor0'. 00:21:12 executing program 3: clone(0x2102001fbf, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) socket(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003880)={'ip6_vti0\x00'}) accept$packet(0xffffffffffffffff, &(0x7f0000004880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000048c0)=0x14) syz_open_procfs(0x0, &(0x7f0000000140)="66642f330057f64a657c481005f1abc44d4acb50ed40e8e339d2eaaa70f91a544d1f8e8663b454de10f6a189ea2936ca00a204e67daad4f67ed0046271e5a299743b7a7a5615745b66169d4ce3c9f851f33c989a1bb98740e92399d6b8a4b154dde093d0d5d80f1179eff1520bd68197a9362c71d035331a11564547289318f2bc171fd7894628471853da99dbeba0c92abdb43d593ba8edd2a9a287a0fb0df749315d3ad13b68c6e24df20035969bd1920438b202f143dfa6c2b21d0a3a6d6e4f385ca17f92729596da37ea85c88ca85eb71f800503bbef3943cb289b460b484657041dc74c6b57b2e9dd17e82586d1480d52af581fea") [ 387.331167] kvm: pic: level sensitive irq not supported 00:21:12 executing program 0: r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x39, &(0x7f0000000000)={@mcast1={0xff, 0x1, [0x4]}}, 0x20) [ 387.394750] kvm: pic: level sensitive irq not supported [ 387.468023] kvm: pic: level sensitive irq not supported [ 387.503086] kvm: pic: level sensitive irq not supported [ 387.549465] kvm: pic: level sensitive irq not supported 00:21:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x2, 0x0, [{0x1}, {0xd, 0x7fff}]}) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000280)={0x1, 0x0, [{0x0, 0x0, 0x7}]}) 00:21:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) ioctl$TCFLSH(r0, 0x80047437, 0x709000) 00:21:13 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x7fffffff, 0x8) 00:21:13 executing program 3: r0 = inotify_init() ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x40) 00:21:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, &(0x7f0000000140), &(0x7f00000001c0)=[0x0]}}], 0x0, 0x0, &(0x7f0000000300)}) 00:21:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0xc2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000200)={0x6, 0xda0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 387.587718] kvm: pic: level sensitive irq not supported [ 388.376092] binder: 10387:10389 got transaction with invalid offsets ptr [ 388.388750] binder: 10387:10389 transaction failed 29201/-14, size 0-12288 line 2998 00:21:13 executing program 3: r0 = inotify_init1(0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000000000000050000000200000000000000000000004a7c00000000000009000000000000009f00000000000000df0c000000000000ff7f0000020000000000000000000000090000000100000000000000000000d6534fcf00000000000000000000000000910000000300000000000000000000001f000000000000000500000000000000018000000000000002000000360000000600000002000000000000000000000002"]) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace(0x4207, r3) ptrace(0xffffffffffffffff, r2) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000040)) ioperm(0xa08, 0x5d, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) [ 388.503317] binder_alloc: binder_alloc_mmap_handler: 10387 20001000-20004000 already mapped failed -16 00:21:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = getpgrp(0xffffffffffffffff) getpriority(0x0, r1) [ 388.579977] binder: BINDER_SET_CONTEXT_MGR already set [ 388.585662] binder: 10387:10389 ioctl 40046207 0 returned -16 [ 388.670550] binder_alloc: 10387: binder_alloc_buf, no vma [ 388.676642] binder: 10387:10409 transaction failed 29189/-3, size 0-12288 line 2970 [ 388.716059] binder: undelivered TRANSACTION_ERROR: 29189 [ 388.722039] binder: undelivered TRANSACTION_ERROR: 29201 [ 388.752919] ptrace attach of "/root/syz-executor3"[6560] was attempted by "/root/syz-executor3"[10408] 00:21:13 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x2d8) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x2f6) 00:21:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0xc2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x0, 0xda0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:21:13 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080)='A', 0x1, 0xfffffffffffffffc) keyctl$search(0x6, r1, &(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz'}, 0x0) 00:21:14 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x20000000000a, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000a01004c00000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5c4, 0x1000, &(0x7f0000002800)=""/4096}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000001280)=r2, 0x4) 00:21:14 executing program 0: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) 00:21:14 executing program 3: r0 = socket$inet6(0xa, 0x80803, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x2f4, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[], 0x0) recvfrom$inet6(r0, &(0x7f00000002c0)=""/227, 0xe3, 0x0, 0x0, 0xfffffffffffffe9f) 00:21:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_CLR_FD(r0, 0x4c08) [ 389.299750] kvm: pic: level sensitive irq not supported 00:21:14 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) close(r0) [ 389.301090] kvm: pic: level sensitive irq not supported 00:21:14 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x0) r1 = socket$inet(0x10, 0x3, 0x4) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001300ff09fffefd956fa283b724a6ff7f00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) 00:21:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xfffffffffffffdd9, &(0x7f00000000c0)}, 0xffffffffffffffe7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040), &(0x7f0000000100)=""/108}, 0x18) [ 389.360357] kvm: pic: level sensitive irq not supported 00:21:14 executing program 0: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)) acct(&(0x7f0000000040)='./file0\x00') 00:21:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) close(r1) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 00:21:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0xc2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x0, 0xda0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:21:15 executing program 4: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) symlinkat(&(0x7f0000000040)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", r0, &(0x7f00000000c0)='./file0\x00') 00:21:15 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write(r0, &(0x7f0000002280)='-5', 0x2) 00:21:15 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) r1 = memfd_create(&(0x7f0000000380)="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", 0x0) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc7bb9650b5de56946c568f95d22467190ba3b6d59a5958d6fa9259c8a2ac4677b00000000000000000000200000f8bf54da32", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)="2e2466696c6530f600", 0x0) 00:21:15 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000008bc0)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a80)=""/147, 0x93}, {&(0x7f0000000c40)=""/231, 0xe7}, {&(0x7f0000000880)=""/109, 0x6d}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/126, 0x7e}], 0x5, &(0x7f00000000c0)=""/29, 0x1d}}, {{&(0x7f0000001100)=@nfc, 0x80, &(0x7f0000001340)=[{&(0x7f0000001180)=""/89, 0x59}, {&(0x7f0000001200)=""/231, 0xe7}, {&(0x7f0000001080)=""/2, 0x2}, {&(0x7f0000001300)=""/2, 0x2}], 0x4, &(0x7f0000001380)=""/94, 0x5e}}, {{&(0x7f0000001580)=@ax25, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001600)=""/156, 0x9c}, {&(0x7f00000016c0)=""/89, 0x59}, {&(0x7f0000001740)=""/102, 0x66}], 0x3, &(0x7f0000005e40)=""/4096, 0x1000}}], 0x3, 0x0, &(0x7f0000008e00)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f0000005480)=[{{&(0x7f0000001400)=@alg, 0x80, &(0x7f0000001040)=[{&(0x7f0000001480)=""/117, 0x75}, {&(0x7f0000001500)=""/100, 0x64}], 0x2}}], 0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000d40), 0x2fb, &(0x7f0000000d80)}}], 0x4000000000001b4, 0x40400d4) 00:21:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000980)="c9", 0x1, 0x20000803, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x8905, &(0x7f0000000000)) 00:21:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0xc2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x0, 0xda0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:21:15 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000071c0)=[{{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000006000)=""/103, 0x67}, {&(0x7f0000006080)=""/160, 0xa0}], 0x2, &(0x7f00000061c0)=""/4096, 0x1000}}], 0x1500, 0x0, &(0x7f0000007380)={0x0, 0x1c9c380}) [ 389.439758] kvm: pic: level sensitive irq not supported [ 390.600033] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:21:15 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00003b9fee)='/dev/input/event#\x00', 0xa2bd, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/168) 00:21:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x44000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001400)=""/4096, 0x3e80000000}], 0x1, 0x0) 00:21:15 executing program 2: syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 00:21:16 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000004c0)='./file0\x00', 0x14104a, 0x0) get_thread_area(&(0x7f0000000240)={0x0, 0x100000, 0xffffffffffffffff, 0x0, 0x8001, 0xfef, 0x2, 0x0, 0x7, 0x1f5}) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x11, 0x1, {0x20, 0x0, 0x8}}, 0x14) write$evdev(r0, &(0x7f0000037fe8)=[{}], 0x18) r1 = inotify_init() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x200000000e) tkill(r2, 0x36) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000280)={0x1, 0x0, 0x23ee, 0xc4b}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000140)) sendfile(r0, r0, &(0x7f0000000080), 0x2000000800004c36) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000300)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @rand_addr=0x2}}}, 0x90) shutdown(r1, 0x0) 00:21:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0xc2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:21:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="18000000e0ff200200000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x200000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000004640)={&(0x7f0000000040), 0xc, &(0x7f0000004600)={&(0x7f0000003d00)={0x14}, 0x14}}, 0x0) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x1}}, 0x20044000) sendmmsg(r3, &(0x7f0000000540)=[{{&(0x7f00000002c0)=@nl, 0x80, &(0x7f0000000500)}}], 0x1, 0x0) 00:21:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x1}) unshare(0x400) fcntl$lock(r1, 0x7, &(0x7f0000010000)) dup3(r0, r1, 0x0) 00:21:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000c40)='./file0\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, &(0x7f0000000cc0)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/186, 0x4a9e280) 00:21:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x44000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001400)=""/4096, 0x3e80000000}], 0x1, 0x0) 00:21:16 executing program 5: mkdir(&(0x7f0000554ff8)='./file0\x00', 0x0) r0 = open(&(0x7f00006c69d0)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x800000000402, 0xffffffffffffffff) r1 = open(&(0x7f00004a3000)='./file0\x00', 0x0, 0x0) unshare(0x24020400) fcntl$notify(r1, 0x402, 0x0) 00:21:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) migrate_pages(0x0, 0x2246, &(0x7f0000000080)=0x80000001, &(0x7f0000000140)=0xfbd8) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000240)={{0x1}, 'port0\x00', 0x9, 0x0, 0x0, 0x5c, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa3d}) 00:21:17 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpriority(0x1, 0x0) 00:21:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0xc2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:21:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000002, 0x2, 0xffffffffffffffff}, 0x14}}, 0x0) 00:21:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1c, 0xd, 0x9, 0x30, 0x0, 0x0, {0x0, 0x0, 0x4}, [@generic, @typed={0x8, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) 00:21:17 executing program 3: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x4) r1 = accept(r0, &(0x7f0000000180)=ANY=[], &(0x7f0000123000)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100), 0x8) 00:21:17 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001940)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001740)=""/163, &(0x7f0000000540)=""/246, &(0x7f0000000640)=""/4096}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) write$vnet(r0, &(0x7f0000000340)={0x1, {&(0x7f0000000200), 0x379, &(0x7f0000000140)=""/139, 0x0, 0x2}}, 0x68) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 00:21:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0xc2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x6}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:21:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f00000000c0)={@ipv4={[], [], @remote}, 0x0}, &(0x7f0000000280)=0x14) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x1d, r0}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)=@canfd={{0x4, 0x0, 0x4}, 0x14, 0x0, 0x0, 0x0, "164196cb490c79429586a8c96a489146f07321009175173b781f4e20160d8d800973d9a12234bb12bb53c76db8be4226775121b2236d061e45952e0e8eab1b61"}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2000000000000000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b805000000b9008000000f01c1f080a4b000600000000fc3180f09c744240000000000c744240200080000c7442406000000000f0114240f08f3a5650f050f20da0f01cf", 0x44}], 0x1, 0x0, &(0x7f0000000380), 0x78) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f00000002c0)="66b8008000000f23d00f21f86635000000070f23f80f20e06635000004000f22e09a0090f1000f06660fede70fc719baf80c66b850d1618666efbafc0c66ed2e66dd4e4e3e0f09ea6f351401", 0x4c}], 0x1, 0x0, &(0x7f0000000240)=[@flags={0x3, 0x110}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:21:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats_percpu\x00') bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, &(0x7f0000000000), 0x47) 00:21:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000180)="7d0a66ba4000ecc462bbf75006f30f6f3cbf457e0066ba210066ed26363e470f7094db0e000000ec430f01f8470fba20000f0f0fb0", 0x35}], 0x27f, 0x0, &(0x7f0000000200), 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x38e}]}) 00:21:18 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', ':"//em0ppp1vboxnet0-user\x00'}, 0xd) 00:21:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0xc2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x6, 0xda0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:21:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) unshare(0x40000000) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) unlink(&(0x7f0000000100)='./file0\x00') [ 394.055469] IPVS: ftp: loaded support on port[0] = 21 00:21:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xda0}]}) 00:21:19 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x500, r0, &(0x7f0000000080)={0x10000000}) 00:21:19 executing program 2: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x103001, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={&(0x7f0000000280), &(0x7f0000000200)}}, &(0x7f00009b1ffc)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000ff8000), 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001280), 0x0, 0x0, &(0x7f0000001380)={0x77359400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x0, 0x0) 00:21:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0xc2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x6, 0xda0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 394.436192] IPVS: ftp: loaded support on port[0] = 21 00:21:19 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1, [0x0, 0x20000180, 0x200001b0, 0x200001e0], 0x0, &(0x7f00000000c0), &(0x7f0000000180)=ANY=[@ANYBLOB='\x00']}, 0x79) 00:21:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010015}]}) [ 394.969938] kernel msg: ebtables bug: please report to author: entries_size too small 00:21:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000108}]}) 00:21:20 executing program 2: creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) pipe(&(0x7f0000000680)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000480)={0x0, r0+30000000}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:21:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0xc2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x6, 0xda0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:21:20 executing program 4: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x103001, 0x0) gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000280), &(0x7f0000000200)}}, &(0x7f00009b1ffc)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000ff8000), 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003e80), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x0, 0x0) 00:21:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/11, 0xff43) prctl$intptr(0x40000000000001d, 0xfffffffffffff99f) prctl$getreaper(0x400000000001e, &(0x7f0000000000)) syz_execute_func(&(0x7f0000000080)="3666440f9bf56664400f9f3241c3c4e2c9975842c4c250794e003e0f1158109d6f04cd0f2902") 00:21:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48, 0x0, 0x82ffff}]}) [ 395.605687] audit: type=1326 audit(1541377280.658:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10626 comm="syz-executor2" exe="/root/syz-executor2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 00:21:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000022}]}) 00:21:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1}, 0x8) 00:21:21 executing program 5: getpgid(0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) 00:21:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0xc2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x6, 0xda0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:21:21 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x16, 0x0, 0x0, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000000c0)}, 0x3) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000200)=""/94}, 0x148) [ 396.351247] audit: type=1326 audit(1541377281.398:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10626 comm="syz-executor2" exe="/root/syz-executor2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3ca code=0x0 00:21:21 executing program 5: clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000780)=@nat={"6e61747fffffff00", 0x19, 0x4, 0xd8, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000003a000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000190000000a00000000156e723000000000f4ffffffffffffff00626f6e643000000000000000000000007465616d5f736c6176655f310000000062637366300000000000000000000000ffffffffffffffff00ffffff0180c2000000ffffffffffff0000e000000050010000880100007374700000000000000000000000000000000000000000000000000000000000480000000000000002000000020000000000ffffffffffff"]}, 0x150) 00:21:21 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, &(0x7f00000002c0)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x7}, 0x7) sendfile(r1, r1, &(0x7f0000000000)=0x1fffc, 0x800000080000005) 00:21:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000002a80)={&(0x7f0000000040), 0xc, &(0x7f0000002a40)={&(0x7f0000001f80)={0x14, r1, 0x401}, 0x14}}, 0x0) 00:21:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={'ip6_vti0\x00', {0x2, 0x0, @loopback}}) 00:21:21 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x10, &(0x7f0000000240)=ANY=[], 0x0) 00:21:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0xc2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x6, 0xda0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:21:22 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = socket(0x10, 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000340), 0x4000000000000002) 00:21:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment, 0x8) sendmmsg(r0, &(0x7f00000002c0), 0x400000000000018, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x8) 00:21:22 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write(r0, &(0x7f0000000140), 0x0) 00:21:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0xc2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000200)={0x6, 0xda0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:21:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000083}]}) 00:21:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x6e0}]}) 00:21:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000073, 0x0, 0x82ffff}]}) 00:21:23 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000004c0)={0x0, 0x0, 0x8000}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) fsetxattr$security_evm(r0, &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000400)=@sha1={0x1, "359e915f16ed4490d3525736f38dfe2883ec3578"}, 0x15, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0) getpid() kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f00000002c0)) 00:21:23 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffeaf, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0xfffffe78) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) 00:21:23 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10000000}) 00:21:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0, 0x0, 0x82ffff}]}) 00:21:23 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x0, 0x0) pipe(&(0x7f0000000680)) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 00:21:23 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x16, 0x0, 0x0, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000200)=""/94}, 0x148) 00:21:23 executing program 4: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) r1 = socket$inet6(0x10, 0x0, 0x0) sendmsg(r1, &(0x7f0000000080)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000400)}, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff8e) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40, 0x0) uselib(&(0x7f0000000140)='./file2\x00') accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x197, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) creat(&(0x7f0000000080)='./file1\x00', 0x12000000) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x58) 00:21:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={'bond_slave_0\x00?\x00', {0x2, 0x0, @loopback}}) 00:21:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4188aea7, &(0x7f0000000100)={0x1, 0x0, [{0xafd}]}) 00:21:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4188aea7, &(0x7f0000000100)={0x2, 0x0, [{0xbf9}, {}]}) 00:21:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0000103}]}) 00:21:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xd90}]}) 00:21:24 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x16, 0x0, 0x0, 0x2}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000200)=""/94}, 0x148) 00:21:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000280)='/dev/adsp#\x00', 0x3) io_pgetevents(0x0, 0x6, 0x0, &(0x7f0000000000), &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0) read(0xffffffffffffffff, &(0x7f0000001140)=""/4096, 0x1000) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000002c0)={{0x7fff, 0x7, 0x2, 0x20, 0x10001, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x0, "ed8d551ffd4039c663dced4f33bb089f281be924862f9dd336a92aea5937d33f1db7df03d261ee083590301348bd78843fee001b9ecaedacf8da4472cc6700cfae9bc41e059485e32c090cdada8ebfe5c9440b1b002f02fa527262ce275a007de25352a20430b4561f63b6832cd74359d18e1cadb11abf87815372ee8b441ca9"}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xfffffffffffffffe, 0x2000) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='nfs\x00', 0x0, &(0x7f000000a000)) 00:21:24 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 00:21:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='syz_tun\x00', 0x19) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x200408d6, &(0x7f00000011c0)={0xa, 0x0, 0x0, @remote}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000000004, 0x400031, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) 00:21:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4188aea7, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000000000000500000000000000fdffffffffffff1b02000040000000000104000098b40000130a0002000000000000004500000000080b0000000000000100000000000000bf"]) 00:21:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000001}]}) 00:21:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400000000000000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1000000000010004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)={0x1, 0x0, [{}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:21:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x11e}]}) 00:21:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) r1 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f00000009c0), 0x102000000) 00:21:25 executing program 3: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x103001, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000280), &(0x7f0000000200)}}, &(0x7f00009b1ffc)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000ff8000), 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001280), 0x0, 0x0, &(0x7f0000001380)={0x77359400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000000)='./file0\x00') getsockname(0xffffffffffffffff, &(0x7f00000006c0)=@generic, &(0x7f0000000500)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x0, 0x338d, 0x0, 0x0, 0x1}, 0x2c) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x0, 0x0) 00:21:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xf3, &(0x7f0000000100), &(0x7f0000000280)=""/243, 0x0, 0x8}, 0xfffffffffffffdeb) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mount(&(0x7f00008deff8), &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 400.806435] kvm [10804]: vcpu0, guest rIP: 0xfff0 ignored wrmsr: 0x11e data 0x0 00:21:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(xeta)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ab553fec94248c32e27d04000000288a", 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004d00), 0x0, 0x0, 0x0) 00:21:26 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000000c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r1, r0}}, 0x18) 00:21:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000100)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000280)='/dev/adsp#\x00', 0x3) io_pgetevents(0x0, 0x6, 0x0, &(0x7f0000000000), &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0) read(0xffffffffffffffff, &(0x7f0000001140)=""/4096, 0x1000) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000002c0)={{0x7fff, 0x7, 0x2, 0x20, 0x10001, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x0, "ed8d551ffd4039c663dced4f33bb089f281be924862f9dd336a92aea5937d33f1db7df03d261ee083590301348bd78843fee001b9ecaedacf8da4472cc6700cfae9bc41e059485e32c090cdada8ebfe5c9440b1b002f02fa527262ce275a007de25352a20430b4561f63b6832cd74359d18e1cadb11abf87815372ee8b441ca9"}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xfffffffffffffffe, 0x2000) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='nfs\x00', 0x0, &(0x7f000000a000)) 00:21:26 executing program 5: syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') 00:21:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010015, 0x0, 0x82ffff}]}) 00:21:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x186, 0x0, 0x82ffff}]}) [ 401.505454] kvm [10836]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0x82feb7 00:21:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000280)='/dev/adsp#\x00', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_pgetevents(0x0, 0x6, 0x0, &(0x7f0000000000), &(0x7f0000000140)={0x0, 0x1c9c380}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000002c0)={{0x0, 0x7, 0x0, 0x20, 0x10001, 0x9}, 0x0, 0x0, 0x0, 0x1, 0xfc, "ed8d551ffd4039c663dced4f33bb089f281be924862f9dd336a92aea5937d33f1db7df03d261ee083590301348bd78843fee001b9ecaedacf8da4472cc6700cfae9bc41e059485e32c090cdada8ebfe5c9440b1b002f02fa527262ce275a007de25352a20430b4561f63b6832cd74359d18e1cadb11abf87815372ee8b441ca9"}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000240)) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa000000200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x2000) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='nfs\x00', 0x0, &(0x7f000000a000)) socket$nl_route(0x10, 0x3, 0x0) 00:21:26 executing program 5: [ 401.690714] kvm [10845]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0x186 data 0x82ffff 00:21:26 executing program 2: 00:21:27 executing program 3: 00:21:27 executing program 5: 00:21:27 executing program 4: 00:21:27 executing program 2: 00:21:27 executing program 3: 00:21:27 executing program 0: 00:21:27 executing program 1: 00:21:27 executing program 5: 00:21:27 executing program 4: 00:21:27 executing program 2: 00:21:28 executing program 4: 00:21:28 executing program 5: 00:21:28 executing program 1: 00:21:28 executing program 0: 00:21:28 executing program 3: 00:21:28 executing program 2: 00:21:28 executing program 4: 00:21:28 executing program 5: 00:21:28 executing program 0: 00:21:28 executing program 3: 00:21:28 executing program 1: 00:21:28 executing program 2: 00:21:28 executing program 4: 00:21:28 executing program 3: 00:21:29 executing program 5: 00:21:29 executing program 0: 00:21:29 executing program 1: 00:21:29 executing program 2: 00:21:29 executing program 3: 00:21:29 executing program 5: 00:21:29 executing program 4: 00:21:29 executing program 0: 00:21:29 executing program 1: 00:21:29 executing program 3: 00:21:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50000070000001f0000000000000000000200010000000000000000020000000005000580000000000a00000000000000ff170000000000000000000000000017000000000000000000000400"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000117, 0x0) 00:21:29 executing program 0: 00:21:29 executing program 5: 00:21:29 executing program 4: 00:21:30 executing program 1: 00:21:30 executing program 3: 00:21:30 executing program 0: 00:21:30 executing program 1: 00:21:30 executing program 3: 00:21:30 executing program 4: 00:21:30 executing program 2: 00:21:30 executing program 5: 00:21:30 executing program 0: 00:21:30 executing program 4: 00:21:30 executing program 1: 00:21:30 executing program 3: 00:21:30 executing program 5: 00:21:30 executing program 2: 00:21:31 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x402, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x8}, 0x7) 00:21:31 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) utime(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)) read$FUSE(r0, &(0x7f00000030c0), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x102d) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_ATTR(r0, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x78) 00:21:31 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='8'], 0x1) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) shutdown(r1, 0x1) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0xd0daffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, 0x2}, 0x34000}}, 0x0) 00:21:31 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0x2', 0x3) 00:21:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00001f0ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000000000)=[{r1, 0x84ae}], 0x1, 0x52f1) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000000c0)=0x80, 0x4) close(r0) 00:21:31 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000400ff6)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x0, 0x1f, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0xfffffffffffffffa]}) 00:21:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x19, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) 00:21:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0xfffffffffffffffe) r1 = socket$inet(0x2, 0x4a, 0x800000000000000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00'}, 0x18) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 00:21:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x4c000006}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x1d, 0x2000000000003, 0x0, 0x0, {0x7e}}, 0x14}}, 0x0) 00:21:31 executing program 5: syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @empty=[0x0, 0x0, 0xfeffffff00000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x223}, @dev}, @udp={0x0, 0x8100, 0x8}}}}}, &(0x7f00000000c0)) 00:21:31 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000300)={0x9e}, 0x4) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x8000) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000001c0)=0x7, 0x4) getsockname(r1, &(0x7f0000000240)=@generic, &(0x7f0000000100)=0x80) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x0, 0x0, 0x3}, 0x20) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000040)='bc\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000140)={0x3, 0x2, 0x1000, 0x26, &(0x7f00000000c0)=[{}, {}]}) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000200)={@empty, @multicast1, @remote}, 0xc) uselib(&(0x7f0000000040)='./file0/../file0\x00') getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) fcntl$addseals(r2, 0x409, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='\'wlan0\x00', 0x7, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000002740)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r4, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) 00:21:31 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x2) ioctl$UI_SET_SWBIT(r0, 0x80045515, 0x70dfff) 00:21:31 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) rt_sigsuspend(&(0x7f0000000100), 0x8) 00:21:32 executing program 3: getpgid(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001700)={{{@in6=@mcast1, @in=@multicast1}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@remote}}, &(0x7f0000001800)=0xe8) stat(&(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)) lstat(&(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)) fstat(0xffffffffffffffff, &(0x7f0000004a00)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000006b80), &(0x7f0000006bc0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000006c00), &(0x7f0000006c40)=0xc) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) 00:21:32 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x80045104, &(0x7f0000000000)) 00:21:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x20000000}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 00:21:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000840), 0x0) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240), 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f00000007c0)=@l2, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000900)=""/252, 0xfc}}], 0x1eb, 0x0, 0x0) 00:21:32 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b4f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x16, &(0x7f0000000280), 0xfffffffffffffe06) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r1, 0x4, 0x0) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r3 = dup2(r2, r0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x7, @local}, 0x1c) memfd_create(&(0x7f0000000440)="5b2f2d0027e69c7b0777f60928788c7c9edb0189c815f4a8a256dd2821db4328dedb1813a5e38d17f99bc572a709e5947bcc2401b3a3b19aa66172db9996abb951040bec286e247a9feaa72362ae9d0218a17f0621b2709ef6c9cb4852f76f70eff97ded75abdbe85a2620726deab8917e027404b2888956cda4f55b524a176d42645df06575330c763a5ca9ac55f6ae55b4fc718b7c8bacc2d5736ad50de1a72be53426191a37145ef1f09374e9c636316e1fb352cfc90d74182ddda33fc0bee5f68ec0ea6cce7874f9073fc6331b1e2ae85872da06f3075407ac30bb376d5176de9cd1bec51e8418", 0x3) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f00000000c0)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x488, 0x2a0, 0x160, 0x160, 0x2a0, 0x160, 0x400, 0x400, 0x400, 0x400, 0x400, 0x4, &(0x7f0000000540), {[{{@ipv6={@loopback, @loopback, [0x0, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffffff, 0x0, 0xffffffff], 'bond_slave_1\x00', 'dummy0\x00', {}, {}, 0x6c, 0x1, 0x3, 0x20}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00'}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0xf, 0x80000000}}, @common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x0, 0x0, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x1f, 0x3, 0x1, [0x800, 0x5, 0x6, 0xff, 0x101, 0x9, 0x1000, 0x0, 0x0, 0xe4, 0xbf47, 0xfff, 0xf6, 0x1, 0x80000000, 0x8], 0xf}}, @common=@hl={0x28, 'hl\x00', 0x0, {0x2, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000002c0)) 00:21:32 executing program 0: getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000400)=""/238, &(0x7f0000000500)=0xee) r0 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rfkill\x00', 0x408480, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000840), 0x13f}}, 0x20) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) sync() getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={@loopback, @loopback}, &(0x7f0000000300)=0xc) ioctl$KVM_NMI(r2, 0xae9a) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x8, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) readv(r2, &(0x7f0000000740)=[{&(0x7f0000000580)=""/240, 0xf0}, {&(0x7f0000000080)=""/102, 0x66}, {&(0x7f0000000680)=""/189, 0xbd}, {&(0x7f0000000380)=""/120, 0x78}, {&(0x7f0000000100)=""/37, 0x25}], 0x5) getrlimit(0xc, &(0x7f00000008c0)) write$FUSE_OPEN(r2, &(0x7f0000000180)={0x20, 0xffffffffffffffff, 0x5, {0x0, 0x1}}, 0x20) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000280), &(0x7f00000007c0)=0x40) r3 = msgget$private(0x0, 0x0) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000980)=""/242) readahead(r0, 0x100000001, 0x7) poll(&(0x7f0000000940)=[{r2, 0x20}, {0xffffffffffffffff, 0x1088}], 0x2, 0xdd) 00:21:32 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000002800)={0x4}, 0x4) 00:21:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000040)=""/255, 0xff) getdents(r0, &(0x7f0000000140)=""/56, 0x38) 00:21:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB='#! ./f'], 0x6) get_robust_list(0x0, &(0x7f00000001c0)=&(0x7f0000000140)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x0, &(0x7f0000000100)={&(0x7f0000000080)}}, &(0x7f0000000200)=0x18) close(0xffffffffffffffff) poll(&(0x7f00000000c0)=[{r2, 0x4000}], 0x1, 0xe3d) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r3 = eventfd(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r3}) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)={'#! ', './file0', [{}, {}]}, 0xd) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0x0, 0x2, r3}) 00:21:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8901, &(0x7f0000000000)={"65727370616e3000000000000200"}) 00:21:34 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 00:21:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=0xffffffffffffff9c) 00:21:34 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000140)={0x1d, r1}, 0x13) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) 00:21:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000003061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) [ 409.114265] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 409.122133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 409.191198] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 409.199003] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 00:21:34 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x101d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x2}, [@ldst={0x7, 0x0, 0x0, 0x1d1}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) 00:21:34 executing program 3: r0 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x40c00) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 00:21:34 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1ff, 0x480c0) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0x5, 0x0, 0x6, 0x4}) perf_event_open(&(0x7f0000002900)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000300)={'filter\x00', 0x0, 0x3, 0x6a, [], 0x3, &(0x7f0000000080)=[{}, {}, {}], &(0x7f0000000280)=""/106}, &(0x7f00000001c0)=0x78) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'NET\x00'}, &(0x7f0000000440)=0xfffffffffffffff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) r2 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x1, r2}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x7a) sendto$inet(r1, &(0x7f0000617fc9), 0xfe41, 0x10000002000091b, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback, [0x22b, 0x0, 0x40000096]}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) 00:21:34 executing program 5: mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x2}) 00:21:34 executing program 0: r0 = socket$inet6(0xa, 0x100000003, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 00:21:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x9}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 00:21:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000005000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x485}]}) 00:21:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000580)="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", 0xa82, 0xfffffffffffffff8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:21:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x18}}, &(0x7f0000000440)=""/202, 0x1a, 0xca, 0x1}, 0x20) 00:21:35 executing program 3: syz_emit_ethernet(0xe3, &(0x7f0000000000)={@broadcast, @random="7eacae589eb7", [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x29, 0x0, @ipv4={[], [], @rand_addr}, @mcast2={0xff, 0x2, [0xc0ffffff]}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback={0x4}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}}}}}}}, 0x0) 00:21:35 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x9}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 00:21:35 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f00000001c0)) 00:21:35 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000140)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x25}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x431, &(0x7f0000000180)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x71, &(0x7f0000000300), &(0x7f0000000000)=""/113}, 0x48) 00:21:35 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000080)) ioctl(r0, 0x2284, &(0x7f0000000080)) 00:21:35 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) [ 410.729935] binder_alloc: binder_alloc_mmap_handler: 11106 20000000-20002000 already mapped failed -16 00:21:35 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) ioctl$BLKRRPART(r0, 0x127a, 0x0) 00:21:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) 00:21:36 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "f9f744", 0x14, 0x0, 0x0, @loopback, @remote, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000001340)) 00:21:36 executing program 5: r0 = gettid() setpriority(0x1, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000008c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000100)={'veth1_to_bridge\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f691c0264192f42be07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r1, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) 00:21:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34074}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x2f, 0x829, 0x0, 0x0, {0x2801}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback}]}]}, 0x2c}}, 0x0) 00:21:36 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x1, 0x40000000000004, 0x1, 0x0, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f00000003c0)}, 0x10) 00:21:36 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0xa, 0x5, 0x5, 0x22}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e82fe0)={r0, &(0x7f0000c37000), &(0x7f000034f000)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00005b3000)={r0, &(0x7f0000be3000)}, 0x10) 00:21:36 executing program 0: r0 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read(r1, &(0x7f00000001c0)=""/105, 0x69) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9208, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) tkill(r0, 0x15) [ 411.437091] openvswitch: netlink: Flow actions attr not present in new flow. 00:21:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) 00:21:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 00:21:36 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4004510f, &(0x7f000084dfff)) 00:21:36 executing program 2: r0 = socket$packet(0x11, 0x20000000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) bind$packet(r0, &(0x7f0000001300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) close(r0) 00:21:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28000, 0x2) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, "e6344f0e330252fc67c569bc83e01ae07416ad65e0630c9539843a2c83ed7e7c"}) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000700)={0x0, 0x0, 0x1, 0x6}) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='trusted.overlay.origin\x00') 00:21:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000380000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235000800000f309d440f20c03501000000440f22c00fc72ec4e17853bd450000002e0fc75900c4c2f547c4640f01cb66baa000ec0f017e0a", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) 00:21:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) 00:21:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) ioctl$TUNSETSTEERINGEBPF(r2, 0x400454d1, &(0x7f0000000080)) 00:21:37 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x33, 0x0, @remote={0xac, 0x223}, @local, {[@lsrr={0x83, 0x7, 0x5ef, [@multicast1]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast}}}}}, &(0x7f00000002c0)={0x0, 0x4, [0x0, 0xfffffffffffffffd]}) 00:21:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) 00:21:37 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x31) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") write$binfmt_misc(r1, &(0x7f0000000a80)={'syz1'}, 0x4) 00:21:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0xfffb, 0x1b, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x2) close(r2) 00:21:37 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) poll(&(0x7f0000000040)=[{r0, 0x20b4}, {r1, 0x100}, {r1}], 0x3, 0x0) 00:21:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x9}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={r0, @in={{0x2, 0x4e21, @multicast1}}}, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x17f, 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000100)="1b", 0x1, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) [ 412.852610] ion_buffer_destroy: buffer still mapped in the kernel 00:21:38 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xffffca88}}, @icmp=@parameter_prob={0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x70}, @dev}}}}}}, &(0x7f0000000000)) 00:21:38 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r1, r0) 00:21:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e63707500609fb8ab74b0f30ef7048e470929889a2605dc92ffa1937e27b84b5d3511d2e95cccfd6656e1e43257e640083198770e5dab3441b5", 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x0, @dev}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0xfffffffffffffffd}, 0xa0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) 00:21:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) 00:21:38 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x31) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") write$binfmt_misc(r1, &(0x7f0000000a80)={'syz1'}, 0x4) 00:21:38 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername$inet(r1, &(0x7f0000000040)={0x2, 0x0, @rand_addr}, &(0x7f0000000080)=0x10) 00:21:38 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x0, 0xd101}}, 0xf0}}, 0x0) socket$inet6(0xa, 0x80000, 0x400) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x0, 0x200, 0x0, 0x6, 0x0, 0xa2a, 0x400}, &(0x7f0000000300)=0x20) syz_open_dev$sndpcmc(&(0x7f0000000840)='/dev/snd/pcmC#D#c\x00', 0x5, 0x2000) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000880)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) 00:21:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffd}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000280)={0x0, 0x20, 0x4, @tid=r0}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) io_setup(0x5, &(0x7f0000000340)=0x0) io_pgetevents(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000240)={&(0x7f0000000080), 0x8}) 00:21:39 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x31) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") write$binfmt_misc(r1, &(0x7f0000000a80)={'syz1'}, 0x4) 00:21:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @rand_addr}}}, 0x84) r0 = socket(0x10, 0x20000000000003, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000059, 0x10102, &(0x7f0000001540)={r1}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) 00:21:39 executing program 3: socket$inet6(0x10, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0)='threaded\x00', 0xffffff8e) getgroups(0x3, &(0x7f0000000140)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff]) geteuid() fstat(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000180)='./file0\x00', r1, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{&(0x7f0000000500)=@nl=@proc={0x10, 0x0, 0x0, 0x80050000}, 0x80, &(0x7f00000008c0), 0x0, &(0x7f0000000a00)=[{0x10, 0x113, 0x4}], 0x10}, 0x100000000}], 0x1, 0x0) getrandom(&(0x7f00000026c0)=""/146, 0x92, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x197, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x0) 00:21:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) 00:21:39 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x53, 0x0, @perf_bp={&(0x7f0000000140)}, 0x20}) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f0000008bc36f7d79ce3263dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) 00:21:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0) 00:21:39 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x31) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") write$binfmt_misc(r1, &(0x7f0000000a80)={'syz1'}, 0x4) [ 414.434986] netlink: 7 bytes leftover after parsing attributes in process `syz-executor1'. [ 414.443851] netlink: 7 bytes leftover after parsing attributes in process `syz-executor1'. 00:21:39 executing program 2: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") getrlimit(0x0, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000000c0)) 00:21:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) [ 414.758947] not chained 80000 origins [ 414.761681] CPU: 0 PID: 11254 Comm: syz-executor2 Not tainted 4.19.0+ #77 [ 414.761681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.761681] Call Trace: [ 414.761681] dump_stack+0x32d/0x480 [ 414.761681] kmsan_internal_chain_origin+0x222/0x240 [ 414.761681] ? ext4_mballoc_query_range+0x89e/0x1210 [ 414.761681] ? kmsan_internal_chain_origin+0x136/0x240 [ 414.761681] ? __msan_chain_origin+0x6d/0xd0 00:21:39 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x31) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") [ 414.761681] ? __save_stack_trace+0x8be/0xc60 [ 414.761681] ? save_stack_trace+0xc6/0x110 [ 414.761681] ? kmsan_internal_chain_origin+0x136/0x240 [ 414.761681] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 414.761681] ? __msan_memcpy+0x6f/0x80 [ 414.761681] ? ext4_getfsmap_datadev_helper+0xebf/0x1030 [ 414.761681] ? ext4_mballoc_query_range+0x89e/0x1210 [ 414.761681] ? ext4_getfsmap_datadev+0x400d/0x4750 [ 414.842085] ? ext4_getfsmap+0x1318/0x1410 [ 414.842085] ? ext4_ioctl+0x607a/0x8360 [ 414.842085] ? do_vfs_ioctl+0xf77/0x2d30 [ 414.842085] ? __se_sys_ioctl+0x1da/0x270 [ 414.842085] ? __x64_sys_ioctl+0x4a/0x70 [ 414.842085] ? do_syscall_64+0xcf/0x110 [ 414.842085] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 414.842085] ? depot_save_stack+0x398/0x4b0 [ 414.842085] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 414.842085] ? kmsan_internal_chain_origin+0x1e3/0x240 [ 414.842085] ? get_stack_info+0x863/0x9d0 [ 414.842085] __msan_chain_origin+0x6d/0xd0 [ 414.842085] ? __x64_sys_ioctl+0x4a/0x70 [ 414.842085] __save_stack_trace+0x8be/0xc60 [ 414.842085] ? __x64_sys_ioctl+0x4a/0x70 [ 414.842085] save_stack_trace+0xc6/0x110 [ 414.842085] kmsan_internal_chain_origin+0x136/0x240 [ 414.842085] ? _raw_spin_lock_irqsave+0x237/0x340 [ 414.842085] ? kmsan_internal_chain_origin+0x136/0x240 [ 414.842085] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 414.842085] ? __msan_memcpy+0x6f/0x80 [ 414.842085] ? ext4_getfsmap_datadev_helper+0xebf/0x1030 [ 414.842085] ? ext4_mballoc_query_range+0x89e/0x1210 [ 414.842085] ? ext4_getfsmap_datadev+0x400d/0x4750 [ 414.842085] ? ext4_getfsmap+0x1318/0x1410 [ 414.842085] ? ext4_ioctl+0x607a/0x8360 [ 414.842085] ? do_vfs_ioctl+0xf77/0x2d30 [ 414.842085] ? __se_sys_ioctl+0x1da/0x270 [ 414.842085] ? __msan_instrument_asm_store+0x9a/0x110 [ 414.842085] ? kfree+0x147d/0x2f20 [ 414.842085] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 414.842085] kmsan_memcpy_origins+0x13d/0x1b0 [ 414.842085] __msan_memcpy+0x6f/0x80 [ 414.842085] ext4_getfsmap_datadev_helper+0xebf/0x1030 [ 414.842085] ext4_mballoc_query_range+0x89e/0x1210 [ 414.842085] ? ext4_getfsmap_dev_compare+0xb0/0xb0 [ 414.842085] ext4_getfsmap_datadev+0x400d/0x4750 [ 414.842085] ext4_getfsmap+0x1318/0x1410 [ 414.842085] ? ext4_getfsmap+0x1410/0x1410 [ 414.842085] ? ext4_compat_ioctl+0x660/0x660 [ 414.842085] ? ext4_getfsmap+0x1410/0x1410 [ 414.842085] ext4_ioctl+0x607a/0x8360 [ 414.842085] ? other_inode_match+0x1230/0x1230 [ 414.842085] do_vfs_ioctl+0xf77/0x2d30 [ 414.842085] ? security_file_ioctl+0x92/0x200 [ 414.842085] __se_sys_ioctl+0x1da/0x270 [ 414.842085] __x64_sys_ioctl+0x4a/0x70 [ 414.842085] do_syscall_64+0xcf/0x110 [ 414.842085] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 414.842085] RIP: 0033:0x457569 [ 414.842085] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 414.842085] RSP: 002b:00007f0bed6d8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.842085] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 414.842085] RDX: 0000000020000040 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 414.842085] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 414.842085] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0bed6d96d4 [ 414.842085] R13: 00000000004bf8f9 R14: 00000000004cfa70 R15: 00000000ffffffff [ 414.842085] Uninit was stored to memory at: [ 414.842085] kmsan_internal_chain_origin+0x136/0x240 [ 414.842085] __msan_chain_origin+0x6d/0xd0 [ 414.842085] __save_stack_trace+0x8be/0xc60 [ 414.842085] save_stack_trace+0xc6/0x110 [ 414.842085] kmsan_internal_chain_origin+0x136/0x240 [ 414.842085] kmsan_memcpy_origins+0x13d/0x1b0 [ 414.842085] __msan_memcpy+0x6f/0x80 [ 414.842085] ext4_getfsmap_datadev_helper+0xebf/0x1030 [ 414.842085] ext4_mballoc_query_range+0x89e/0x1210 [ 414.842085] ext4_getfsmap_datadev+0x400d/0x4750 [ 414.842085] ext4_getfsmap+0x1318/0x1410 [ 414.842085] ext4_ioctl+0x607a/0x8360 [ 414.842085] do_vfs_ioctl+0xf77/0x2d30 [ 414.842085] __se_sys_ioctl+0x1da/0x270 [ 414.842085] __x64_sys_ioctl+0x4a/0x70 [ 414.842085] do_syscall_64+0xcf/0x110 [ 414.842085] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 414.842085] [ 414.842085] Uninit was stored to memory at: [ 414.842085] kmsan_internal_chain_origin+0x136/0x240 [ 414.842085] __msan_chain_origin+0x6d/0xd0 [ 414.842085] __save_stack_trace+0x8be/0xc60 [ 414.842085] save_stack_trace+0xc6/0x110 [ 414.842085] kmsan_internal_chain_origin+0x136/0x240 [ 414.842085] kmsan_memcpy_origins+0x13d/0x1b0 [ 414.842085] __msan_memcpy+0x6f/0x80 [ 414.842085] ext4_getfsmap_datadev_helper+0xebf/0x1030 [ 414.842085] ext4_mballoc_query_range+0x89e/0x1210 [ 414.842085] ext4_getfsmap_datadev+0x400d/0x4750 [ 414.842085] ext4_getfsmap+0x1318/0x1410 [ 414.842085] ext4_ioctl+0x607a/0x8360 [ 414.842085] do_vfs_ioctl+0xf77/0x2d30 [ 414.842085] __se_sys_ioctl+0x1da/0x270 [ 414.842085] __x64_sys_ioctl+0x4a/0x70 [ 414.842085] do_syscall_64+0xcf/0x110 [ 414.842085] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 414.842085] [ 414.842085] Uninit was stored to memory at: [ 414.842085] kmsan_internal_chain_origin+0x136/0x240 [ 414.842085] __msan_chain_origin+0x6d/0xd0 [ 414.842085] __save_stack_trace+0x8be/0xc60 [ 414.842085] save_stack_trace+0xc6/0x110 [ 414.842085] kmsan_internal_chain_origin+0x136/0x240 [ 414.842085] kmsan_memcpy_origins+0x13d/0x1b0 [ 414.842085] __msan_memcpy+0x6f/0x80 [ 414.842085] ext4_getfsmap_datadev_helper+0xebf/0x1030 [ 414.842085] ext4_mballoc_query_range+0x89e/0x1210 [ 414.842085] ext4_getfsmap_datadev+0x400d/0x4750 [ 414.842085] ext4_getfsmap+0x1318/0x1410 [ 414.842085] ext4_ioctl+0x607a/0x8360 [ 414.842085] do_vfs_ioctl+0xf77/0x2d30 [ 414.842085] __se_sys_ioctl+0x1da/0x270 [ 414.842085] __x64_sys_ioctl+0x4a/0x70 [ 414.842085] do_syscall_64+0xcf/0x110 [ 414.842085] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 414.842085] [ 414.842085] Uninit was stored to memory at: [ 414.842085] kmsan_internal_chain_origin+0x136/0x240 [ 414.842085] __msan_chain_origin+0x6d/0xd0 [ 414.842085] __save_stack_trace+0x8be/0xc60 [ 414.842085] save_stack_trace+0xc6/0x110 [ 414.842085] kmsan_internal_chain_origin+0x136/0x240 [ 414.842085] kmsan_memcpy_origins+0x13d/0x1b0 [ 414.842085] __msan_memcpy+0x6f/0x80 [ 414.842085] ext4_getfsmap_datadev_helper+0xebf/0x1030 [ 414.842085] ext4_mballoc_query_range+0x89e/0x1210 [ 414.842085] ext4_getfsmap_datadev+0x400d/0x4750 [ 414.842085] ext4_getfsmap+0x1318/0x1410 [ 414.842085] ext4_ioctl+0x607a/0x8360 [ 414.842085] do_vfs_ioctl+0xf77/0x2d30 [ 414.842085] __se_sys_ioctl+0x1da/0x270 [ 414.842085] __x64_sys_ioctl+0x4a/0x70 [ 414.842085] do_syscall_64+0xcf/0x110 [ 414.842085] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 414.842085] [ 414.842085] Uninit was stored to memory at: [ 414.842085] kmsan_internal_chain_origin+0x136/0x240 [ 414.842085] __msan_chain_origin+0x6d/0xd0 [ 414.842085] __save_stack_trace+0x8be/0xc60 [ 414.842085] save_stack_trace+0xc6/0x110 [ 414.842085] kmsan_internal_chain_origin+0x136/0x240 [ 414.842085] kmsan_memcpy_origins+0x13d/0x1b0 [ 414.842085] __msan_memcpy+0x6f/0x80 [ 414.842085] ext4_getfsmap_datadev_helper+0xebf/0x1030 [ 414.842085] ext4_mballoc_query_range+0x89e/0x1210 [ 414.842085] ext4_getfsmap_datadev+0x400d/0x4750 [ 414.842085] ext4_getfsmap+0x1318/0x1410 [ 414.842085] ext4_ioctl+0x607a/0x8360 [ 414.842085] do_vfs_ioctl+0xf77/0x2d30 [ 414.842085] __se_sys_ioctl+0x1da/0x270 [ 414.842085] __x64_sys_ioctl+0x4a/0x70 [ 414.842085] do_syscall_64+0xcf/0x110 [ 414.842085] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 414.842085] [ 414.842085] Uninit was stored to memory at: [ 414.842085] kmsan_internal_chain_origin+0x136/0x240 [ 414.842085] __msan_chain_origin+0x6d/0xd0 [ 414.842085] __save_stack_trace+0x8be/0xc60 [ 414.842085] save_stack_trace+0xc6/0x110 [ 414.842085] kmsan_internal_chain_origin+0x136/0x240 [ 414.842085] kmsan_memcpy_origins+0x13d/0x1b0 [ 414.842085] __msan_memcpy+0x6f/0x80 [ 414.842085] ext4_getfsmap_datadev_helper+0xebf/0x1030 [ 414.842085] ext4_mballoc_query_range+0x89e/0x1210 [ 414.842085] ext4_getfsmap_datadev+0x400d/0x4750 [ 414.842085] ext4_getfsmap+0x1318/0x1410 [ 414.842085] ext4_ioctl+0x607a/0x8360 [ 414.842085] do_vfs_ioctl+0xf77/0x2d30 [ 414.842085] __se_sys_ioctl+0x1da/0x270 [ 414.842085] __x64_sys_ioctl+0x4a/0x70 [ 414.842085] do_syscall_64+0xcf/0x110 [ 414.842085] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 414.842085] [ 414.842085] Uninit was stored to memory at: [ 414.842085] kmsan_internal_chain_origin+0x136/0x240 [ 414.842085] __msan_chain_origin+0x6d/0xd0 [ 414.842085] __save_stack_trace+0x8be/0xc60 [ 414.842085] save_stack_trace+0xc6/0x110 [ 414.842085] kmsan_internal_chain_origin+0x136/0x240 [ 414.842085] kmsan_memcpy_origins+0x13d/0x1b0 [ 414.842085] __msan_memcpy+0x6f/0x80 [ 414.842085] ext4_getfsmap_datadev_helper+0xebf/0x1030 [ 414.842085] ext4_mballoc_query_range+0x89e/0x1210 00:21:40 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x820, &(0x7f0000ffb000/0x4000)=nil) [ 414.842085] ext4_getfsmap_datadev+0x400d/0x4750 [ 414.842085] ext4_getfsmap+0x1318/0x1410 [ 414.842085] ext4_ioctl+0x607a/0x8360 [ 414.842085] do_vfs_ioctl+0xf77/0x2d30 [ 414.842085] __se_sys_ioctl+0x1da/0x270 [ 414.842085] __x64_sys_ioctl+0x4a/0x70 [ 414.842085] do_syscall_64+0xcf/0x110 [ 414.842085] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 414.842085] [ 414.842085] Local variable description: ----handle.i@event_sched_in [ 414.842085] Variable was created at: [ 414.842085] event_sched_in+0x96/0x2ec0 [ 414.842085] group_sched_in+0x185/0xee0 00:21:40 executing program 1: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r0, 0x2) ppoll(&(0x7f0000000380)=[{r0}], 0x1, &(0x7f00000003c0), &(0x7f0000000400), 0x8) 00:21:41 executing program 5: prctl$setname(0xf, &(0x7f0000000000)='\x00') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300), 0x0) 00:21:41 executing program 0: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x31) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) 00:21:41 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f00000009c0)='\x00'}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'bond_slave_0\x00'}) socketpair(0xa, 0x4, 0x10000, 0xfffffffffffffffd) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x501000, 0x0) 00:21:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000440)="63707526350a0a0a0000010000039cd30e35cca01d3d0b0a1c60666f8dcc6d5c76fd2e9e09626b31deea1b0d3b8184872d58b62cc5b4223726b5797482fb1d83e6f82e2d6d0af3b128e9604401695c8d6c866c68a8fc80de2c4b74f41ac55d593b0906be2aaa26bd16785186f3d61afdd00427799b7ce4b70845ed9780731957b75bf0253e4d4df598be5e3d7121a60f70013200bbbe9d7235af657010520b26afa8247f3756ed4c4a34cf9040d5540acac2865fc1ce8ded62538de97482f4317a7772e66f88e5e3e7476378c091498dfde4bb73bf0a004b9ee55ba00a0f04a6b07345298ad052c3c12c62201c2349527a36fe4a7edad75fbe1fe586b178000000000000000093ab05") r0 = socket$kcm(0xa, 0x40122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000001c0), 0x4) r1 = socket$kcm(0x29, 0x7, 0x0) r2 = socket$kcm(0xa, 0x2, 0x11) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000005c0)) setsockopt$sock_attach_bpf(r2, 0x29, 0x1b, &(0x7f0000000040)=r2, 0x52d) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}, 0x100}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000004000000000000000513cb77660b257e853647901f05f1c531f190d2b9a20d3d0257f702b98b65b4fcb77cc1c7452a0b0fe796428ef7624026c07ddcc0f94ff6728c8a88448bc3a6ae61975e0f2002c0b11a39ccf6237b398f1845d69452d99678cdf821820cbade51bc0bc49957aff862fd9d7bb69baf299abfe15a76902"], 0x8e}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000f00)=@can, 0x80, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/230, 0xe6}, 0x40000102) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002680)="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", 0x138}], 0x1}, 0x0) r4 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000500)}, 0x598) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000006c0)={r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000700)={r2}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000003c0)={'nr0\x00', @dev={[], 0x11}}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000007c0)={r0}) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000400)) socket$kcm(0xa, 0x0, 0x11) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000600)) close(r2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f0000000000)='./file0\x00'}, 0x10) setsockopt$sock_attach_bpf(r0, 0x6, 0x4, &(0x7f0000000140), 0xfffffffffffffdb2) sendmsg$kcm(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@ethernet={0x1, @link_local}, 0x80, &(0x7f0000000340), 0x0, &(0x7f00000008c0)=ANY=[], 0x0, 0x40010}, 0x0) mkdir(&(0x7f0000000140)="2e02", 0x0) sendmsg$kcm(r0, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="f4001100002b2c25e994efd1000000000009110000000000003a00000000f68ab928abffb7a8", 0x26}], 0x1}, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x9, 0x0) 00:21:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000000)={0x7b, 0x0, [0x6e0]}) 00:21:41 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aea5, &(0x7f00000002c0)) 00:21:41 executing program 0: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x31) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000080)}, 0xc100) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000003c0)="ab5283b51359cc13575e98454b983603", 0x10}], 0x1, &(0x7f0000000100)}, 0x0) 00:21:41 executing program 2: memfd_create(&(0x7f0000000100)='self#ppp0vboxnet0cgroupsystemppp0\x00', 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x0, @loopback, 0x4e23, 0x0, 'rr\x00'}, 0x2c) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000000), &(0x7f00000000c0), 0xfffff, 0xfffffffffffffffb) 00:21:42 executing program 0: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x31) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f00000000c0), 0x1c) [ 417.043474] Option ' ' to dns_resolver key: bad/missing value [ 417.091111] Option ' ' to dns_resolver key: bad/missing value 00:21:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mlockall(0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @dev={[], 0x11}}, 0x14) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x101, 0x800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x45, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgid() write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x12000) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x28, &(0x7f00000017c0)="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", 0x800) 00:21:42 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f0000000040)={0x0, 0xfffffffffffffff5}) 00:21:42 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aea5, &(0x7f00000002c0)) 00:21:42 executing program 2: fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000380)='trusted.overlay.upper\x00', &(0x7f00000003c0)={0x0, 0xfb, 0x15, 0x0, 0x0, "8714a2417369a86a2828b907bcbb9617"}, 0x15, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8937, &(0x7f0000000040)={"626f6e6430000000000000c3ffffff00", r1}) 00:21:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) 00:21:42 executing program 0: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x31) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:42 executing program 1: mknod(&(0x7f0000f80000)='./file0\x00', 0xffd, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000300), &(0x7f00006fcff0)) 00:21:42 executing program 0: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x31) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:43 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aea5, &(0x7f00000002c0)) 00:21:43 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000005700)={&(0x7f0000000040), 0xc, &(0x7f00000056c0)={&(0x7f0000000080)=@setlink={0x34, 0x13, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x3, 'v:th1\x00'}]}, 0x34}}, 0x0) 00:21:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket(0x200000000010, 0x2, 0x0) dup2(r2, r0) 00:21:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = getpgid(0x0) prlimit64(r2, 0x0, &(0x7f00000000c0), &(0x7f0000000140)) 00:21:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="b805000000b9000000000f01d966d9fd0f070f60186690260fc79e1272b88f660f01f1b9a00d00000f3266baf80cb8a8526f89ef66bafc0cec67f32e0f2365", 0x3f}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:21:43 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x8043, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 00:21:43 executing program 0: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="cf"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x20001, 0x0, [0x4, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000400), 0x100000000000000c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:21:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="f36e0f20e06635002000000f22e00f30f20f1024660fdb03b894008ed00f20d86635200000000f22d80f35650f01c90f30", 0x31}], 0x241, 0x0, &(0x7f0000000600), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000000000003000000ff0f000001010000fcffffff00000002000000000700000002000000ca4fd5"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:21:43 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, r1, 0x0) r2 = memfd_create(&(0x7f00000002c0)="73797374656d2c7de500", 0x0) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 00:21:43 executing program 0: socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x1c) 00:21:44 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x4020aea5, &(0x7f00000002c0)) 00:21:44 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:44 executing program 2: socket$key(0xf, 0x3, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) 00:21:44 executing program 1: mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r0 = open(&(0x7f0000039000)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat(r0, &(0x7f0000025000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000040)='./control\x00', 0x0) renameat2(r1, &(0x7f0000bee000)='./control\x00', r0, &(0x7f000003a000)='./control\x00', 0x2) 00:21:44 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa2830020200a000ec00000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 00:21:44 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:44 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x4020aea5, &(0x7f00000002c0)) 00:21:45 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @rand_addr}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={r0, r0, 0xa}, 0x10) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000100)=0xe) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f00000000c0)=0x6) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0xfb, 0x0, &(0x7f0000000140), 0x100000000000007f) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000016000/0x1000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x7ffd}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:21:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000080), 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) write$P9_RFSYNC(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x33, 0x1}, 0x7) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f00000000c0)={0x7000, 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:21:45 executing program 3: r0 = inotify_init1(0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace(0x4207, r3) ptrace$setregset(0x4203, r3, 0x0, &(0x7f0000000100)={&(0x7f0000000140)}) ptrace(0x420a, r2) 00:21:45 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x4020aea5, &(0x7f00000002c0)) [ 420.428296] ptrace attach of "/root/syz-executor3"[6560] was attempted by "/root/syz-executor3"[11436] [ 420.612846] ptrace attach of "/root/syz-executor3"[6560] was attempted by "/root/syz-executor3"[11436] 00:21:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0xc000, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) socket(0x0, 0x0, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)) ptrace(0x10, r0) 00:21:50 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x4020aea5, &(0x7f00000002c0)) 00:21:51 executing program 1: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x200) 00:21:51 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000580)="0234866d2f3d4ef9c882e457ac919c235faa10d74ef3756a1aca950aa6139af2de8c4b8f5b5d52b5bb46") openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000740), &(0x7f0000000780)=0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x7df, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000081, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0x3}, 0xa0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080}) timer_create(0x7, &(0x7f0000000940)={0x0, 0x6, 0x0, @thr={&(0x7f0000000540)="c2d23fa29369f6dd6b47e56c8549f7c9b25872d701203013cbcc9e535637", &(0x7f0000000800)="112a78034fe81ec05184bce6d217366139150a312138b8"}}, &(0x7f0000000980)=0x0) timer_settime(r1, 0x0, &(0x7f0000000a40), &(0x7f0000000a00)) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r2, 0xffffffffffffffce) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f00006dbffc), 0x4) bind$inet(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000900)) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000080), 0x4) sendto$inet(r3, &(0x7f0000002f40)="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", 0x1d5, 0x801, &(0x7f00000001c0)={0x2, 0x4e20}, 0x10) r4 = mq_open(&(0x7f0000000a80)="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", 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000340)={0x400000000, 0x8, 0x5, 0x30, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) mq_timedsend(r4, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000000c0)={0x77359400}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000200)=""/122) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f00000002c0)=""/60) mq_timedsend(r4, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)={0x77359400}) mq_timedreceive(r4, &(0x7f0000000100)=""/24, 0x18, 0x0, 0x0) getcwd(&(0x7f00000004c0)=""/118, 0xd7) unshare(0x800) sendto$inet(r3, &(0x7f00004b3fff), 0x1a000, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 00:21:51 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x4020aea5, &(0x7f00000002c0)) 00:21:51 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f000042a000/0x1000)=nil, 0x1000}}) 00:21:51 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000000019, &(0x7f0000548000)=0x4001, 0x4) sendto$inet6(r0, &(0x7f00000000c0), 0xfffffffffffffceb, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f00000002c0)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000080)=""/36, 0x24}, 0x2000) 00:21:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:51 executing program 5: clone(0x210007f8, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) accept4(r0, &(0x7f00000000c0)=@ax25, &(0x7f0000000140)=0x80, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)) getcwd(&(0x7f00000025c0)=""/162, 0xa2) utimensat(0xffffffffffffffff, &(0x7f0000f8eff8)='./file0\x00', &(0x7f0000f84fe0)={{0x0, 0x3ffffffe}, {0x0, 0x2710}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0), &(0x7f00000014c0)=0x8) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000001480)={0x0, 0x0, 0x0, 0xa2, &(0x7f0000001240)=""/162, 0x4a, &(0x7f0000001300)=""/74, 0xcb, &(0x7f0000001380)=""/203}) 00:21:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() 00:21:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(aegis256-aesni)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000ff8000), 0x0) 00:21:51 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x4020aea5, &(0x7f00000002c0)) 00:21:51 executing program 2: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001800)="2f0000001c000567ffffff000d000000020000000b000000ec0003c91300010023000000000000005867000000050b", 0x2f}], 0x1}, 0x0) 00:21:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x20000004e22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x838e, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 00:21:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000000d0000400500000005000000000100000000004000000000010000000000000025000000ffffffff00040000000000000a00000048"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x390}]}) 00:21:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) 00:21:52 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85512, &(0x7f0000001000)) 00:21:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:52 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2, 0x0) write$evdev(r1, &(0x7f0000000040)=[{{0x0, 0x7530}}], 0x201cc) 00:21:52 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f007e574d7a0f30809022cfde26555dc9ecfe1974406ee8d38364782d63b6612854b2e49dbdcaef718197e37e870a308b1e0900000088a46d3025ef933e51828ab675064e2afdff126423b49c6db2f160d49cb6cce76c27289a4f9d0ad81ed8da324e446371ef1e75097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289eb8e140377aa6fb31700f138dc4d7e08d57c282a67de5a75c5471f81000000000000009b539817dba77f4b93cfe72d195c491fb62764fc6592e06dd0a7f63abbd4c6e32f5fa19f6e4dc074d824fc7c698040c7e8b27136fad57e628942b469ee47685c9422bfc1992a4c76a4a39126d21402b9672d2aa0f89b042ca898252d1e25f84c01be87d48c9d9c0d39fb231dd7c0e645811663ea4eb8fb06d20107c79eb1855875c976e538e6e3f316c48803254d33ec3d6384ebc2b087fd62a9a4e6d8e5ea712f1ebc57ec2b", 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x80086603, 0x70e000) 00:21:52 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x2) 00:21:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7a, 0x0, [0x6e0]}) 00:21:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) 00:21:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) 00:21:53 executing program 1: socket$inet6(0xa, 0x6, 0x0) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000200)="295ee1311f16f477671070") setpriority(0x0, 0x0, 0xffe) unshare(0x8000000) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000040)=""/50, 0x32, 0x0, &(0x7f00000000c0)={0x77359400}) mq_timedsend(r0, &(0x7f0000000100), 0x0, 0x0, 0x0) 00:21:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x119) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) ioctl(0xffffffffffffffff, 0x2, &(0x7f0000000180)='h\t') r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105000, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000740)=ANY=[@ANYBLOB="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"]) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ftruncate(r1, 0x0) 00:21:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) 00:21:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:53 executing program 5: add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000000), &(0x7f0000000040)="5dca2e0b5401b066239ceb46099ac8f4b202ee243fbfd2e5f5c80cb3051383a367e7cf5af5f41206ad7a7b5dfadca5b1f3bb9ab7ae4785859563b43f80a58f61fa3814cfeec19dad8d3de8067bf3dbd756f5c3a5344200", 0x57, 0xffffffffffffffff) 00:21:53 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000600)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000280)={@dev}) ioctl$KDSETLED(r1, 0x4b32, 0x80000000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)}}, 0x20) [ 428.559217] Option 'œëF šÈô²î$?¿ÒåõÈ ³ƒ£gçÏZõô­z{]úÜ¥±ó»š·®G……•c´?€¥aú8ÏîÁ­' to dns_resolver key: bad/missing value [ 428.579133] Option 'œëF šÈô²î$?¿ÒåõÈ ³ƒ£gçÏZõô­z{]úÜ¥±ó»š·®G……•c´?€¥aú8ÏîÁ­' to dns_resolver key: bad/missing value 00:21:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) 00:21:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x7}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xff5e, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 00:21:53 executing program 5: r0 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x12, &(0x7f0000000100), 0x4) 00:21:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x25}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x1, 0x5ed, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/246, 0xf6}], 0x1, 0x0) 00:21:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:54 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)=ANY=[]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) get_thread_area(&(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0xecf6}) getsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)=""/114, &(0x7f00000000c0)=0x72) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x1, 0x0, 0x10000101) 00:21:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000070) 00:21:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) 00:21:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:54 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") finit_module(r0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a", 0x0) 00:21:54 executing program 2: r0 = socket$inet6(0xa, 0x2000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000687000)=0x9, 0x135) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000080), 0xfc) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x7, 0x4) bind$inet6(r0, &(0x7f0000402000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 00:21:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) 00:21:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000840)=[0x0, 0x0], 0x0) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) 00:21:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000880)={&(0x7f0000000400), 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[]}}, 0x40002) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f0000000000)={0x2, 0x500000000000000, @empty, [0x0, 0x3e8]}, 0x11) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={'\x00', {0x2, 0x4e20, @remote}}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000300), 0x8) 00:21:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:55 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000002c0)) 00:21:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780), 0xffffffffffffffee, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYRESOCT], 0x1}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='memory.high\x00', 0x2, 0x0) writev(r1, &(0x7f0000000700), 0x1000000000000070) 00:21:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) 00:21:55 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x400}]}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000340)=0x1ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) sendto$inet6(r2, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty={[0xe00000000000000]}}, 0x1c) tkill(r0, 0x1000000000016) 00:21:55 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:21:55 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x3f5}, 0x10) listen(r1, 0x0) 00:21:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 00:21:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) 00:21:56 executing program 2: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x41a}], 0x1, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000240), 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 00:21:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) [ 431.113676] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 431.227006] not chained 90000 origins [ 431.230848] CPU: 1 PID: 11663 Comm: syz-executor3 Not tainted 4.19.0+ #77 [ 431.231591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.244664] Call Trace: [ 431.244664] dump_stack+0x32d/0x480 [ 431.244664] kmsan_internal_chain_origin+0x222/0x240 [ 431.244664] ? skb_shift+0xcee/0x2d10 [ 431.244664] ? __sk_flush_backlog+0x52/0x70 [ 431.244664] ? tcp_sendmsg_locked+0xd72/0x6c30 [ 431.244664] ? tcp_sendmsg+0xb2/0x100 [ 431.244664] ? inet_sendmsg+0x4e9/0x800 [ 431.244664] ? __sys_sendto+0x97b/0xb80 [ 431.244664] ? __se_sys_sendto+0x107/0x130 [ 431.244664] ? __x64_sys_sendto+0x6e/0x90 [ 431.244664] ? do_syscall_64+0xcf/0x110 [ 431.244664] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 431.244664] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 431.305764] ? depot_save_stack+0x398/0x4b0 [ 431.305764] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 431.311311] ? kmsan_internal_chain_origin+0x1e3/0x240 [ 431.311311] ? get_stack_info+0x863/0x9d0 00:21:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) [ 431.322269] __msan_chain_origin+0x6d/0xd0 [ 431.328138] ? __se_sys_sendto+0x107/0x130 [ 431.328138] __save_stack_trace+0x8be/0xc60 [ 431.328138] ? __se_sys_sendto+0x107/0x130 [ 431.328138] save_stack_trace+0xc6/0x110 [ 431.328138] kmsan_internal_chain_origin+0x136/0x240 [ 431.328138] ? __x64_sys_sendto+0x6e/0x90 [ 431.328138] ? kmsan_internal_chain_origin+0x136/0x240 [ 431.328138] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 431.362868] ? __msan_memcpy+0x6f/0x80 [ 431.362868] ? pskb_expand_head+0x43b/0x1d20 00:21:56 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000fc0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002400)={&(0x7f0000001000)=@pppol2tpv3, 0x80, &(0x7f0000002300)=[{&(0x7f0000001080)=""/184, 0xb8}, {&(0x7f0000001140)=""/187, 0xbb}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/249, 0xf9}], 0x4, &(0x7f0000002340)=""/134, 0x86, 0x1}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00'}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000300)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'team_slave_1\x00', @remote}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000340)=@rc, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/58, 0x3a}, {&(0x7f0000000440)=""/176, 0xb0}, {&(0x7f0000000580)=""/68, 0x44}], 0x3, 0x0, 0x0, 0x4}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000680)="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") perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(r2, &(0x7f0000000e80)={&(0x7f0000000a00)=@hci, 0x80, &(0x7f0000000640)=[{&(0x7f0000000a80)=""/143, 0x8f}, {&(0x7f0000000b40)=""/191, 0xbf}, {&(0x7f0000000c00)=""/71, 0x47}, {&(0x7f0000000c80)=""/228, 0xe4}], 0x4, &(0x7f0000000d80)=""/204, 0xcc, 0x7fffffff}, 0x40000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000008c0)="7c2c25ce68cd07fc2e606d9f4eecb87cbbbd7ec5493cfff30eb7e03baa70556e9980d0a50318290d3d04aa3629c6d141bb17bcf6b2fbe4d13077ae8503c1a23371ee", &(0x7f0000000940)="75b9afcb245a75f044a35333d2922ddd13dcdbdbd5a65e5db4cf9aaca18da30a1208aee1c4c7311f2fd145257941abd189a48c34beddbd62d5d51659b91857983f3ded7d5ab3061fbf4ec2d3d51c8704cd8b58954230b50728a5a1d71f9f1280309c67e42a987d6898d72e65fb588df060c02809fabd8b4ba2ac0f8454e9efa9ee"}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0x13) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000ec0)) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f00000000c0)=0x20) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x4) r6 = getpid() perf_event_open(&(0x7f0000000f40)={0x5, 0x70, 0x7, 0x0, 0x8, 0x20, 0x0, 0x3, 0x10000, 0x8, 0x5, 0x0, 0x800, 0x5, 0x1f, 0x1, 0x5, 0x6, 0x6, 0x8, 0x1000, 0xd8, 0x8, 0x8001, 0x10, 0x7f, 0x401, 0x1, 0x2, 0xbb86, 0x10001, 0x8, 0x3, 0x1000, 0x9, 0x0, 0x10000, 0x1, 0x0, 0xffffffff, 0x7, @perf_bp={&(0x7f0000000f00)}, 0x8000, 0x8, 0x3, 0x0, 0x9, 0x10001, 0x4}, r6, 0x5, r4, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x400}, 0x2c) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000540)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000280)}, 0xfffffffffffffd01) [ 431.362868] ? skb_shift+0xcee/0x2d10 [ 431.362868] ? tcp_sacktag_walk+0x20ff/0x2960 [ 431.362868] ? tcp_sacktag_write_queue+0x2805/0x4630 [ 431.362868] ? tcp_ack+0x290e/0x9da0 [ 431.362868] ? tcp_rcv_established+0x1078/0x2a20 [ 431.362868] ? tcp_v6_do_rcv+0xa35/0x21a0 [ 431.362868] ? __release_sock+0x32d/0x760 [ 431.362868] ? __sk_flush_backlog+0x52/0x70 [ 431.362868] ? tcp_sendmsg_locked+0xd72/0x6c30 [ 431.362868] ? tcp_sendmsg+0xb2/0x100 [ 431.362868] ? inet_sendmsg+0x4e9/0x800 [ 431.362868] ? __sys_sendto+0x97b/0xb80 [ 431.362868] ? __se_sys_sendto+0x107/0x130 [ 431.362868] ? __x64_sys_sendto+0x6e/0x90 [ 431.432484] ? do_syscall_64+0xcf/0x110 [ 431.436018] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 431.436018] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 431.436018] ? memcg_kmem_put_cache+0x8e/0x460 [ 431.436018] ? __msan_get_context_state+0x9/0x30 [ 431.436018] ? INIT_INT+0xc/0x30 [ 431.436018] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 431.436018] kmsan_memcpy_origins+0x13d/0x1b0 [ 431.436018] __msan_memcpy+0x6f/0x80 [ 431.436018] pskb_expand_head+0x43b/0x1d20 [ 431.436018] skb_shift+0xcee/0x2d10 [ 431.436018] tcp_sacktag_walk+0x20ff/0x2960 [ 431.436018] tcp_sacktag_write_queue+0x2805/0x4630 [ 431.436018] tcp_ack+0x290e/0x9da0 [ 431.436018] ? tcp_parse_options+0xbe/0x1cf0 [ 431.436018] ? tcp_validate_incoming+0x50b/0x29d0 [ 431.436018] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 431.436018] ? tcp_parse_options+0x1c55/0x1cf0 [ 431.436018] tcp_rcv_established+0x1078/0x2a20 [ 431.436018] tcp_v6_do_rcv+0xa35/0x21a0 [ 431.436018] ? tcp_v6_destroy_sock+0x60/0x60 [ 431.436018] __release_sock+0x32d/0x760 [ 431.436018] __sk_flush_backlog+0x52/0x70 [ 431.436018] ? tcp_v6_do_rcv+0x21a0/0x21a0 [ 431.436018] tcp_sendmsg_locked+0xd72/0x6c30 [ 431.436018] tcp_sendmsg+0xb2/0x100 [ 431.436018] ? tcp_sendmsg_locked+0x6c30/0x6c30 [ 431.436018] inet_sendmsg+0x4e9/0x800 [ 431.436018] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 431.562112] ? security_socket_sendmsg+0x1bd/0x200 [ 431.562112] ? inet_getname+0x490/0x490 [ 431.562112] __sys_sendto+0x97b/0xb80 [ 431.562112] ? syscall_return_slowpath+0x123/0x8c0 [ 431.562112] ? put_timespec64+0x162/0x220 [ 431.562112] __se_sys_sendto+0x107/0x130 [ 431.588677] __x64_sys_sendto+0x6e/0x90 [ 431.588677] do_syscall_64+0xcf/0x110 [ 431.588677] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 431.588677] RIP: 0033:0x457569 [ 431.588677] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 431.588677] RSP: 002b:00007f319448ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 431.631805] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457569 [ 431.637361] RDX: fffffffffffffedd RSI: 0000000020000280 RDI: 0000000000000004 [ 431.645400] RBP: 000000000072bfa0 R08: 0000000020000080 R09: 000000000000001c [ 431.645400] R10: 0000000020000004 R11: 0000000000000246 R12: 00007f319448f6d4 [ 431.645400] R13: 00000000004c3b92 R14: 00000000004d5ce0 R15: 00000000ffffffff [ 431.645400] Uninit was stored to memory at: [ 431.645400] kmsan_internal_chain_origin+0x136/0x240 [ 431.645400] __msan_chain_origin+0x6d/0xd0 [ 431.645400] __save_stack_trace+0x8be/0xc60 [ 431.645400] save_stack_trace+0xc6/0x110 [ 431.645400] kmsan_internal_chain_origin+0x136/0x240 [ 431.645400] kmsan_memcpy_origins+0x13d/0x1b0 [ 431.645400] __msan_memcpy+0x6f/0x80 [ 431.701785] pskb_expand_head+0x43b/0x1d20 [ 431.701785] skb_shift+0xcee/0x2d10 [ 431.708170] tcp_sacktag_walk+0x20ff/0x2960 [ 431.708170] tcp_sacktag_write_queue+0x2805/0x4630 [ 431.708170] tcp_ack+0x290e/0x9da0 [ 431.722573] tcp_rcv_established+0x1078/0x2a20 [ 431.722573] tcp_v6_do_rcv+0xa35/0x21a0 [ 431.722573] __release_sock+0x32d/0x760 [ 431.722573] __sk_flush_backlog+0x52/0x70 [ 431.722573] tcp_sendmsg_locked+0xd72/0x6c30 [ 431.722573] tcp_sendmsg+0xb2/0x100 [ 431.722573] inet_sendmsg+0x4e9/0x800 [ 431.722573] __sys_sendto+0x97b/0xb80 [ 431.722573] __se_sys_sendto+0x107/0x130 [ 431.722573] __x64_sys_sendto+0x6e/0x90 [ 431.722573] do_syscall_64+0xcf/0x110 [ 431.722573] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 431.771785] 00:21:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) [ 431.771785] Uninit was stored to memory at: [ 431.777701] kmsan_internal_chain_origin+0x136/0x240 [ 431.777701] __msan_chain_origin+0x6d/0xd0 [ 431.777701] __save_stack_trace+0x8be/0xc60 [ 431.777701] save_stack_trace+0xc6/0x110 [ 431.777701] kmsan_internal_chain_origin+0x136/0x240 [ 431.777701] kmsan_memcpy_origins+0x13d/0x1b0 [ 431.777701] __msan_memcpy+0x6f/0x80 [ 431.777701] pskb_expand_head+0x43b/0x1d20 [ 431.777701] skb_shift+0xcee/0x2d10 [ 431.777701] tcp_sacktag_walk+0x20ff/0x2960 [ 431.777701] tcp_sacktag_write_queue+0x2805/0x4630 [ 431.777701] tcp_ack+0x290e/0x9da0 [ 431.829552] tcp_rcv_established+0x1078/0x2a20 [ 431.829552] tcp_v6_do_rcv+0xa35/0x21a0 [ 431.829552] __release_sock+0x32d/0x760 [ 431.829552] __sk_flush_backlog+0x52/0x70 [ 431.829552] tcp_sendmsg_locked+0xd72/0x6c30 [ 431.829552] tcp_sendmsg+0xb2/0x100 [ 431.829552] inet_sendmsg+0x4e9/0x800 [ 431.829552] __sys_sendto+0x97b/0xb80 [ 431.862322] __se_sys_sendto+0x107/0x130 [ 431.862322] __x64_sys_sendto+0x6e/0x90 [ 431.862322] do_syscall_64+0xcf/0x110 00:21:56 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001740)="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", 0x75c}], 0x1, &(0x7f0000000040)=ANY=[]}, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/group.stat\x00', 0x2761, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'vlan0\x00', @dev}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086607, 0x7fffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'bridge0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='\x00', r2}, 0x10) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000140)) close(r3) [ 431.862322] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 431.862322] [ 431.862322] Uninit was stored to memory at: [ 431.862322] kmsan_internal_chain_origin+0x136/0x240 [ 431.862322] __msan_chain_origin+0x6d/0xd0 [ 431.893816] __save_stack_trace+0x8be/0xc60 [ 431.893816] save_stack_trace+0xc6/0x110 [ 431.893816] kmsan_internal_chain_origin+0x136/0x240 [ 431.893816] kmsan_memcpy_origins+0x13d/0x1b0 [ 431.893816] __msan_memcpy+0x6f/0x80 [ 431.893816] pskb_expand_head+0x43b/0x1d20 [ 431.893816] skb_shift+0xcee/0x2d10 [ 431.893816] tcp_sacktag_walk+0x20ff/0x2960 [ 431.893816] tcp_sacktag_write_queue+0x2805/0x4630 [ 431.893816] tcp_ack+0x290e/0x9da0 [ 431.893816] tcp_rcv_established+0x1078/0x2a20 [ 431.893816] tcp_v6_do_rcv+0xa35/0x21a0 [ 431.893816] __release_sock+0x32d/0x760 [ 431.893816] __sk_flush_backlog+0x52/0x70 [ 431.893816] tcp_sendmsg_locked+0xd72/0x6c30 [ 431.893816] tcp_sendmsg+0xb2/0x100 [ 431.893816] inet_sendmsg+0x4e9/0x800 [ 431.893816] __sys_sendto+0x97b/0xb80 [ 431.971769] __se_sys_sendto+0x107/0x130 [ 431.971769] __x64_sys_sendto+0x6e/0x90 [ 431.971769] do_syscall_64+0xcf/0x110 [ 431.982513] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 431.988072] [ 431.988072] Uninit was stored to memory at: [ 431.988072] kmsan_internal_chain_origin+0x136/0x240 [ 431.988072] __msan_chain_origin+0x6d/0xd0 [ 431.988072] __save_stack_trace+0x8be/0xc60 [ 431.988072] save_stack_trace+0xc6/0x110 [ 431.988072] kmsan_internal_chain_origin+0x136/0x240 [ 431.988072] kmsan_memcpy_origins+0x13d/0x1b0 [ 431.988072] __msan_memcpy+0x6f/0x80 [ 431.988072] pskb_expand_head+0x43b/0x1d20 [ 431.988072] skb_shift+0xcee/0x2d10 [ 431.988072] tcp_sacktag_walk+0x20ff/0x2960 [ 431.988072] tcp_sacktag_write_queue+0x2805/0x4630 [ 432.041767] tcp_ack+0x290e/0x9da0 [ 432.041767] tcp_rcv_established+0x1078/0x2a20 [ 432.041767] tcp_v6_do_rcv+0xa35/0x21a0 [ 432.041767] __release_sock+0x32d/0x760 [ 432.041767] __sk_flush_backlog+0x52/0x70 [ 432.041767] tcp_sendmsg_locked+0xd72/0x6c30 [ 432.041767] tcp_sendmsg+0xb2/0x100 [ 432.041767] inet_sendmsg+0x4e9/0x800 [ 432.041767] __sys_sendto+0x97b/0xb80 [ 432.041767] __se_sys_sendto+0x107/0x130 [ 432.041767] __x64_sys_sendto+0x6e/0x90 [ 432.041767] do_syscall_64+0xcf/0x110 [ 432.041767] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 432.041767] [ 432.041767] Uninit was stored to memory at: [ 432.041767] kmsan_internal_chain_origin+0x136/0x240 [ 432.041767] __msan_chain_origin+0x6d/0xd0 [ 432.041767] __save_stack_trace+0x8be/0xc60 [ 432.041767] save_stack_trace+0xc6/0x110 [ 432.041767] kmsan_internal_chain_origin+0x136/0x240 [ 432.041767] kmsan_memcpy_origins+0x13d/0x1b0 [ 432.041767] __msan_memcpy+0x6f/0x80 [ 432.041767] pskb_expand_head+0x43b/0x1d20 [ 432.041767] skb_shift+0xcee/0x2d10 [ 432.041767] tcp_sacktag_walk+0x20ff/0x2960 [ 432.041767] tcp_sacktag_write_queue+0x2805/0x4630 [ 432.041767] tcp_ack+0x290e/0x9da0 [ 432.041767] tcp_rcv_established+0x1078/0x2a20 [ 432.041767] tcp_v6_do_rcv+0xa35/0x21a0 [ 432.041767] __release_sock+0x32d/0x760 [ 432.041767] __sk_flush_backlog+0x52/0x70 [ 432.041767] tcp_sendmsg_locked+0xd72/0x6c30 [ 432.041767] tcp_sendmsg+0xb2/0x100 [ 432.041767] inet_sendmsg+0x4e9/0x800 [ 432.041767] __sys_sendto+0x97b/0xb80 [ 432.041767] __se_sys_sendto+0x107/0x130 [ 432.041767] __x64_sys_sendto+0x6e/0x90 [ 432.041767] do_syscall_64+0xcf/0x110 [ 432.041767] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 432.041767] [ 432.041767] Uninit was stored to memory at: [ 432.041767] kmsan_internal_chain_origin+0x136/0x240 [ 432.041767] __msan_chain_origin+0x6d/0xd0 [ 432.041767] __save_stack_trace+0x8be/0xc60 [ 432.041767] save_stack_trace+0xc6/0x110 [ 432.041767] kmsan_internal_chain_origin+0x136/0x240 [ 432.041767] kmsan_memcpy_origins+0x13d/0x1b0 [ 432.041767] __msan_memcpy+0x6f/0x80 [ 432.041767] pskb_expand_head+0x43b/0x1d20 [ 432.041767] skb_shift+0xcee/0x2d10 [ 432.041767] tcp_sacktag_walk+0x20ff/0x2960 [ 432.041767] tcp_sacktag_write_queue+0x2805/0x4630 [ 432.041767] tcp_ack+0x290e/0x9da0 [ 432.041767] tcp_rcv_established+0x1078/0x2a20 [ 432.041767] tcp_v6_do_rcv+0xa35/0x21a0 [ 432.041767] __release_sock+0x32d/0x760 [ 432.041767] __sk_flush_backlog+0x52/0x70 [ 432.041767] tcp_sendmsg_locked+0xd72/0x6c30 [ 432.041767] tcp_sendmsg+0xb2/0x100 [ 432.041767] inet_sendmsg+0x4e9/0x800 [ 432.041767] __sys_sendto+0x97b/0xb80 [ 432.041767] __se_sys_sendto+0x107/0x130 [ 432.041767] __x64_sys_sendto+0x6e/0x90 [ 432.041767] do_syscall_64+0xcf/0x110 [ 432.041767] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 432.041767] [ 432.041767] Uninit was stored to memory at: [ 432.041767] kmsan_internal_chain_origin+0x136/0x240 [ 432.041767] __msan_chain_origin+0x6d/0xd0 [ 432.041767] __save_stack_trace+0x8be/0xc60 [ 432.041767] save_stack_trace+0xc6/0x110 [ 432.041767] kmsan_internal_chain_origin+0x136/0x240 [ 432.041767] kmsan_memcpy_origins+0x13d/0x1b0 [ 432.041767] __msan_memcpy+0x6f/0x80 [ 432.041767] pskb_expand_head+0x43b/0x1d20 [ 432.041767] skb_shift+0xcee/0x2d10 [ 432.041767] tcp_sacktag_walk+0x20ff/0x2960 [ 432.041767] tcp_sacktag_write_queue+0x2805/0x4630 [ 432.041767] tcp_ack+0x290e/0x9da0 [ 432.041767] tcp_rcv_established+0x1078/0x2a20 [ 432.041767] tcp_v6_do_rcv+0xa35/0x21a0 [ 432.041767] __release_sock+0x32d/0x760 [ 432.041767] __sk_flush_backlog+0x52/0x70 [ 432.041767] tcp_sendmsg_locked+0xd72/0x6c30 [ 432.041767] tcp_sendmsg+0xb2/0x100 [ 432.041767] inet_sendmsg+0x4e9/0x800 [ 432.041767] __sys_sendto+0x97b/0xb80 [ 432.041767] __se_sys_sendto+0x107/0x130 [ 432.041767] __x64_sys_sendto+0x6e/0x90 [ 432.041767] do_syscall_64+0xcf/0x110 [ 432.041767] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 432.041767] [ 432.041767] Local variable description: ----iph@ip_vs_in [ 432.041767] Variable was created at: [ 432.041767] ip_vs_in+0x155/0x3250 [ 432.041767] ip_vs_local_request6+0xec/0x130 [ 432.442526] device lo entered promiscuous mode [ 432.533991] not chained 100000 origins [ 432.537914] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.19.0+ #77 [ 432.541600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 432.541600] Call Trace: [ 432.541600] dump_stack+0x32d/0x480 [ 432.541600] kmsan_internal_chain_origin+0x222/0x240 [ 432.541600] ? skb_shift+0xfd5/0x2d10 [ 432.541600] ? ip6_input_finish+0xb53/0x2450 [ 432.541600] ? ip6_input+0x29d/0x340 [ 432.541600] ? ip6_rcv_finish+0x4d2/0x710 [ 432.541600] ? ipv6_rcv+0x34b/0x3f0 [ 432.541600] ? process_backlog+0x82b/0x11e0 [ 432.587976] ? net_rx_action+0x98f/0x1d50 [ 432.587976] ? __do_softirq+0x721/0xc5d [ 432.587976] ? run_ksoftirqd+0x37/0x60 [ 432.587976] ? smpboot_thread_fn+0x69c/0xb40 [ 432.587976] ? kthread+0x5e7/0x620 [ 432.587976] ? ret_from_fork+0x35/0x40 [ 432.587976] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 432.587976] ? in_task_stack+0x12c/0x210 [ 432.622481] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 432.622481] ? get_stack_info+0x863/0x9d0 [ 432.622481] __msan_chain_origin+0x6d/0xd0 [ 432.622481] ? __do_softirq+0x721/0xc5d [ 432.622481] __save_stack_trace+0x8be/0xc60 [ 432.622481] ? __do_softirq+0x721/0xc5d [ 432.622481] save_stack_trace+0xc6/0x110 [ 432.622481] kmsan_internal_chain_origin+0x136/0x240 [ 432.622481] ? __do_softirq+0x721/0xc5d [ 432.622481] ? kmsan_internal_chain_origin+0x136/0x240 [ 432.622481] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 432.622481] ? __msan_memcpy+0x6f/0x80 [ 432.622481] ? pskb_expand_head+0x43b/0x1d20 [ 432.622481] ? skb_shift+0xfd5/0x2d10 [ 432.622481] ? tcp_sacktag_walk+0x20ff/0x2960 [ 432.622481] ? tcp_sacktag_write_queue+0x2805/0x4630 [ 432.622481] ? tcp_ack+0x290e/0x9da0 [ 432.622481] ? tcp_rcv_established+0x1078/0x2a20 [ 432.622481] ? tcp_v6_do_rcv+0xa35/0x21a0 [ 432.622481] ? tcp_v6_rcv+0x5c5e/0x5e00 [ 432.622481] ? ip6_input_finish+0xb53/0x2450 [ 432.622481] ? ip6_input+0x29d/0x340 [ 432.622481] ? ip6_rcv_finish+0x4d2/0x710 [ 432.622481] ? ipv6_rcv+0x34b/0x3f0 [ 432.622481] ? process_backlog+0x82b/0x11e0 [ 432.622481] ? net_rx_action+0x98f/0x1d50 [ 432.622481] ? __do_softirq+0x721/0xc5d [ 432.622481] ? run_ksoftirqd+0x37/0x60 [ 432.622481] ? smpboot_thread_fn+0x69c/0xb40 [ 432.622481] ? kthread+0x5e7/0x620 [ 432.622481] ? ret_from_fork+0x35/0x40 [ 432.622481] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 432.622481] ? memcg_kmem_put_cache+0x8e/0x460 [ 432.622481] ? __msan_get_context_state+0x9/0x30 [ 432.622481] ? INIT_INT+0xc/0x30 [ 432.622481] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 432.622481] kmsan_memcpy_origins+0x13d/0x1b0 [ 432.622481] __msan_memcpy+0x6f/0x80 [ 432.622481] pskb_expand_head+0x43b/0x1d20 [ 432.622481] skb_shift+0xfd5/0x2d10 [ 432.622481] tcp_sacktag_walk+0x20ff/0x2960 [ 432.622481] tcp_sacktag_write_queue+0x2805/0x4630 [ 432.622481] tcp_ack+0x290e/0x9da0 [ 432.622481] ? tcp_parse_options+0xbe/0x1cf0 [ 432.622481] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 432.622481] ? tcp_parse_options+0x1c55/0x1cf0 [ 432.622481] tcp_rcv_established+0x1078/0x2a20 [ 432.622481] tcp_v6_do_rcv+0xa35/0x21a0 [ 432.622481] tcp_v6_rcv+0x5c5e/0x5e00 [ 432.622481] ? __msan_poison_alloca+0x1e0/0x2b0 [ 432.622481] ? tcp_v6_early_demux+0xc80/0xc80 [ 432.622481] ? tcp_v6_early_demux+0xc80/0xc80 [ 432.622481] ip6_input_finish+0xb53/0x2450 [ 432.622481] ? ip6_input_finish+0x13d1/0x2450 [ 432.622481] ip6_input+0x29d/0x340 [ 432.622481] ? ip6_input+0x340/0x340 [ 432.622481] ? ip6_sublist_rcv+0x1ab0/0x1ab0 [ 432.622481] ip6_rcv_finish+0x4d2/0x710 [ 432.622481] ipv6_rcv+0x34b/0x3f0 [ 432.622481] ? dst_hold+0x5e0/0x5e0 [ 432.622481] process_backlog+0x82b/0x11e0 [ 432.622481] ? ip6_rcv_finish+0x710/0x710 [ 432.622481] ? rps_trigger_softirq+0x2e0/0x2e0 [ 432.622481] net_rx_action+0x98f/0x1d50 [ 432.622481] ? net_tx_action+0xf20/0xf20 [ 432.622481] __do_softirq+0x721/0xc5d [ 432.622481] ? ksoftirqd_should_run+0x50/0x50 [ 432.622481] run_ksoftirqd+0x37/0x60 [ 432.622481] smpboot_thread_fn+0x69c/0xb40 [ 432.622481] kthread+0x5e7/0x620 [ 432.622481] ? cpu_report_death+0x4a0/0x4a0 [ 432.622481] ? INIT_BOOL+0x30/0x30 [ 432.622481] ret_from_fork+0x35/0x40 [ 432.622481] Uninit was stored to memory at: [ 432.622481] kmsan_internal_chain_origin+0x136/0x240 [ 432.622481] __msan_chain_origin+0x6d/0xd0 [ 432.622481] __save_stack_trace+0x8be/0xc60 [ 432.622481] save_stack_trace+0xc6/0x110 [ 432.622481] kmsan_internal_chain_origin+0x136/0x240 [ 432.622481] kmsan_memcpy_origins+0x13d/0x1b0 [ 432.622481] __msan_memcpy+0x6f/0x80 [ 432.622481] pskb_expand_head+0x43b/0x1d20 [ 432.622481] skb_shift+0xcee/0x2d10 [ 432.622481] tcp_sacktag_walk+0x20ff/0x2960 [ 432.622481] tcp_sacktag_write_queue+0x2805/0x4630 [ 432.622481] tcp_ack+0x290e/0x9da0 [ 432.622481] tcp_rcv_established+0x1078/0x2a20 [ 432.622481] tcp_v6_do_rcv+0xa35/0x21a0 [ 432.622481] tcp_v6_rcv+0x5c5e/0x5e00 [ 432.622481] ip6_input_finish+0xb53/0x2450 [ 432.622481] ip6_input+0x29d/0x340 [ 432.622481] ip6_rcv_finish+0x4d2/0x710 [ 432.622481] ipv6_rcv+0x34b/0x3f0 [ 432.622481] process_backlog+0x82b/0x11e0 [ 432.622481] net_rx_action+0x98f/0x1d50 [ 432.622481] __do_softirq+0x721/0xc5d [ 432.622481] [ 432.622481] Uninit was stored to memory at: [ 432.622481] kmsan_internal_chain_origin+0x136/0x240 [ 432.622481] __msan_chain_origin+0x6d/0xd0 [ 432.622481] __save_stack_trace+0x8be/0xc60 [ 432.622481] save_stack_trace+0xc6/0x110 [ 432.622481] kmsan_internal_chain_origin+0x136/0x240 [ 432.622481] kmsan_memcpy_origins+0x13d/0x1b0 [ 432.622481] __msan_memcpy+0x6f/0x80 [ 432.622481] pskb_expand_head+0x43b/0x1d20 [ 432.622481] skb_shift+0xcee/0x2d10 [ 432.622481] tcp_sacktag_walk+0x20ff/0x2960 [ 432.622481] tcp_sacktag_write_queue+0x2805/0x4630 [ 432.622481] tcp_ack+0x290e/0x9da0 [ 432.622481] tcp_rcv_established+0x1078/0x2a20 [ 432.622481] tcp_v6_do_rcv+0xa35/0x21a0 [ 432.622481] tcp_v6_rcv+0x5c5e/0x5e00 [ 432.622481] ip6_input_finish+0xb53/0x2450 [ 432.622481] ip6_input+0x29d/0x340 [ 432.622481] ip6_rcv_finish+0x4d2/0x710 [ 432.622481] ipv6_rcv+0x34b/0x3f0 [ 432.622481] process_backlog+0x82b/0x11e0 [ 432.622481] net_rx_action+0x98f/0x1d50 [ 432.622481] __do_softirq+0x721/0xc5d [ 432.622481] [ 432.622481] Uninit was stored to memory at: [ 432.622481] kmsan_internal_chain_origin+0x136/0x240 [ 432.622481] __msan_chain_origin+0x6d/0xd0 [ 432.622481] __save_stack_trace+0x8be/0xc60 [ 432.622481] save_stack_trace+0xc6/0x110 [ 432.622481] kmsan_internal_chain_origin+0x136/0x240 [ 432.622481] kmsan_memcpy_origins+0x13d/0x1b0 [ 432.622481] __msan_memcpy+0x6f/0x80 [ 432.622481] pskb_expand_head+0x43b/0x1d20 [ 432.622481] skb_shift+0xcee/0x2d10 [ 432.622481] tcp_sacktag_walk+0x20ff/0x2960 [ 432.622481] tcp_sacktag_write_queue+0x2805/0x4630 [ 432.622481] tcp_ack+0x290e/0x9da0 [ 432.622481] tcp_rcv_established+0x1078/0x2a20 [ 432.622481] tcp_v6_do_rcv+0xa35/0x21a0 [ 432.622481] tcp_v6_rcv+0x5c5e/0x5e00 [ 432.622481] ip6_input_finish+0xb53/0x2450 [ 432.622481] ip6_input+0x29d/0x340 [ 432.622481] ip6_rcv_finish+0x4d2/0x710 [ 432.622481] ipv6_rcv+0x34b/0x3f0 [ 432.622481] process_backlog+0x82b/0x11e0 [ 432.622481] net_rx_action+0x98f/0x1d50 [ 432.622481] __do_softirq+0x721/0xc5d [ 432.622481] [ 432.622481] Uninit was stored to memory at: [ 432.622481] kmsan_internal_chain_origin+0x136/0x240 [ 432.622481] __msan_chain_origin+0x6d/0xd0 [ 432.622481] __save_stack_trace+0x8be/0xc60 [ 432.622481] save_stack_trace+0xc6/0x110 [ 432.622481] kmsan_internal_chain_origin+0x136/0x240 [ 432.622481] kmsan_memcpy_origins+0x13d/0x1b0 [ 432.622481] __msan_memcpy+0x6f/0x80 [ 432.622481] pskb_expand_head+0x43b/0x1d20 [ 432.622481] skb_shift+0xcee/0x2d10 [ 432.622481] tcp_sacktag_walk+0x20ff/0x2960 [ 432.622481] tcp_sacktag_write_queue+0x2805/0x4630 [ 432.622481] tcp_ack+0x290e/0x9da0 [ 432.622481] tcp_rcv_established+0x1078/0x2a20 [ 432.622481] tcp_v6_do_rcv+0xa35/0x21a0 [ 432.622481] tcp_v6_rcv+0x5c5e/0x5e00 [ 432.622481] ip6_input_finish+0xb53/0x2450 [ 432.622481] ip6_input+0x29d/0x340 [ 432.622481] ip6_rcv_finish+0x4d2/0x710 [ 432.622481] ipv6_rcv+0x34b/0x3f0 [ 432.622481] process_backlog+0x82b/0x11e0 [ 432.622481] net_rx_action+0x98f/0x1d50 [ 432.622481] __do_softirq+0x721/0xc5d [ 432.622481] [ 432.622481] Uninit was stored to memory at: [ 432.622481] kmsan_internal_chain_origin+0x136/0x240 [ 432.622481] __msan_chain_origin+0x6d/0xd0 [ 432.622481] __save_stack_trace+0x8be/0xc60 [ 432.622481] save_stack_trace+0xc6/0x110 [ 432.622481] kmsan_internal_chain_origin+0x136/0x240 [ 432.622481] kmsan_memcpy_origins+0x13d/0x1b0 [ 432.622481] __msan_memcpy+0x6f/0x80 [ 432.622481] pskb_expand_head+0x43b/0x1d20 [ 432.622481] skb_shift+0xcee/0x2d10 [ 432.622481] tcp_sacktag_walk+0x20ff/0x2960 [ 432.622481] tcp_sacktag_write_queue+0x2805/0x4630 [ 432.622481] tcp_ack+0x290e/0x9da0 [ 432.622481] tcp_rcv_established+0x1078/0x2a20 [ 432.622481] tcp_v6_do_rcv+0xa35/0x21a0 [ 432.622481] tcp_v6_rcv+0x5c5e/0x5e00 [ 432.622481] ip6_input_finish+0xb53/0x2450 [ 432.622481] ip6_input+0x29d/0x340 [ 432.622481] ip6_rcv_finish+0x4d2/0x710 [ 432.622481] ipv6_rcv+0x34b/0x3f0 [ 432.622481] process_backlog+0x82b/0x11e0 [ 432.622481] net_rx_action+0x98f/0x1d50 [ 432.622481] __do_softirq+0x721/0xc5d [ 432.622481] [ 432.622481] Uninit was stored to memory at: [ 432.622481] kmsan_internal_chain_origin+0x136/0x240 [ 432.622481] __msan_chain_origin+0x6d/0xd0 [ 432.622481] __save_stack_trace+0x8be/0xc60 [ 432.622481] save_stack_trace+0xc6/0x110 [ 432.622481] kmsan_internal_chain_origin+0x136/0x240 [ 432.622481] kmsan_memcpy_origins+0x13d/0x1b0 [ 432.622481] __msan_memcpy+0x6f/0x80 [ 432.622481] pskb_expand_head+0x43b/0x1d20 [ 432.622481] skb_shift+0xcee/0x2d10 [ 432.622481] tcp_sacktag_walk+0x20ff/0x2960 [ 432.622481] tcp_sacktag_write_queue+0x2805/0x4630 [ 432.622481] tcp_ack+0x290e/0x9da0 [ 432.622481] tcp_rcv_established+0x1078/0x2a20 [ 432.622481] tcp_v6_do_rcv+0xa35/0x21a0 [ 432.622481] tcp_v6_rcv+0x5c5e/0x5e00 [ 432.622481] ip6_input_finish+0xb53/0x2450 [ 432.622481] ip6_input+0x29d/0x340 [ 432.622481] ip6_rcv_finish+0x4d2/0x710 [ 432.622481] ipv6_rcv+0x34b/0x3f0 [ 432.622481] process_backlog+0x82b/0x11e0 [ 432.622481] net_rx_action+0x98f/0x1d50 [ 432.622481] __do_softirq+0x721/0xc5d [ 432.622481] [ 432.622481] Uninit was stored to memory at: [ 432.622481] kmsan_internal_chain_origin+0x136/0x240 [ 432.622481] __msan_chain_origin+0x6d/0xd0 [ 432.622481] __save_stack_trace+0x8be/0xc60 [ 432.622481] save_stack_trace+0xc6/0x110 [ 432.622481] kmsan_internal_chain_origin+0x136/0x240 [ 432.622481] kmsan_memcpy_origins+0x13d/0x1b0 [ 432.622481] __msan_memcpy+0x6f/0x80 [ 432.622481] pskb_expand_head+0x43b/0x1d20 [ 432.622481] skb_shift+0xcee/0x2d10 [ 432.622481] tcp_sacktag_walk+0x20ff/0x2960 [ 432.622481] tcp_sacktag_write_queue+0x2805/0x4630 [ 432.622481] tcp_ack+0x290e/0x9da0 [ 432.622481] tcp_rcv_established+0x1078/0x2a20 [ 432.622481] tcp_v6_do_rcv+0xa35/0x21a0 [ 432.622481] tcp_v6_rcv+0x5c5e/0x5e00 [ 432.622481] ip6_input_finish+0xb53/0x2450 00:21:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) [ 432.622481] ip6_input+0x29d/0x340 [ 432.622481] ip6_rcv_finish+0x4d2/0x710 [ 432.622481] ipv6_rcv+0x34b/0x3f0 [ 432.622481] process_backlog+0x82b/0x11e0 [ 432.622481] net_rx_action+0x98f/0x1d50 [ 432.622481] __do_softirq+0x721/0xc5d [ 432.622481] [ 432.622481] Local variable description: ----acpar@ip6t_do_table [ 432.622481] Variable was created at: [ 432.622481] ip6t_do_table+0xb7/0x2c20 [ 432.622481] ip6table_security_hook+0xb5/0xe0 [ 433.962492] not chained 110000 origins [ 433.966415] CPU: 0 PID: 9 Comm: ksoftirqd/0 Not tainted 4.19.0+ #77 [ 433.971607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 433.971607] Call Trace: [ 433.971607] dump_stack+0x32d/0x480 [ 433.971607] ? save_stack_trace+0xc6/0x110 [ 433.971607] kmsan_internal_chain_origin+0x222/0x240 [ 433.971607] ? skb_shift+0xcee/0x2d10 [ 433.971607] ? ip6_input_finish+0xb53/0x2450 [ 433.971607] ? ip6_input+0x29d/0x340 [ 433.971607] ? ip6_rcv_finish+0x4d2/0x710 [ 433.971607] ? ipv6_rcv+0x34b/0x3f0 [ 433.971607] ? process_backlog+0x82b/0x11e0 [ 433.971607] ? net_rx_action+0x98f/0x1d50 [ 433.971607] ? __do_softirq+0x721/0xc5d [ 433.971607] ? run_ksoftirqd+0x37/0x60 [ 433.971607] ? smpboot_thread_fn+0x69c/0xb40 [ 433.971607] ? kthread+0x5e7/0x620 [ 433.971607] ? ret_from_fork+0x35/0x40 [ 433.971607] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 433.971607] ? __msan_memcpy+0x6f/0x80 [ 433.971607] ? pskb_expand_head+0x43b/0x1d20 [ 433.971607] ? skb_shift+0xcee/0x2d10 [ 433.971607] ? tcp_sacktag_walk+0x20ff/0x2960 [ 433.971607] ? tcp_sacktag_write_queue+0x2805/0x4630 [ 433.971607] ? tcp_ack+0x290e/0x9da0 [ 433.971607] ? tcp_rcv_established+0x1078/0x2a20 [ 433.971607] ? tcp_v6_do_rcv+0xa35/0x21a0 [ 433.971607] ? tcp_v6_rcv+0x5c5e/0x5e00 [ 433.971607] ? ip6_input_finish+0xb53/0x2450 [ 433.971607] ? ip6_input+0x29d/0x340 [ 433.971607] ? ip6_rcv_finish+0x4d2/0x710 [ 433.971607] ? ipv6_rcv+0x34b/0x3f0 [ 433.971607] ? process_backlog+0x82b/0x11e0 [ 433.971607] ? net_rx_action+0x98f/0x1d50 [ 433.971607] ? __do_softirq+0x721/0xc5d [ 433.971607] ? run_ksoftirqd+0x37/0x60 [ 433.971607] ? smpboot_thread_fn+0x69c/0xb40 [ 433.971607] ? kthread+0x5e7/0x620 [ 433.971607] ? ret_from_fork+0x35/0x40 [ 433.971607] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 433.971607] ? get_stack_info+0x863/0x9d0 [ 433.971607] __msan_chain_origin+0x6d/0xd0 [ 433.971607] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 433.971607] __save_stack_trace+0x8be/0xc60 [ 433.971607] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 433.971607] save_stack_trace+0xc6/0x110 [ 433.971607] kmsan_internal_chain_origin+0x136/0x240 [ 433.971607] ? __do_softirq+0x721/0xc5d [ 433.971607] ? kmsan_internal_chain_origin+0x136/0x240 [ 433.971607] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 433.971607] ? __msan_memcpy+0x6f/0x80 [ 433.971607] ? pskb_expand_head+0x43b/0x1d20 [ 433.971607] ? skb_shift+0xcee/0x2d10 [ 433.971607] ? tcp_sacktag_walk+0x20ff/0x2960 [ 433.971607] ? tcp_sacktag_write_queue+0x2805/0x4630 [ 433.971607] ? tcp_ack+0x290e/0x9da0 [ 433.971607] ? tcp_rcv_established+0x1078/0x2a20 [ 433.971607] ? tcp_v6_do_rcv+0xa35/0x21a0 [ 433.971607] ? tcp_v6_rcv+0x5c5e/0x5e00 [ 433.971607] ? ip6_input_finish+0xb53/0x2450 [ 433.971607] ? ip6_input+0x29d/0x340 [ 433.971607] ? ip6_rcv_finish+0x4d2/0x710 [ 433.971607] ? ipv6_rcv+0x34b/0x3f0 [ 433.971607] ? process_backlog+0x82b/0x11e0 [ 433.971607] ? net_rx_action+0x98f/0x1d50 [ 433.971607] ? __do_softirq+0x721/0xc5d [ 433.971607] ? run_ksoftirqd+0x37/0x60 [ 433.971607] ? smpboot_thread_fn+0x69c/0xb40 [ 433.971607] ? kthread+0x5e7/0x620 [ 433.971607] ? ret_from_fork+0x35/0x40 [ 433.971607] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 433.971607] ? memcg_kmem_put_cache+0x8e/0x460 [ 433.971607] ? __msan_get_context_state+0x9/0x30 [ 433.971607] ? INIT_INT+0xc/0x30 [ 433.971607] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 433.971607] kmsan_memcpy_origins+0x13d/0x1b0 [ 433.971607] __msan_memcpy+0x6f/0x80 [ 433.971607] pskb_expand_head+0x43b/0x1d20 [ 433.971607] skb_shift+0xcee/0x2d10 [ 433.971607] tcp_sacktag_walk+0x20ff/0x2960 [ 433.971607] tcp_sacktag_write_queue+0x2805/0x4630 [ 433.971607] tcp_ack+0x290e/0x9da0 [ 433.971607] ? tcp_parse_options+0xbe/0x1cf0 [ 433.971607] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 433.971607] ? tcp_parse_options+0x1c55/0x1cf0 [ 433.971607] tcp_rcv_established+0x1078/0x2a20 [ 433.971607] tcp_v6_do_rcv+0xa35/0x21a0 [ 433.971607] tcp_v6_rcv+0x5c5e/0x5e00 [ 433.971607] ? __msan_poison_alloca+0x1e0/0x2b0 [ 433.971607] ? tcp_v6_early_demux+0xc80/0xc80 [ 433.971607] ? tcp_v6_early_demux+0xc80/0xc80 [ 433.971607] ip6_input_finish+0xb53/0x2450 [ 433.971607] ? ip6_input_finish+0x13d1/0x2450 [ 433.971607] ip6_input+0x29d/0x340 [ 433.971607] ? ip6_input+0x340/0x340 [ 433.971607] ? ip6_sublist_rcv+0x1ab0/0x1ab0 [ 433.971607] ip6_rcv_finish+0x4d2/0x710 [ 433.971607] ipv6_rcv+0x34b/0x3f0 [ 433.971607] ? dst_hold+0x5e0/0x5e0 [ 433.971607] process_backlog+0x82b/0x11e0 [ 433.971607] ? ip6_rcv_finish+0x710/0x710 [ 433.971607] ? rps_trigger_softirq+0x2e0/0x2e0 [ 433.971607] net_rx_action+0x98f/0x1d50 [ 433.971607] ? net_tx_action+0xf20/0xf20 [ 433.971607] __do_softirq+0x721/0xc5d [ 433.971607] ? ksoftirqd_should_run+0x50/0x50 [ 433.971607] run_ksoftirqd+0x37/0x60 [ 433.971607] smpboot_thread_fn+0x69c/0xb40 [ 433.971607] kthread+0x5e7/0x620 [ 433.971607] ? cpu_report_death+0x4a0/0x4a0 [ 433.971607] ? INIT_BOOL+0x30/0x30 [ 433.971607] ret_from_fork+0x35/0x40 [ 433.971607] Uninit was stored to memory at: [ 433.971607] kmsan_internal_chain_origin+0x136/0x240 [ 433.971607] __msan_chain_origin+0x6d/0xd0 [ 433.971607] __save_stack_trace+0x8be/0xc60 [ 433.971607] save_stack_trace+0xc6/0x110 [ 433.971607] kmsan_internal_chain_origin+0x136/0x240 [ 433.971607] kmsan_memcpy_origins+0x13d/0x1b0 [ 433.971607] __msan_memcpy+0x6f/0x80 [ 433.971607] pskb_expand_head+0x43b/0x1d20 [ 433.971607] skb_shift+0xcee/0x2d10 [ 433.971607] tcp_sacktag_walk+0x20ff/0x2960 [ 433.971607] tcp_sacktag_write_queue+0x2805/0x4630 [ 433.971607] tcp_ack+0x290e/0x9da0 [ 434.497759] tcp_rcv_established+0x1078/0x2a20 [ 434.497759] tcp_v6_do_rcv+0xa35/0x21a0 [ 434.497759] tcp_v6_rcv+0x5c5e/0x5e00 [ 434.497759] ip6_input_finish+0xb53/0x2450 [ 434.497759] ip6_input+0x29d/0x340 [ 434.497759] ip6_rcv_finish+0x4d2/0x710 [ 434.524354] ipv6_rcv+0x34b/0x3f0 [ 434.524354] process_backlog+0x82b/0x11e0 [ 434.531678] net_rx_action+0x98f/0x1d50 [ 434.531678] __do_softirq+0x721/0xc5d [ 434.531678] [ 434.531678] Uninit was stored to memory at: [ 434.531678] kmsan_internal_chain_origin+0x136/0x240 [ 434.531678] __msan_chain_origin+0x6d/0xd0 [ 434.531678] __save_stack_trace+0x8be/0xc60 [ 434.531678] save_stack_trace+0xc6/0x110 [ 434.531678] kmsan_internal_chain_origin+0x136/0x240 [ 434.531678] kmsan_memcpy_origins+0x13d/0x1b0 [ 434.531678] __msan_memcpy+0x6f/0x80 [ 434.531678] pskb_expand_head+0x43b/0x1d20 [ 434.531678] skb_shift+0xcee/0x2d10 [ 434.531678] tcp_sacktag_walk+0x20ff/0x2960 [ 434.531678] tcp_sacktag_write_queue+0x2805/0x4630 [ 434.531678] tcp_ack+0x290e/0x9da0 [ 434.531678] tcp_rcv_established+0x1078/0x2a20 [ 434.531678] tcp_v6_do_rcv+0xa35/0x21a0 [ 434.531678] tcp_v6_rcv+0x5c5e/0x5e00 [ 434.531678] ip6_input_finish+0xb53/0x2450 [ 434.531678] ip6_input+0x29d/0x340 [ 434.531678] ip6_rcv_finish+0x4d2/0x710 [ 434.531678] ipv6_rcv+0x34b/0x3f0 [ 434.531678] process_backlog+0x82b/0x11e0 [ 434.531678] net_rx_action+0x98f/0x1d50 [ 434.531678] __do_softirq+0x721/0xc5d [ 434.531678] [ 434.531678] Uninit was stored to memory at: [ 434.531678] kmsan_internal_chain_origin+0x136/0x240 [ 434.531678] __msan_chain_origin+0x6d/0xd0 [ 434.531678] __save_stack_trace+0x8be/0xc60 [ 434.531678] save_stack_trace+0xc6/0x110 [ 434.531678] kmsan_internal_chain_origin+0x136/0x240 [ 434.531678] kmsan_memcpy_origins+0x13d/0x1b0 [ 434.531678] __msan_memcpy+0x6f/0x80 [ 434.531678] pskb_expand_head+0x43b/0x1d20 [ 434.531678] skb_shift+0xcee/0x2d10 [ 434.531678] tcp_sacktag_walk+0x20ff/0x2960 [ 434.531678] tcp_sacktag_write_queue+0x2805/0x4630 [ 434.531678] tcp_ack+0x290e/0x9da0 [ 434.531678] tcp_rcv_established+0x1078/0x2a20 [ 434.531678] tcp_v6_do_rcv+0xa35/0x21a0 [ 434.531678] tcp_v6_rcv+0x5c5e/0x5e00 [ 434.531678] ip6_input_finish+0xb53/0x2450 [ 434.531678] ip6_input+0x29d/0x340 [ 434.531678] ip6_rcv_finish+0x4d2/0x710 [ 434.531678] ipv6_rcv+0x34b/0x3f0 [ 434.531678] process_backlog+0x82b/0x11e0 [ 434.531678] net_rx_action+0x98f/0x1d50 [ 434.531678] __do_softirq+0x721/0xc5d [ 434.531678] [ 434.531678] Uninit was stored to memory at: [ 434.531678] kmsan_internal_chain_origin+0x136/0x240 [ 434.531678] __msan_chain_origin+0x6d/0xd0 [ 434.531678] __save_stack_trace+0x8be/0xc60 [ 434.531678] save_stack_trace+0xc6/0x110 [ 434.531678] kmsan_internal_chain_origin+0x136/0x240 [ 434.531678] kmsan_memcpy_origins+0x13d/0x1b0 [ 434.531678] __msan_memcpy+0x6f/0x80 [ 434.531678] pskb_expand_head+0x43b/0x1d20 [ 434.531678] skb_shift+0xcee/0x2d10 [ 434.531678] tcp_sacktag_walk+0x20ff/0x2960 [ 434.531678] tcp_sacktag_write_queue+0x2805/0x4630 [ 434.531678] tcp_ack+0x290e/0x9da0 [ 434.531678] tcp_rcv_established+0x1078/0x2a20 [ 434.531678] tcp_v6_do_rcv+0xa35/0x21a0 [ 434.531678] tcp_v6_rcv+0x5c5e/0x5e00 [ 434.531678] ip6_input_finish+0xb53/0x2450 [ 434.531678] ip6_input+0x29d/0x340 [ 434.531678] ip6_rcv_finish+0x4d2/0x710 [ 434.531678] ipv6_rcv+0x34b/0x3f0 [ 434.531678] process_backlog+0x82b/0x11e0 [ 434.531678] net_rx_action+0x98f/0x1d50 [ 434.531678] __do_softirq+0x721/0xc5d [ 434.531678] [ 434.531678] Uninit was stored to memory at: [ 434.531678] kmsan_internal_chain_origin+0x136/0x240 [ 434.531678] __msan_chain_origin+0x6d/0xd0 [ 434.531678] __save_stack_trace+0x8be/0xc60 [ 434.531678] save_stack_trace+0xc6/0x110 [ 434.531678] kmsan_internal_chain_origin+0x136/0x240 [ 434.531678] kmsan_memcpy_origins+0x13d/0x1b0 [ 434.531678] __msan_memcpy+0x6f/0x80 [ 434.531678] pskb_expand_head+0x43b/0x1d20 [ 434.531678] skb_shift+0xcee/0x2d10 [ 434.531678] tcp_sacktag_walk+0x20ff/0x2960 [ 434.531678] tcp_sacktag_write_queue+0x2805/0x4630 [ 434.531678] tcp_ack+0x290e/0x9da0 [ 434.531678] tcp_rcv_established+0x1078/0x2a20 [ 434.531678] tcp_v6_do_rcv+0xa35/0x21a0 [ 434.531678] tcp_v6_rcv+0x5c5e/0x5e00 [ 434.531678] ip6_input_finish+0xb53/0x2450 [ 434.531678] ip6_input+0x29d/0x340 [ 434.531678] ip6_rcv_finish+0x4d2/0x710 [ 434.531678] ipv6_rcv+0x34b/0x3f0 [ 434.531678] process_backlog+0x82b/0x11e0 [ 434.531678] net_rx_action+0x98f/0x1d50 [ 434.531678] __do_softirq+0x721/0xc5d [ 434.531678] [ 434.531678] Uninit was stored to memory at: [ 434.531678] kmsan_internal_chain_origin+0x136/0x240 [ 434.531678] __msan_chain_origin+0x6d/0xd0 [ 434.531678] __save_stack_trace+0x8be/0xc60 [ 434.531678] save_stack_trace+0xc6/0x110 [ 434.531678] kmsan_internal_chain_origin+0x136/0x240 [ 434.531678] kmsan_memcpy_origins+0x13d/0x1b0 [ 434.531678] __msan_memcpy+0x6f/0x80 [ 434.531678] pskb_expand_head+0x43b/0x1d20 [ 434.531678] skb_shift+0xcee/0x2d10 [ 434.531678] tcp_sacktag_walk+0x20ff/0x2960 [ 434.531678] tcp_sacktag_write_queue+0x2805/0x4630 [ 434.531678] tcp_ack+0x290e/0x9da0 [ 434.531678] tcp_rcv_established+0x1078/0x2a20 [ 434.531678] tcp_v6_do_rcv+0xa35/0x21a0 [ 434.531678] tcp_v6_rcv+0x5c5e/0x5e00 [ 434.531678] ip6_input_finish+0xb53/0x2450 [ 434.531678] ip6_input+0x29d/0x340 [ 434.531678] ip6_rcv_finish+0x4d2/0x710 [ 434.531678] ipv6_rcv+0x34b/0x3f0 [ 434.531678] process_backlog+0x82b/0x11e0 [ 434.531678] net_rx_action+0x98f/0x1d50 [ 434.531678] __do_softirq+0x721/0xc5d [ 434.531678] [ 434.531678] Uninit was stored to memory at: [ 434.531678] kmsan_internal_chain_origin+0x136/0x240 [ 434.531678] __msan_chain_origin+0x6d/0xd0 [ 434.531678] __save_stack_trace+0x8be/0xc60 [ 434.531678] save_stack_trace+0xc6/0x110 [ 434.531678] kmsan_internal_chain_origin+0x136/0x240 [ 434.531678] kmsan_memcpy_origins+0x13d/0x1b0 [ 434.531678] __msan_memcpy+0x6f/0x80 [ 434.531678] pskb_expand_head+0x43b/0x1d20 [ 434.531678] skb_shift+0xcee/0x2d10 [ 434.531678] tcp_sacktag_walk+0x20ff/0x2960 [ 434.531678] tcp_sacktag_write_queue+0x2805/0x4630 [ 434.531678] tcp_ack+0x290e/0x9da0 [ 434.531678] tcp_rcv_established+0x1078/0x2a20 [ 434.531678] tcp_v6_do_rcv+0xa35/0x21a0 [ 434.531678] tcp_v6_rcv+0x5c5e/0x5e00 [ 434.531678] ip6_input_finish+0xb53/0x2450 [ 434.531678] ip6_input+0x29d/0x340 [ 434.531678] ip6_rcv_finish+0x4d2/0x710 [ 434.531678] ipv6_rcv+0x34b/0x3f0 [ 434.531678] process_backlog+0x82b/0x11e0 [ 434.531678] net_rx_action+0x98f/0x1d50 [ 434.531678] __do_softirq+0x721/0xc5d [ 434.531678] [ 434.531678] Local variable description: ----acpar@ip6t_do_table [ 434.531678] Variable was created at: [ 434.531678] ip6t_do_table+0xb7/0x2c20 [ 434.531678] ip6table_security_hook+0xb5/0xe0 [ 435.155962] Y­4`Ò˜: renamed from lo [ 435.195990] not chained 120000 origins [ 435.200003] CPU: 0 PID: 11691 Comm: syz-executor1 Not tainted 4.19.0+ #77 [ 435.201613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.201613] Call Trace: [ 435.201613] dump_stack+0x32d/0x480 [ 435.201613] ? save_stack_trace+0xc6/0x110 [ 435.225353] kmsan_internal_chain_origin+0x222/0x240 [ 435.225353] ? tun_fill_info+0x7d9/0xb10 [ 435.225353] ? do_vfs_ioctl+0xf77/0x2d30 [ 435.225353] ? __se_sys_ioctl+0x1da/0x270 [ 435.225353] ? __x64_sys_ioctl+0x4a/0x70 [ 435.225353] ? do_syscall_64+0xcf/0x110 [ 435.225353] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 435.225353] ? kmsan_internal_chain_origin+0x136/0x240 [ 435.225353] ? __msan_chain_origin+0x6d/0xd0 [ 435.225353] ? __save_stack_trace+0x8be/0xc60 [ 435.225353] ? save_stack_trace+0xc6/0x110 [ 435.225353] ? kmsan_internal_chain_origin+0x136/0x240 [ 435.225353] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 435.285014] ? __msan_memcpy+0x6f/0x80 [ 435.285014] ? nla_put+0x20a/0x2d0 [ 435.285014] ? tun_fill_info+0x1a2/0xb10 [ 435.285014] ? rtnl_fill_ifinfo+0x55fd/0x6d80 [ 435.285014] ? rtmsg_ifinfo_build_skb+0x27c/0x410 [ 435.285014] ? rtmsg_ifinfo+0x112/0x260 [ 435.285014] ? register_netdevice+0x25d8/0x26e0 [ 435.285014] ? __tun_chr_ioctl+0x55fc/0x7600 [ 435.285014] ? tun_chr_ioctl+0x9c/0xb0 [ 435.285014] ? do_vfs_ioctl+0xf77/0x2d30 [ 435.285014] ? __se_sys_ioctl+0x1da/0x270 [ 435.285014] ? __x64_sys_ioctl+0x4a/0x70 [ 435.335417] ? do_syscall_64+0xcf/0x110 [ 435.335417] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 435.335417] ? INIT_INT+0xc/0x30 [ 435.335417] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 435.335417] ? __module_address+0x6a/0x610 [ 435.335417] ? get_stack_info+0x863/0x9d0 [ 435.335417] __msan_chain_origin+0x6d/0xd0 [ 435.335417] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 435.335417] __save_stack_trace+0x8be/0xc60 [ 435.335417] ? is_bpf_text_address+0x49e/0x4d0 [ 435.335417] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 435.335417] save_stack_trace+0xc6/0x110 [ 435.388823] kmsan_internal_chain_origin+0x136/0x240 [ 435.388823] ? kmsan_internal_chain_origin+0x136/0x240 [ 435.388823] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 435.388823] ? __msan_memcpy+0x6f/0x80 [ 435.405038] ? nla_put+0x20a/0x2d0 [ 435.405038] ? tun_fill_info+0x701/0xb10 [ 435.405038] ? rtnl_fill_ifinfo+0x55fd/0x6d80 [ 435.405038] ? rtmsg_ifinfo_build_skb+0x27c/0x410 [ 435.405038] ? rtmsg_ifinfo+0x112/0x260 [ 435.405038] ? register_netdevice+0x25d8/0x26e0 [ 435.405038] ? __tun_chr_ioctl+0x55fc/0x7600 [ 435.405038] ? tun_chr_ioctl+0x9c/0xb0 [ 435.405038] ? do_vfs_ioctl+0xf77/0x2d30 [ 435.405038] ? __se_sys_ioctl+0x1da/0x270 [ 435.405038] ? __x64_sys_ioctl+0x4a/0x70 [ 435.405038] ? do_syscall_64+0xcf/0x110 [ 435.405038] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 435.405038] ? kmsan_set_origin+0x83/0x130 [ 435.405038] ? __irqentry_text_end+0x1fa056/0x1fa056 [ 435.405038] ? kmsan_internal_poison_shadow+0x193/0x1e0 [ 435.405038] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 435.405038] ? find_next_bit+0x25b/0x2a0 [ 435.405038] ? vmalloc_to_page+0x585/0x6c0 [ 435.405038] ? kmsan_set_origin+0x83/0x130 [ 435.405038] ? kmsan_internal_unpoison_shadow+0x83/0xe0 [ 435.405038] kmsan_memcpy_origins+0x13d/0x1b0 [ 435.405038] __msan_memcpy+0x6f/0x80 [ 435.405038] nla_put+0x20a/0x2d0 [ 435.405038] tun_fill_info+0x7d9/0xb10 [ 435.405038] ? tun_get_size+0x30/0x30 [ 435.405038] rtnl_fill_ifinfo+0x55fd/0x6d80 [ 435.405038] rtmsg_ifinfo_build_skb+0x27c/0x410 [ 435.405038] rtmsg_ifinfo+0x112/0x260 [ 435.405038] register_netdevice+0x25d8/0x26e0 [ 435.405038] __tun_chr_ioctl+0x55fc/0x7600 [ 435.405038] tun_chr_ioctl+0x9c/0xb0 [ 435.405038] ? tun_chr_poll+0xb80/0xb80 [ 435.405038] do_vfs_ioctl+0xf77/0x2d30 [ 435.405038] ? security_file_ioctl+0x92/0x200 [ 435.405038] __se_sys_ioctl+0x1da/0x270 [ 435.405038] __x64_sys_ioctl+0x4a/0x70 [ 435.405038] do_syscall_64+0xcf/0x110 [ 435.405038] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 435.405038] RIP: 0033:0x457569 [ 435.405038] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 435.405038] RSP: 002b:00007f29d1075c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.405038] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 435.405038] RDX: 0000000020000080 RSI: 00000000400454ca RDI: 0000000000000007 [ 435.405038] RBP: 000000000072c220 R08: 0000000000000000 R09: 0000000000000000 [ 435.405038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29d10766d4 [ 435.405038] R13: 00000000004c1309 R14: 00000000004d2140 R15: 00000000ffffffff [ 435.405038] Uninit was stored to memory at: [ 435.405038] kmsan_internal_chain_origin+0x136/0x240 [ 435.405038] __msan_chain_origin+0x6d/0xd0 [ 435.405038] __save_stack_trace+0x8be/0xc60 [ 435.405038] save_stack_trace+0xc6/0x110 [ 435.405038] kmsan_internal_chain_origin+0x136/0x240 [ 435.405038] kmsan_memcpy_origins+0x13d/0x1b0 [ 435.405038] __msan_memcpy+0x6f/0x80 [ 435.405038] nla_put+0x20a/0x2d0 [ 435.405038] tun_fill_info+0x1a2/0xb10 [ 435.405038] rtnl_fill_ifinfo+0x55fd/0x6d80 [ 435.405038] rtmsg_ifinfo_build_skb+0x27c/0x410 [ 435.405038] rtmsg_ifinfo+0x112/0x260 [ 435.405038] register_netdevice+0x25d8/0x26e0 [ 435.405038] __tun_chr_ioctl+0x55fc/0x7600 [ 435.405038] tun_chr_ioctl+0x9c/0xb0 [ 435.405038] do_vfs_ioctl+0xf77/0x2d30 [ 435.405038] __se_sys_ioctl+0x1da/0x270 [ 435.405038] __x64_sys_ioctl+0x4a/0x70 [ 435.405038] do_syscall_64+0xcf/0x110 [ 435.405038] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 435.405038] [ 435.405038] Uninit was stored to memory at: [ 435.405038] kmsan_internal_chain_origin+0x136/0x240 [ 435.405038] __msan_chain_origin+0x6d/0xd0 [ 435.405038] __save_stack_trace+0x8be/0xc60 [ 435.405038] save_stack_trace+0xc6/0x110 [ 435.405038] kmsan_internal_chain_origin+0x136/0x240 [ 435.405038] kmsan_memcpy_origins+0x13d/0x1b0 [ 435.405038] __msan_memcpy+0x6f/0x80 [ 435.405038] nla_put+0x20a/0x2d0 [ 435.405038] tun_fill_info+0x1a2/0xb10 [ 435.405038] rtnl_fill_ifinfo+0x55fd/0x6d80 [ 435.405038] rtmsg_ifinfo_build_skb+0x27c/0x410 [ 435.405038] rtmsg_ifinfo+0x112/0x260 [ 435.405038] register_netdevice+0x25d8/0x26e0 [ 435.405038] __tun_chr_ioctl+0x55fc/0x7600 [ 435.405038] tun_chr_ioctl+0x9c/0xb0 [ 435.405038] do_vfs_ioctl+0xf77/0x2d30 [ 435.405038] __se_sys_ioctl+0x1da/0x270 [ 435.405038] __x64_sys_ioctl+0x4a/0x70 [ 435.405038] do_syscall_64+0xcf/0x110 [ 435.405038] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 435.405038] [ 435.405038] Uninit was stored to memory at: [ 435.405038] kmsan_internal_chain_origin+0x136/0x240 [ 435.405038] __msan_chain_origin+0x6d/0xd0 [ 435.405038] __save_stack_trace+0x8be/0xc60 [ 435.405038] save_stack_trace+0xc6/0x110 [ 435.405038] kmsan_internal_chain_origin+0x136/0x240 [ 435.405038] kmsan_memcpy_origins+0x13d/0x1b0 [ 435.405038] __msan_memcpy+0x6f/0x80 [ 435.405038] nla_put+0x20a/0x2d0 [ 435.405038] tun_fill_info+0x1a2/0xb10 [ 435.405038] rtnl_fill_ifinfo+0x55fd/0x6d80 [ 435.405038] rtmsg_ifinfo_build_skb+0x27c/0x410 [ 435.405038] rtmsg_ifinfo+0x112/0x260 [ 435.405038] register_netdevice+0x25d8/0x26e0 [ 435.405038] __tun_chr_ioctl+0x55fc/0x7600 [ 435.405038] tun_chr_ioctl+0x9c/0xb0 [ 435.405038] do_vfs_ioctl+0xf77/0x2d30 [ 435.405038] __se_sys_ioctl+0x1da/0x270 [ 435.405038] __x64_sys_ioctl+0x4a/0x70 [ 435.405038] do_syscall_64+0xcf/0x110 [ 435.405038] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 435.405038] [ 435.405038] Uninit was stored to memory at: [ 435.405038] kmsan_internal_chain_origin+0x136/0x240 [ 435.405038] __msan_chain_origin+0x6d/0xd0 [ 435.405038] __save_stack_trace+0x8be/0xc60 [ 435.405038] save_stack_trace+0xc6/0x110 [ 435.405038] kmsan_internal_chain_origin+0x136/0x240 [ 435.405038] kmsan_memcpy_origins+0x13d/0x1b0 [ 435.405038] __msan_memcpy+0x6f/0x80 [ 435.405038] nla_put+0x20a/0x2d0 [ 435.405038] tun_fill_info+0x1a2/0xb10 [ 435.405038] rtnl_fill_ifinfo+0x55fd/0x6d80 [ 435.405038] rtmsg_ifinfo_build_skb+0x27c/0x410 [ 435.405038] rtmsg_ifinfo+0x112/0x260 [ 435.405038] register_netdevice+0x25d8/0x26e0 [ 435.405038] __tun_chr_ioctl+0x55fc/0x7600 [ 435.405038] tun_chr_ioctl+0x9c/0xb0 [ 435.405038] do_vfs_ioctl+0xf77/0x2d30 [ 435.405038] __se_sys_ioctl+0x1da/0x270 [ 435.405038] __x64_sys_ioctl+0x4a/0x70 [ 435.405038] do_syscall_64+0xcf/0x110 [ 435.405038] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 435.405038] [ 435.405038] Uninit was stored to memory at: [ 435.405038] kmsan_internal_chain_origin+0x136/0x240 [ 435.405038] __msan_chain_origin+0x6d/0xd0 [ 435.405038] __save_stack_trace+0x8be/0xc60 [ 435.405038] save_stack_trace+0xc6/0x110 [ 435.405038] kmsan_internal_chain_origin+0x136/0x240 [ 435.405038] kmsan_memcpy_origins+0x13d/0x1b0 [ 435.405038] __msan_memcpy+0x6f/0x80 [ 435.405038] nla_put+0x20a/0x2d0 [ 435.405038] tun_fill_info+0x1a2/0xb10 [ 435.405038] rtnl_fill_ifinfo+0x55fd/0x6d80 [ 435.405038] rtmsg_ifinfo_build_skb+0x27c/0x410 [ 435.405038] rtmsg_ifinfo+0x112/0x260 [ 435.405038] register_netdevice+0x25d8/0x26e0 [ 435.405038] __tun_chr_ioctl+0x55fc/0x7600 [ 435.405038] tun_chr_ioctl+0x9c/0xb0 [ 435.405038] do_vfs_ioctl+0xf77/0x2d30 [ 435.405038] __se_sys_ioctl+0x1da/0x270 [ 435.405038] __x64_sys_ioctl+0x4a/0x70 [ 435.405038] do_syscall_64+0xcf/0x110 [ 435.405038] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 435.405038] [ 435.405038] Uninit was stored to memory at: [ 435.405038] kmsan_internal_chain_origin+0x136/0x240 [ 435.405038] __msan_chain_origin+0x6d/0xd0 [ 435.405038] __save_stack_trace+0x8be/0xc60 [ 435.405038] save_stack_trace+0xc6/0x110 [ 435.405038] kmsan_internal_chain_origin+0x136/0x240 [ 435.405038] kmsan_memcpy_origins+0x13d/0x1b0 [ 435.405038] __msan_memcpy+0x6f/0x80 [ 435.405038] nla_put+0x20a/0x2d0 [ 435.405038] tun_fill_info+0x1a2/0xb10 [ 435.405038] rtnl_fill_ifinfo+0x55fd/0x6d80 [ 435.405038] rtmsg_ifinfo_build_skb+0x27c/0x410 [ 435.405038] rtmsg_ifinfo+0x112/0x260 [ 435.405038] register_netdevice+0x25d8/0x26e0 [ 435.405038] __tun_chr_ioctl+0x55fc/0x7600 [ 435.405038] tun_chr_ioctl+0x9c/0xb0 [ 435.405038] do_vfs_ioctl+0xf77/0x2d30 [ 435.405038] __se_sys_ioctl+0x1da/0x270 [ 435.405038] __x64_sys_ioctl+0x4a/0x70 [ 435.405038] do_syscall_64+0xcf/0x110 [ 435.405038] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 435.405038] [ 435.405038] Uninit was stored to memory at: [ 435.405038] kmsan_internal_chain_origin+0x136/0x240 [ 435.405038] __msan_chain_origin+0x6d/0xd0 [ 435.405038] __save_stack_trace+0x8be/0xc60 [ 435.405038] save_stack_trace+0xc6/0x110 [ 435.405038] kmsan_internal_chain_origin+0x136/0x240 [ 435.405038] kmsan_memcpy_origins+0x13d/0x1b0 [ 435.405038] __msan_memcpy+0x6f/0x80 [ 435.405038] nla_put+0x20a/0x2d0 [ 435.405038] tun_fill_info+0x1a2/0xb10 [ 435.405038] rtnl_fill_ifinfo+0x55fd/0x6d80 [ 435.405038] rtmsg_ifinfo_build_skb+0x27c/0x410 [ 435.405038] rtmsg_ifinfo+0x112/0x260 [ 435.405038] register_netdevice+0x25d8/0x26e0 [ 435.405038] __tun_chr_ioctl+0x55fc/0x7600 00:22:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)) 00:22:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x3, 0x11) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000280), 0xcc) sendmsg(r1, &(0x7f0000000080)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000002880), 0x0, &(0x7f0000002940)}, 0x0) 00:22:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:22:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x2, 0x0, [0xc0010000, 0xfe, 0x40000106]}) 00:22:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) [ 435.405038] tun_chr_ioctl+0x9c/0xb0 [ 435.405038] do_vfs_ioctl+0xf77/0x2d30 [ 435.405038] __se_sys_ioctl+0x1da/0x270 [ 435.405038] __x64_sys_ioctl+0x4a/0x70 [ 435.405038] do_syscall_64+0xcf/0x110 [ 435.405038] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 435.405038] [ 435.405038] Local variable description: ----wait.i@drop_sysctl_table [ 435.405038] Variable was created at: [ 435.405038] drop_sysctl_table+0xcf/0x1110 [ 435.405038] __register_sysctl_table+0x27e1/0x28e0 00:22:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f00000002c0)) 00:22:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:22:01 executing program 3: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000180)) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x440) creat(&(0x7f00000000c0)='./file0\x00', 0x0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) 00:22:01 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = dup2(r0, r0) connect$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="84212a55612a"}, 0x14) 00:22:01 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) ioctl$int_out(r0, 0x8000451b, &(0x7f00000000c0)) 00:22:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000000000000d0000400500000005000000000100000000004000000000010000000000000025000000ffffffff00040000000000000a00000006f89a0c18e0137ed247a35bfe"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x38f}]}) 00:22:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aea5, &(0x7f00000002c0)) 00:22:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 00:22:02 executing program 3: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000040)={0x0, 0xbf8d, 0x0, 0x0, 0x3, 0x9, 0x2ba, 0x7}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f00000002c0)={0x0, 0x2, 0xdbbc}) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000340), &(0x7f0000000300)=0xfffffffffffffe73) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000003c0)={0x60, 0x0, 0x4, {{0x0, 0x5, 0x100000000, 0xb6c, 0x0, 0x3, 0x3, 0x8}}}, 0x60) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00') socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x43, 0x0) ftruncate(0xffffffffffffffff, 0x5) getpid() setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000480), 0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x10000}, 0x8) dup2(r0, r1) 00:22:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) keyctl$join(0x17, &(0x7f0000000000)={'syz'}) 00:22:02 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000013c0)=""/4096, 0xb003}], 0x1, &(0x7f0000000100)=""/123, 0x7b}, 0x0) 00:22:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x31) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x1c) 00:22:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") connect$bt_rfcomm(r0, &(0x7f0000000580)={0x1f, {0xf8f, 0x0, 0x7, 0x5, 0x0, 0x5}, 0x8001}, 0xa) socket$inet_sctp(0x2, 0x5, 0x84) fsetxattr(r0, &(0x7f0000000880)=@random={'security.', '\x00'}, &(0x7f0000000840)='\x00', 0x1, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000140)={0x400, 0xf13, 0x6}) r1 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x4000000000002, 0x3) openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0xa296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x401, 0x300) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000067b278ccf0b7caa23e3800000082000040000000000200000000000000cff597a56556d42688aa259cf6604ec2c5f112b145d42a57d14db302fae5cea607c1b17e4fb6b96343975e94eba6e1863a9f25ddb1d7c44dc4818fb9f439ebb4f0a1a17c30408542c1703229d6c9237a8ac784470000733738714d6b524507528cb835318bb5641eda598b00ef62f9b5f11baa548334ad73905a3a832b4b259aeee37bb10ba877dedc448532266dafe4"]) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 00:22:02 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)) fstat(r0, &(0x7f0000000240)) 00:22:02 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@mcast2}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@mcast1, @in=@rand_addr}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000000700)=0xe8) rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000180)={0x0, r0+10000000}, 0x8) r1 = getpid() r2 = socket(0x10, 0x802, 0x0) fstat(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r3) rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100)) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000200), 0x0) 00:22:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNATTACHFILTER(r0, 0x400454cd, &(0x7f0000000180)={0x0, &(0x7f0000000240)}) 00:22:03 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.eventw\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x8}) write$cgroup_int(r0, &(0x7f00000000c0), 0xfffffcee) pwritev(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000280)="a2", 0x1}], 0x1, 0x0) 00:22:03 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0) 00:22:03 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x63, 0x25}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 00:22:03 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@broadcast, @in6=@mcast2}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xfffffffffffffdb0) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ftruncate(r1, 0x0) 00:22:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000000)=0x76, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='yeah\x00', 0x5) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r1, 0x1) 00:22:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) io_getevents(0x0, 0x3, 0x4, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20}, 0x20) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r1, 0x7d8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 00:22:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0), 0x8) getpid() preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mountinfo\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000156, 0x0) 00:22:03 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0) 00:22:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) bpf$MAP_CREATE(0x0, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x6, 0x5, &(0x7f0000006000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000008000)=""/4096}, 0x48) 00:22:04 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x800, 0x100000000, 0x0, 0x80000000, 0x0, 0x0, 0x20, 0x1, 0xda, 0xe3, 0x0, 0x200, 0x7, 0x0, 0x20, 0x5, 0x3ff, 0x8001, 0x3f, 0x1, 0x0, 0x8, 0x7, 0xfffffffffffffff9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2806370f, 0x4, 0x51, 0x10001, 0x6, 0x0, 0x1, 0x2, @perf_config_ext={0x2, 0xd6}, 0x0, 0x40, 0x10000, 0x0, 0x6, 0x7, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x3) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x8401, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280), 0x111, 0x1009}}, 0x1000002c1) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0x0, 0x8, {0x1000}}, 0x18) close(r0) semget(0x3, 0x3, 0x0) r1 = gettid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) semget(0x2, 0x2, 0x608) socket$inet_udp(0x2, 0x2, 0x0) rt_tgsigqueueinfo(r1, r2, 0x2, &(0x7f00000001c0)={0x27, 0xec33, 0x3ff, 0x6}) semget(0x1, 0x2, 0x701) 00:22:04 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0) 00:22:04 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000fe5fee)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000057fa0)=[{{}, 0x0, 0x100000001}, {}], 0x30) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000ffcffc)=0x7) 00:22:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='E'], 0x1) recvfrom(r1, &(0x7f0000000180)=""/184, 0xb8, 0x0, 0x0, 0x0) 00:22:04 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002440)) 00:22:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40181, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000080)=""/204) 00:22:04 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0) 00:22:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x2) mincore(&(0x7f0000601000/0x600000)=nil, 0x600000, &(0x7f0000000080)=""/144) 00:22:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f00000004c0)='.\x00', 0x0, 0x0) add_key(&(0x7f0000000580)='asymmetric\x00', &(0x7f00000005c0), &(0x7f0000000600)="a3", 0x1, 0xfffffffffffffffe) 00:22:05 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x80) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x5, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'bridge_slave_0\x00'}, 0x18) r2 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x80080010002, 0x549080) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000004c0)=0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x14c52775d1151cf4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000340)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x6, 0x24, 0x2, 0x3}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000240)={{0x3f, @remote, 0x4e20, 0x4, 'fo\x00', 0x23, 0x5, 0x4f}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x4e20, 0x0, 0x2, 0x4, 0x20}}, 0x44) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[{0x7}], 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) mbind(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000), 0x0, 0x2) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="b702000008000000bfa3000000000000070300000004000000000000f8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fefffffffa8500000020000000b7000000000000009500000000000000f3d071b53eca44dc2d65fb51edd78071"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0xe, 0xd7, &(0x7f0000000080)="3c08000000800000637c380324dd", &(0x7f0000000480)=""/215}, 0x28) 00:22:05 executing program 4: r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000100)) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) [ 440.309694] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 00:22:05 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='comm\x00') write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2) 00:22:05 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x218000, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000140)={0x7, 0x400000000000000, 0x7, 0x0, 0x2, 0x7f}) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x800) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x5) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) munlockall() 00:22:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e63707500609fb8ab74b0f30ef7048e470929889a2605dc92ffa1937e27b84b5d3511d2e95cccfd6656e1e43257e640083198770e5dab3441b5", 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x0, @dev={[], 0x16}}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0xfffffffffffffffd}, 0xa0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x7) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040), 0x10) 00:22:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xfffffffffffffd6d) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0x16}, 0x59, r1}) setsockopt$inet6_int(r0, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x28c, 0x3ef, 0x200000000000002, 0x30c, 0x0, 0x0, 0xe003, 0x33c, 0x0, 0x0, 0x3603, 0x252, 0x8]}, 0x75, r2}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x101002, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x1f, 0x0, 0x100000000, 0x1c0270, r2}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000006c0)=ANY=[@ANYBLOB="210000004dc3bff6a3d819d4caffffff7f27b369c0cc545640afff9af97288ee0bb983881a4d5271b477752b2332869f8df76ac8a5cffba513d97cc2d108efcf86a162af492933a098526f"], &(0x7f0000000880)=0x1) rename(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x2e75, 0x815}, 0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={@remote, @ipv4={[], [], @loopback}, @mcast2, 0x12c, 0x8, 0x3, 0x400, 0x4, 0x20, r1}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockname(r4, &(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000600)=0x80) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\b\x00'], &(0x7f00000005c0)=0x1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x509000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000480)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = inotify_init1(0x0) r7 = dup2(r6, r6) fcntl$getownex(r7, 0x10, &(0x7f0000000240)) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) mq_open(&(0x7f0000000000)="2e1f05", 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400080, 0x0) getresgid(&(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000280)) 00:22:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="ba4300b00bee0f017edaf02114650f1ea7f07f0f20e06635040000000f22e03e0fc72dbaf80c66b80fb2578d66efbafc0cb001ee0fc75ba2f40f3805800060", 0x3f}], 0x1, 0x0, &(0x7f0000000140), 0x358) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x7ffd}) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)=""/35, &(0x7f00000000c0)=0x23) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x7}, &(0x7f0000000200)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:22:05 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fallocate(r3, 0x20, 0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) dup2(r1, r2) 00:22:06 executing program 0: r0 = socket(0x11, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001680)={@local}, &(0x7f00000016c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001780)={{{@in=@dev, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000001880)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000003400), &(0x7f0000003440)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000003740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003780)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f00000037c0)={@multicast1, @multicast1}, &(0x7f0000003800)=0xc) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), 0xffffffffffffffff, 0xc00}}, 0x457d10) close(r1) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffb) 00:22:06 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) splice(r0, &(0x7f0000000180), 0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0) ppoll(&(0x7f0000000280)=[{}], 0x20000000000000ec, &(0x7f0000000200)={0x0, r1+30000000}, &(0x7f0000000240), 0x8) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/111, 0x6f) 00:22:06 executing program 3: 00:22:06 executing program 0: r0 = socket(0x11, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001680)={@local}, &(0x7f00000016c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001780)={{{@in=@dev, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000001880)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000003400), &(0x7f0000003440)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000003740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003780)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f00000037c0)={@multicast1, @multicast1}, &(0x7f0000003800)=0xc) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), 0xffffffffffffffff, 0xc00}}, 0x457d10) close(r1) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffffb) 00:22:07 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)) 00:22:07 executing program 5: mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000527ff8), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0xc00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000040)="e170b805000000b9b9f400000f01c166420faebb0b00000066b865000f00d86566430f38827a110f215c440f01f8c4a151dcc2f3acc4a2a1a71c15fbffffff", 0x3f}], 0x1, 0x0, &(0x7f0000000340), 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0xd, 0x1000, &(0x7f0000000180)="e171f91b54f80195f526bae782", &(0x7f0000001b80)=""/4096}, 0x28) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x2, 0x49}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x4028700f, &(0x7f0000000040)) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000bc8000)={0xaa, 0xfffffffffffffffd}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000240)=""/33) write$sndseq(r4, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) vmsplice(r4, &(0x7f00004b5fc0)=[{&(0x7f000072f000)}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x0) dup2(r3, r5) syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') syz_open_dev$amidi(&(0x7f0000001280)='/dev/amidi#\x00', 0x101, 0x2) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000280)={0x3e, @multicast1, 0x4e23, 0x3, 'sh\x00', 0x1, 0x179a, 0x38}, 0x2c) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) sync() ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40086607, 0x400023) 00:22:07 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x0) io_setup(0x5b3, &(0x7f00000001c0)=0x0) io_submit(r1, 0x2000000000000246, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x0, 0x0, r0, &(0x7f0000000000), 0xfffffce4}]) 00:22:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="9a003000008100c4e17c53aa155b0000b8b1dc00000f23c80f21f835080090000f23f8c4c255920436b8010000000f01d9b9550300000f32c4c1dc5471380f01ca660f28aa2100000066b89d000f00d8", 0x50}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003200)={0x1, 0x0, 0xfffffffffffffef3, {0x0, 0x6000, 0x80ffff}, [], "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", "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"}) 00:22:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000002fe8)=[{0x35, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) 00:22:07 executing program 4: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e23}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000140)='0', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) sendto$inet6(r1, &(0x7f00000000c0)='E', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)={'syz1'}, 0x34000) 00:22:07 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0xc0189436, 0x7fdfffffeffb) 00:22:08 executing program 0: sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x10001) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'erspan0\x00', 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='erspan0\x00', 0x10) sendto$inet(r1, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'erspan0\x00'}) 00:22:08 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000280)=""/97, &(0x7f0000000040)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000400)=""/185}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000680)=""/55, &(0x7f0000000800)=""/71, &(0x7f00000004c0)=""/103}) 00:22:08 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x100000001, 0x0, 0x0, 'queue1\x00', 0x8}) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000280)={'HL\x00'}, &(0x7f00000002c0)=0x1e) gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000044000)) clock_getres(0x0, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, &(0x7f0000040000)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f0000002000)) fcntl$lock(r2, 0x7, &(0x7f0000010000)) sendmsg$key(0xffffffffffffffff, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x3, 0x12, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x20, 0x4}, @sadb_sa={0x2}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e24, 0x80000000, @empty, 0x770d}, @in={0x2, 0x4e20, @broadcast}}]}, 0x90}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000240)=0x4) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xc0109207, 0x20000000) accept$inet(r1, 0x0, &(0x7f0000000040)) 00:22:08 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000280)=0xffff) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000100)) r0 = semget(0xffffffffffffffff, 0x0, 0x1c0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/97) socket(0x0, 0x5, 0x0) 00:22:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) get_mempolicy(&(0x7f0000000e80), &(0x7f0000000ec0), 0x4a, &(0x7f0000ffe000/0x2000)=nil, 0x6) 00:22:08 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = syz_open_pts(0xffffffffffffffff, 0x2) dup3(r0, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r1, 0x9) ptrace$setregset(0x4205, r2, 0x2, &(0x7f0000000140)={&(0x7f0000000100)="a3d831f20f", 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000080)={0x8, 0x2, {0x0, 0x3, 0x0, 0x0, 0x3}}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x2012, r3, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xe78, 0x0) 00:22:08 executing program 4: syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x20000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10, 0x3}, 0xc, &(0x7f00007a8000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000301ffff00000000e500000000000000"], 0x14}}, 0x0) 00:22:09 executing program 3: setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025f2ef2277"], 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000300)=""/166, &(0x7f0000000140)=0x10) 00:22:09 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1000101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x600210) poll(&(0x7f0000000100)=[{r0, 0x1}], 0x1, 0xfffffffffffffff8) pwritev(r0, &(0x7f0000161000)=[{&(0x7f0000000040)="f5", 0x1}], 0x1, 0x0) 00:22:09 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in=@multicast1}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f0000000040)=0xe8) setreuid(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x24}, 0x2) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/loop-control\x00', 0x80404, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x8001, 0x40800) io_setup(0xfffffffffffffffd, &(0x7f0000000440)=0x0) io_destroy(r2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x800, 0x20}, &(0x7f0000000280)=0xc) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000340)=""/129) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000002c0)={r3, 0x36c}, &(0x7f0000000300)=0x8) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) socket$xdp(0x2c, 0x3, 0x0) 00:22:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) mprotect(&(0x7f00002dd000/0x3000)=nil, 0x3000, 0xfffffffffffffffe) 00:22:09 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x66, 0x6, 0x0, {0x0, 0x0, 0x3d, 0x0, "706f7369785f61636c5f6163636573732a656d307573657274727573746564282fee76626f786e6574316d696d655f74797065766d6e65743047504c26"}}, 0x66) 00:22:10 executing program 0: mq_open(&(0x7f0000000a00)='lo.\x00', 0x0, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x1000000000000116) r1 = socket$inet6(0xa, 0x100000002, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r0, 0x2) dup3(r3, r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) 00:22:10 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) semtimedop(0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)={0x0, 0x989680}) 00:22:10 executing program 4: r0 = socket$inet6(0xa, 0x100000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) getsockopt$inet_mtu(r1, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:11 executing program 2: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='security.evm\x00', &(0x7f0000000340)=@v2={0x3}, 0xa, 0x0) 00:22:11 executing program 3: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x0, 0xfffffffffffffff7}, 0x10) sendmsg$netlink(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000847000), 0x0, &(0x7f000048a000)}, 0x0) sendmmsg$alg(r1, &(0x7f0000004ac0)=[{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)='\a', 0x1}], 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 00:22:11 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x8, &(0x7f0000000040), &(0x7f00000004c0)=0x340d) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) 00:22:11 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x2c) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0xe, 0x4) write(r0, &(0x7f00000000c0), 0xfec9) 00:22:11 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/userio\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7fff, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0), 0xfffffffffffffe78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a40)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000002980)=0xe8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000280)={'rose0\x00', {0x2, 0x4e20, @rand_addr=0xffffffffffffff84}}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x4, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0, 0x2000000000}}, 0xe) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000240), 0x0, {0xa, 0x0, 0x0, @remote, 0x401}, r3}}, 0x38) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000c80)) ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000140)={0x2, &(0x7f0000000a80)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @local}]}) r4 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000000)={0x3, 0x400}) 00:22:11 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x1) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2002000011, r0, 0x100000000) 00:22:11 executing program 1: r0 = memfd_create(&(0x7f0000000440)='bdev}trustedself}.\x00', 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 00:22:11 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x3, 0x0, @ipv4}, 0x1c) listen(r0, 0x43) r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r1, &(0x7f0000000100)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b20000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7}]}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='m'], 0x1) sendmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00007ed000)=[{&(0x7f0000000140)='u', 0x1}], 0x1, &(0x7f00000002c0)}}], 0x1, 0x0) r2 = accept(r0, 0x0, &(0x7f0000000000)) sendmsg$rds(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/157, 0x9d}], 0x1, &(0x7f0000000740)}, 0x0) 00:22:11 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x81785501, &(0x7f0000001000)) 00:22:11 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0x3, &(0x7f0000000080)) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchown(r0, 0x0, 0x0) 00:22:11 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e24, @local}], 0x10) 00:22:12 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f00000001c0)) 00:22:12 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @multicast1}, {0x2, 0x0, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x10000, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) request_key(&(0x7f0000000400)='id_legacy\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)='/dev/vhci\x00', 0xfffffffffffffff9) 00:22:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x20000000010001) [ 447.282744] binder_alloc: binder_alloc_mmap_handler: 12097 20000000-20002000 already mapped failed -16 00:22:12 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='vboxnet1)/trustedcpuset\x00') close(r0) socket$kcm(0x2, 0x8000000003, 0x2) socketpair(0xf, 0x80007, 0x1, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x89a0, &(0x7f0000000040)=0x4b) 00:22:12 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) write$cgroup_int(r1, &(0x7f0000000440), 0xf455) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000200)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c00") socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000140)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0xe5, &(0x7f0000000040)={0x0, 0x0}}, 0xfffffffffffffe88) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x2) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2, 0x8, 0x8}, 0xffffffd5) r3 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x50, &(0x7f0000000500)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={r3, r0, 0x0, 0x2, &(0x7f0000000380)='$\x00', r4}, 0x30) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x7}, 0xc) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0x7ff, 0x0, 0x5, 0x0, 0x0, 0x200, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000000, 0x0, 0x3f, 0x7, 0x0, 0x7, 0x45f3036e, 0x5, 0x0, 0x0, 0x463, 0x4660fe0a, 0x4, 0x6, 0x0, 0x3f, 0x0, 0x87, 0x1, 0x7, 0x7, 0x3cc, 0x3, 0x62a5, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x0, 0x4d8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000480)={0x0, 0x70, 0xda3, 0x800000000, 0xd58d, 0x4ddf, 0x0, 0x6, 0x1000, 0x0, 0x98f5, 0x1ff, 0x8000, 0x7, 0x2, 0x5ff0, 0x1f, 0x2, 0xff, 0x0, 0x4b8, 0x5, 0xaab, 0x3, 0x7, 0x6, 0x1, 0xfffffffffffffffc, 0x9b74, 0xfffffffffffffffb, 0x8001, 0xb789, 0x305b, 0x3f1, 0x400, 0x6, 0x5, 0xffffffffffffff80, 0x0, 0x6, 0x0, @perf_config_ext={0x9, 0x4}, 0x400, 0xe58a, 0x6a9, 0x2, 0x9, 0x101, 0x40}, r1, 0xc, 0xffffffffffffff9c, 0xc) socketpair(0x10013, 0x80000, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)="c9a03e09b090cccdbabcb1b9e11addc2f4f21fecd390aee61ccc5733c61956daa9f4663b08b55861b80591d89d519ae806a1ba4ff52d757b45bd8c3a78670cdb65dd4a81a2c81f3b4a8b8d9280e33d968484c12b2a001107b7fa8560362196a26458f1a1d0961cd83e42cb1bb644132a127b4c31cee0abc72017cd70ee070d2799d1ab3976310b2a0426238bfffe", 0x8e}], 0x1, &(0x7f0000000980)}, 0x45) socketpair(0x1, 0x2, 0x3, &(0x7f00000005c0)) 00:22:12 executing program 5: sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) getpgid(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="290000000600000000000000000000000400000000000000030000000000000000000000000000000069127fbcdab56d0f1f4cb25800000000000021b0c9e06ea050325f77726e71bff4c99eef500ade32c424020f322903f5bad93a0c2f1e19cc826b23ce090bcf125dccadf0ffe7f2e16407a9b1619554de"], 0x79) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000800)='./file0//ile0\x00', &(0x7f0000000200)='cgrQup2\x00', 0x2, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000640)={0xb0b, 0x1}) ioctl$TIOCNXCL(r0, 0x540d) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000240)=0xa63, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x252, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000a80)=ANY=[@ANYBLOB="9100000000000000000092c1daa92de41a369a3fd0e665789e9e92d6fc23a7fc8343b1e0c0572f9f6368b66d1484bb70af81a871d123adf600bf86d5d264480316a80198c170f18885a3fcbdf4e8bf201e9e972c66a2c28de631d53c8e283d87c81cafc70ceeec09798edfa56c8c61ef4ecc59497cadef102f3727e36cc95fafdf2bb6770c9280e1ad658b2e16ab417bf7050000009499f4949fd6d49a6663b9dd96f730037d9d42df30578237b98fbe9330a572c48d78f7b4b896bd615b178043e2649be356e8afeb656c8be83264ebeaefb4873ef8d008f61129213f796d69216f5145bc894b814e3a31faf55592d66e932a1388cdae1f4621a1202b36f6e989b634449faa36828dff4e134efd35087383fcac67564d13be2d108025ca74184c0e3d4e6480db773e4a6a2f15f1ce89a30000003432709335a4a3ac5659543298ff3c165ad878af8c3f7d5eae94379a2df63cb10bf30bcf8fc65515f8b50b67a28f993f3552814cc1627fc3ee94bdc1a28bbe99786882b679b4bb757c67861ee43815d0511dbebb630aef3679a388e7aaf443f5107e247f6b423cfbf060377c0a95a40422189479a474e919be42b377c4def009f3f3c07e675d1a292d4ca53ebe919633d9fbe8b2409286304dc25e019228f6faf5c38551af87ed22ebea16f1125c45551a8c5fec4a73e8a57e853675c98078992bc12321e647962e"], &(0x7f0000000100)=0x1) r2 = memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x1) syz_open_dev$usbmon(&(0x7f0000000840)='/dev/usbmon#\x00', 0xfb, 0x400880) openat$cgroup_int(r0, &(0x7f00000005c0)='cpuset.mems\x00', 0x2, 0x0) sendmsg(r2, &(0x7f0000000dc0)={&(0x7f00000004c0)=@pppoe={0x18, 0x0, {0x3, @local, 'yam0\x00'}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)="f24aa4ece1a1c2deaa4e35ab241a7c0d9f9a53bed0ee3ff5dfbf23479f3e6c62ee7185234edb5124290be13fde222b4902a1818088a36eca73aaf80ac8daf8e72628d46ccaba5e354b4bd04a2e4687f454b1f84978a48fa21038587053d2e7845402592f86d0b67ff709b7611384d3b0dfc9ef98d2c81d93c3084fdcbb52b6512af881105ef1caabfb45e18b05996a1281a57708430e746e030e64e112a5f8", 0x9f}], 0x1, &(0x7f0000000e00)=ANY=[]}, 0x80) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) memfd_create(&(0x7f0000000380)="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", 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x39044, 0x2000005) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000002400)=""/142, 0x8e}], 0x1) 00:22:12 executing program 4: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = syz_open_procfs(0x0, &(0x7f0000000780)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$KVM_IOEVENTFD(r1, 0x40286608, &(0x7f0000000000)={0x10, &(0x7f00000000c0)}) 00:22:12 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70}, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000040)) 00:22:12 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/176, &(0x7f00000000c0)=0xb0) 00:22:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) 00:22:13 executing program 4: r0 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000240), 0x762) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000140)=@nl=@unspec={0x0, 0x0, 0x3000000, 0x80fe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001680)="235db863768606681d012f629c75adfa4208d51e67688d024aface6a6ac7d846ed2fa163e15ffb509de80565b82752e0fffeffc0d4f83047fda99590d719ccb4f47bcd84c8f41a85a8446446bb4178740a8bd45ff8a106da98c21372", 0x5c}], 0x1}, 0x0) 00:22:13 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x4, &(0x7f0000000080)={0x0, 'ip_vti0\x00'}, 0x3) close(r2) dup3(r0, r1, 0x0) 00:22:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000740)=ANY=[], &(0x7f0000000880)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f00000001c0)=0x10) 00:22:13 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x1000000000000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000a00c6ff07d800400300000000000000000000", 0x23}], 0x1, &(0x7f0000000a00)}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) 00:22:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4, 0x215f, 0x0, 0x1}, 0x2c) 00:22:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:22:13 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcff9671a5cf54ab025", 0x24) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000001480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) dup2(r1, r0) socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000140), &(0x7f0000000180)=0x8) 00:22:13 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f0000000740)='./file0\x00', &(0x7f0000000600)="636f6e66696766730037e82ddddb56c8e8af684688da299c03164426a200762309d96fef70f6acf8866ec52bff633d9df165466b6899031f2b3e0172c91ab170b214b63734e2f0db06f62d1822dd4d1d1cd58fa4a864aebc84e223c3c3c2ec002efdb1c53e7d13fa48faf3fa4a0da5d61674ef32466b", 0x0, &(0x7f0000000680)) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 00:22:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_REMOTE={0x8, 0x14, @dev}]}}}]}, 0x38}}, 0x0) 00:22:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 00:22:14 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x230000, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000000c0)=""/78) getgroups(0x3, &(0x7f0000000040)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff]) setfsgid(r1) 00:22:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) connect$can_bcm(0xffffffffffffffff, &(0x7f0000002ff0), 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000080), 0x4) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000001a80)=@nfc_llcp, 0x80, &(0x7f00000020c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, &(0x7f00000010c0)=""/164, 0xa4}}, {{&(0x7f0000002240)=@can, 0x80, &(0x7f0000002580), 0x0, &(0x7f0000001180)=""/246, 0xf6}}], 0x2ba, 0x40000002, 0x0) sendto$inet(r0, &(0x7f0000c95ffd), 0x49b8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) close(0xffffffffffffffff) 00:22:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x7}) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x4231d52d, 0x0) dup2(r1, r0) 00:22:14 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x5eb856) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x80, 0x800) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 00:22:14 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x36fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0xb, &(0x7f0000000080), 0x4) sendmsg$kcm(r2, &(0x7f0000001d40)={&(0x7f0000000740)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001bc0)="01", 0x1}], 0x1, &(0x7f0000001c80)}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x541b, 0x70d000) 00:22:14 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000eff0)=[{&(0x7f0000010000)="240000001900030007ff0907000083be8020000000040005031d85680300a3a2d188737e", 0x24}], 0x1}, 0x0) [ 449.614930] input: syz1 as /devices/virtual/input/input20 00:22:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') getdents(r0, &(0x7f0000000000)=""/24, 0x18) getdents(r0, &(0x7f0000000380)=""/206, 0x30) [ 449.651734] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:22:15 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=@profile={'permprofile ', '=)//em0ppp1vboxnet0-user\x00'}, 0x25) 00:22:15 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000eff0)=[{&(0x7f0000010000)="240000001900030007ff0907000083be8020000000040005031d85680300a3a2d188737e", 0x24}], 0x1}, 0x0) 00:22:15 executing program 1: mount(&(0x7f0000000140), &(0x7f0000000100)='.', &(0x7f0000000180)='cgroup\x00', 0x0, 0x0) 00:22:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85321, &(0x7f0000000280)={{0x80}, 'port0\x00'}) [ 450.248028] audit: type=1400 audit(1541377335.297:35): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name="=)//em0ppp1vboxnet0-user" pid=12220 comm="syz-executor2" 00:22:15 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x8ad) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x412, 0x4) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f00000001c0)) setsockopt$inet6_int(r1, 0x29, 0x5e, &(0x7f0000000100)=0x1, 0x4) setns(r1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 00:22:15 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000040)=""/243) 00:22:15 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x60ed, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x2000000000000000, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth0_to_team\x00'}) r1 = gettid() perf_event_open(&(0x7f0000000640)={0x0, 0x70, 0x0, 0x20, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb7, 0x0, 0x0, 0x7b638d3, 0x7f, 0x8, 0x6, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffff800, 0x0, 0x0, 0x0, 0x0, 0xde2, 0x5, 0x0, 0x0, 0x100000000, 0x3, 0x7, 0xfac7, 0x0, 0x6, 0x0, 0x1bb9, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x7b, 0x401, 0x3, 0x0, 0x7, 0x900000000000000}, r1, 0x7, 0xffffffffffffffff, 0x8) socketpair(0x0, 0xf, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) 00:22:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0xb, &(0x7f0000000240)={0x0, 0x2710}, 0x10) 00:22:15 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) clone(0x0, &(0x7f0000000880)="5c642a0fca871ba7d5ca4f0a84f75c37210e1e0000000000000008819c0d5da3ed878f774f79848c79ae0c231b5df077a1d4f8f30c04df5aa5884d2fb2a900f9321a2498792d7e5be714d5b0f816cce8466175d53ed1c1020733ae3801aeda46ff2b18dcc2b1f0f41c1f18aa92f2ef65679ca5356265146a", &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000b00)="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") setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'bpq0\x00'}, 0x18) waitid(0x0, 0x0, &(0x7f0000003ff8), 0xa0000003, 0x0) 00:22:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x28c, 0x3ef, 0x200000000000000, 0x30c, 0x0, 0x0, 0xe003, 0x33c, 0x0, 0x0, 0x3603, 0x252, 0x8]}}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x0, 0x0) rename(&(0x7f0000000780)='./file0\x00', &(0x7f0000000a80)='./file0\x00') setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000008c0), 0xc) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x1000) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x9}}, 0x18) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105000, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x2}) 00:22:15 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$xdp(0x2c, 0x3, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140)}]) 00:22:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}) 00:22:16 executing program 3: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)="2e2f66692e65318c", 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x11, 0x40000028, r0, &(0x7f0000000240)="2e2f66692e65318c00") creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) dup3(r0, r1, 0x0) 00:22:16 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005d6000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) dup3(r1, r0, 0x0) 00:22:16 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) sched_setattr(0x0, &(0x7f0000000340), 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x47) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 00:22:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000395000)=[{&(0x7f00004d2000)=""/4096, 0x1000}], 0x1) 00:22:16 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) execveat(r0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000640), &(0x7f0000000740), 0x1000) 00:22:16 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1c1001, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f08ff0f000000000000030003ffffff8102ffff000020004000000000000000d00100000000000005000000"], 0x2c) 00:22:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x435, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x8000000200000000, 0x5c3, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000144000), &(0x7f0000343ff8)='./file0\x00', &(0x7f000015d000)='nfs\x00', 0x0, &(0x7f000000a000)) 00:22:16 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80803, 0x2) accept4(0xffffffffffffffff, &(0x7f0000000200)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000480), 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0xafe, 0x4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000100)) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040), &(0x7f00000004c0)=0x340d) 00:22:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) r3 = socket$inet6(0xa, 0x1, 0x0) io_setup(0x4, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x1, r2}]) 00:22:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x7fff, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)}]) io_getevents(r1, 0x0, 0x0, &(0x7f0000001440), &(0x7f0000001400)={0x0, 0x989680}) 00:22:17 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256_mb\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000180)) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) 00:22:17 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2}, 0xb) pipe(&(0x7f00000003c0)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="0180c85cc1b960059e2f05b2ae47a2bb25ad75f0c9f07da824979ff9b508d48912cc7147e68bd6cdf229a415bbd7fcbc62cd3781d7c3cfd365e7372b3df1fbbf2b5fadfe7d7877ee388eb57eb2b9bb4d4f764488f06cf62f3679429b006077baaef5d2ab264b8a2110cea703cf9cca2ad9bd532ebdc5bf6634456017f71f1b3fc42c332ed3a93df6fb528282c0571b9d3447c925b562", 0x96}, {&(0x7f00000000c0)="73554614f26bc6b5a6fd9b8a84d2476d1a282eb1f0e79846c41564b32c8b4da2d84965e9f97914d46b97c3f851dd323aa6c9eb5474588c0ccb099bdc189d75c47d84df53c284f1136baf45d08640e1c91c9c80555b4ebea80bdcab4064fe0099849239088817b24eda605a1ab0003c", 0x6f}], 0x2, 0x0) futex(&(0x7f0000000ffc), 0x85, 0x0, &(0x7f0000fd3ff0), &(0x7f0000000ffc), 0x0) fcntl$getflags(r0, 0x401) creat(&(0x7f0000000080)='./file0\x00', 0x92) 00:22:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f00000006c0)=[@text64={0x40, &(0x7f0000000080)="b9c70b0000b802000000ba000000000f300f21bcc42175d08cf6d66a0000c4624d93443a00b9980100000f3265f2410f0866470fe07d001d0000000043d9fe66baf80cb85cc87b8fef66bafc0ced", 0x4e}], 0x1, 0x0, &(0x7f0000000640), 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x0, 0x0, &(0x7f00000000c0), 0x33e) 00:22:17 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ppoll(&(0x7f0000000600)=[{r0}], 0x1, &(0x7f0000000680), &(0x7f00000006c0), 0x8) 00:22:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) sendto$inet6(r0, &(0x7f0000000180)="0401000000c000ddb8460900fff5", 0xe, 0x0, &(0x7f0000000000)={0xa, 0x200808848, 0x20000000005, @ipv4={[], [], @multicast2}}, 0x1c) 00:22:17 executing program 2: set_mempolicy(0x3, &(0x7f0000000000)=0x81, 0x8001) unshare(0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000800) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000440)=0x9f) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f0000527ff8), 0x0, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f00000005c0)) r2 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r4 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20813, 0x0, 0x3, 0x1ff, 0x7, 0x0, 0xfffffffffffffff8, 0x3, 0xfffffffffffffffe, 0x0, 0x3, 0xbea1, 0x0, 0x7fffffff, 0x1f, 0x0, 0x5, 0x4, 0x3, 0x3, 0x0, 0x81, 0x1, 0x6, 0x2, 0x3b, 0x6, 0x7, 0x20, 0x5, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x8}, 0x4000, 0x200, 0x8, 0x1, 0x0, 0x3, 0x4}, 0x0, 0xe, r1, 0x3) getpeername$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x1, r5, 0x38}, 0x10) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, &(0x7f0000000040)="e170b805000000b9b9f400000f01c166420faebb0b00000066b865000f00d86566430f38827a110f215c440f01f8c4a151dcc2f3acc4a2a1a71c15fbffffff", 0x3f}], 0x1, 0x0, &(0x7f0000000340), 0x0) ioctl$int_out(r2, 0x0, &(0x7f00000004c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f0000003400)=ANY=[@ANYBLOB="13912d54b5143836989feea60b6674108e5f76b7b2c0cdf10c4a11b90c0399e1c6732ecb070b29707a39bc7015ca4c6ef859d86b9995775b49eeb25a61abcee972466afea15bbdb6073d92de0abdcd97e202a15422258cfff0ad6f20924fe27eb999a5e108b55c96109d7b82cf00aeb4bb82b828acfb18fe991689131f810843330e6357aa6ee698095a8cc0ec9cf678ced0b5db13d7552e6bdbd01d85a7aff5e8a9123b45dba04027c7"], 0x1}, 0x1, 0x0, 0x0, 0x40}, 0x4008080) kexec_load(0x0, 0x1, &(0x7f00000014c0)=[{&(0x7f0000000100), 0x0, 0x0, 0x4000000}], 0x0) 00:22:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_getevents(r0, 0x8, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}) 00:22:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x0, 0x0, 0x0, {{@in=@multicast2, @in=@rand_addr}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0xfba) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x401, 0x2, 0x200, 0x9, 0x6, 0x0, 0xa2a, 0x400, 0x0}, &(0x7f0000000300)=0x20) r4 = syz_open_dev$sndpcmc(&(0x7f0000000840)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000700)={r3, @in6={{0xa, 0x4e24, 0x8, @remote, 0x30000000}}, 0x3, 0xd179, 0x575, 0x2, 0x1}, &(0x7f0000000340)=0x98) accept4$inet6(0xffffffffffffffff, &(0x7f00000007c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000800)=0xffffffffffffff13, 0x80000) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) r5 = syz_open_dev$sg(&(0x7f0000000540)='/dev/sg#\x00', 0x9, 0x40000) writev(r5, &(0x7f0000000600)=[{&(0x7f00000005c0)}], 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000001500)={&(0x7f0000000140)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="e0000008000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e000000000000000000000000000000000077ef6ade30db74914ccdf15c61d98a0b2ebc888fa8f39ca3f545176f02cefac08b84d0e864c01b40ff66f982faf160257bdc498698a03bdb1405571bdf54180bb279c742d20349fc99cc1b1f08e0802e57b0663541a4a23569e8004db1b09c09e2be52ce9a4e4af7f06792f26bd109fd8687d4aa25a3a274b4438e6b4bc27c4cba879222bc8dd00c925921fd2544da1b60bf1e3e29cac82b23ede8e1a26bee18a8d81401887e9b386235"], 0x1}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r8, 0x10e, 0x8, &(0x7f00000000c0)=0x4, 0x1c4) sendmsg$nl_generic(r8, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0xc, @pid}]}, 0x1c}}, 0x0) sendto$inet6(r7, &(0x7f0000000040)="f5", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback, 0xc0fe}, 0x1c) 00:22:18 executing program 0: ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0x0, 0x0, [0xff, 0x81, 0x101, 0x4]}) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40106309}], 0x1, 0x0, &(0x7f0000000040)="f0"}) 00:22:18 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x7, 0x3, &(0x7f0000001440), &(0x7f0000001480)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000014c0)=""/4096}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r0, 0x0, 0xa, &(0x7f0000000040)='syzkaller\x00'}, 0x30) 00:22:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000340)={0x8f, 0x0, [0x2]}) ioctl$KVM_SMI(r2, 0xaeb7) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f00000002c0)="ab66b91d0b00000f320f353e0fc75900640f18ec24b065dd62006676070f01df66b80500000066b92c7600000f01d9", 0x2f}], 0x1, 0x0, &(0x7f0000000480), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:22:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) write(r0, &(0x7f0000c34fff), 0xffffff0b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) 00:22:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000040)=[{&(0x7f0000199fe1)="1f00000001021900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) [ 453.493384] binder: 12343:12347 transaction failed 29189/-22, size 0-0 line 2855 [ 453.504304] binder: 12343:12347 BC_ACQUIRE_DONE u0000000000000000 no match [ 453.547362] binder_alloc: binder_alloc_mmap_handler: 12343 20001000-20004000 already mapped failed -16 [ 453.608524] binder: 12343:12356 transaction failed 29189/-22, size 0-0 line 2855 00:22:18 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000000000)=@rc, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004a80)=""/164, 0xa4}], 0x1, &(0x7f0000004cc0)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000004b80)={0x77359400}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0x2a3) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000340), 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x18020000, &(0x7f0000004b40), 0x15, &(0x7f0000004bc0)}}], 0x31e9cd3487dc94, 0xe0) [ 453.695371] netlink: 5 bytes leftover after parsing attributes in process `syz-executor3'. [ 453.703272] binder: 12343:12347 BC_ACQUIRE_DONE u0000000000000000 no match [ 453.734817] binder: undelivered TRANSACTION_ERROR: 29189 [ 453.744142] binder: undelivered TRANSACTION_ERROR: 29189 00:22:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400218) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x0, [0x4b564d03]}) 00:22:19 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000100)='./file0/file1\x00', &(0x7f00000001c0)='./file0/file0/file0\x00') 00:22:19 executing program 0: prctl$setmm(0x22, 0x0, &(0x7f0000011000/0x2000)=nil) 00:22:20 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000d53fc1)={@link_local={0x1, 0x80, 0xc2, 0x700}, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, &(0x7f0000000000)) 00:22:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x15, @u32}, @typed={0x8, 0x8, @pid}]}, 0x24}}, 0x0) 00:22:20 executing program 5: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000000300)}}], 0x1, 0x0) 00:22:20 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3b) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000003b40)}, 0x0) 00:22:20 executing program 5: r0 = socket(0x2000000011, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x186, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 00:22:21 executing program 1: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x1, &(0x7f0000000280), 0x8) 00:22:21 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000056000)='/dev/dmmidi#\x00', 0x6f600000, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) readv(r0, &(0x7f0000000040), 0x10000000000001df) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4007, 0x0) 00:22:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r0, 0x0, 0x18, &(0x7f00000002c0), &(0x7f0000000440)=0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty, [0x0, 0x3e8]}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x4505, 0x0) syncfs(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000100)=0x8) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=""/39, &(0x7f00000003c0)=0x27) socket$inet(0x2, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300), 0x8) 00:22:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:21 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) 00:22:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x0, &(0x7f0000000100), 0x1000000000000046) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:22:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:22 executing program 4: r0 = socket$inet(0x2b, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000140)={{0x3f, 0x40, 0x9, 0x2}, 'syz1\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600), 0x10, &(0x7f0000000680)={&(0x7f0000000240)=@can={{0x6}, 0x0, 0x0, 0x0, 0x0, "ac684f6932efdf3b"}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket(0x11, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'gre0\x00'}) bind$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet_sctp(r3, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000800)="260f30d89c2f0001c0feb9e40a0000b8bfb10000ba000000000f3066baa00066b8613a66ef0f017800660f3824f866660f38801d0700000066ba4100b00aee0fc79ac4f9000066baf80cb8d6d6a485ef66bafc0cb00fee"}], 0x305, 0xfdfffffffffffffc, &(0x7f0000000740), 0x1370) setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x1) bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(hmac(md5),ctr-serpent-avx)\x00'}, 0x58) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f0000000540)='/selinux/coMmit_pendIng_bools\x00') 00:22:22 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f7570000c239fd085acc49b812db3d73d43ea", 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0xffffffb2) fcntl$setstatus(r1, 0x4, 0x100000000003ffff) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000440)={'vlan0\x00', @ifru_mtu}) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000002c0)}]) io_submit(r2, 0x1, &(0x7f0000000840)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000640)}]) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) 00:22:22 executing program 0: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@sco, 0x80, &(0x7f0000000080)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x2b5) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003840)}, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x0, 0x5, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x329]}}, 0x80, &(0x7f0000000340), 0x3c1, &(0x7f0000000380)}, 0x0) 00:22:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000003280)="91", 0x1}], 0x1, &(0x7f0000000180)}, 0x0) recvmsg(r1, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/92, 0x5c}], 0x1, &(0x7f0000000a00)=""/111, 0x6f}, 0x0) 00:22:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:23 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) mlock(&(0x7f0000005000/0x3000)=nil, 0x3000) 00:22:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x0, @dev}, 0x10) 00:22:23 executing program 3: syz_emit_ethernet(0x0, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)) 00:22:23 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000), &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000002c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc0000000fd00", 0xc201}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@loopback, @ipv4={[], [], @dev}, @loopback, 0x80000004}) 00:22:23 executing program 1: r0 = getpgid(0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000083, 0x0, 0x82ffff}]}) r2 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x4000000000) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x1, 0x10, 0x0, "89b1de5c52d3cac0a9cfc280c11f9d3af18b550fd55c3bcd086bfbb5f56c4947de6eb062b47af7c143cd8863c3e790f68158bbd4f0fea0d7505174f65da98d62", "d1cdc64c92b038d9b7ee8ab43eec823b7c159f2a203b75db913681f04d71ce12c9df46eba183fdd2b1b7fdfb2afcffb6c0ff64bd7cb7d85840d90b391b59d08e", "447834ab57b33011eb80ac8db8f78001c5370bfd88b3dc1378dbf324020ef9af"}) shmget$private(0x0, 0x4000, 0x1110, &(0x7f0000ff9000/0x4000)=nil) 00:22:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:23 executing program 0: clone(0x802122001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000780)=@nat={"6e61747fffffff00", 0x19, 0x4, 0x8d, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, &(0x7f0000000180), &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000003a000000000000000000000000000000000000000000000000000000000000000000ffffffff02000000190000000a00000000156e723000000000f4ffffffffffffff00626f6e643000000000000000000000007465616d5f736c6176655f310000000062637366300000000000000000000000ffffffffffffffff00ffffff0180c2000000ff"]}, 0x105) 00:22:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x13) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) r3 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) shutdown(r2, 0x1) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0xd0daffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, 0x2}, 0x1a000}}, 0x0) 00:22:23 executing program 3: r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) socket$inet6(0x10, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff8e) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'tgr128\x00'}, 0x58) creat(&(0x7f0000000080)='./file1\x00', 0x0) [ 458.753457] kernel msg: ebtables bug: please report to author: entries_size too small 00:22:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff5c, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(0xffffffffffffffff, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18020000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x1}}, 0x44801) delete_module(&(0x7f0000000200)='mime_type[$keyring\x00', 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000004}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[]}, 0x1, 0x0, 0x0, 0x4004}, 0x40002) getsockopt$inet_int(r0, 0x0, 0x18, &(0x7f00000002c0), &(0x7f0000000440)=0x4) 00:22:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d04, 0x0, 0x82ffff}]}) 00:22:24 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000340)={0x8, 0x200000000101}) 00:22:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) [ 460.107126] 8021q: adding VLAN 0 to HW filter on device team0 00:22:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d02, 0x0, 0x82ffff}]}) 00:22:25 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:25 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000007700)={0x18, 0x0, {0x5, @link_local, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) 00:22:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:22:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0x82ffff}]}) 00:22:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) [ 460.606434] 8021q: adding VLAN 0 to HW filter on device team0 00:22:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) 00:22:26 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:26 executing program 5: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x100000001, 0x4, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) ioctl$int_in(r0, 0x5452, &(0x7f0000002880)=0x3) recvmmsg(r0, &(0x7f0000000b40)=[{{&(0x7f0000000380)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=""/74, 0x4a}}], 0x1, 0x43, &(0x7f0000000bc0)) 00:22:26 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x9, 0x100000000000000, {0x400000000000000}}, 0xfffffe1a) 00:22:26 executing program 3: socket(0x2000000011, 0x3, 0x0) 00:22:26 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0', [], 0xa, "a44b896ad9"}, 0x10) recvmsg(r2, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/92, 0x200002dc}], 0x1, &(0x7f0000000a00)=""/111, 0x6f}, 0x0) 00:22:26 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) 00:22:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x711, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x4}}}]}, 0x34}}, 0x0) 00:22:27 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:27 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x2, &(0x7f0000000280)=@raw=[@exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x46, &(0x7f0000000140)=""/70}, 0x48) 00:22:27 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "910ae0", 0x10, 0x0, 0x0, @empty, @mcast2, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "7740b9", 0x0, "1cc102"}}}}}}}, &(0x7f0000000100)) 00:22:27 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:27 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fchmod(r0, 0x0) 00:22:27 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snapshot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) ioctl$VHOST_SET_VRING_KICK(r0, 0x3305, &(0x7f0000001200)) 00:22:28 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x918, 0x4) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local}, 0x1c) 00:22:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) 00:22:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000002c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:22:28 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000400)) 00:22:28 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae91, &(0x7f00000000c0)) 00:22:28 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) 00:22:28 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x1, 0x10, 0x0, "89b1de5c52d3cac0a9cfc280c11f9d3af18b550fd55c3bcd086bfbb5f56c4947de6eb062b47af7c143cd8863c3e790f68158bbd4f0fea0d7505174f65da98d62", "d1cdc64c92b038d9b7ee8ab43eec823b7c159f2a203b75db913681f04d71ce12c9df46eba183fdd2b1b7fdfb2afcffb6c0ff64bd7cb7d85840d90b391b59d08e", "447834ab57b33011eb80ac8db8f78001c5370bfd88b3dc1378dbf324020ef9af"}) 00:22:28 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:28 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) exit(0x0) connect$pppoe(r0, &(0x7f0000007700)={0x18, 0x0, {0x5, @link_local, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) 00:22:28 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) mount(&(0x7f00000003c0)=ANY=[@ANYBLOB="04"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000440)="04") 00:22:28 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) [ 463.973554] ceph: device name is missing path (no : separator in ) 00:22:29 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x1e) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000500), 0x10) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:22:29 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) connect(r0, &(0x7f0000000140)=@l2, 0x80) 00:22:29 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:29 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f00000000c0)={0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x693}) clone(0x2102001ff8, 0x0, 0xfffffffffffffffe, &(0x7f00000004c0), 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb='[d::]:+6,[:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000240)="f461895dd1ba64ef15b7ba189fb19052549ec864c16367580a53af83df9a941d447fa349cf48b70445a96908c388b16cb138df7b4af9a193f2f98167a7c9e93ee6ba61e8a2225d22fe1828246f268b03604c12c5a939bb46d55d3f13306355efb72265ffbbc07ad9dafb4ac49c23825a5cfe4e77cebbc5839b782b5249e4") 00:22:29 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) [ 464.591956] libceph: parse_ips bad ip '[d::]:+6,[' 00:22:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(xeta)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000023c0)="ba", 0x1}], 0x1, &(0x7f00000004c0)}, 0x0) recvmmsg(r1, &(0x7f0000004d00)=[{{&(0x7f00000006c0)=@l2, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000780)=""/99, 0x63}], 0x1, &(0x7f0000000900)=""/194, 0xc2}}], 0x500, 0x0, 0x0) 00:22:29 executing program 0: 00:22:29 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) 00:22:30 executing program 3: 00:22:30 executing program 4: 00:22:30 executing program 0: 00:22:30 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) 00:22:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:30 executing program 3: 00:22:30 executing program 5: 00:22:30 executing program 4: 00:22:30 executing program 0: 00:22:30 executing program 3: 00:22:30 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) 00:22:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:31 executing program 5: 00:22:31 executing program 4: 00:22:31 executing program 0: 00:22:31 executing program 3: 00:22:31 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) 00:22:31 executing program 5: 00:22:31 executing program 4: 00:22:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) 00:22:31 executing program 0: 00:22:31 executing program 3: 00:22:31 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) 00:22:31 executing program 4: 00:22:31 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev, 'ip_vti0\x00'}}, 0x1e) dup3(r0, r1, 0x0) 00:22:32 executing program 0: 00:22:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)) 00:22:32 executing program 3: 00:22:32 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) 00:22:32 executing program 4: 00:22:32 executing program 5: 00:22:32 executing program 0: 00:22:32 executing program 3: 00:22:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) 00:22:32 executing program 4: 00:22:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)) 00:22:33 executing program 5: 00:22:33 executing program 0: 00:22:33 executing program 4: 00:22:33 executing program 3: 00:22:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) 00:22:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)) 00:22:33 executing program 0: 00:22:33 executing program 4: 00:22:33 executing program 5: 00:22:33 executing program 0: 00:22:33 executing program 3: 00:22:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{}]}) 00:22:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) 00:22:34 executing program 5: 00:22:34 executing program 0: 00:22:34 executing program 4: 00:22:34 executing program 3: 00:22:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) 00:22:34 executing program 0: 00:22:34 executing program 5: 00:22:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{}]}) 00:22:34 executing program 4: 00:22:34 executing program 0: 00:22:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) 00:22:34 executing program 5: 00:22:34 executing program 3: 00:22:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{}]}) 00:22:35 executing program 4: 00:22:35 executing program 0: 00:22:35 executing program 5: 00:22:35 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'syz_tun\x00'}}, 0x1e) syz_emit_ethernet(0x14, &(0x7f0000000080)={@random="5c58e606e122", @broadcast, [], {@generic={0x8864, "42a703000000"}}}, &(0x7f00000000c0)) 00:22:35 executing program 4: socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='memory.current\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000580), &(0x7f0000000640)=0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000500), &(0x7f0000000680)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlinkat(r0, &(0x7f00000019c0)='./file0\x00', 0x0) recvfrom(r1, &(0x7f0000f9cf9b)=""/101, 0xffffff24, 0x122, 0x0, 0x4f) read(r1, &(0x7f0000000380)=""/172, 0xffffff88) 00:22:35 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000000)}}, {{&(0x7f0000002400)=@in6={0xa, 0x0, 0x4, @loopback}, 0x80, &(0x7f00000057c0), 0x0, &(0x7f0000000580)=[{0x262}], 0x10}}], 0x2, 0x0) 00:22:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4d0}]}) 00:22:35 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000240)) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="254c01006e23830b000001"], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8) fadvise64(r0, 0x0, 0x6, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000580)=0x7, 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) lstat(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) lsetxattr$security_smack_transmute(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x3) accept(0xffffffffffffff9c, &(0x7f00000000c0)=@alg, &(0x7f0000000140)=0x80) execve(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000380)=[&(0x7f00000002c0)='\x00'], &(0x7f0000000480)=[&(0x7f00000003c0)='system.advise\x00', &(0x7f0000000400)='\x00']) ioctl$RTC_AIE_OFF(r0, 0x7002) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.advise\x00') ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000001c0)={0x1, 0x0, {0x33, 0x0, 0x16, 0x0, 0x5}}) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/179) 00:22:35 executing program 3: syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) pipe2(&(0x7f0000000280), 0x0) 00:22:35 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000480)) read$FUSE(r0, &(0x7f0000001000), 0x1000) read$FUSE(r0, &(0x7f00000020c0), 0x1000) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000500)={0x90, 0x0, 0x2, [{0x1, 0x0, 0xb, 0x0, 'em1nodevem1'}, {0x0, 0x0, 0x1, 0x0, ','}, {0x0, 0x0, 0x1c, 0x0, "2b73797374656dcc6370757365746367726f7570246367726f757015"}]}, 0x90) 00:22:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)) 00:22:35 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000c4c000)=0x4, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x4000000000cf, &(0x7f0000000000), &(0x7f0000000040)=0x523) 00:22:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000240)='./file0/file0\x00', 0x180) truncate(&(0x7f0000000080)='./file0/file0\x00', 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) 00:22:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)) 00:22:36 executing program 3: socket$inet(0x2, 0x3, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local, @dev, {[@timestamp={0x44, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 00:22:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x5452, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}}) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) 00:22:36 executing program 4: mkdir(&(0x7f00000000c0)='./control\x00', 0x0) r0 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x220}) mknodat(r0, &(0x7f0000000080)='./control\x00', 0x0, 0x0) 00:22:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0xaaaaaaaaaaaabd6, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000000)=0x1000) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001180)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:22:36 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r1, &(0x7f000055ff80)=[{&(0x7f00002f0f89)=""/204, 0xcc}], 0x1, 0x0) 00:22:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)) 00:22:36 executing program 3: socket$inet(0x2, 0x3, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, @local, @dev, {[@timestamp={0x44, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, &(0x7f0000000000)) 00:22:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:37 executing program 0: r0 = memfd_create(&(0x7f000003e000)='\'', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000001000)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) r3 = memfd_create(&(0x7f000003e000)='\t', 0x0) r4 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r4, r3) write$sndseq(r3, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) r5 = memfd_create(&(0x7f00008effff)='\t', 0x0) r6 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r6, r5) write$sndseq(r5, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) 00:22:37 executing program 3: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(&(0x7f000000a000), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x0) 00:22:37 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@sco={0x1f, {0x8, 0x0, 0x2}}, 0x80, &(0x7f0000000300)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x2b5) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@pppol2tp, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f0000000b00)=""/180, 0xb4}], 0x2, &(0x7f0000000c40)=""/115, 0x73}, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x894f, 0x5, @dev}, 0x80, &(0x7f0000000340), 0x25d, &(0x7f0000000380)}, 0x0) 00:22:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{}]}) 00:22:37 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f305010008000100020423dcffdf00", 0x1f) 00:22:37 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) [ 472.730037] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 00:22:37 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x4000000011) 00:22:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{}]}) 00:22:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x0, 0x0, &(0x7f0000000240)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x48, 0x0, &(0x7f0000000540)=[@enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480)}}], 0x0, 0xfdfd, &(0x7f00000000c0)}) 00:22:38 executing program 4: request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)="520972697374e363757367725669643a4465", 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000001c0)=0x20) munlockall() ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f00000004c0)) 00:22:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0f0103f26d67f2f7320fc79b000000000f01cbc4c23dab8b0a000000f2a3381dd45266baf80cb8bcbd3f80ef66bafc0cb803000000ef0f239df20f5a5b00", 0x3e}], 0xaaaacd8, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 473.210531] binder: 12940:12943 ERROR: BC_REGISTER_LOOPER called without request 00:22:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x800010b, 0x0) add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140), &(0x7f00000003c0)="e79a964e3712f32afbe54e11deb9e702d457dfa7f5de50d239c537a08ce963905beacd802f5bc7e0a3730ba10a7492620737", 0x32, 0xfffffffffffffffb) [ 473.265245] binder: 12940:12948 transaction failed 29189/-22, size 0-0 line 2855 00:22:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{}]}) [ 473.373381] binder: 12940:12943 ERROR: BC_REGISTER_LOOPER called without request [ 473.396694] binder: 12940:12948 transaction failed 29189/-22, size 0-0 line 2855 [ 473.422658] binder: undelivered TRANSACTION_ERROR: 29189 [ 473.429946] binder: undelivered TRANSACTION_ERROR: 29189 00:22:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x80047456, 0x6ef000) 00:22:38 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:38 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:38 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000bc2000)="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", 0x2b1, 0x0, &(0x7f0000606fe4)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000e8e000)=[{{&(0x7f00008b6000)=@in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x1}, 0x80, &(0x7f0000231ff0)=[{&(0x7f0000f89000)='t', 0x1}], 0x1, &(0x7f0000dffeb8)}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006a7ffc), 0x154) listen(r0, 0x7) r1 = accept4(r0, 0x0, &(0x7f0000622ffc), 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x6) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="c9"], 0x1) ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100), 0x8) 00:22:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:39 executing program 5: prctl$intptr(0x26, 0x1) mknod(&(0x7f00000010c0)='./file0\x00', 0x29, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r0, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000280)) 00:22:39 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000280)="66b94f0600000f320f9584aa8a440f20c0663508000000440f22c0d5fe66b9da0800000f32650f5ffa66b8592000000f23d00f21f866351000000b0f23f83e0f013bd9e166b92102000066b8ab340ccd66bad5ae4d710f30", 0x58}], 0x1, 0x0, &(0x7f0000000040), 0x0) 00:22:39 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:40 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x15, 0x0, 'rr\x00', 0x2b, 0xfffffffffffffe00, 0x41}, 0x2c) 00:22:40 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0xc2) write$evdev(r0, &(0x7f0000000080)=[{}, {{0x0, 0x2710}}], 0x30) socket(0x0, 0x0, 0x0) 00:22:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000), 0x4) 00:22:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f00000001c0)=[{}], 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffffd}) [ 475.430984] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0x2710/0x2ba0 00:22:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:40 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002900)='scalable\x00', 0x9) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) recvfrom(r0, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r0) 00:22:40 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:40 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x8) 00:22:40 executing program 4: socket$inet6(0xa, 0x2000000000000003, 0x10001) bind$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) clone(0x400002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r0, 0x40096101, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) inotify_add_watch(r1, &(0x7f0000000300)='./file0\x00', 0x800) read(0xffffffffffffffff, &(0x7f0000000200)=""/71, 0x47) read(0xffffffffffffffff, &(0x7f0000000040)=""/18, 0x1c5) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0), &(0x7f0000000200)=0x14) request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000280)={'syz'}, &(0x7f00000002c0)='md5sum\x00', 0xfffffffffffffffd) 00:22:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = getpid() move_pages(r1, 0x6, &(0x7f0000000000)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil], &(0x7f0000000040), &(0x7f0000000080), 0x6) [ 475.970635] QAT: Device 0 not found 00:22:41 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) [ 476.008382] QAT: Device 0 not found 00:22:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x20}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xd, 0x5, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x70}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 00:22:41 executing program 3: madvise(&(0x7f0000a9f000/0x4000)=nil, 0x4000, 0x80001020000000a) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) 00:22:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8000000008b35, &(0x7f00000000c0)={'ip6gre0\x00', @ifru_map}) 00:22:41 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:41 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r1, &(0x7f0000000080)=""/36, 0xe02448ccff907ff8, 0x0, &(0x7f00000000c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x401) keyctl$set_timeout(0xf, r0, 0x0) 00:22:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000000)=0x487) 00:22:41 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x10, 0x300000, 0x8200003) 00:22:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x114, 0x2711, 0xffffffffffffffff, &(0x7f0000000040)) 00:22:42 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:42 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r1}, {r2}], 0x2, 0x0) dup2(r1, r2) 00:22:42 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x8, 0x485, 0xfffffffffffffffc, 0x20, 0x3, 0x8, 0x1f, 0x1f, 0x1, 0xf4d, 0x5, 0x75}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x102) write$evdev(r1, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000340)) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)="6367726f757032007228bd0805723570aa0af79485aca52dc2d78e6e0837a4c041ed7c4ed979d62a636345c892647189e19fdeb2fe4e69daadbcac4a7636a3b430a7d3a0c4c3e87e72897a3bc7d8433e71d47d67c4b69dcdac061c950ce7d99bbb01fa08b4a4d7d5a5f9a00000000000eb7d40657c0e23aaecd4a17a4b9138c39f48eec31910b05395b9253ea42e79f28dada69e7b65663f7a6ca32edaa331aee72587e77d80b63ce88f8930056ca6b83a7880b6b2725f6a0636a71d1246fc9dfa824920e8ca9bf743e92534eb88a4ad356359a354b01a04db0b3c7a5d74fe2d495eaae8a5b8bf17b6af014f802926257a932c3e620d2ca8658c8f9a79aee239baa4e9912ccbe50da0a9382ca53a5c5ee79bd17b533c9bc22333465eccde63b67890753aeebb746ac693e5c5bb3abb4c7568bd98cb5b82ce90a954d7", 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0//ile0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x12) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x80, 0x0) r6 = memfd_create(&(0x7f0000000440)="2b8b8a16033edddf6b284699df92d53e6f4a02759b9461aca2b1b70986488e034a003446d17a230594409f8be3ef04529950705e972298e81fb5821e04847e1973ec959c7622613dde68feb95bc9249ac79ce261d3e9e847a0d2d3167186480e843adeda83d2da9adb34a7ccdb68e9ad2f4bc7fa36b55f2572fa2e823cfceb3ac3793da2ff6837e4220021082ceb2c167aa3c33b349e03ae050000007676be6df84050a47184c18311f283ce5c73c36531f4", 0x3) write$binfmt_misc(r6, &(0x7f0000000c40)=ANY=[@ANYRES32], 0xff67) sendfile(r5, r6, &(0x7f0000000000), 0xffff) fcntl$addseals(r6, 0x409, 0x8) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000b00)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000b40)={{{@in=@dev, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000c80)=0xe8) getresgid(&(0x7f0000000cc0), &(0x7f0000000d00), &(0x7f0000000d40)) fcntl$getownex(r1, 0x10, &(0x7f0000002340)) geteuid() stat(&(0x7f0000002380)='./file0//ile0\x00', &(0x7f00000023c0)) getpid() stat(&(0x7f0000002440)='./file0//ile0\x00', &(0x7f0000002480)) getgid() fcntl$getown(r5, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000002500)={{{@in6=@dev, @in=@local}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000002600)=0xe8) getgid() ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000002640)) lstat(&(0x7f0000002680)='./file0\x00', &(0x7f00000026c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002740), &(0x7f0000002780)=0xc) fcntl$getownex(r5, 0x10, &(0x7f0000002c00)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002c40)={{{@in=@remote, @in6=@dev}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000002d40)=0xe8) getgroups(0x6, &(0x7f0000002d80)=[0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff]) fcntl$getown(r2, 0x9) geteuid() getegid() lstat(&(0x7f0000005380)='./file0\x00', &(0x7f00000053c0)) fstat(r2, &(0x7f00000057c0)) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000005840), &(0x7f0000005880)=0xc) fstat(r2, &(0x7f0000005a00)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000005a80)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000005ac0)={{{@in=@multicast1, @in=@local}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f0000005bc0)=0xe8) fstat(r4, &(0x7f0000005c00)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000005c80)) stat(&(0x7f0000008300)='./file0\x00', &(0x7f0000008340)) getegid() getpgid(0x0) fstat(r4, &(0x7f0000008500)) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 00:22:42 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:42 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000007c0), 0x4) bind$inet(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 00:22:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:43 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @random="df8c425a2861", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 00:22:43 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r1}, {r2}], 0x2, 0x0) dup2(r1, r2) 00:22:43 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x359, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0x10}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') 00:22:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1ff, &(0x7f0000000180)) open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) r0 = add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080), 0x0, 0x0, 0xffffffffffffffff) keyctl$get_security(0x11, r0, &(0x7f0000000280)=""/74, 0x4a) r1 = socket$inet6(0xa, 0x40000080806, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@remote, @dev}) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r4, 0x0, 0x2, r4, [0x0, 0x0, 0x0, 0xffff8000]}) 00:22:46 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) bpf$MAP_CREATE(0x0, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x6, 0x5, &(0x7f0000006000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000008000)=""/4096}, 0x48) 00:22:46 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r1}, {r2}], 0x2, 0x0) dup2(r1, r2) 00:22:46 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4004700c, 0x1a8c) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x7ffffff7) 00:22:46 executing program 4: fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = open(&(0x7f00000004c0)='./file0\x00', 0x14104a, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000300)='{', 0x1}], 0x1) sendfile(r1, r1, &(0x7f0000000080), 0x2000000800004c36) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) fcntl$setstatus(r2, 0x4, 0x4000) write$P9_RUNLINKAT(r2, &(0x7f0000000200)={0x7}, 0x7) 00:22:46 executing program 0: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:47 executing program 4: socketpair$unix(0x1, 0x8000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) clock_nanosleep(0x2, 0x0, &(0x7f0000000200), 0x0) 00:22:47 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:47 executing program 3: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgrcv(r0, &(0x7f0000000080)={0x0, ""/194}, 0xca, 0x0, 0x0) msgsnd(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="ed"], 0x1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 00:22:47 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r1}, {r2}], 0x2, 0x0) dup2(r1, r2) 00:22:47 executing program 0: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:47 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(r2, r2) 00:22:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d3, &(0x7f0000000200)={0x0, &(0x7f00000000c0)}) 00:22:47 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0x12) 00:22:47 executing program 0: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:47 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$inet(0x2, 0x80003, 0x3) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r1}) 00:22:47 executing program 3: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)) msgrcv(r0, &(0x7f0000000080)={0x0, ""/194}, 0xca, 0x0, 0x0) msgsnd(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="ed"], 0x1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 00:22:47 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) dup2(r1, r2) 00:22:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:48 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000002b00)={&(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000026c0), 0x0, &(0x7f0000002980)}, 0x0) 00:22:48 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:48 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r0, 0xc00c55ca, &(0x7f0000000000)={&(0x7f0000941000/0x2000)=nil}) 00:22:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@remote, 0x0, 0xff}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, 0xe8) connect(r0, &(0x7f00004f5000)=@ethernet={0x0, @link_local}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2, {[], @udp={0x0, 0x2, 0x8}}}}}}, &(0x7f0000775000)) 00:22:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000280), &(0x7f0000000180)="a4", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000240), 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000300), &(0x7f0000000700)="848432503e1ac2bae9d92144eae8978bd4f065eadead9ca85fd3c49e925de4007488bf80a2152f25efb149bbddc4493ad0c625b2e5cfabf2f745b9a6586673f693fc49f3b2e10e38afb34f9befefa874c9e7033ccc0e967bec6de22d59ece236cb34ca95781888a02eb796e3342b40b123e5f81ff5e34b907efecba4cfbf634fd3fee4a929cea900837f546dba4cdcc4fe13ac83893eef8276820db8efd0e90729fb71a71d9add945238acddb8375d4b349d571748902d266efb9ab909b8b6e7", 0xc0, r1) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0), &(0x7f0000000140)='\x00', 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000480)={r0, r2, r3}, &(0x7f0000000640)=""/155, 0x320, &(0x7f0000000600)={&(0x7f0000000580)={'wp256-generic\x00'}, &(0x7f0000000000)}) mount(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='fusectl\x00', 0x0, &(0x7f0000000340)) semget(0xffffffffffffffff, 0x0, 0x0) 00:22:48 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:48 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) dup2(r1, r2) 00:22:48 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000140)=@in6={0xa, 0x0, 0x8, @mcast2}, 0x80, &(0x7f0000001480), 0x0, &(0x7f0000001500)}}], 0x1, 0x8848) 00:22:48 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000661000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, &(0x7f0000000180)="8fc998960f2e0f0f6f0d9766ba420066ed66b813000f00d8c4e225457ac9b8002000000f23c80f21f835000020000f23f8c4e14dfed7f26565f3f0083d00800000f704da0000010067650f9c39", 0x4d}], 0x1, 0x52, &(0x7f0000000380), 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000380000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000280)="2e0fc75a00260f22e366b9110300000f320f00535bb8cd0b8ec066b9ed08000066b8270eba9366bae36313680f30640f01f766b81e8200000f23c80f21f866350c0080000f23f86b8da90008652e360f01ca", 0x52}], 0x1, 0x0, &(0x7f00000000c0), 0x0) 00:22:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:49 executing program 1: ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/148, 0x94}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0), &(0x7f0000000300)=0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000039, 0x0) 00:22:49 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) dup2(r1, r2) 00:22:49 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:49 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = inotify_init() fcntl$setstatus(r2, 0x4, 0x2bff) dup2(r1, r2) 00:22:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:49 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}, {}], 0x2, 0x0) dup2(r1, 0xffffffffffffffff) 00:22:49 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, 0x0) r0 = request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\x00', 0xfffffffffffffffe) keyctl$describe(0x6, r0, &(0x7f0000000280)=""/41, 0x290) 00:22:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2364}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x1, 0x0, 0x10000101) 00:22:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:22:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:50 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:50 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{}, {r1}], 0x2, 0x0) dup2(0xffffffffffffffff, r1) 00:22:50 executing program 4: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)=ANY=[@ANYBLOB=')'], 0x1) fcntl$setstatus(r0, 0x4, 0x4000) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x0, r0, &(0x7f0000000040)='a', 0x1}]) 00:22:50 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket$inet6(0xa, 0x8000000000000806, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x1}, 0x8) close(r2) 00:22:50 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:50 executing program 5: syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, 0x0) dup2(r0, r1) 00:22:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:22:50 executing program 4: r0 = userfaultfd(0x0) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_readv(r1, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 00:22:51 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x1000) lseek(r0, 0x0, 0x2) r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in=@broadcast, @in6=@mcast2}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) r2 = open(&(0x7f0000000240)='./bus\x00', 0x105000, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000080)={0x6b, 0x5, 0x8, 0x101}) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) getegid() ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000200)) ftruncate(r1, 0x0) 00:22:51 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x0, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:22:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:51 executing program 5: syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, 0x0) dup2(r0, r1) 00:22:51 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x0, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)) 00:22:51 executing program 4: r0 = userfaultfd(0x0) munmap(&(0x7f00003e5000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000fcdfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r1 = gettid() process_vm_readv(r1, &(0x7f0000fca000)=[{&(0x7f0000000000)=""/249, 0xf9}], 0x1, &(0x7f0000fcafa0)=[{&(0x7f0000309fb2)=""/145, 0xfffffe9b}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 00:22:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:51 executing program 5: syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, 0x0) dup2(r0, r1) 00:22:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:22:52 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000002200000007000000000e00009500004000000000"], &(0x7f0000014ff5)="73797a6b610000000500f3", 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0x36, 0x9d, &(0x7f0000000040)="e46001923406080000000a9b86dd6abdbbcbb54d336dd02df955e41ae2b8e30012a6b702000000072febc1e3601b9056115082553800", &(0x7f00000001c0)=""/157, 0xea74}, 0x28) 00:22:52 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x0, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:52 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x261000}], 0x1, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x24) 00:22:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:22:52 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f00000001c0)) 00:22:52 executing program 5: ppoll(&(0x7f0000000540)=[{}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, 0x0) dup2(r0, r1) 00:22:52 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) [ 487.677853] binder_alloc: binder_alloc_mmap_handler: 13398 20000000-20002000 already mapped failed -16 [ 487.761418] binder: 13398:13401 ioctl 8108551b 200001c0 returned -22 00:22:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:22:53 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:53 executing program 5: ppoll(&(0x7f0000000540)=[{}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, 0x0) dup2(r0, r1) 00:22:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet(0x2, 0x80002, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000004c0)='bridge_slave_0\x00', 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev}, 0x10) 00:22:53 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:53 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x80184132, &(0x7f0000001f64)) 00:22:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:22:53 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:53 executing program 5: ppoll(&(0x7f0000000540)=[{}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, 0x0) dup2(r0, r1) 00:22:53 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$KVM_SMI(r0, 0xaeb7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr}, 0x10) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x4040, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000200)={@dev={0xfe, 0x80, [], 0x1b}, @local, @loopback, 0x1, 0x4, 0x200, 0x100, 0x8e5, 0x40000080, r4}) ioctl$TCSBRKP(r2, 0x5425, 0x361) socket$packet(0x11, 0x2, 0x300) ioctl(r3, 0x8912, &(0x7f0000000040)="00186cbf43bd47fc2f07d80282240970") sendto$inet(r1, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) dup2(r3, r1) 00:22:53 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) [ 488.936202] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:22:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:54 executing program 4: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1a}, 0x10}, 0x1c) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x8}, 0x1c) 00:22:54 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x0, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r1}, {r2}], 0x2, 0x0) dup2(r1, r2) 00:22:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:22:54 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) [ 489.274854] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 489.325284] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? 00:22:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:54 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:54 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0xaf01, &(0x7f0000000280)) r1 = eventfd(0x80000002) write$eventfd(r1, &(0x7f00000000c0)=0xffffffffffffff90, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000857ff8)={0x0, r1}) readv(r1, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/212, 0xd4}], 0x1) 00:22:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:22:54 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x0, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r1}, {r2}], 0x2, 0x0) dup2(r1, r2) 00:22:55 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={'syzkaller0\x00', @ifru_settings={0x6, 0x8, @raw_hdlc=&(0x7f0000000200)={0x0, 0x6a4}}}) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f00000013c0)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005900), 0x0, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ecb-camellia-aesni-avx2,crc32c-generic)\x00'}, 0x58) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/131, 0x83}], 0x1}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000001240)={0xc, 0x4}) modify_ldt$read_default(0x2, &(0x7f00000003c0)=""/239, 0xef) 00:22:55 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:22:55 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="d3ab27191a01002356ba602dff05000b", 0x10) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000002000000000000000fcff0000000000000000fdffffff0000000000000000000000000000000000020000000000001e6355148fd919b08fbe966a6d52164c8041a32c5284ed67"], 0x70) recvmmsg(r1, &(0x7f00000062c0)=[{{&(0x7f0000002bc0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000003ec0), 0x3, &(0x7f0000003f40)=""/190, 0xbe}}, {{&(0x7f0000004000)=@ipx, 0x80, &(0x7f0000006180), 0x228, &(0x7f00000061c0)=""/240, 0xf0}}], 0x400000000000399, 0x0, &(0x7f0000006400)={0x77359400}) 00:22:55 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x0, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r1}, {r2}], 0x2, 0x0) dup2(r1, r2) 00:22:55 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:55 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0), 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:22:55 executing program 5: syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540), 0x0, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, 0x0) dup2(r0, r1) 00:22:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x100000001, 0x4, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) recvmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001440)=""/179, 0xb3}}], 0x2b, 0x40000042, &(0x7f0000001540)={0x77359400}) 00:22:55 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:56 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000640)) 00:22:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0), 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:22:56 executing program 5: syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540), 0x0, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, 0x0) dup2(r0, r1) 00:22:56 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0), 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:56 executing program 1: r0 = socket(0x10, 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) write(r0, &(0x7f0000000240)="220000002000070700be0000090007010a00001e00003c0000ff040405000c008000", 0x22) 00:22:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:22:56 executing program 5: syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540), 0x0, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, 0x0) dup2(r0, r1) 00:22:56 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x0, 0x28, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:57 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda}, 0x18) shutdown(r2, 0x1) 00:22:57 executing program 4: r0 = socket$inet6(0xa, 0x100000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) getitimer(0x0, &(0x7f0000000080)) 00:22:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:22:57 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000400), 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1105}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "71075b8a74c927af"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}}, 0x0) 00:22:57 executing program 5: syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, 0x0) dup2(r0, r1) 00:22:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000000000)=0x7f) read$eventfd(r0, &(0x7f0000000040), 0x8) 00:22:57 executing program 4: unshare(0x400) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) fchmod(r0, 0x0) 00:22:57 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 00:22:57 executing program 5: syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, 0x0) dup2(r0, r1) 00:22:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="0000ffff"], 0x4) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="f10fab"], 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:22:58 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 00:22:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000080), 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xffffffffffffffda}, 0x18) shutdown(r2, 0x1) 00:22:58 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000500)=""/97, &(0x7f0000000300)=""/127}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, &(0x7f0000000040)=""/83, &(0x7f0000000380)=""/181, &(0x7f0000000440)=""/141}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)=ANY=[]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002bc0)={0x1, 0x0, [{0x51e242a7e48d0c05, 0xd1, &(0x7f0000000700)=""/209}]}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000580)=0x104000000) 00:22:58 executing program 5: syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r0}, {r1}], 0x2, 0x0) dup2(r0, r1) 00:22:58 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 00:22:58 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="de"], 0x1) clone(0x20002102, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000300), &(0x7f0000000240), 0x1000) 00:22:58 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) clone(0x0, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000200)) ptrace$getregs(0x2, r1, 0x72fffd, &(0x7f0000000000)=""/38) 00:22:59 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}, {r2}], 0x2, 0x0) dup2(r1, r2) 00:22:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000000c0)=@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@dev]}, 0x18) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) getgroups(0x1, &(0x7f0000000540)=[0x0]) [ 493.956698] ptrace attach of "/root/syz-executor4"[6748] was attempted by "/root/syz-executor4"[13637] 00:22:59 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:22:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:22:59 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) dup2(r1, r2) 00:22:59 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:22:59 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000004c0)='./file0\x00', 0x14104a, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000400)={0x2, 0xfffffffffffff215, 0x6, 0x3}) write$evdev(r0, &(0x7f0000037fe8)=[{}], 0x18) r1 = inotify_init() sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYBLOB="6b2329cf81000029019dbdf0b6dc06d000000004d8067bd9cd1eb6bb35f963928f"], 0x2}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x200000000e) sendfile(r0, r0, &(0x7f0000000080), 0x2000000800004c36) creat(&(0x7f00000000c0)='./file0\x00', 0x4) 00:22:59 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r1 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r1, 0x7, &(0x7f0000027000)={0x1}) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)={0x2f, 0x6, 0x0, {0x0, 0x0, 0x6, 0x0, 'vmnet0'}}, 0x2f) ftruncate(r1, 0x0) 00:22:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:23:00 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:23:00 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) dup2(r1, r2) 00:23:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0xff0f0000, 0x0, 0x0, 0x0, @msi}]}) 00:23:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:23:01 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/10, 0xa}, {&(0x7f00000048c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000580)=""/226, 0xe2, 0x7}, 0x40) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x59eb6d824a8feef8) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x894f, 0x5, @dev={0xfe, 0x80, [0x2690, 0x2668, 0x0, 0x329]}}, 0x80, &(0x7f0000000340), 0x3c1, &(0x7f0000000380)}, 0x0) 00:23:01 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:23:01 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) dup2(r1, r2) 00:23:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x8) 00:23:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:23:01 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af13, &(0x7f0000000540)={0x0, 0x2000000, &(0x7f0000000400)=""/243, &(0x7f0000000500)=""/37, &(0x7f00000007c0)=""/239}) 00:23:01 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:23:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:23:01 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000900)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 00:23:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000000000000000000001"]) 00:23:01 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r1}, {}], 0x2, 0x0) dup2(r1, r2) 00:23:01 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x800000000004, 0x4, 0xd}, 0x2c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000400), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000140)}, 0x10) 00:23:01 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 00:23:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:23:02 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = msgget$private(0x0, 0x0) msgrcv(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0) msgctl$IPC_RMID(r2, 0x0) 00:23:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000009fe8)={0xeffb, 0x1d, 0x0, 0xffffffffffffffff}) lseek(r1, 0x0, 0x2) 00:23:02 executing program 1: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)={0xa, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x5}) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@add_del={0x2, &(0x7f0000e7eff0)}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x1000) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000001c0)) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x40) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105000, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000040)=0x38eea7d7, 0x4) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) ftruncate(r2, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x200, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000140)={0x2, 0x51, &(0x7f00000000c0)="95dae525187d039201c71eb20365fef9e4f4d54ddb55837a48cfc86b5f799fba8e99c44423eddeb865d46605806172423c202679786fc7857956f16b33d2a0bda5ff1aa3643eadd61f68827ea99fdbe564"}) ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000080)=ANY=[@ANYBLOB="0300f0071ccf73336600000000000000"]) 00:23:02 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r1}, {}], 0x2, 0x0) dup2(r1, r2) 00:23:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(r0, &(0x7f00000001c0), 0x12) 00:23:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001440)={@remote, @ipv4={[], [], @multicast1}, @mcast2, 0x3, 0x0, 0x6, 0x500}) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000001540)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000800)) getpgrp(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001200), 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x0, 0x1aa9a1000, 0x1000000}], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003dc0), 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000004680)) 00:23:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1ff, 0x80) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x6}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000240)={r2, 0x9, 0x10, 0x7fff}, &(0x7f0000000280)=0x18) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0)=0x6, 0x4) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1f0000, 0x1, 0x4, 0x4, 0x1}, 0xc) 00:23:02 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001740)="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", 0x75c}], 0x1, &(0x7f0000000040)=ANY=[]}, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/group.stat\x00', 0x2761, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'vlan0\x00', @dev}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086607, 0x7fffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'bridge0\x00'}) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)) close(r1) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000140)) 00:23:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:02 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r1}, {}], 0x2, 0x0) dup2(r1, r2) 00:23:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x400000000001e, &(0x7f00000000c0)=0x1, 0x72) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001500)={0x0, 0x2710}, 0xbb5d314a49cc208e) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team0\x00', 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0), 0x12) 00:23:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67affcdf031a5a2080000001c26b3", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005800)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="104a2d9e3da15b605e2e56c00c59cac3663635b2b23f9cac534d7471bf264849a82316cb696265a3c178700bcd46179867a68a0456fb549bf1717cdbc75a83bc", 0x40}], 0x1, &(0x7f0000002800)}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000200)=@sco, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000580)=""/80, 0x50}], 0x2}}], 0x2, 0x0, 0x0) 00:23:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') getdents(r1, &(0x7f0000000080)=""/146, 0x92) getdents64(r1, &(0x7f0000001380)=""/4096, 0x1000) 00:23:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:03 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) dup2(r1, r2) 00:23:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r2, 0x5eb857) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r4 = accept4(r2, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002180)}}], 0x1, 0x0) sendto$inet(r3, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040), 0x0) sendmmsg(r4, &(0x7f0000000c00), 0x4000000000001e6, 0x0) 00:23:03 executing program 4: r0 = open(&(0x7f00007d9000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x5, @dev}, 0x1c) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000240)) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000f7a000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x7fff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f40000)='/dev/ptmx\x00', 0x200000000101002, 0x0) sendfile(r2, r1, &(0x7f0000f28ff8), 0x100000002) write(r2, &(0x7f0000000140), 0x0) r3 = getpgid(0x0) tkill(r3, 0x1000000000016) 00:23:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000000440)=""/11, 0x51c) 00:23:04 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) dup2(r1, r2) 00:23:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:04 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth0_to_team\x00', 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_team\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) 00:23:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x3f, 0x4) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) recvmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000001a80)=@nfc_llcp, 0x377, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, &(0x7f00000010c0)=""/164, 0xa4}}, {{&(0x7f0000002240)=@can, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000001180)=""/246, 0x6}}], 0x47d, 0x40000002, 0x0) sendto$inet(r0, &(0x7f0000c95ffd), 0x49b8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) 00:23:04 executing program 2: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300), 0x4) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0xbc, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000280)=0x7, 0x4) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x1000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() 00:23:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x7, 0x5) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x3407f, 0x62) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='y3D\b\x00') sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0x20007ffc) semget$private(0x0, 0x7, 0x203) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000540)=0x3) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000600)=0xe8) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000a00)='./file0\x00', r3, r4) getsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000580), &(0x7f00000005c0)=0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000980), &(0x7f00000009c0)=0x4) r5 = syz_open_dev$adsp(&(0x7f0000000880)='/dev/adsp#\x00', 0x8, 0x100) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)) r6 = gettid() ptrace$setopts(0x4206, r6, 0x7, 0x10) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)) getuid() ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000640)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000380)={r7, 0x20}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) fcntl$setownex(r2, 0xf, &(0x7f0000000500)={0x1, r6}) syz_open_procfs(r8, &(0x7f0000000940)='net/ip6_tables_matches\x00') getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@dev, @in=@local}}, {{@in=@local}, 0x0, @in=@rand_addr}}, &(0x7f00000008c0)=0xe8) execve(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000b00)=[&(0x7f0000000a80)='vcan0\x00', &(0x7f0000000ac0)='vcan0\x00'], &(0x7f0000000d40)=[&(0x7f0000000b40)='vboxnet0\x00', &(0x7f0000000b80)='/dev/adsp#\x00', &(0x7f0000000bc0)='vcan0\x00', &(0x7f0000000c00)='\x00', &(0x7f0000000c40)='/dev/adsp#\x00', &(0x7f0000000c80)='net/ip6_tables_matches\x00', &(0x7f0000000cc0)='/dev/adsp#\x00', &(0x7f0000000d00)='/dev/adsp#\x00']) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$unix(r9, &(0x7f000000dff8)=@file={0x1}, 0x2) 00:23:04 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) dup2(r1, r2) 00:23:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:05 executing program 2: write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000300), 0x4) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0xbc, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000280)=0x7, 0x4) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x1000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() 00:23:05 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{}, {r2}], 0x2, 0x0) dup2(r1, r2) 00:23:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet6(0xa, 0x100000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4, 0x0, 0x10001}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 00:23:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x4}}}]}, 0x34}}, 0x0) 00:23:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x4000000011) dup2(r0, r1) 00:23:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:06 executing program 4: r0 = open(&(0x7f00000004c0)='./file0\x00', 0x14104a, 0x0) write$evdev(r0, &(0x7f0000037fe8)=[{}], 0x18) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x200000000e) sendfile(r0, r0, &(0x7f0000000080), 0x2000000800004c36) socketpair$unix(0x1, 0x4000000000000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400218) creat(&(0x7f0000000300)='./file0\x00', 0x0) 00:23:06 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{}, {r2}], 0x2, 0x0) dup2(r1, r2) 00:23:06 executing program 0: r0 = socket(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$alg(r0, &(0x7f00000092c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="fe74", 0x2}], 0x1, &(0x7f0000000380)}], 0x1, 0x0) 00:23:06 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:06 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:06 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{}, {r2}], 0x2, 0x0) dup2(r1, r2) 00:23:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00009ecff8), 0x2, 0x3) 00:23:07 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:23:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = getpgrp(0x0) ioprio_get$pid(0x3, r1) 00:23:07 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r1}, {r2}], 0x2, 0x0) dup2(0xffffffffffffffff, r2) 00:23:07 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x1020) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f00000003c0)="0f20d86635080000000f22d866b80500000066b9060d20500f01c1ba6100b01aeed9a6390b0f0174170f009a0050670f01caba610066b80010000066ef260f22276766c74424004edeac976766c74424022c0000006766c744240600000000670f011424", 0x64}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x280100, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x80) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0xfa, "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"}, &(0x7f0000000080)=0x102) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x6}, &(0x7f0000000100)=0xc) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000015c0)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:07 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) bpf$MAP_CREATE(0x0, &(0x7f0000006000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0x6, 0x5, &(0x7f0000006000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000008000)=""/4096}, 0x48) 00:23:07 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:07 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x4, 0x0) ppoll(&(0x7f0000000540)=[{r0}], 0x1, &(0x7f0000000580)={0x0, 0x1c9c380}, &(0x7f00000005c0), 0x8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x200, 0x0) poll(&(0x7f0000000040)=[{r1}, {r2}], 0x2, 0x0) dup2(r1, 0xffffffffffffffff) 00:23:08 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:08 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000300000000000000000000009500020000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000002c0)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14}, 0xfdd2}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400218) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)) 00:23:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) socket(0x1e, 0x1000000000005, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:08 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="3b00000000000000a175"]) 00:23:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x304) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) 00:23:08 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) socket$inet6(0xa, 0x1000000000002, 0x0) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:08 executing program 0: socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="2f02726f75702e7374617000", 0x2761, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f0fdf6766c74424000900000d6766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000800)}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') 00:23:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) socket(0x1e, 0x1000000000005, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:09 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) socket$inet6(0xa, 0x1000000000002, 0x0) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x0, 0x73d}, 0x29b) sendto$inet6(r0, &(0x7f0000000000), 0x101d0, 0x0, 0x0, 0x0) 00:23:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) socket(0x1e, 0x1000000000005, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:09 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) socket$inet6(0xa, 0x1000000000002, 0x0) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:09 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x200000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xd0, &(0x7f0000000000), 0x4) 00:23:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000000b0607031dfffd946fa2830020200a0003000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 505.075940] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. [ 505.120338] netlink: 16 bytes leftover after parsing attributes in process `syz-executor4'. 00:23:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) kexec_load(0x0, 0x1, &(0x7f0000001300)=[{}], 0x1) 00:23:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) sendmsg(0xffffffffffffffff, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:10 executing program 4: creat(&(0x7f00000017c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000001880), 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000000c0)) exit(0x0) 00:23:10 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x28, 0xaff, 0x0, 0x0, {0x5}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0) 00:23:10 executing program 4: rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffd}, 0x0, 0x8) r0 = gettid() timer_create(0x8, &(0x7f0000000000)={0x0, 0x20, 0x4, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f000004a000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) io_setup(0x5, &(0x7f0000000340)=0x0) io_pgetevents(r1, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000240)={&(0x7f0000000080), 0x8}) 00:23:10 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240), &(0x7f0000000100)=0x8) 00:23:10 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r1, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(0x0, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'bridge_slave_0\x00', 0x3}, 0x18) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000600), &(0x7f0000000640)=0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x549080) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000580)='bcsh0\x00') r3 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) write$USERIO_CMD_REGISTER(r3, &(0x7f00000002c0), 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f00000ddff8), 0x102000000) getsockopt$sock_buf(r3, 0x1, 0x37, &(0x7f0000000680)=""/195, &(0x7f0000000780)=0xc3) 00:23:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4543(gcm(aes-generic)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcff9671a5cf542b025", 0x24) accept$alg(0xffffffffffffffff, 0x0, 0x0) 00:23:11 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000001700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000380)="88", 0x1}]) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_destroy(r2) tee(r3, r1, 0x8, 0x0) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)="06", 0x1}], 0x1, 0x0) [ 506.152908] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 3, id = 0 00:23:11 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:23:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="2400000052001f0014f9f407000904000a00071008000100feffffff0800000000000000", 0x24) 00:23:11 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:23:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:12 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x8) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x60000000) 00:23:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'bridge_slave_0\x00', 0x3}, 0x18) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000600), &(0x7f0000000640)=0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x549080) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000580)='bcsh0\x00') r3 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) write$USERIO_CMD_REGISTER(r3, &(0x7f00000002c0), 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f00000ddff8), 0x102000000) getsockopt$sock_buf(r3, 0x1, 0x37, &(0x7f0000000680)=""/195, &(0x7f0000000780)=0xc3) 00:23:12 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 507.431430] IPVS: ftp: loaded support on port[0] = 21 00:23:12 executing program 4: setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x80000001}, {0xa, 0x0, 0x0, @remote}}, 0x5c) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000000c0), 0xc, &(0x7f0000001640)=[{&(0x7f00000020c0)=ANY=[@ANYBLOB="1000007f0ad2185331cf92884302"], 0x1}], 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 00:23:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:23:12 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:12 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:13 executing program 0: r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x2, 0x408, [0x20000800, 0x0, 0x0, 0x20000830, 0x20000a68], 0x0, &(0x7f0000000000), &(0x7f0000000800)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_1\x00', 'vlan0\x00', 'veth1_to_team\x00', 'dummy0\x00', @local, [], @empty, [], 0x1d8, 0x1d8, 0x208, [@statistic={'statistic\x00', 0x18}, @comment={'comment\x00', 0x100}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x806, "030073663000001000", 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast, [], @broadcast, [], 0xd0, 0x108, 0x140, [@arp={'arp\x00', 0x38, {{0x0, 0x0, 0x0, @multicast1, 0x0, @loopback, 0x0, @empty, [], @dev}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffc}}}]}, @snat={'snat\x00', 0x10, {{@dev, 0xffffffffffffffff}}}}]}]}, 0x480) 00:23:13 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x5, &(0x7f0000001480), 0x3) 00:23:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="94c8"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 00:23:13 executing program 1: close(0xffffffffffffffff) io_setup(0x8, &(0x7f0000000140)=0x0) r1 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r1, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r0, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x5ee}]) 00:23:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'bridge_slave_0\x00', 0x3}, 0x18) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000600), &(0x7f0000000640)=0x4) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x549080) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000580)='bcsh0\x00') r3 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) write$USERIO_CMD_REGISTER(r3, &(0x7f00000002c0), 0x2) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, &(0x7f00000ddff8), 0x102000000) getsockopt$sock_buf(r3, 0x1, 0x37, &(0x7f0000000680)=""/195, &(0x7f0000000780)=0xc3) 00:23:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)=';', 0x1}], 0x1, &(0x7f00000001c0)}, 0x0) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/87, 0x57}], 0x1, &(0x7f00000000c0)=""/60, 0x3c}, 0x0) 00:23:13 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:13 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000280), 0x2000000004) sendfile(r0, r0, &(0x7f0000000000), 0x5) 00:23:13 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) name_to_handle_at(r2, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x8}, &(0x7f0000000100), 0x1400) 00:23:14 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:14 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x0, 0x0) mount(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='sysv\x00', 0x200060, 0x0) 00:23:14 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0xd803}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={"766c616e300000f6ffffffffffffff00", {0x2, 0x0, @rand_addr=0x5}}) dup3(r1, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400218) 00:23:14 executing program 0: ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x3fd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000), 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000002a00)=[{{&(0x7f0000000400)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000600)=""/164, 0xa4}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000780)=""/143, 0x8f}, {&(0x7f00000002c0)=""/2, 0x2}], 0x4, &(0x7f00000008c0)=""/93, 0x5d, 0x2}}, {{&(0x7f0000000940)=@nfc_llcp, 0x80, &(0x7f0000000a40)=[{&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000340)=""/61, 0x3d}], 0x2, &(0x7f0000000a80)=""/208, 0xd0}}], 0x2, 0x40000000, &(0x7f0000002b80)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='rdma.current\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111}}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8923, &(0x7f0000000380)={"62707130000b00fe0000000000faff00", r2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bpq0\x00', 0x1212}) unshare(0x40000000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x0, 0x0) openat$cgroup(r3, &(0x7f0000002bc0)='syz1\x00', 0x200002, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f00000001c0), 0x1) getpgid(0xffffffffffffffff) 00:23:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) sendto$inet(r0, &(0x7f00000009c0)="1729", 0x2, 0x0, &(0x7f0000000a40)={0x2, 0x0, @dev}, 0x10) shutdown(r0, 0x1) 00:23:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000380)) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0x8}}, 0x14) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x0, 0x1aa9a1000, 0x1000000}], 0x0) geteuid() fstat(r0, &(0x7f0000004680)) [ 509.877711] IPVS: ftp: loaded support on port[0] = 21 00:23:15 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 510.194703] : renamed from bpq0 00:23:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0), &(0x7f0000000280)=0x1) [ 510.240744] IPVS: ftp: loaded support on port[0] = 21 00:23:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:15 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000900)=ANY=[], &(0x7f00000002c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000006a0a00fe00000000850000000b000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0xbd, &(0x7f0000000100)="bc15a54b0e46cdc214c494cbfc7e", &(0x7f0000000380)=""/189, 0x869c}, 0x28) rename(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') 00:23:15 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x0, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:15 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1}, 0x8) listen(r0, 0x3f) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, &(0x7f0000975000)=@can, &(0x7f0000000000)=0x80, 0x0) sendmmsg(r2, &(0x7f0000000c00), 0x70967c17166daa5c, 0x0) close(r2) 00:23:15 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$EVIOCGREP(r0, 0x40047440, &(0x7f00000000c0)=""/174) 00:23:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)) 00:23:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x10, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) 00:23:16 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:16 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2c}]}, 0x1e4) 00:23:16 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x805}) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000200)={"65716c000000a95b004000", @ifru_names='eql\x00'}) 00:23:16 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_coalesce={0x29}}) 00:23:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x0, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:16 executing program 4: syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) prctl$intptr(0x26, 0x1) mknod(&(0x7f00000010c0)='./file0\x00', 0x29, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000300)) 00:23:16 executing program 5: r0 = request_key(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000240)='logon\x00', 0x0) keyctl$unlink(0x9, r0, r0) 00:23:16 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:17 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) lseek(r1, 0x0, 0x2) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0xa84, 0x4) dup(r0) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setrlimit(0x9, &(0x7f00000003c0)={0x2, 0x3}) r4 = dup(r3) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r3, 0x0, &(0x7f0000000200)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000240)=0x4, 0x4) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sendfile(r5, r5, &(0x7f0000000340)=0xffffffd, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) ioctl$TIOCSCTTY(r4, 0x540e, 0x2) sendto$inet6(r4, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) r6 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000380)) accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', r7}) ftruncate(r6, 0x80080) sendfile(r4, r6, &(0x7f0000d83ff8), 0x2008000fffffffe) 00:23:17 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x0, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:17 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x6a) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) sendto$inet(r0, &(0x7f0000000100), 0x240, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) recvmmsg(r0, &(0x7f00000001c0), 0x315, 0xea225aec34b1dd0e, 0x0) 00:23:17 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x2) ioctl$UI_SET_SWBIT(r0, 0x8108551b, 0x70e000) close(r0) 00:23:17 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x0, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:17 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1ff, 0x480c0) perf_event_open(&(0x7f0000002900)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000180)=0x1e) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x7a) sendto$inet(r1, &(0x7f0000617fc9), 0xfe41, 0x10000002000091b, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback, [0x22b, 0x0, 0x8]}, 0x10) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r2, 0xb) r3 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000100)=""/152) 00:23:18 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0xfffffdf5, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='bbr\x00', 0x39) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) recvfrom(r0, &(0x7f0000000480)=""/239, 0xef, 0x0, 0x0, 0xf7) close(r0) 00:23:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x0, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:18 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4013}) ptrace$setregset(0x4209, r1, 0x20000004, &(0x7f0000000100)={&(0x7f0000000040)}) 00:23:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) dup(0xffffffffffffffff) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000002ff0), 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000080), 0x4) bind$inet(r1, &(0x7f00001edff0)={0x2, 0x10000004e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) recvmmsg(r1, &(0x7f00000038c0)=[{{&(0x7f0000001a80)=@nfc_llcp, 0x80, &(0x7f00000020c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, &(0x7f00000010c0)=""/164, 0xa4}}, {{&(0x7f0000002240)=@can, 0x80, &(0x7f0000002580), 0x0, &(0x7f0000001180)=""/246, 0xf6}}], 0x2ba, 0x40000002, 0x0) sendto$inet(r1, &(0x7f0000c95ffd), 0x49b8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) socketpair$inet(0x2, 0x0, 0x9, &(0x7f0000000000)) [ 513.272915] ptrace attach of "/root/syz-executor3"[6560] was attempted by "/root/syz-executor3"[14319] 00:23:18 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 513.370892] ptrace attach of "/root/syz-executor3"[6560] was attempted by "/root/syz-executor3"[14323] 00:23:18 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) socket(0x1e, 0x1000000000005, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:18 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x2) ioctl$UI_SET_SWBIT(r0, 0xc00c5512, 0x70e000) 00:23:18 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 513.761968] not chained 130000 origins [ 513.765898] CPU: 0 PID: 14324 Comm: syz-executor5 Not tainted 4.19.0+ #77 [ 513.771608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.771608] Call Trace: [ 513.771608] dump_stack+0x32d/0x480 [ 513.771608] ? save_stack_trace+0xc6/0x110 [ 513.771608] kmsan_internal_chain_origin+0x222/0x240 [ 513.771608] ? skb_copy+0x56c/0xbc0 [ 513.771608] ? inet_sendmsg+0x4e9/0x800 [ 513.771608] ? __sys_sendto+0x97b/0xb80 [ 513.809075] ? __se_sys_sendto+0x107/0x130 [ 513.809075] ? __x64_sys_sendto+0x6e/0x90 [ 513.809075] ? do_syscall_64+0xcf/0x110 [ 513.809075] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 513.827106] ? kmsan_internal_chain_origin+0x136/0x240 [ 513.827106] ? __msan_chain_origin+0x6d/0xd0 [ 513.827106] ? __save_stack_trace+0x8be/0xc60 [ 513.827106] ? save_stack_trace+0xc6/0x110 [ 513.827106] ? kmsan_internal_chain_origin+0x136/0x240 [ 513.827106] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 513.827106] ? __msan_memcpy+0x6f/0x80 [ 513.827106] ? skb_copy_bits+0x1d2/0xc90 [ 513.827106] ? skb_copy+0x56c/0xbc0 [ 513.827106] ? tcp_send_synack+0x7a3/0x18f0 [ 513.869183] ? tcp_rcv_state_process+0x29b5/0x6e50 [ 513.869183] ? tcp_v4_do_rcv+0xb25/0xd80 [ 513.869183] ? __release_sock+0x32d/0x760 [ 513.869183] ? release_sock+0x99/0x2a0 [ 513.869183] ? tcp_sendmsg+0xd6/0x100 [ 513.869183] ? inet_sendmsg+0x4e9/0x800 [ 513.869183] ? __sys_sendto+0x97b/0xb80 [ 513.869183] ? __se_sys_sendto+0x107/0x130 [ 513.869183] ? __x64_sys_sendto+0x6e/0x90 [ 513.869183] ? do_syscall_64+0xcf/0x110 [ 513.869183] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 513.869183] ? is_bpf_text_address+0x49e/0x4d0 [ 513.869183] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 513.869183] ? __module_address+0x6a/0x610 [ 513.869183] ? get_stack_info+0x863/0x9d0 [ 513.869183] __msan_chain_origin+0x6d/0xd0 [ 513.869183] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 513.869183] __save_stack_trace+0x8be/0xc60 [ 513.869183] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 513.869183] save_stack_trace+0xc6/0x110 [ 513.869183] kmsan_internal_chain_origin+0x136/0x240 [ 513.869183] ? kmsan_internal_chain_origin+0x136/0x240 [ 513.869183] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 513.869183] ? __msan_memcpy+0x6f/0x80 [ 513.869183] ? skb_copy_bits+0x1d2/0xc90 [ 513.869183] ? skb_copy+0x56c/0xbc0 [ 513.869183] ? tcp_send_synack+0x7a3/0x18f0 [ 513.869183] ? tcp_rcv_state_process+0x29b5/0x6e50 [ 513.869183] ? tcp_v4_do_rcv+0xb25/0xd80 [ 513.869183] ? __release_sock+0x32d/0x760 [ 513.869183] ? release_sock+0x99/0x2a0 [ 513.869183] ? tcp_sendmsg+0xd6/0x100 [ 513.869183] ? inet_sendmsg+0x4e9/0x800 [ 513.869183] ? __sys_sendto+0x97b/0xb80 [ 513.869183] ? __se_sys_sendto+0x107/0x130 [ 513.869183] ? __x64_sys_sendto+0x6e/0x90 [ 514.027078] ? do_syscall_64+0xcf/0x110 [ 514.027078] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 514.027078] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 514.040447] ? memcg_kmem_put_cache+0x8e/0x460 [ 514.040447] ? __msan_get_context_state+0x9/0x30 [ 514.040447] ? INIT_INT+0xc/0x30 [ 514.040447] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 514.040447] ? __msan_get_context_state+0x9/0x30 [ 514.040447] kmsan_memcpy_origins+0x13d/0x1b0 [ 514.067242] __msan_memcpy+0x6f/0x80 [ 514.067242] skb_copy_bits+0x1d2/0xc90 [ 514.067242] skb_copy+0x56c/0xbc0 [ 514.079554] tcp_send_synack+0x7a3/0x18f0 [ 514.079554] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 514.079554] tcp_rcv_state_process+0x29b5/0x6e50 [ 514.079554] ? tcp_sendmsg_locked+0x58e9/0x6c30 [ 514.079554] ? __msan_poison_alloca+0x1e0/0x2b0 [ 514.079554] tcp_v4_do_rcv+0xb25/0xd80 [ 514.079554] ? inet_sk_rx_dst_set+0x200/0x200 [ 514.113625] __release_sock+0x32d/0x760 [ 514.113625] release_sock+0x99/0x2a0 [ 514.113625] tcp_sendmsg+0xd6/0x100 [ 514.113625] ? tcp_sendmsg_locked+0x6c30/0x6c30 [ 514.113625] inet_sendmsg+0x4e9/0x800 [ 514.113625] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 514.113625] ? security_socket_sendmsg+0x1bd/0x200 [ 514.113625] ? inet_getname+0x490/0x490 [ 514.113625] __sys_sendto+0x97b/0xb80 [ 514.113625] ? syscall_return_slowpath+0x123/0x8c0 [ 514.113625] ? put_timespec64+0x162/0x220 [ 514.113625] __se_sys_sendto+0x107/0x130 [ 514.113625] __x64_sys_sendto+0x6e/0x90 [ 514.113625] do_syscall_64+0xcf/0x110 [ 514.113625] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 514.113625] RIP: 0033:0x457569 [ 514.113625] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 514.113625] RSP: 002b:00007f1edcb33c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 514.113625] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457569 [ 514.113625] RDX: 00000000fffffdf5 RSI: 00000000200001c0 RDI: 0000000000000003 [ 514.113625] RBP: 000000000072bfa0 R08: 0000000020deaff0 R09: 0000000000000010 [ 514.113625] R10: 00000000200007fc R11: 0000000000000246 R12: 00007f1edcb346d4 [ 514.113625] R13: 00000000004c3b86 R14: 00000000004d5cc8 R15: 00000000ffffffff [ 514.113625] Uninit was stored to memory at: [ 514.113625] kmsan_internal_chain_origin+0x136/0x240 [ 514.113625] __msan_chain_origin+0x6d/0xd0 [ 514.113625] __save_stack_trace+0x8be/0xc60 [ 514.113625] save_stack_trace+0xc6/0x110 [ 514.113625] kmsan_internal_chain_origin+0x136/0x240 [ 514.113625] kmsan_memcpy_origins+0x13d/0x1b0 [ 514.113625] __msan_memcpy+0x6f/0x80 [ 514.113625] skb_copy_bits+0x1d2/0xc90 [ 514.113625] skb_copy+0x56c/0xbc0 [ 514.113625] tcp_send_synack+0x7a3/0x18f0 [ 514.113625] tcp_rcv_state_process+0x29b5/0x6e50 [ 514.113625] tcp_v4_do_rcv+0xb25/0xd80 [ 514.113625] __release_sock+0x32d/0x760 [ 514.113625] release_sock+0x99/0x2a0 [ 514.113625] tcp_sendmsg+0xd6/0x100 [ 514.113625] inet_sendmsg+0x4e9/0x800 [ 514.113625] __sys_sendto+0x97b/0xb80 [ 514.113625] __se_sys_sendto+0x107/0x130 [ 514.113625] __x64_sys_sendto+0x6e/0x90 [ 514.113625] do_syscall_64+0xcf/0x110 [ 514.113625] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 514.113625] [ 514.113625] Uninit was stored to memory at: [ 514.113625] kmsan_internal_chain_origin+0x136/0x240 [ 514.113625] __msan_chain_origin+0x6d/0xd0 [ 514.113625] __save_stack_trace+0x8be/0xc60 [ 514.113625] save_stack_trace+0xc6/0x110 [ 514.113625] kmsan_internal_chain_origin+0x136/0x240 [ 514.113625] kmsan_memcpy_origins+0x13d/0x1b0 [ 514.113625] __msan_memcpy+0x6f/0x80 [ 514.113625] skb_copy_bits+0x1d2/0xc90 [ 514.113625] skb_copy+0x56c/0xbc0 [ 514.113625] tcp_send_synack+0x7a3/0x18f0 [ 514.113625] tcp_rcv_state_process+0x29b5/0x6e50 [ 514.113625] tcp_v4_do_rcv+0xb25/0xd80 [ 514.113625] __release_sock+0x32d/0x760 [ 514.113625] release_sock+0x99/0x2a0 [ 514.113625] tcp_sendmsg+0xd6/0x100 [ 514.113625] inet_sendmsg+0x4e9/0x800 [ 514.113625] __sys_sendto+0x97b/0xb80 [ 514.113625] __se_sys_sendto+0x107/0x130 [ 514.113625] __x64_sys_sendto+0x6e/0x90 [ 514.113625] do_syscall_64+0xcf/0x110 [ 514.113625] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 514.113625] [ 514.113625] Uninit was stored to memory at: [ 514.113625] kmsan_internal_chain_origin+0x136/0x240 [ 514.113625] __msan_chain_origin+0x6d/0xd0 [ 514.113625] __save_stack_trace+0x8be/0xc60 [ 514.113625] save_stack_trace+0xc6/0x110 [ 514.113625] kmsan_internal_chain_origin+0x136/0x240 [ 514.113625] kmsan_memcpy_origins+0x13d/0x1b0 [ 514.113625] __msan_memcpy+0x6f/0x80 [ 514.113625] skb_copy_bits+0x1d2/0xc90 [ 514.113625] skb_copy+0x56c/0xbc0 [ 514.113625] tcp_send_synack+0x7a3/0x18f0 [ 514.113625] tcp_rcv_state_process+0x29b5/0x6e50 [ 514.113625] tcp_v4_do_rcv+0xb25/0xd80 [ 514.113625] __release_sock+0x32d/0x760 [ 514.113625] release_sock+0x99/0x2a0 [ 514.113625] tcp_sendmsg+0xd6/0x100 [ 514.113625] inet_sendmsg+0x4e9/0x800 [ 514.113625] __sys_sendto+0x97b/0xb80 [ 514.113625] __se_sys_sendto+0x107/0x130 [ 514.113625] __x64_sys_sendto+0x6e/0x90 [ 514.113625] do_syscall_64+0xcf/0x110 [ 514.113625] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 514.113625] [ 514.113625] Uninit was stored to memory at: [ 514.113625] kmsan_internal_chain_origin+0x136/0x240 [ 514.113625] __msan_chain_origin+0x6d/0xd0 [ 514.113625] __save_stack_trace+0x8be/0xc60 [ 514.113625] save_stack_trace+0xc6/0x110 [ 514.113625] kmsan_internal_chain_origin+0x136/0x240 [ 514.113625] kmsan_memcpy_origins+0x13d/0x1b0 [ 514.113625] __msan_memcpy+0x6f/0x80 [ 514.113625] skb_copy_bits+0x1d2/0xc90 [ 514.113625] skb_copy+0x56c/0xbc0 [ 514.113625] tcp_send_synack+0x7a3/0x18f0 [ 514.113625] tcp_rcv_state_process+0x29b5/0x6e50 [ 514.113625] tcp_v4_do_rcv+0xb25/0xd80 [ 514.113625] __release_sock+0x32d/0x760 [ 514.113625] release_sock+0x99/0x2a0 [ 514.113625] tcp_sendmsg+0xd6/0x100 [ 514.113625] inet_sendmsg+0x4e9/0x800 [ 514.113625] __sys_sendto+0x97b/0xb80 [ 514.113625] __se_sys_sendto+0x107/0x130 [ 514.113625] __x64_sys_sendto+0x6e/0x90 [ 514.113625] do_syscall_64+0xcf/0x110 [ 514.113625] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 514.113625] [ 514.113625] Uninit was stored to memory at: [ 514.113625] kmsan_internal_chain_origin+0x136/0x240 [ 514.113625] __msan_chain_origin+0x6d/0xd0 [ 514.113625] __save_stack_trace+0x8be/0xc60 [ 514.113625] save_stack_trace+0xc6/0x110 [ 514.113625] kmsan_internal_chain_origin+0x136/0x240 [ 514.113625] kmsan_memcpy_origins+0x13d/0x1b0 [ 514.113625] __msan_memcpy+0x6f/0x80 [ 514.113625] skb_copy_bits+0x1d2/0xc90 [ 514.113625] skb_copy+0x56c/0xbc0 [ 514.113625] tcp_send_synack+0x7a3/0x18f0 [ 514.113625] tcp_rcv_state_process+0x29b5/0x6e50 [ 514.113625] tcp_v4_do_rcv+0xb25/0xd80 [ 514.113625] __release_sock+0x32d/0x760 [ 514.113625] release_sock+0x99/0x2a0 [ 514.113625] tcp_sendmsg+0xd6/0x100 [ 514.113625] inet_sendmsg+0x4e9/0x800 [ 514.113625] __sys_sendto+0x97b/0xb80 [ 514.113625] __se_sys_sendto+0x107/0x130 [ 514.113625] __x64_sys_sendto+0x6e/0x90 [ 514.113625] do_syscall_64+0xcf/0x110 [ 514.113625] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 514.113625] [ 514.113625] Uninit was stored to memory at: [ 514.113625] kmsan_internal_chain_origin+0x136/0x240 [ 514.113625] __msan_chain_origin+0x6d/0xd0 [ 514.113625] __save_stack_trace+0x8be/0xc60 [ 514.113625] save_stack_trace+0xc6/0x110 [ 514.113625] kmsan_internal_chain_origin+0x136/0x240 [ 514.113625] kmsan_memcpy_origins+0x13d/0x1b0 [ 514.113625] __msan_memcpy+0x6f/0x80 [ 514.113625] skb_copy_bits+0x1d2/0xc90 [ 514.113625] skb_copy+0x56c/0xbc0 [ 514.113625] tcp_send_synack+0x7a3/0x18f0 [ 514.113625] tcp_rcv_state_process+0x29b5/0x6e50 [ 514.113625] tcp_v4_do_rcv+0xb25/0xd80 [ 514.113625] __release_sock+0x32d/0x760 [ 514.113625] release_sock+0x99/0x2a0 [ 514.113625] tcp_sendmsg+0xd6/0x100 [ 514.113625] inet_sendmsg+0x4e9/0x800 [ 514.113625] __sys_sendto+0x97b/0xb80 [ 514.113625] __se_sys_sendto+0x107/0x130 [ 514.113625] __x64_sys_sendto+0x6e/0x90 [ 514.113625] do_syscall_64+0xcf/0x110 [ 514.113625] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 514.113625] [ 514.113625] Uninit was stored to memory at: [ 514.113625] kmsan_internal_chain_origin+0x136/0x240 [ 514.113625] __msan_chain_origin+0x6d/0xd0 [ 514.113625] __save_stack_trace+0x8be/0xc60 [ 514.113625] save_stack_trace+0xc6/0x110 [ 514.113625] kmsan_internal_chain_origin+0x136/0x240 [ 514.113625] kmsan_memcpy_origins+0x13d/0x1b0 [ 514.113625] __msan_memcpy+0x6f/0x80 [ 514.113625] skb_copy_bits+0x1d2/0xc90 [ 514.113625] skb_copy+0x56c/0xbc0 [ 514.113625] tcp_send_synack+0x7a3/0x18f0 [ 514.113625] tcp_rcv_state_process+0x29b5/0x6e50 [ 514.113625] tcp_v4_do_rcv+0xb25/0xd80 [ 514.113625] __release_sock+0x32d/0x760 [ 514.113625] release_sock+0x99/0x2a0 00:23:19 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) [ 514.113625] tcp_sendmsg+0xd6/0x100 [ 514.113625] inet_sendmsg+0x4e9/0x800 [ 514.113625] __sys_sendto+0x97b/0xb80 [ 514.113625] __se_sys_sendto+0x107/0x130 [ 514.113625] __x64_sys_sendto+0x6e/0x90 [ 514.113625] do_syscall_64+0xcf/0x110 [ 514.113625] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 514.113625] [ 514.113625] Local variable description: ----v.addr.i.i.i.i.i.i@try_charge [ 514.113625] Variable was created at: [ 514.113625] try_charge+0x1ee/0x4110 [ 514.113625] mem_cgroup_charge_skmem+0x1af/0x380 00:23:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x105d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x75, 0x0, 0x2}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x0, 0x30}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) 00:23:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) socket(0x1e, 0x1000000000005, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0xe, 0xfa00, {0x0, &(0x7f0000000040)}}, 0xfe14) r1 = open(&(0x7f0000000240)='./bus\x00', 0x105000, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) 00:23:20 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000000180)={0x4, 0xffffffffffffffff, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "a702ca9c1a8d1dc1e4e29ed4d2927b5e8155ac02a25334d332f97653d9d90256b4da4ec6f2b44831a3b878ada2f3e5883f2f7c806fb61c1993cc4f19a22c61e4"}}, 0x80}}, 0x0) 00:23:20 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:20 executing program 3: clone(0x200, &(0x7f0000000080), &(0x7f00000003c0), &(0x7f0000000100), &(0x7f0000000300)) symlink(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='./file1\x00') mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000940)='./file0\x00', &(0x7f0000000900), &(0x7f0000000580)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = creat(&(0x7f0000000080)="e91f7189591e9233614b00", 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)="e91f7189591e9233614b00", &(0x7f0000000140), &(0x7f0000001580)) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f00000001c0)=ANY=[]) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, &(0x7f0000000180), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000400), &(0x7f0000000b40)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) futex(&(0x7f0000000000)=0x2, 0x0, 0x2, &(0x7f0000000280)={0x0, r3+30000000}, &(0x7f00000002c0), 0x0) 00:23:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget(0x1, 0x0, 0x0) 00:23:21 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:21 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000140)={0x3, 0x0, 0x33b900}) 00:23:21 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) socket(0x1e, 0x1000000000005, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:21 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000340)={'raw\x00', 0x2, [{}, {}]}, 0x48) 00:23:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffff}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000800)="260f30d89c2f0001c0feb9e40a0000b8bfb10000ba000000000f3066baa00066b8613a66ef0f017800660f3824f866660f38801d0700000066ba4100b00aee0fc79ac4f9000066baf80cb8d6d6a485ef66bafc0cb00fee"}], 0x305, 0x0, &(0x7f0000000740), 0x1370) setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(hmac(md5),ctr-serpent-avx)\x00'}, 0x58) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000440), &(0x7f0000000300)=""/54}, 0x18) 00:23:22 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r1, 0x0, 0x0, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:22 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[@ANYBLOB='#! ./filep ecb-camellia-aesni\x00 #! ecb-camellia-aesni\x00 skcipher\x00'], 0x40) recvmsg(r1, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/92, 0x200002dc}], 0x1, &(0x7f0000000a00)=""/111, 0x6f}, 0x0) 00:23:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 00:23:22 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x0, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:22 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") keyctl$negate(0xd, 0x0, 0x0, 0x0) 00:23:22 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) request_key(&(0x7f0000000140)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='ceph\x00', 0xfffffffffffffffb) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) socketpair$inet6(0xa, 0x5, 0x5, &(0x7f00000000c0)) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="33ad958ecc0ce798de59cd103d04"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000440)="04") 00:23:22 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000002980)=@rc, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000100)}}], 0x69, 0x0) 00:23:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x1b, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0x90) [ 517.910530] ceph: device name is missing path (no : separator in 3­•ŽÌ ç˜ÞYÍ=) 00:23:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x0, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:23 executing program 4: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0f85403, &(0x7f0000000140)) [ 518.047061] ceph: device name is missing path (no : separator in 3­•ŽÌ ç˜ÞYÍ=) 00:23:23 executing program 5: 00:23:23 executing program 0: 00:23:23 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0), 0x0, 0x0) 00:23:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0), 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvfrom(r1, &(0x7f0000002900)=""/4096, 0xfffffffffffffef6, 0x0, 0x0, 0x0) 00:23:23 executing program 5: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x4200) 00:23:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 00:23:23 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x800000000000124, 0xffd8) 00:23:23 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x0, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:23 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0), 0x0, 0x0) 00:23:23 executing program 5: 00:23:24 executing program 3: 00:23:24 executing program 4: 00:23:24 executing program 5: 00:23:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)) r1 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r1, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(0x0, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:24 executing program 2: sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'drbg_nopr_hmac_sha512\x00'}}}, 0xe0}}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @dev, 'lo\x00'}}, 0x1e) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/126, &(0x7f0000000180)=0x7e) sendmmsg(r0, &(0x7f00000000c0), 0x0, 0x0) 00:23:24 executing program 0: 00:23:24 executing program 4: 00:23:24 executing program 3: 00:23:24 executing program 5: 00:23:24 executing program 4: 00:23:24 executing program 2: 00:23:25 executing program 0: 00:23:25 executing program 5: 00:23:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x0, &(0x7f0000000600)) 00:23:25 executing program 3: 00:23:25 executing program 2: 00:23:25 executing program 5: 00:23:25 executing program 0: 00:23:25 executing program 4: 00:23:25 executing program 3: 00:23:25 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x0, &(0x7f0000000600)) 00:23:25 executing program 0: 00:23:25 executing program 5: 00:23:25 executing program 2: 00:23:26 executing program 4: 00:23:26 executing program 3: 00:23:26 executing program 5: 00:23:26 executing program 2: 00:23:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x0, &(0x7f0000000600)) 00:23:26 executing program 0: 00:23:26 executing program 5: 00:23:26 executing program 4: 00:23:26 executing program 3: 00:23:26 executing program 2: 00:23:26 executing program 0: 00:23:26 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:27 executing program 0: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001800)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000001d80)=""/4096, 0x1000}], 0x1) ptrace$peek(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000300)=0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000600), 0x0) 00:23:27 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x200, 0x0) unshare(0x40020000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000003c0)={'veth0_to_team\x00', {0x2, 0x0, @remote}}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)) 00:23:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0xa70, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001100], 0x0, &(0x7f0000000000), &(0x7f0000001100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'veth1_to_bond\x00', 'ip_vti0\x00', 'rose0\x00', 'veth1_to_team\x00', @remote, [], @empty, [], 0x908, 0x908, 0x940, [@among={'among\x00', 0x838, {{0xc, 0x0, 0x0, {[], 0x1, [{[], @dev}]}, {[], 0x1, [{[], @remote}]}}}}, @mac={'mac\x00', 0x10}]}}, @common=@mark={'mark\x00', 0x10}}, {{{0x3, 0x0, 0x0, 'bond_slave_0\x00', '\x00', "726f736530000200", 'ipddp0\x00', @random="e915b0505f73", [], @local, [], 0x70, 0x70, 0xa0}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0xae8) 00:23:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x87, 0x3f, 0x8, 0x6, 0xce, 0x800, 0x6446, 0x3, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0x2}, &(0x7f0000000180)=0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', 0x8}, 0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002bc0)={0x0, 0x64, "764d0b8081e9fbcbddce62193fd2a9844c83648cfda8600429f6cd29b2319824bae0894f1297fa9a4741a2f89673a094d099586b9d5b4962c0c827d6e74ffb4144d00cecb94791b0a62db3419daf98caabf643552b89ac06c955932ba74704b15886f8b2"}, &(0x7f0000002c80)=0x6c) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000080)=@in={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000027c0), 0x0, &(0x7f00000029c0)}, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) close(0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000400)) bind$inet(r2, &(0x7f0000e5b000)={0x2, 0x2004e20, @rand_addr}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r4 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) ftruncate(r3, 0x4) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev, @in=@remote}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8) close(r4) sendmsg$rds(r5, &(0x7f0000001c00)={&(0x7f0000000080), 0x10, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f0000001b40), 0x0, 0xffffffffffffffff}, 0x0) close(r5) 00:23:27 executing program 4: [ 522.320763] ebt_among: wrong size: 2104 against expected 1056, rounded to 1056 [ 522.337779] IPVS: ftp: loaded support on port[0] = 21 00:23:27 executing program 4: r0 = socket$kcm(0x2, 0x1000000000000805, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000300)={r0}) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000006c0)=@in={0x2, 0x0, @loopback=0xa1414aa}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400), 0x1ecac}], 0x1, &(0x7f0000002a40)}, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000640)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000200), 0xfc99}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 522.486553] IPVS: ftp: loaded support on port[0] = 21 00:23:27 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000080)={0x0, 0x80, 0x0, 'queue0\x00'}) 00:23:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x5ee}]) 00:23:27 executing program 5: r0 = socket(0x11, 0x80a, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) 00:23:28 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x1, 0x1400000000000000, &(0x7f0000000480)="e9"}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100), 0x28) syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x2, 0x0) 00:23:28 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) 00:23:28 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x5, &(0x7f0000000000), 0x170) 00:23:28 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 523.279067] binder: 14609:14612 ioctl c0306201 20000440 returned -14 00:23:28 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, &(0x7f0000000240)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828") chdir(&(0x7f0000000000)='./file0\x00') r0 = memfd_create(&(0x7f0000000100)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) chroot(&(0x7f0000000180)='./file0\x00') 00:23:28 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x5ee}]) [ 523.397385] binder: BINDER_SET_CONTEXT_MGR already set [ 523.403113] binder: 14609:14622 ioctl 40046207 0 returned -16 [ 523.428744] binder_alloc: 14609: binder_alloc_buf, no vma [ 523.434926] binder: 14609:14612 transaction failed 29189/-3, size 24-8 line 2970 [ 523.442949] binder: 14609:14612 ioctl c0306201 20000440 returned -14 [ 523.509850] binder: release 14609:14612 transaction 13 out, still active [ 523.517091] binder: undelivered TRANSACTION_COMPLETE 00:23:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000001f00)="640f0d52ea660f15c4c463396d7fb0456666440feedd8fe978c11266ba420066ed0f8400800000b9ac0300000f3266baf80cb8be0c2a8def66bafc0cb06dee6641dbe1", 0x43}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 523.562122] binder: send failed reply for transaction 13, target dead 00:23:28 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000000b000)={&(0x7f0000000100)={0x10, 0x5}, 0xc, &(0x7f0000beeff0)={&(0x7f000063de2c)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in=@rand_addr}, {@in6=@mcast2, 0x0, 0x32}, @in6=@ipv4, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 00:23:29 executing program 3: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x0) 00:23:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000140)=0x0) r2 = socket(0x1e, 0x1000000000005, 0x0) sendmsg(r2, &(0x7f0000db5fc8)={&(0x7f00004aeb5c)=@generic={0x10000001001e, "030000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48007be61ffe06d79f00000000000000076c3f010039d8f986ff01000000000000af06d5fe32c419d67bcbc7e3ad316a198356edb9b7341c1fd45624281e27800ece70b076c3979ac40000bd767e2e78a1dfd300881a1565b3b16d7436"}, 0x80, &(0x7f0000000300), 0x0, &(0x7f000016cf61)}, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, 0xffffffffffffffff, &(0x7f0000000140), 0x5ee}]) 00:23:29 executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x101000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x1) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) ioctl$TIOCSBRK(r0, 0x40044591) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x400000000, 0x7ffffffa) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000400)=0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x70, 0xffffffffffff3d0a, 0xffffffffffffffff, 0xffffffffffffa5fb, 0x7fff, 0x0, 0x8001, 0x1, 0x0, 0xffffffff, 0x2, 0x81, 0x1, 0x5aaf, 0x8, 0x3f, 0x1, 0x40, 0xc25d, 0x7, 0x6, 0x7fff, 0x81, 0x1, 0xffffffffffffff92, 0x4, 0xffffffff, 0x8, 0x10001, 0x0, 0x8, 0xfffffffffffffff9, 0x7fffffff, 0x4, 0x7, 0x0, 0x100000000, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x4, 0x9, 0x7, 0x2, 0x4, 0x4}, r3, 0x8, r1, 0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x4010000000009) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x0, 0x2) fcntl$setflags(r4, 0x2, 0x1) r5 = socket$inet6(0xa, 0x400000000001, 0x0) r6 = dup(r5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x391, @empty, 0x9e5}, @in={0x2, 0x4e23, @rand_addr=0x9}, @in={0x2, 0x4e23, @rand_addr=0x100}], 0x3c) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r7 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0xb2) ftruncate(r7, 0x2007fff) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 00:23:29 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$notify(r0, 0x402, 0x8000000d) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) unshare(0x40000000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000140)={@local, 0x0}, &(0x7f0000000180)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={r1, @loopback, @broadcast}, 0xfe42) 00:23:29 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xe, 0xe803}}}}}, &(0x7f0000000040)) [ 524.439136] Unknown ioctl 1074021777 00:23:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vhci(0xffffffffffffff9c, &(0x7f0000003e40)='/dev/vhci\x00', 0x2001, 0x0) io_setup(0x8, &(0x7f0000000300)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) io_submit(r1, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x2}]) [ 525.179196] Unknown ioctl 1074021777 00:23:30 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40096100, 0x0) 00:23:30 executing program 3: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000d97000)={0x0, 0x1000000200007d, 0x40}) 00:23:30 executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f000069affb), 0x10) 00:23:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x17, 0x8000000006, 0x3, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000080)="cce6a80c8c142dcbbf4b4baeed1262c35ed9d50bcc526aa58f0aa56d8848f61ff5f281dc76938f38d2f35444e15c7faa9e5bdf2638110169cf5cc37a7171551eef9cdcc71d59be", &(0x7f0000001140)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001100)={r0, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0, &(0x7f00000000c0)}, 0x10) 00:23:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000600)={0x0, 0x80ffff, 0x2080, {}, [], "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", "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"}) [ 525.876160] QAT: failed to copy from user cfg_data. [ 525.905104] QAT: failed to copy from user cfg_data. 00:23:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000000080), 0xc, &(0x7f00007a8000)={&(0x7f0000002800)={0x14, 0x3, 0x7, 0xffffffffffffffff}, 0x14}}, 0x0) 00:23:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x55}}, &(0x7f0000014ff5)="73797a6b610000000500f3", 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) 00:23:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000280)) pipe(&(0x7f00000003c0)) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuset.effective_cpus\x00', 0x0, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1}, {}], 0x2, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x1, 0x4}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000140)={0x0, 0x10000}, 0x8) 00:23:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'ip6_vti0\x00', 0x245}) 00:23:31 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 00:23:31 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0x19000000, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}}, {0xa, 0x0, 0x0, @local, 0x1}, r1}}, 0x48) 00:23:40 executing program 5: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f0000000140), 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100), 0x0) 00:23:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x20000000000007}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 00:23:40 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/ashmem\x00') ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffff) mmap(&(0x7f00006f9000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) 00:23:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000c80)=[{{&(0x7f0000000500)=@alg, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000a40)=""/118, 0x76}}], 0x1, 0x0, 0x0) 00:23:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000200)) 00:23:40 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f000062fff8)={0x0, 0x2400000002}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00005c0fe0)={0x3}, 0x20) write(r0, &(0x7f0000ce6ffe)="da", 0x1) 00:23:40 executing program 4: mmap(&(0x7f0000000000/0xefe000)=nil, 0xefe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x7, 0x8000000000004, 0x20, 0x100001005, 0x4}, 0x2c) 00:23:40 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400218) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x34, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000014b1aa25f5b50a26632f6373d7"], 0x0, 0x0, &(0x7f0000000080)}) 00:23:40 executing program 2: syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') close(r0) 00:23:41 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002900)}}], 0x1, 0x0, &(0x7f0000003280)) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/exec\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) [ 536.214940] binder: 14744:14749 transaction failed 29201/-22, size -782031282757435392--2921882678055269707 line 2970 00:23:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='comm\x00') write$FUSE_OPEN(r1, &(0x7f00000001c0)={0x20}, 0x20) 00:23:41 executing program 5: ioctl$KVM_GET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000400)=""/105) ioctl$KDGKBLED(r0, 0x40045108, &(0x7f0000000000)) 00:23:41 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x1) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="230308"]) [ 536.452532] binder: undelivered TRANSACTION_ERROR: 29201 00:23:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f00000000c0)={0x0}) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x7530}, {r0}}, 0x0) setitimer(0x1, &(0x7f0000000240)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f0000000200)) 00:23:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) set_thread_area(&(0x7f0000000040)) 00:23:42 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x114, 0x2721, &(0x7f0000000000)=""/13, &(0x7f0000000040)=0xd) 00:23:42 executing program 4: socket$inet6(0xa, 0x2000000000000003, 0x10001) bind$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x18, 0x4}, {0x0, "3d56452e831171bb87f0958dbcd616863502ba2f1e75bcdb6e9db661bc295367d6ab13a0259c179d43310ce8577e47ba993a786cdc31257f157564d605de1a2a535d9e9fe67957689ebb5c772a3bd55104e5bae9332a82849070db61154c9fd0850d33fb9288c939c9fea57421e982d9190aa1ee385a5d5ee594513594482cb236944c068046"}}, &(0x7f0000000000)=""/133, 0xa0, 0x85}, 0x20) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) clone(0x400002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r0, 0x40096101, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x0, 0x0) inotify_add_watch(r2, &(0x7f0000000300)='./file0\x00', 0x800) read(r1, &(0x7f0000000200)=""/71, 0x47) read(0xffffffffffffffff, &(0x7f0000000040)=""/18, 0x1c5) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000400), &(0x7f0000000440)=0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0), &(0x7f0000000200)=0x14) r3 = request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='md5sum\x00', 0xfffffffffffffffd) keyctl$instantiate(0xc, r3, &(0x7f0000000300)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', '/dev/qat_adf_ctl\x00'}, 0x27, 0x0) 00:23:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_bridge\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x0, 0x200}}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}}) 00:23:42 executing program 2: r0 = memfd_create(&(0x7f0000000280)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000317000), 0xff8) r1 = socket$inet(0x2, 0x80003, 0x5) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @dev, 0x0, 0x0, 'ovf\x00'}, 0x2c) 00:23:42 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xb, 0x0, 0x8, 0x2}, 0x10}}, 0x0) [ 537.227368] QAT: Device 0 not found 00:23:42 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000340)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0xf1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0), 0x0) clock_gettime(0x7, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000280)={r1, r2/1000+10000}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a1, &(0x7f00000004c0)={'bridge0\x00', 0xfffffffffffffff9}) mkdir(&(0x7f00000002c0)='./control\x00', 0x57) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000780)) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000300)='rose0\x00') lstat(&(0x7f0000000080)='./control\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000380)={0x0, 0x6, 0x0, 0x0, 0x2000000000000001, 0x0, 0x1, 0x5b82, 0x5, 0x80, 0x3, 0x20}) lchown(&(0x7f0000000180)='./control\x00', 0x0, r3) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, &(0x7f0000000840)) 00:23:42 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="0600a30dbfe95b817f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xc0ffffff, 0xffffffcf}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 00:23:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto(r1, &(0x7f0000000200), 0x20020, 0x0, &(0x7f00000002c0)=@ethernet={0x0, @remote}, 0x80) 00:23:42 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x84) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r0, 0x0, 0x18, &(0x7f0000000140)='vboxnet0wlan0-vboxnet0$\x00', 0xffffffffffffffff}, 0x30) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000380)=ANY=[@ANYBLOB="0900e5ccf9840000000000000000000880000000000000000000000000000000"]) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x6, 0xfffffffffffffff7, 0x101, 0x34, 0x0, 0x1, 0x1e008, 0x0, 0x9, 0x101, 0x0, 0x7fff, 0x8001, 0x843a, 0x8, 0x8001, 0x1000, 0x9, 0x7, 0x81, 0x76, 0x6, 0x4, 0xca93, 0x800, 0xffffffffffffffff, 0x5f, 0x8001, 0x6, 0x10000, 0x1ff, 0x6, 0xffffffffffffff00, 0x1, 0x7d9, 0xfffffffffffffff7, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x10001}, 0x0, 0x1, 0x9b1, 0x7, 0x100000001, 0xa, 0x7}, r2, 0xb, r1, 0x8) r3 = socket$kcm(0x2, 0x802, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r3, &(0x7f0000000000)={&(0x7f00000000c0)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000040)=[{0x10, 0x0, 0x7}], 0x10}, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x80, 0x400, 0x1000000000000, 0x6, 0x0, 0x20, 0x100, 0xa, 0x5, 0xfffffffffffffff8, 0x1, 0x10000, 0x4, 0x2, 0x2, 0x8, 0x3, 0x8001, 0x8000, 0x3d, 0x0, 0x3, 0x2, 0x5, 0x1000, 0x8, 0xffff, 0x2, 0x6, 0x4, 0x73175506, 0x1ff, 0x1, 0x5, 0x2, 0x9, 0x0, 0x1ff, 0x3, @perf_config_ext={0x7, 0x80}, 0x10, 0x9, 0x1, 0x4, 0x3, 0x47, 0x4}, 0x0, 0xb, r0, 0xb) close(r1) socket$kcm(0x2, 0x8000000003, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8953, &(0x7f0000000040)=0x2) 00:23:42 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f0000b4bff0), 0xf, &(0x7f0000728000)={&(0x7f000098b000)={0x0, 0x900, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c446afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d90a8c997c7c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}}, 0x0) 00:23:42 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f0000bd7000)={&(0x7f0000c07e98)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in6=@ipv4={[], [], @local={0xac, 0x14, 0xffffffffffffffff}}}, {@in6, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7d}, [@algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x138}}, 0x0) 00:23:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000180), &(0x7f00000001c0)=0x2bd) 00:23:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto(r1, &(0x7f0000000200), 0x20020, 0x0, &(0x7f00000002c0)=@ethernet={0x0, @remote}, 0x80) 00:23:43 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0xc0145401, &(0x7f0000000040)={{0x3, 0x0, 0x0, 0x0, 0x200}}) 00:23:43 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10) write$vnet(0xffffffffffffffff, &(0x7f0000000240)={0x1, {&(0x7f0000000380)=""/51, 0x33, &(0x7f0000000200)=""/40, 0x3, 0xfffffffffffffffe}}, 0x68) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) sendto$inet(r1, &(0x7f0000a88f88), 0x2f08, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback, [0x13000000]}, 0x10) 00:23:43 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000100)) 00:23:43 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init1(0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x80000002) inotify_add_watch(r1, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') dup2(r0, r3) 00:23:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@ipv4={[], [], @loopback}, @remote, @mcast2, 0x0, 0x0, 0xffffffff00}) 00:23:43 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9208, 0x0) 00:23:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 00:23:44 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000340)="0e", 0x1, 0x8805, 0x0, 0x0) recvmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000040)=@generic, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/237, 0xed}], 0x1, &(0x7f0000000280)=""/178, 0xb2}}], 0x1, 0x0, 0x0) shutdown(r0, 0x1) 00:23:44 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000001fe8)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000380)=@rc, 0x80, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f0000002000)=""/4096, 0x1000}], 0x2, &(0x7f0000000440)=""/10, 0xa, 0x3}, 0x40) r1 = openat$cgroup(0xffffffffffffff9c, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) recvmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000001700)=@xdp, 0x80, &(0x7f0000001780)=[{&(0x7f0000001840)=""/218, 0xda}, {&(0x7f0000001940)=""/248, 0xf8}], 0x2, &(0x7f0000001a40)=""/216, 0xd8, 0xcd}, 0x12100) recvmsg(r2, &(0x7f0000003f80)={&(0x7f0000003ec0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000005340)=[{&(0x7f0000005000)=""/135, 0x87}, {&(0x7f00000050c0)=""/198, 0xc6}, {&(0x7f0000003f40)=""/55, 0x37}, {&(0x7f00000051c0)=""/100, 0x64}, {&(0x7f0000005240)=""/251, 0xfb}], 0x5, &(0x7f00000053c0)=""/116, 0x74, 0x4}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000005580)=ANY=[@ANYBLOB="760400000000000000b43e3d63", @ANYRES16=r2, @ANYRESDEC=r2], &(0x7f0000005440)='GPL\x00', 0x8, 0xfb, &(0x7f00000055c0)=""/251, 0x3ffffffc, 0x0, [], r3, 0x1fffff}, 0x48) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)={r4}) openat$cgroup(r1, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000040)={0x0, 0x70, 0x6a, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80808, 0x8, 0x7, 0x8000, 0x1, 0x1, 0x391a, 0x40, 0x3c, 0xfffffffffffffff8, 0x0, 0x80000000, 0x80000000, 0x400, 0x8001, 0x7, 0x10001, 0x9, 0xffffffffffff7fff, 0xffffffffffffff4b, 0x0, 0x26d0676, 0x87, 0xe8, 0x7, 0xffffffffffffc75b, 0x7f, 0x7, 0x390, 0x7fff, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0xfffffffffffffffd}, 0x100, 0xcc, 0x0, 0x7, 0x7, 0x10000, 0xfff}) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8953, &(0x7f00000011c0)=0x5) sendmsg$kcm(r6, &(0x7f0000001800)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @multicast2}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001400)="fbeca3e9fc99aca52983fdf500b1301fce3a0ad50a4892c0948e20e034f679bbd5ecbf9cf4e38ae5152cb6a8023a1b32595e3e965cafb50c4155df8b281c5e8345fd821a53ff5007633791ffde4678bfd43b3d1c114ce1040cfcb6dfb2b48baac2198247d95087d2a2f94b12d55fdd3dc8626299c241d29ee0c6aa86f905a462936550b8beada140dd027c", 0x8b}], 0x1, &(0x7f0000001540), 0x0, 0x40010}, 0x24000804) unlink(&(0x7f0000001140)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x40) r7 = getpid() setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3, 0x7, 0x4, 0x3, 0x0, 0xd00d, 0x20, 0x1, 0x6, 0x5, 0x1, 0x10000, 0x80000001, 0x2, 0x6, 0xffffffffffffff7f, 0x4, 0x7ff, 0x2, 0x0, 0x1000, 0x8, 0x1, 0x0, 0x10001, 0x9, 0x5, 0x5, 0x0, 0x0, 0x1ff, 0x5, 0x81, 0xa11, 0x68, 0x4, 0x0, 0xfffffffffffffe28, 0x1, @perf_bp={&(0x7f0000000280), 0xf}, 0x12, 0xfffffffffffffe01, 0x7f, 0x0, 0x0, 0x9, 0x4}, r7, 0x4, r5, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40286608, 0x20000001) r8 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)="2f02726f75702e7374617000", r2}, 0x10) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000580)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'team0\x00', @local}) getpid() 00:23:44 executing program 1: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x480c0) perf_event_open(&(0x7f0000002900)={0x0, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000180)=0x1e) r1 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) 00:23:44 executing program 5: r0 = socket(0x240000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000e40), 0xffc, 0x0, &(0x7f00000004c0)={0x2, 0x0, @loopback}, 0x10) [ 539.365532] syz-executor1 uses obsolete (PF_INET,SOCK_PACKET) 00:23:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ppoll(&(0x7f0000000540)=[{r2}], 0x20000000000000dd, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x8) 00:23:44 executing program 1: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") 00:23:44 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9}, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000136fd4)={0xd, 0x3, 0x4, 0x52, 0x0, r1}, 0x2c) 00:23:45 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000100)) 00:23:45 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080), 0x8) 00:23:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x7fffffff}]}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc080aebe, &(0x7f00000001c0)={0x0, 0x1000000}) 00:23:45 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 00:23:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x7ff, 0x0, 0x5}, &(0x7f00000001c0)=0x18) connect$inet6(r0, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79) sendmmsg(r0, &(0x7f0000007e00), 0x136a88c8311572c, 0xb605) clone(0x0, &(0x7f0000000000)="3a7d207a05273508", &(0x7f0000000240), &(0x7f0000000080), &(0x7f00000003c0)) 00:23:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000080)=0xfffffffffffffdeb) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040), &(0x7f0000000100)=0x8) 00:23:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2081f8) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) clock_gettime(0x0, &(0x7f00000029c0)) ioctl(r1, 0x1, &(0x7f0000000100)) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) write$P9_RCREATE(r2, &(0x7f0000000080)={0x18}, 0x18) 00:23:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r1, r2) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc048ae65, &(0x7f0000000280)) 00:23:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480), 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da1f}}, 0x14}}, 0x0) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/197, 0xc5}], 0x1) 00:23:46 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000100)) 00:23:46 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000500)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x5, 0x31, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000040)}) 00:23:46 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x400c000, &(0x7f000083b000)={0x2, 0x4e20}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') sendfile(r2, r3, &(0x7f0000000000)=0x3, 0xff) [ 541.723001] binder: 14928:14929 ioctl c0306201 200001c0 returned -14 00:23:46 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002900)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000ed4000)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x7a) sendto$inet(r0, &(0x7f0000617fc9), 0xfe41, 0x10000002000091b, &(0x7f0000deaff0)={0x2, 0x4e23, @loopback, [0x22b, 0x4002000000000000]}, 0x10) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) 00:23:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) listen(r1, 0x0) close(r1) 00:23:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0x3fff, 0x3}) 00:23:47 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r2, 0xc0046d00, &(0x7f000084dfff)) 00:23:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000380000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235000800000f309d440f20c03501000000440f22c00fc72ec4e17853bd450000002e0fc75900c4c2f547c4640f01cb66baa000ec0f017e0a", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) 00:23:47 executing program 3: gettid() perf_event_open(&(0x7f0000000200)={0x0, 0x14c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00009ad000)=0x1) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x7, 0x200}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000340), 0x1000000}], 0x1, 0x0) dup2(r0, r2) 00:23:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000100), 0x0, 0xfffffffffffffff8) keyctl$search(0xa, 0x0, &(0x7f0000001100)='asymmetric\x00', &(0x7f0000001140)={'syz'}, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=@profile={'stack ', ':\x00'}, 0x8) 00:23:47 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) 00:23:47 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1) ioctl$int_in(r0, 0x800000c0045009, &(0x7f0000000180)=0x1) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000100)) 00:23:47 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000040)={&(0x7f0000000200), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x0, 0x8, 0x1}, 0x14}}, 0x0) 00:23:48 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}, 0x4, 0x1}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000100)) 00:23:48 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) stat(&(0x7f0000007b40)='./file0\x00', &(0x7f0000007b80)) pselect6(0x40, &(0x7f00000000c0)={0x100, 0xf9, 0x7ff, 0x1, 0x931, 0x880e, 0x3, 0x1}, &(0x7f0000000100)={0x1, 0x8000, 0x9, 0x8, 0x6, 0x7f, 0x2559, 0x2}, &(0x7f0000000140)={0x1, 0x7, 0x81, 0x400, 0x3, 0x4, 0x4, 0xe3bc}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={0x6}, 0x8}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000007c00), &(0x7f0000007c40)=0xc) rmdir(&(0x7f00000005c0)='./file0\x00') setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000500)={@local}, &(0x7f0000000540)=0x14) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'team0\x00'}, 0x35f) ioctl(r1, 0x800000000008982, &(0x7f0000000080)) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000400), &(0x7f0000000640)=0x60) accept$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000480)={@ipv4={[], [], @multicast1}, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, @dev={0xfe, 0x80, [], 0xc}, 0x100000000, 0x6, 0x6, 0x400, 0x8, 0x200081, r2}) getrandom(&(0x7f0000000300)=""/174, 0xfffffffffffffde5, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz1\x00', 0x200002, 0x0) shmget$private(0x0, 0x5000, 0x1140, &(0x7f0000ff9000/0x5000)=nil) 00:23:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc05c5340, &(0x7f0000000140)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 00:23:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xa0080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000380000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235000800000f309d440f20c03501000000440f22c00fc72ec4e17853bd450000002e0fc75900c4c2f547c4640f01cb66baa000ec0f017e0a", 0x3f}], 0x1, 0x0, &(0x7f00000000c0), 0x0) 00:23:48 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000000), 0x8) 00:23:48 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000080)={@broadcast, @broadcast, [{}], {@ipv6={0x86dd, {0x0, 0x6, "5be9ee", 0x64, 0x0, 0x0, @local, @ipv4, {[@dstopts={0x0, 0x3, [], [@jumbo, @hao={0xc9, 0x10, @ipv4={[], [], @multicast2}}]}], @gre}}}}}, &(0x7f0000000640)={0x0, 0x2, [0x1, 0x510]}) 00:23:48 executing program 4: r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x24000) creat(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000001440)='./file0\x00', 0x0) 00:23:48 executing program 3: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x67) 00:23:48 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000680)="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") ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1000) 00:23:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0x2, 0x6, 0x400, {0x77359400}}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='coredump_filter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 00:23:49 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000380)=0x7d) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:23:49 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 00:23:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x4, &(0x7f0000000080), 0x0) [ 544.240818] *** Guest State *** [ 544.244521] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 544.253613] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 544.262704] CR3 = 0x0000000000000000 [ 544.266462] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 544.272644] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 544.278668] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 544.285637] CS: sel=0x000d, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 544.293800] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 544.301957] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 544.309992] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 544.318177] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 544.326363] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 544.334526] GDTR: limit=0x00000000, base=0x0000000000000000 [ 544.342718] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 544.350754] IDTR: limit=0x00000000, base=0x0000000000000000 [ 544.358930] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 544.367075] EFER = 0x0000000000002000 PAT = 0x0007040600070406 [ 544.373652] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 544.381158] Interruptibility = 00000000 ActivityState = 00000000 [ 544.387568] *** Host State *** 00:23:49 executing program 1: socketpair(0x1, 0x1000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8947, &(0x7f0000001d80)='ip6gre0\x00') [ 544.390811] RIP = 0xffffffff812c8203 RSP = 0xffff88010e88f3c8 [ 544.396975] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 544.403558] FSBase=00007f0bed6d9700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 544.411406] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 544.417544] CR0=0000000080050033 CR3=0000000105986000 CR4=00000000001426e0 [ 544.424763] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ae01260 [ 544.431478] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 544.437702] *** Control State *** [ 544.441212] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 544.448058] EntryControls=0000d1ff ExitControls=002fefff [ 544.453799] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 544.460781] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 544.467691] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 544.474443] reason=80000021 qualification=0000000000000000 [ 544.480807] IDTVectoring: info=00000000 errcode=00000000 [ 544.486750] TSC Offset = 0xfffffed69f2b06ee 00:23:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000004c0)='encrypted\x00', &(0x7f0000000500)={'syz'}, &(0x7f0000000540)="7f0dbf135bcdb8de85c8511320390fd6d63721f69e62c5bbd15713", 0x1b, 0xfffffffffffffffe) [ 544.491126] TPR Threshold = 0x00 [ 544.494706] EPT pointer = 0x0000000105f5101e 00:23:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000400)={0x2, 0x6, 0x400, {0x77359400}}) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='coredump_filter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 00:23:49 executing program 4: r0 = socket(0x11, 0x400000003, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000346fc8), &(0x7f0000f6bffb), 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$sock_ifreq(r0, 0x800000089f0, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_flags}) [ 544.642353] encrypted_key: master key parameter '9ÖÖ7!öžbÅ»ÑW' is invalid 00:23:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x4) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) 00:23:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x82, 0x0) 00:23:49 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000100)={0x3}) [ 545.038222] *** Guest State *** [ 545.041782] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 545.050682] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 545.059795] CR3 = 0x0000000000000000 [ 545.063688] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 545.069810] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 545.076028] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 545.082882] CS: sel=0x000d, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 545.091367] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 545.099583] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 545.107993] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 545.116241] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 545.124415] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 545.132628] GDTR: limit=0x00000000, base=0x0000000000000000 [ 545.140664] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 545.148837] IDTR: limit=0x00000000, base=0x0000000000000000 [ 545.157062] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 545.165210] EFER = 0x0000000000002000 PAT = 0x0007040600070406 [ 545.171964] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 545.179470] Interruptibility = 00000000 ActivityState = 00000000 [ 545.185941] *** Host State *** [ 545.189212] RIP = 0xffffffff812c8203 RSP = 0xffff88010e88f3c8 [ 545.195436] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 545.202016] FSBase=00007f0bed6d9700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 545.209865] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 545.216019] CR0=0000000080050033 CR3=0000000105986000 CR4=00000000001426e0 [ 545.223234] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ae01260 [ 545.229964] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 545.236257] *** Control State *** [ 545.239777] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000c2 [ 545.246690] EntryControls=0000d1ff ExitControls=002fefff [ 545.252326] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 545.259303] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 545.266221] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 545.272974] reason=80000021 qualification=0000000000000000 [ 545.279345] IDTVectoring: info=00000000 errcode=00000000 [ 545.284997] TSC Offset = 0xfffffed635b9a109 00:23:50 executing program 5: r0 = memfd_create(&(0x7f0000000380)="0000000000b2790000000000000000768e05f70755ad7dc69490573e5a69244e76ffff00003d575effff7f8b1728277ef77f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6287c64dbea37a0000000000", 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)='\'', 0x1}], 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x20000102000007) [ 545.289360] TPR Threshold = 0x00 [ 545.292946] EPT pointer = 0x000000010400401e 00:23:50 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x5, 0x1000000000000914, 0x4000000005}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x81, 0x4, 0x4, 0x0, r0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x3, &(0x7f00000000c0), &(0x7f0000000180)='GPL\x00', 0x0, 0x1000, &(0x7f0000000400)=""/4096}, 0x48) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x7}, 0x7) 00:23:50 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x20000088) 00:23:50 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000280)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070cd, &(0x7f0000000040)) 00:23:50 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='nodev\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, "aee9b1d72e3ad399da247c7cce8ce256574c03fce341ea03a6f8919d2146b3ec13de10d5a08ba8407cdf1b7219d6621165b29e46e9bb2bba00", "4aaf8dd1ece958077430fb3b0c1172a8dc1388fd72a09f88a734786873b8ee1016926658782646c011a9cd48b55133e8198017f815032de4140a07cf2ad1d78b", "96f0b0cb596b50cdd31cf748b86ca8233940989007e8f48e592c5211e2e44661"}) 00:23:50 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r1, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x1) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000011000)) read(r1, &(0x7f0000000040)=""/20, 0x14) ioctl$UFFDIO_UNREGISTER(r2, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 00:23:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz1\x00'}, 0x45c) fallocate(r2, 0x0, 0x0, 0xfff) fallocate(r1, 0x0, 0x0, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) 00:23:50 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @remote}], 0x20) 00:23:51 executing program 5: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x400) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000a40), 0x0) sendfile(r3, r1, &(0x7f0000000240), 0x2) 00:23:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f00000006c0)=@known='trusted.overlay.nlink\x00', &(0x7f0000000700)='gre0\x00', 0x5, 0x0) ptrace$poke(0x4, 0x0, &(0x7f0000000340), 0xde) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x8}) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000680), 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000007c0), &(0x7f0000000800)=0x8) lseek(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000004c0)={r1, 0x5c, 0x1, [0x0]}, 0xa) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000ac0)={0x2, &(0x7f0000000a80)=[{0x2, 0x7138, 0x2}, {0x2, 0x3f, 0x3}]}, 0x10) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) 00:23:51 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000180)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000380)={'ip6gretap0\x00', {0x2, 0x4e21, @broadcast}}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0), 0x0, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x8}}, 0x18) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x8000) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) sendfile(r2, r2, &(0x7f00000001c0), 0x7fffffff) 00:23:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r0, &(0x7f0000b97000)=[{&(0x7f0000962000)='5', 0x1}], 0x1) 00:23:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x10, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x8004ae98, &(0x7f0000001040)) 00:23:51 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:23:51 executing program 4: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000240)={{&(0x7f00005e3000/0x800000)=nil, 0x730000}, 0x200000}) 00:23:51 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xfffffffffffffbff, 0x404080) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b40)="2f6a7374617400c65381b47aaedf2af5c8af3423fc41891bd2a3c56d8c88e29bad43f1da906e855ff182de04227edcbbc2b1df8f180e158e8abd442cc049cffda030ff277875ee010000000000000000000000000000000000000000000000f532144d1671a6cdf5069e5bddcf25cd7f23956b4a82df900f5eb5763b4fe8cc7172962d2590b2dca2a1308c382541b053194d9027d83ee7ba2e3280857f8f9f63fc90bae959c6e67078bf97e615bfd9409914958aadcfb37973543c60d83526e5c267f7dfa54bd524cc9671dedd665199322bdadee125a35b40b7be0c07301f439a7edfa26fa98277c8078b02e2076291c33787c58b0eabbc39288fc10509409de108f5ca26a8c8e1afb70b2a9569cf8f4cdb6d4e97eb7fdf241dee160e6071618333cc0b0e8bc6a17a0b7d604550fd149ad078ffe54c6392fba29015a3ae73774cd12c9c0ed251a7cf843d712d", 0x2761, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x400) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfcfd, &(0x7f0000000180), 0x0, &(0x7f0000000700), 0x365}, 0x0) socket$unix(0x1, 0x0, 0x0) 00:23:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000001d000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66baf80cb8afa4e184ef66bafc0cec660f388183b8b91270c4c1ad73d4ca660f388084822741aace0f30d2edc4c2f931a1b48800000f35360f21b0c4c1e9f809", 0x40}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105000, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000d83ff8), 0x0) ftruncate(0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = memfd_create(&(0x7f00000013c0)="95ce769ace2849a3b2baa0e1987e371c660b10e2ae819369892409d2df9e3b0b6cc64518f630dce7540ad9fc648a1f6646d37927ea4c3d532952aa03036ba0c63e36f15d233d5a63aeecdf8ae1fee0ad9aaa41169f3527452dc54fa3f0e7d7bd00fde7a076d5374c1776d5aae65f66952d2d774aa3bef178d0a76e61c67c6d68b0d650793b3eeb718e3b9868cee27bed2323a9039738e9da26af33ae1d0d9b04b6bca9e589df04963d0e4f78246b6392a3c9bb324429ade4bf73c7d3391a2d570f4c3bf4ff7b0099124924ddf370ddad175cabb5075240fcd128b39c60e05cfc31", 0x0) syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x40505331, &(0x7f0000000000)={0x3f}) 00:23:51 executing program 1: r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000100)=@generic, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/44, 0x2c}, 0x10002) 00:23:51 executing program 2: ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000300), 0x4) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x0) 00:23:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002680), 0x1f9) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002400)=[{{&(0x7f0000000780)=@nfc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/74, 0x4a}], 0x1}}], 0x1, 0x0, &(0x7f0000002540)) 00:23:52 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000000)={{0x5}}) 00:23:52 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000340)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e6bb51d7ff596e1c92de0eaa319198e91f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7") sendfile(r0, r1, &(0x7f00000000c0), 0x401) 00:23:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000002680), 0x1f9) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002400)=[{{&(0x7f0000000780)=@nfc, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000800)=""/74, 0x4a}], 0x1}}], 0x1, 0x0, &(0x7f0000002540)) 00:23:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x420000) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000800)=@assoc_value={0x0, 0x9}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000880)={0x2, 0x1ff, 0x4, 0x1, 0xfffffffffffffffc, 0x3, 0x4, 0xb2, r2}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f00000001c0)=0x84) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000740)=0x3, &(0x7f0000000780)=0x2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{}, 0x20}) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000004c0)=""/191) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000480)) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f00000005c0)=0x3, &(0x7f0000000640)=0x2) r4 = socket(0x10, 0x802, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180), &(0x7f0000000900)=0x8) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000000580)=0x8) r5 = msgget(0x0, 0x10) msgsnd(r5, &(0x7f0000000600)={0x3, "759268884472581d14ae371831d338a2d6c435997f7b2b89b9084f6242526d9fdd71d0ad0a1381fbfc7a4e4f"}, 0x34, 0x800) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000003c0)={'team0\x00'}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0x4bfd}) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10, "4a6dcd57f7f10eae8aa69bdefc837a361ac7469a9ff94cca43026131708220c7fc2c5483bbfa815f2832c3c69eb014b64f25df2c6930c03d7661e3b2d4ed85a3", "8d2f63b66744cc6934c2d68586cdf29fdc2bff8469b8c21f4b8dbe6582ec91a8", [0x1]}) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) 00:23:52 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f000000ef80)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "26e094bde6f5da7f"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x1, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "65a0178f2fde4db3"}}, 0x48}}, 0x0) 00:23:52 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000000c0)={0xb, 0x10, 0x8f, {&(0x7f0000000240)}}, 0x18) 00:23:52 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp\x00') bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r3 = accept4$alg(r1, 0x0, 0x0, 0x0) sendfile(r3, r2, &(0x7f0000000000), 0x1000f) 00:23:52 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 00:23:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000300)=""/207, &(0x7f00000000c0)=0xcf) 00:23:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb612"], 0x14}}], 0x2, 0x0) 00:23:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz1\x00'}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) preadv(0xffffffffffffffff, &(0x7f00000024c0), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000013c0)) 00:23:53 executing program 3: syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0], @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x43, 0x0, 0xfec3, 0x0, 0x0, 0x0, 0x4, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x2, 0x0, 0x8}}}}}, 0x0) 00:23:53 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000002d80)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002280)="d120086abf72d79383a0f4c1d4c1ab22c7af1fe3d579b73483525092", 0x1c}, {&(0x7f0000002480)="a0b70ac8480ec8e819cd0059478d08678826f03f5198192406bd7666fb8faabae977b75a8486351dc40e96e573a8d4fa012e292fee058f68430a0e74a28f32d95133c45e9697c42d22770fc1f5f7b03e916b8d3386f0882cbc2a44c1f1e1c535e7bb177af36fb3037965dd22fb7dcd8741da12ff90b4cb980348bbddb85e3388ebbfffe7c9fb77c4ff7b13b6182df36725925893b47559dd4069faed85a1fea2c823d013b369f79da7c2e0cf74d9213e3fe760b447bd1b8fea8969fc", 0xbc}], 0x2, &(0x7f0000002700)=[{0x48, 0x10e, 0x1, "ae619df07f4d5eb2f2fd79dfc7633b0f68a707c2da470c07b07971f3d53d12b6d6784e2aa1f39d16db72e8cfc54d8a9e5785d9596954"}], 0x48}, 0x100}], 0x1, 0x48015) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/19, 0x13}, {&(0x7f00000035c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001940)=""/145, 0x91}, 0x0) 00:23:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb612"], 0x14}}], 0x2, 0x0) [ 548.490300] input: syz1 as /devices/virtual/input/input23 00:23:53 executing program 3: clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = socket(0x11, 0x200000000080002, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@multicast1, @broadcast, @multicast1}, 0xc) getpid() ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'}) ioctl$int_in(r0, 0x8b0b, &(0x7f00000002c0)) [ 549.361348] device team0 entered promiscuous mode [ 549.366513] device team_slave_0 entered promiscuous mode [ 549.372466] device team_slave_1 entered promiscuous mode [ 549.380026] 8021q: adding VLAN 0 to HW filter on device team0 00:23:54 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) dup3(r1, r0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x3f) r2 = syz_open_procfs(0x0, &(0x7f0000001240)='loginuid\x00') sendfile(r1, r2, &(0x7f00000000c0), 0x5) 00:23:54 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000440)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @dev, 0x87}, r1}}, 0x352) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @local, 0x15}, r1}}, 0x30) 00:23:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002780)=[{{&(0x7f0000002d80)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x80, &(0x7f0000002680)=[{&(0x7f0000002280)="d120086abf72d79383a0f4c1d4c1ab22c7af1fe3d579b73483525092", 0x1c}, {&(0x7f0000002480)="a0b70ac8480ec8e819cd0059478d08678826f03f5198192406bd7666fb8faabae977b75a8486351dc40e96e573a8d4fa012e292fee058f68430a0e74a28f32d95133c45e9697c42d22770fc1f5f7b03e916b8d3386f0882cbc2a44c1f1e1c535e7bb177af36fb3037965dd22fb7dcd8741da12ff90b4cb980348bbddb85e3388ebbfffe7c9fb77c4ff7b13b6182df36725925893b47559dd4069faed85a1fea2c823d013b369f79da7c2e0cf74d9213e3fe760b447bd1b8fea8969fc", 0xbc}], 0x2, &(0x7f0000002700)=[{0x48, 0x10e, 0x1, "ae619df07f4d5eb2f2fd79dfc7633b0f68a707c2da470c07b07971f3d53d12b6d6784e2aa1f39d16db72e8cfc54d8a9e5785d9596954"}], 0x48}, 0x100}], 0x1, 0x48015) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/19, 0x13}, {&(0x7f00000035c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001940)=""/145, 0x91}, 0x0) 00:23:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb612"], 0x14}}], 0x2, 0x0) 00:23:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x34000) r2 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)=@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@ipv4={[], [], @rand_addr}]}, 0x18) sendmsg$key(r2, &(0x7f0000000200)={0xb00, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020000000200000025bd700000000000997a10dce597d4ab79af7f3dfa67a73e50f9d9bb287a07ff3974cdf3a414960de70fb95d9a8f1ca35869a1a000cc9ddc9bd9c44bec9352bd"], 0x48}}, 0x0) 00:23:54 executing program 3: gettid() symlink(&(0x7f0000000800)='./file0/file0\x00', &(0x7f00000007c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x236, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000180)={0x7, 0x0, {0x53, 0x5, 0x0, {0x80000000, 0x7}, {0x2, 0x1}, @rumble={0x9, 0x8}}, {0x0, 0x1, 0x0, {0x6}, {0x9a, 0x9}, @ramp={0x0, 0x8, {0x257, 0x0, 0x9, 0x7}}}}) read(r0, &(0x7f00000002c0)=""/233, 0xe9) sendmsg(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000006000)="1b0000005200030f07fffd946fa283bc04eee6d87986c497271d85", 0x1b}], 0x1}, 0x0) 00:23:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb612"], 0x14}}], 0x2, 0x0) 00:23:55 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000200)="1f0000000009f30501df0a000240000078000002e50000fc35300c22683300", 0x1f) 00:23:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)={0x2, 0x0, [{0x1}, {0xd, 0x7fff}]}) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000280)={0x1, 0x0, [{0x0, 0x0, 0x7}]}) 00:23:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(0x0, &(0x7f00000005c0)) r0 = socket(0x40000000002, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)="6272696467653000000004000100", 0x10) sendto$unix(r0, &(0x7f0000000080), 0xffeb, 0x0, &(0x7f0000000d00)=@abs={0x834000000000000, 0x0, 0xd0000e0}, 0x63) 00:23:55 executing program 3: unshare(0x24020400) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) [ 550.183457] netlink: 11 bytes leftover after parsing attributes in process `syz-executor5'. 00:23:55 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x480, 0x0, 0x0, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f00000003c0), {[{{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @multicast1}}}, {{@arp={@remote, @broadcast, 0x0, 0x0, @mac=@random="d3fcb7b51bf8", {}, @empty, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'vlan0\x00'}, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @empty, @dev}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ab45bbd82723b891fd4d46", 0xb) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000003dc0)=[{{&(0x7f00000000c0)=@ipx, 0x80, &(0x7f0000000140)=[{&(0x7f00000013c0)=""/4096, 0x200023c0}], 0x1}}], 0x1, 0x0, &(0x7f0000003f80)={0x77359400}) [ 550.238160] netlink: 11 bytes leftover after parsing attributes in process `syz-executor5'. [ 550.311607] raw_sendmsg: syz-executor0 forgot to set AF_INET. Fix it! 00:23:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb612"], 0x14}}], 0x2, 0x0) 00:23:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 00:23:55 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000170, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1_mb\x00'}, 0x58) 00:23:55 executing program 0: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000e16ff0)={0x1, &(0x7f0000683ff0)=[{0x6}]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @rand_addr=0x80000000, {[@timestamp={0x44, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)) 00:23:55 executing program 4: connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb612"], 0x14}}], 0x2, 0x0) 00:23:55 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000440), &(0x7f0000000480)=0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000200), 0xfffffea0, 0x2000800a, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x440280, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) mkdir(&(0x7f00000004c0)='./file0\x00', 0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000005c0)=[{0x3, 0x6846cac1}, {0xc, 0x2}], 0x2) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f00000002c0)={0x8}) openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x20100, 0x0) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000300)={0x6, 0x3ff}) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000080)={0x5, 0x6, 0x1, 0x8, 0x8}) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739c9d, 0x3e9538, 0x0, 0x35) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000000140)) 00:23:56 executing program 1: lseek(0xffffffffffffffff, 0x0, 0x3) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, &(0x7f00009ecff8)=0x8000000, 0x2, 0x4) [ 551.313223] Unknown ioctl 1074819277 [ 551.340515] Unknown ioctl 21532 00:23:56 executing program 1: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x400448c8, &(0x7f0000000680)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, "cdf87888d1639e23d50f9fd05c7a276711963f7e1aff9daaee294482e79f1c97404ae900aa9261323bf57267c914a2af504d65210e8291520fab51af8827ed43042e8c7ff121dc42b4a3c7944c6e23534cc7a3810529fdff3ca2e4804ab40d5af329889f960b483ba533b83b36f95299d32b5e5f4f6e30cf867b744b5cbc1bab"}) 00:23:56 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb612"], 0x14}}], 0x2, 0x0) 00:23:56 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000), &(0x7f0000000100)=0x44) 00:23:56 executing program 5: r0 = memfd_create(&(0x7f00000000c0)="40776c616e302916406e6f6465767d00", 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f02"], 0x2) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) 00:23:56 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ppp\x00', 0x4000, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000540)) unshare(0x40000) r1 = mq_open(&(0x7f0000000000)=' \x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0xa080, 0x0) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) openat$vnet(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-net\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x0, @mcast1}, r3}}, 0x48) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x208000, 0x0) ioctl$IOC_PR_CLEAR(r4, 0x401070cd, &(0x7f0000000580)={0x10001}) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r3, r2}}, 0x18) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000005c0)) mq_notify(r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x529301, 0x0) r5 = getpgid(0xffffffffffffffff) getpriority(0x2, r5) 00:23:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x5b3, &(0x7f0000000040)) [ 552.015141] Unknown ioctl 1074819277 [ 552.035382] Unknown ioctl 21532 00:23:57 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) dup2(r1, r0) 00:23:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb612"], 0x14}}], 0x2, 0x0) 00:23:57 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8942, &(0x7f0000000080)='ip6tnl0\x00') 00:23:57 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) close(r0) socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x64, &(0x7f00000001c0)=r0, 0xfeb8) close(r0) perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x70, 0x40, 0x96, 0xffffffff, 0x401, 0x0, 0x5, 0x2, 0x3, 0x4, 0x4, 0x3, 0x3000000, 0x6, 0xfffffffffffffffd, 0x800, 0xfff, 0x4a, 0x10001, 0x678, 0x48f9, 0x2, 0x4, 0x9, 0x1ff, 0x6, 0xec, 0x1, 0xb6fd, 0x1, 0x0, 0x10000, 0x80000000, 0x8001, 0xab, 0x8, 0x44, 0x0, 0x7fff, 0x5, @perf_config_ext={0xfffffffffffff868, 0x7}, 0x0, 0x5, 0x800, 0x3, 0x3f, 0x3ff, 0x2}, 0xffffffffffffffff, 0x3, r0, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)="2f6465762f6e65742f74756eff", 0x241, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000400)=r1, 0x4) socket$kcm(0x2, 0x40000000, 0x2) write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xffffffba) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x842, 0x0) close(r1) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) getpid() 00:23:57 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89fa, &(0x7f0000000000)={"73697430000080000000000000000002", @ifru_ivalue=0x907000}) 00:23:57 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000180)="1f0000000104ff00fd4354c00711000900200000080001000304776274e9e4", 0x1f) 00:23:57 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0x3) 00:23:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb612"], 0x14}}], 0x2, 0x0) 00:23:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) sendfile(r1, r0, &(0x7f0000000180), 0x10013c93a) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x1) [ 552.716845] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 552.787763] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 00:23:58 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000b75fd4)={0x2000000000000e, 0x4, 0x4, 0x40003}, 0x2c) 00:23:58 executing program 2: r0 = socket(0x40000000015, 0x805, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000040)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c, &(0x7f0000000080), 0x0, &(0x7f0000001640)}, 0x0) 00:23:58 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80803, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x6, &(0x7f0000000100), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000500)={0x1, 'ip6gretap0\x00', 0x2}, 0x18) 00:23:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}], 0x1, 0x0) 00:23:58 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00008deff8), &(0x7f0000343ff8)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000200)="f0") 00:23:58 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x3, &(0x7f0000000200)=""/244, &(0x7f0000000140)=0x3ed) 00:23:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000001640)=0x3, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400218) 00:23:58 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f0000000180), &(0x7f0000000380), 0x0, 0x0) add_key$user(&(0x7f0000000440)='user\x00', &(0x7f00000003c0), &(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x8}, &(0x7f0000000300)=0x98) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 00:23:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}], 0x1, 0x0) 00:23:58 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='com.apple.FinderInfo\x00', &(0x7f00000001c0)='\x00', 0x1, 0x0) read$FUSE(r0, &(0x7f00000020c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, 0x1}, 0x50) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0x0, 0x2}, 0x10) 00:23:58 executing program 5: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) gettid() r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffff9c, 0x4008af21, &(0x7f00000002c0)={0x0, r0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000340)={0x7, 0x0, 0x8}) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x10000) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000400)="66b8010000000f01c1baf80c66b8f8a2e28366efbafc0c66b8dd52aa7966ef6436f2a40f30dbd07c800f2169650f019d64d90f214d0f01df", 0x38}], 0x1, 0x0, &(0x7f0000000200), 0x10000000000000e2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x0, 0x10000}) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000300), 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x0) 00:23:58 executing program 0: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x765626762301cc6d) 00:23:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'bcsf0\x00', 0x1}) read(r0, &(0x7f0000000000), 0x0) 00:23:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}], 0x1, 0x0) 00:23:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) ioctl$TCSETSF(r1, 0x5412, &(0x7f00000000c0)={0x9}) 00:23:59 executing program 1: inotify_init1(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x2, &(0x7f00000000c0)="025cc80700145f8f764070") r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="f49f8cbf1601000000407000000000e0ff40800000000d00009500000000dcd5dfe3280637d6fdf86ec170e812580d8cbabf18774fb4ebf1770f0fb06fb86decc144c527fe3f3e447d77ca6198fd47e6f8e8b22c05f62138c5178090d9f4d57ab0604a9d1f61d5b80f824c9173da11"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x100, &(0x7f00000000c0)='C\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00', &(0x7f0000000140)=""/256}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x1, 0x10, 0x0, "89b1de5c52d3cac0a9cfc280c11f9d3af18b550fd55c3bcd086bfbb5f56c4947de6eb062b47af7c143cd8863c3e790f68158bbd4f0fea0d7505174f65da98d62", "d1cdc64c92b038d9b7ee8ab43eec823b7c159f2a203b75db913681f04d71ce12c9df46eba183fdd2b1b7fdfb2afcffb6c0ff64bd7cb7d85840d90b391b59d08e", "447834ab57b33011eb80ac8db8f78001c5370bfd88b3dc1378dbf324020ef9af"}) setpgid(0x0, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x200) ioctl$BLKROSET(r3, 0x125d, &(0x7f00000000c0)=0x6) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f00000004c0)={0x0, 0x0}) ptrace$setopts(0x4206, r5, 0x0, 0x0) ptrace$setregs(0xf, r5, 0x200, &(0x7f0000000300)) 00:23:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb612"], 0x14}}], 0x2, 0x0) 00:23:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000340)={0x0, 0x80, 0x1, 'queue1\x00'}) [ 554.648626] ptrace attach of "/root/syz-executor1"[6252] was attempted by "/root/syz-executor1"[15401] [ 554.812944] ptrace attach of "/root/syz-executor1"[6252] was attempted by "/root/syz-executor1"[15401] 00:24:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000001c0), 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x3, 0x6, 0xffffffffffffffff}, 0x14}}, 0x0) 00:24:00 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) dup2(r1, r0) 00:24:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000000c0)="0f0f1ba00873850f01d1ba4000b8a989ef660f2ac3ba4000b85700eff3cfbad00466b8b200000066ef3e0f38003abaf80c66b8a206ef8766efbafc0cec", 0x3d}], 0x1, 0x0, &(0x7f0000000200), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:24:00 executing program 1: bpf$BPF_PROG_DETACH(0x12, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x700}, 0x14) 00:24:00 executing program 3: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000200)={0x84, @broadcast, 0x0, 0x1, 'dh\x00'}, 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 00:24:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb612"], 0x14}}], 0x2, 0x0) 00:24:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000280)={0x0, 0x0, 0x8, {0x77359400}}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000240)={@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x35cf}, 0x20) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={r1, 0x0, 0xfffffffffffffbff, 0x2}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) 00:24:00 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001c40)={&(0x7f0000000140)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001300), 0x0, &(0x7f0000000040)=[@rdma_map={0xf, 0x114, 0x3, {{&(0x7f00000001c0)=""/4096, 0x1000}}}], 0x30}, 0x0) 00:24:00 executing program 3: capset(&(0x7f000043fff8)={0x19980330}, &(0x7f0000000000)={0xffffffff, 0xffffffffffffffff}) r0 = fcntl$getown(0xffffffffffffffff, 0x9) capset(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000100)={0x22, 0x8, 0x401, 0x8000, 0x3, 0x20}) getrandom(&(0x7f00000001c0)=""/8, 0x8, 0x3) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000140)='./file0\x00', 0x81) 00:24:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb612"], 0x14}}], 0x2, 0x0) 00:24:00 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xffffffffffffffff, 0xfb, &(0x7f0000000340)=""/251}, 0x48) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x7}, 0x14) getpid() socketpair(0x0, 0x0, 0x7fff, &(0x7f00000001c0)) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000346fc8), &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000002c0)) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000200)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x2, &(0x7f0000000280)=@raw=[@generic={0x0, 0x7fff, 0x63, 0x401}], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000080)=""/251}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000240)={0x2, 0x0, [0x0, 0x0]}) 00:24:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x200000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x184, 0x30, 0x0, 0x0, 0x0, {}, [{0x170, 0x1, @m_mirred={0x16c, 0x0, {{0xc, 0x1, 'mirred\x00'}, {0x24, 0x2, @TCA_MIRRED_PARMS={0x20}}, {0x134, 0x6, "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"}}}}]}, 0x184}}, 0x0) recvmmsg(r3, &(0x7f00000001c0)=[{{&(0x7f0000000640)=@hci, 0x80, &(0x7f00000049c0), 0x0, &(0x7f0000004a40)=""/241, 0x87}}], 0x70, 0x2, &(0x7f0000000200)={0x77359400}) 00:24:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]}}], 0x2, 0x0) 00:24:01 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x5, 0x12) 00:24:01 executing program 0: openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x402000, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000004c0)=""/148, 0xffffff42}], 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'teql0\x00'}) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='status\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000001c7, 0x0) 00:24:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]}}], 0x2, 0x0) 00:24:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x70003}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000180)) 00:24:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@ipx={0x4, 0x80000001, 0x0, "0950fe4adba7"}, 0x16, &(0x7f0000000000), 0x0, &(0x7f0000000240)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x6}, 0x2c) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@sco={0x1f, {0x8, 0x0, 0x2}}, 0x80, &(0x7f0000000080)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x2b5) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003840)=[{&(0x7f00000004c0)=""/158, 0x9e}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/98, 0x62}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/115, 0x73}], 0x5}, 0x0) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000000c0)=@in6={0x31100, 0x894f, 0x5, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x329]}}, 0x80, &(0x7f0000000340), 0x3c1, &(0x7f0000000380)}, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x98) pipe(&(0x7f0000000000)) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000000c0)=@routing, 0x8) socket$l2tp(0x18, 0x1, 0x1) 00:24:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) 00:24:02 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0xc01, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000004c0)=""/246) close(r0) 00:24:02 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]}}], 0x2, 0x0) 00:24:02 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000009, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x730000, 0xffffffff7ff0bdbe}) close(r0) [ 557.660594] vhci_hcd: invalid port number 255 [ 557.665346] vhci_hcd: default hub control req: feff vffff i00ff l65535 [ 557.729832] vhci_hcd: invalid port number 255 [ 557.734761] vhci_hcd: default hub control req: feff vffff i00ff l65535 [ 557.933622] not chained 140000 origins [ 557.937628] CPU: 1 PID: 6252 Comm: syz-executor1 Not tainted 4.19.0+ #77 [ 557.941602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.941602] Call Trace: [ 557.941602] [ 557.941602] dump_stack+0x32d/0x480 [ 557.941602] ? kmsan_internal_chain_origin+0x136/0x240 [ 557.941602] kmsan_internal_chain_origin+0x222/0x240 [ 557.941602] ? __tcp_retransmit_skb+0xe37/0x43d0 [ 557.941602] ? run_timer_softirq+0x55/0xa0 [ 557.941602] ? __do_softirq+0x721/0xc5d [ 557.941602] ? irq_exit+0x305/0x340 [ 557.941602] ? exiting_irq+0xe/0x10 [ 557.941602] ? smp_apic_timer_interrupt+0x64/0x90 [ 557.941602] ? apic_timer_interrupt+0xf/0x20 [ 557.941602] ? finish_lock_switch+0x2b/0x40 [ 557.941602] ? finish_task_switch+0x17e/0x410 [ 557.941602] ? __schedule+0x8a8/0xa60 [ 557.941602] ? schedule+0x1db/0x320 [ 557.941602] ? do_nanosleep+0x421/0xbe0 [ 557.941602] ? __se_sys_nanosleep+0x514/0x740 [ 557.941602] ? __x64_sys_nanosleep+0x3e/0x60 [ 557.941602] ? do_syscall_64+0xcf/0x110 [ 557.941602] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 557.941602] ? set_irq_regs+0x79/0xc0 [ 557.941602] ? ret_from_intr+0x13/0x33 [ 557.941602] ? flat_init_apic_ldr+0x180/0x180 [ 557.941602] ? kmsan_internal_chain_origin+0x90/0x240 [ 557.941602] ? get_stack_info+0x863/0x9d0 [ 557.941602] __msan_chain_origin+0x6d/0xd0 [ 557.941602] ? run_timer_softirq+0x55/0xa0 [ 557.941602] __save_stack_trace+0x8be/0xc60 [ 557.941602] ? run_timer_softirq+0x55/0xa0 [ 557.941602] save_stack_trace+0xc6/0x110 [ 557.941602] kmsan_internal_chain_origin+0x136/0x240 [ 557.941602] ? finish_lock_switch+0x2b/0x40 [ 557.941602] ? kmsan_internal_chain_origin+0x136/0x240 [ 557.941602] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 557.941602] ? __msan_memcpy+0x6f/0x80 [ 557.941602] ? pskb_expand_head+0x43b/0x1d20 [ 557.941602] ? __tcp_retransmit_skb+0xe37/0x43d0 [ 557.941602] ? tcp_retransmit_skb+0xa4/0x440 [ 557.941602] ? tcp_retransmit_timer+0x2c4e/0x4960 [ 557.941602] ? tcp_write_timer_handler+0x6c2/0xf70 [ 557.941602] ? tcp_write_timer+0x139/0x250 [ 557.941602] ? call_timer_fn+0x356/0x7c0 [ 557.941602] ? __run_timers+0xe95/0x1300 [ 557.941602] ? run_timer_softirq+0x55/0xa0 [ 557.941602] ? __do_softirq+0x721/0xc5d [ 557.941602] ? irq_exit+0x305/0x340 [ 557.941602] ? exiting_irq+0xe/0x10 [ 557.941602] ? smp_apic_timer_interrupt+0x64/0x90 [ 557.941602] ? apic_timer_interrupt+0xf/0x20 [ 557.941602] ? finish_lock_switch+0x2b/0x40 [ 557.941602] ? finish_task_switch+0x17e/0x410 [ 557.941602] ? __schedule+0x8a8/0xa60 [ 557.941602] ? schedule+0x1db/0x320 [ 557.941602] ? do_nanosleep+0x421/0xbe0 [ 557.941602] ? __se_sys_nanosleep+0x514/0x740 [ 557.941602] ? __x64_sys_nanosleep+0x3e/0x60 [ 557.941602] ? do_syscall_64+0xcf/0x110 [ 557.941602] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 557.941602] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 557.941602] ? memcg_kmem_put_cache+0x8e/0x460 [ 557.941602] ? __msan_get_context_state+0x9/0x30 [ 557.941602] ? INIT_INT+0xc/0x30 [ 557.941602] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 557.941602] ? ipv4_dst_check+0x1aa/0x2a0 [ 557.941602] kmsan_memcpy_origins+0x13d/0x1b0 [ 557.941602] __msan_memcpy+0x6f/0x80 [ 557.941602] pskb_expand_head+0x43b/0x1d20 [ 557.941602] __tcp_retransmit_skb+0xe37/0x43d0 [ 557.941602] ? acpi_pm_read_slow+0x100/0x100 [ 557.941602] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 557.941602] ? ktime_get_with_offset+0x344/0x4e0 [ 557.941602] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 557.941602] ? tcp_enter_loss+0x14f6/0x15b0 [ 557.941602] tcp_retransmit_skb+0xa4/0x440 [ 557.941602] tcp_retransmit_timer+0x2c4e/0x4960 [ 557.941602] ? tcp_write_timer+0x139/0x250 [ 557.941602] tcp_write_timer_handler+0x6c2/0xf70 [ 557.941602] ? INIT_INT+0xc/0x30 [ 557.941602] tcp_write_timer+0x139/0x250 [ 557.941602] call_timer_fn+0x356/0x7c0 [ 557.941602] ? tcp_init_xmit_timers+0x130/0x130 [ 557.941602] __run_timers+0xe95/0x1300 [ 557.941602] ? tcp_init_xmit_timers+0x130/0x130 [ 557.941602] run_timer_softirq+0x55/0xa0 [ 557.941602] ? timers_dead_cpu+0xb90/0xb90 [ 557.941602] __do_softirq+0x721/0xc5d [ 557.941602] irq_exit+0x305/0x340 [ 557.941602] exiting_irq+0xe/0x10 [ 557.941602] smp_apic_timer_interrupt+0x64/0x90 [ 557.941602] apic_timer_interrupt+0xf/0x20 [ 557.941602] [ 557.941602] RIP: 0010:finish_lock_switch+0x2b/0x40 [ 557.941602] Code: 48 89 e5 53 48 89 fb e8 d3 7b 9c 00 8b b8 88 0c 00 00 48 8b 00 48 85 c0 75 12 48 89 df e8 8d 70 9c 00 c6 00 00 c6 03 00 fb 5b <5d> c3 e8 de 7a 9c 00 eb e7 66 90 66 2e 0f 1f 84 00 00 00 00 00 55 [ 557.941602] RSP: 0018:ffff8801541afc50 EFLAGS: 00000296 ORIG_RAX: ffffffffffffff13 [ 557.941602] RAX: ffff8801dcbbcc00 RBX: ffff88011e629e00 RCX: ffff8801dcbbcc00 [ 557.941602] RDX: ffff8801dcbbdc00 RSI: 0000160000000000 RDI: aaaaaaaaaaaab000 [ 557.941602] RBP: ffff8801541afc50 R08: ffff880000000000 R09: 0000000000000002 [ 557.941602] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8801ca3d8000 [ 557.941602] R13: ffff88021fdba590 R14: ffff8801ca3d8988 R15: ffff88021fdb9c00 [ 557.941602] finish_task_switch+0x17e/0x410 [ 557.941602] __schedule+0x8a8/0xa60 [ 557.941602] schedule+0x1db/0x320 [ 557.941602] do_nanosleep+0x421/0xbe0 [ 557.941602] __se_sys_nanosleep+0x514/0x740 [ 557.941602] ? hrtimer_init_sleeper+0xc0/0xc0 [ 557.941602] __x64_sys_nanosleep+0x3e/0x60 [ 557.941602] do_syscall_64+0xcf/0x110 [ 557.941602] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 557.941602] RIP: 0033:0x483060 [ 557.941602] Code: 00 00 48 c7 c0 d4 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb be 66 0f 1f 44 00 00 83 3d 11 34 5c 00 00 75 14 b8 23 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 d4 f8 f8 ff c3 48 83 ec 08 e8 ba 70 fd ff [ 557.941602] RSP: 002b:0000000000a3fd78 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 557.941602] RAX: ffffffffffffffda RBX: 0000000000088321 RCX: 0000000000483060 [ 557.941602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000a3fd80 [ 557.941602] RBP: 0000000000000478 R08: 0000000000000001 R09: 000000000267c940 [ 557.941602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 557.941602] R13: 0000000000088081 R14: 000000000000014b R15: 0000000000000001 [ 557.941602] Uninit was stored to memory at: [ 557.941602] kmsan_internal_chain_origin+0x136/0x240 [ 557.941602] __msan_chain_origin+0x6d/0xd0 [ 557.941602] __save_stack_trace+0x8be/0xc60 [ 557.941602] save_stack_trace+0xc6/0x110 [ 557.941602] kmsan_internal_chain_origin+0x136/0x240 [ 557.941602] kmsan_memcpy_origins+0x13d/0x1b0 [ 557.941602] __msan_memcpy+0x6f/0x80 [ 557.941602] pskb_expand_head+0x43b/0x1d20 [ 557.941602] __tcp_retransmit_skb+0xe37/0x43d0 [ 557.941602] tcp_retransmit_skb+0xa4/0x440 [ 557.941602] tcp_retransmit_timer+0x2c4e/0x4960 [ 557.941602] tcp_write_timer_handler+0x6c2/0xf70 [ 557.941602] tcp_write_timer+0x139/0x250 [ 557.941602] call_timer_fn+0x356/0x7c0 [ 557.941602] __run_timers+0xe95/0x1300 [ 557.941602] run_timer_softirq+0x55/0xa0 [ 557.941602] __do_softirq+0x721/0xc5d [ 557.941602] [ 557.941602] Uninit was stored to memory at: [ 557.941602] kmsan_internal_chain_origin+0x136/0x240 [ 557.941602] __msan_chain_origin+0x6d/0xd0 [ 557.941602] __save_stack_trace+0x8be/0xc60 [ 557.941602] save_stack_trace+0xc6/0x110 [ 557.941602] kmsan_internal_chain_origin+0x136/0x240 [ 557.941602] kmsan_memcpy_origins+0x13d/0x1b0 [ 557.941602] __msan_memcpy+0x6f/0x80 [ 557.941602] pskb_expand_head+0x43b/0x1d20 [ 557.941602] __tcp_retransmit_skb+0xe37/0x43d0 [ 557.941602] tcp_retransmit_skb+0xa4/0x440 [ 557.941602] tcp_retransmit_timer+0x2c4e/0x4960 [ 557.941602] tcp_write_timer_handler+0x6c2/0xf70 [ 557.941602] tcp_write_timer+0x139/0x250 [ 557.941602] call_timer_fn+0x356/0x7c0 [ 557.941602] __run_timers+0xe95/0x1300 [ 557.941602] run_timer_softirq+0x55/0xa0 [ 557.941602] __do_softirq+0x721/0xc5d [ 557.941602] [ 557.941602] Uninit was stored to memory at: [ 557.941602] kmsan_internal_chain_origin+0x136/0x240 [ 557.941602] __msan_chain_origin+0x6d/0xd0 [ 557.941602] __save_stack_trace+0x8be/0xc60 [ 557.941602] save_stack_trace+0xc6/0x110 [ 557.941602] kmsan_internal_chain_origin+0x136/0x240 [ 557.941602] kmsan_memcpy_origins+0x13d/0x1b0 [ 557.941602] __msan_memcpy+0x6f/0x80 [ 557.941602] pskb_expand_head+0x43b/0x1d20 [ 557.941602] __tcp_retransmit_skb+0xe37/0x43d0 [ 557.941602] tcp_retransmit_skb+0xa4/0x440 [ 557.941602] tcp_retransmit_timer+0x2c4e/0x4960 [ 557.941602] tcp_write_timer_handler+0x6c2/0xf70 [ 557.941602] tcp_write_timer+0x139/0x250 [ 557.941602] call_timer_fn+0x356/0x7c0 [ 557.941602] __run_timers+0xe95/0x1300 [ 557.941602] run_timer_softirq+0x55/0xa0 [ 557.941602] __do_softirq+0x721/0xc5d [ 557.941602] [ 557.941602] Uninit was stored to memory at: [ 557.941602] kmsan_internal_chain_origin+0x136/0x240 [ 557.941602] __msan_chain_origin+0x6d/0xd0 [ 557.941602] __save_stack_trace+0x8be/0xc60 [ 557.941602] save_stack_trace+0xc6/0x110 [ 557.941602] kmsan_internal_chain_origin+0x136/0x240 [ 557.941602] kmsan_memcpy_origins+0x13d/0x1b0 [ 557.941602] __msan_memcpy+0x6f/0x80 [ 557.941602] pskb_expand_head+0x43b/0x1d20 [ 557.941602] __tcp_retransmit_skb+0xe37/0x43d0 [ 557.941602] tcp_retransmit_skb+0xa4/0x440 [ 557.941602] tcp_retransmit_timer+0x2c4e/0x4960 [ 557.941602] tcp_write_timer_handler+0x6c2/0xf70 [ 557.941602] tcp_write_timer+0x139/0x250 [ 557.941602] call_timer_fn+0x356/0x7c0 [ 557.941602] __run_timers+0xe95/0x1300 [ 557.941602] run_timer_softirq+0x55/0xa0 [ 557.941602] __do_softirq+0x721/0xc5d [ 557.941602] [ 557.941602] Uninit was stored to memory at: [ 557.941602] kmsan_internal_chain_origin+0x136/0x240 [ 557.941602] __msan_chain_origin+0x6d/0xd0 [ 557.941602] __save_stack_trace+0x8be/0xc60 [ 557.941602] save_stack_trace+0xc6/0x110 [ 557.941602] kmsan_internal_chain_origin+0x136/0x240 [ 557.941602] kmsan_memcpy_origins+0x13d/0x1b0 [ 557.941602] __msan_memcpy+0x6f/0x80 [ 557.941602] pskb_expand_head+0x43b/0x1d20 [ 557.941602] __tcp_retransmit_skb+0xe37/0x43d0 [ 557.941602] tcp_retransmit_skb+0xa4/0x440 [ 557.941602] tcp_retransmit_timer+0x2c4e/0x4960 [ 557.941602] tcp_write_timer_handler+0x6c2/0xf70 [ 557.941602] tcp_write_timer+0x139/0x250 [ 557.941602] call_timer_fn+0x356/0x7c0 [ 557.941602] __run_timers+0xe95/0x1300 [ 557.941602] run_timer_softirq+0x55/0xa0 [ 557.941602] __do_softirq+0x721/0xc5d [ 557.941602] [ 557.941602] Uninit was stored to memory at: [ 557.941602] kmsan_internal_chain_origin+0x136/0x240 [ 557.941602] __msan_chain_origin+0x6d/0xd0 [ 557.941602] __save_stack_trace+0x8be/0xc60 [ 557.941602] save_stack_trace+0xc6/0x110 [ 557.941602] kmsan_internal_chain_origin+0x136/0x240 [ 557.941602] kmsan_memcpy_origins+0x13d/0x1b0 [ 557.941602] __msan_memcpy+0x6f/0x80 [ 557.941602] pskb_expand_head+0x43b/0x1d20 [ 557.941602] __tcp_retransmit_skb+0xe37/0x43d0 [ 557.941602] tcp_retransmit_skb+0xa4/0x440 [ 557.941602] tcp_retransmit_timer+0x2c4e/0x4960 [ 557.941602] tcp_write_timer_handler+0x6c2/0xf70 [ 557.941602] tcp_write_timer+0x139/0x250 [ 557.941602] call_timer_fn+0x356/0x7c0 [ 557.941602] __run_timers+0xe95/0x1300 [ 557.941602] run_timer_softirq+0x55/0xa0 [ 557.941602] __do_softirq+0x721/0xc5d [ 557.941602] [ 557.941602] Uninit was stored to memory at: [ 557.941602] kmsan_internal_chain_origin+0x136/0x240 [ 557.941602] __msan_chain_origin+0x6d/0xd0 [ 557.941602] __save_stack_trace+0x8be/0xc60 [ 557.941602] save_stack_trace+0xc6/0x110 [ 557.941602] kmsan_internal_chain_origin+0x136/0x240 [ 557.941602] kmsan_memcpy_origins+0x13d/0x1b0 [ 557.941602] __msan_memcpy+0x6f/0x80 [ 557.941602] pskb_expand_head+0x43b/0x1d20 [ 557.941602] __tcp_retransmit_skb+0xe37/0x43d0 [ 557.941602] tcp_retransmit_skb+0xa4/0x440 [ 557.941602] tcp_retransmit_timer+0x2c4e/0x4960 [ 557.941602] tcp_write_timer_handler+0x6c2/0xf70 [ 557.941602] tcp_write_timer+0x139/0x250 [ 557.941602] call_timer_fn+0x356/0x7c0 [ 557.941602] __run_timers+0xe95/0x1300 [ 557.941602] run_timer_softirq+0x55/0xa0 [ 557.941602] __do_softirq+0x721/0xc5d [ 557.941602] [ 557.941602] Local variable description: ----state@__save_stack_trace [ 557.941602] Variable was created at: [ 557.941602] __save_stack_trace+0xae/0xc60 00:24:02 executing program 2: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x0, 0x0, 0x408001) [ 557.941602] save_stack_trace+0xc6/0x110 00:24:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r2 = open(&(0x7f0000000600)='./control\x00', 0x0, 0x0) fsync(r2) 00:24:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]}}], 0x2, 0x0) 00:24:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x8013, r1, 0x0) 00:24:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x10}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x3af, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000080)=@hci, 0x80, &(0x7f0000001580), 0x0, &(0x7f0000001600)=""/101, 0x65}, 0x0) 00:24:04 executing program 3: r0 = socket(0x11, 0x4000000000080003, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000200)=ANY=[], 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000), 0xf6) 00:24:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xfffffffffffffd6d) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0x16}, 0x59, r1}) setsockopt$inet6_int(r0, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x28c, 0x3ef, 0x200000000000000, 0x30c, 0x0, 0x0, 0xe003, 0x33c, 0x7102, 0x0, 0x3603, 0x252, 0x8]}, 0x75, r2}) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rtc0\x00', 0x101002, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@local, @empty, @loopback, 0x3, 0x0, 0x1f, 0x0, 0x100000000, 0x1c0270, r2}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000006c0)=ANY=[@ANYBLOB="210000004dc3bff6a3d819d4caffffff7f27b369c0cc545640afff9af97288ee0bb983881a4d5271b477752b2332869f8df76ac8a5cffba513d97cc2d108efcf86a162af492933a098526f"], &(0x7f0000000880)=0x1) rename(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x2e75, 0x815}, 0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={@remote, @ipv4={[], [], @loopback}, @mcast2, 0x12c, 0x8, 0x3, 0x400, 0x4, 0x20, r1}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockname(r4, &(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000600)=0x80) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\b\x00'], &(0x7f00000005c0)=0x1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x509000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r5, 0x5382, &(0x7f0000000480)) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = inotify_init1(0x0) r7 = dup2(r6, r6) fcntl$getownex(r7, 0x10, &(0x7f0000000240)) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) mq_open(&(0x7f0000000000)="2e1f05", 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400080, 0x0) getresgid(&(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000280)) 00:24:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]}}], 0x2, 0x0) 00:24:04 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x0, 0x2}}]}, 0xc4}}, 0x0) 00:24:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x2) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) 00:24:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]}}], 0x2, 0x0) 00:24:05 executing program 0: openat$userio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/userio\x00', 0x0, 0x0) unshare(0x600) pselect6(0x40, &(0x7f0000000000)={0x8}, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340)={0x0, 0x1c9c380}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) 00:24:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x70b5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f00001cc000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) 00:24:05 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x1000) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000001c0)) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x40) r3 = open(&(0x7f0000000240)='./bus\x00', 0x105000, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) sendfile(r3, r0, &(0x7f0000000140), 0x40) ftruncate(r2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffa, 0x80) 00:24:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$sock_bt(r1, 0x80487436, &(0x7f0000000000)) 00:24:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900"], 0xa}}], 0x2, 0x0) 00:24:05 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8000000000b, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000cc0)={0xfffffffffffffffc}) 00:24:05 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fallocate(r0, 0x1, 0x0, 0x10000101) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) 00:24:05 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast1}}) getitimer(0x0, &(0x7f00000001c0)) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'erspan0\x00', {0x2, 0x4e20, @remote}}) 00:24:06 executing program 5: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x200}, 0x24}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 00:24:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900"], 0xa}}], 0x2, 0x0) 00:24:06 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10, 0x9effffff}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TXQLEN={0x8, 0xd, 0xffffffffffffff81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) 00:24:06 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={"00ac720000000000ec973f820f7c4000", 0x101}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(r0) 00:24:06 executing program 1: r0 = socket$pptp(0x18, 0x1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) dup2(r2, r0) [ 561.380681] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 561.387577] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 561.398350] 8021q: adding VLAN 0 to HW filter on device team0 00:24:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0xb}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x9, &(0x7f0000c75000)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000cd0000)='GPL\x00', 0xb4c3, 0x1000, &(0x7f000058b000)=""/4096}, 0x48) [ 561.499002] gretap0: refused to change device tx_queue_len [ 561.505823] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 561.570103] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:24:06 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x10000000}) [ 561.680496] gretap0: refused to change device tx_queue_len [ 561.687439] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 00:24:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900"], 0xa}}], 0x2, 0x0) 00:24:06 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x40, 0xa9, 0x5, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000000), &(0x7f0000000140)="1dbfb9596c94f49780388b97450b3e2675dc81870047943b2ed2bf99a9b768c42bc055be87d12d9f30f4d7f33e1b136d6450c664a46e0ac5eaf8dd7b1d138d0d11"}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000180), &(0x7f00000003c0)=""/128}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f00000002c0)="a554528921", &(0x7f00000000c0)=""/50}, 0x18) 00:24:07 executing program 0: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000200), &(0x7f0000000240)}}, &(0x7f00000002c0)) r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1) r1 = gettid() ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400218) tkill(r1, 0x15) 00:24:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc/') 00:24:07 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0x1) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x1013, r0, 0x0) ioctl$int_in(r0, 0x80000000005008, &(0x7f00000004c0)) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 00:24:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x7ff) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0xfffffffffffffffa}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) 00:24:07 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000029000000430000"], 0xf}}], 0x2, 0x0) 00:24:07 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94b0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mixer\x00', 0xfffffffffffffffe, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000200)={0x4000000000000006, 0x3, 0x800, 0x0, 0x1000, 0x8, 0x1e, 0x0, 0x5, 0x5}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x503000, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000300)='\x00 ', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000053ff3)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r2, r3) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000002ac0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000002bc0)=0xe8) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000002c00)={@dev={0xfe, 0x80, [], 0xc}, @dev={0xfe, 0x80, [], 0x15}, @ipv4={[], [], @remote}, 0x231f, 0x2, 0xffff, 0x100, 0x0, 0x800000, r5}) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000100)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f0000000040)=0xe8) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000001800)=ANY=[@ANYBLOB="020000ea000000000000000000000000000019e2a9715db45156480000000000000000000000000000000bad8ef05195d19415a2c6d60e43848b4a8a66b5fc0d50cc0862efe0c7f390dd16734ccf43007432df7a1dfa1a521b1ac5aee8dec294ae41d75a2fc891bd0cb337b6eed21ab28023dedf149a0265890e34e2c6997ab8222653cfc9d6d3a055eea32392d454714aaa90043f450c0122635e2ad2d9e251872dc8e7d6eaf910edf56cd54ec1a3e217394f4127001445bfd0552228021cb10535e03dfe218e57a2dc1c8bad8c95585c9b724a62be58312e667bb30fe05fc0bb048a6cbbbd2534ce5c628b7aebb64d63ffb7c6622700e7c8bc6d79e995ccfccb555cdacea5f49aa65f403675884865efe5f582b9b428da3e6ba120ce36fabd279ceab6164b7b1d1116bc0e6e9da2eaf4ed4ba523f39c14e8f9e08ad9784a8c168713849b9a91ef895fd3fe0dc8158e4fc3a136c4a28cc2503fabb6"]) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000380)=0xe8) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000003c0)={0xfffffffffffffffd, 0x9}) setreuid(r6, r7) semget$private(0x0, 0x4, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/loop-control\x00', 0x80404, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) 00:24:07 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80e85411, &(0x7f0000000140)={{0x0, 0x3}}) 00:24:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$sock_timeval(r1, 0x1, 0x1d, &(0x7f0000000240)={0x0, 0x2710}, 0x10) 00:24:07 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000000)='H', 0x1, 0x0, &(0x7f0000000180)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000c60000), 0x10) 00:24:07 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000029000000430000"], 0xf}}], 0x2, 0x0) 00:24:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x500) 00:24:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x4, 0x4) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000a77ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f000000db00)=[{{0x0, 0x0, &(0x7f0000004100), 0x0, &(0x7f0000009dc0)}}, {{&(0x7f000000bf40)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f000000c440)=[{&(0x7f000000c3c0)="c6", 0x1}], 0x1, &(0x7f000000c4c0)}}], 0x2, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x400) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000140), 0x100000, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 00:24:08 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x40046103, 0x0) 00:24:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000029000000430000"], 0xf}}], 0x2, 0x0) [ 563.254480] QAT: failed to copy from user. 00:24:08 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6, @in=@dev}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000080)=0xfffffffffffffe4c) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 00:24:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 00:24:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943f"], 0x12}}], 0x2, 0x0) 00:24:08 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00'}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, &(0x7f0000000400)="66b8010000000f01c1baf80c66b8f8a2e28366efbafc0c66b8dd52aa7966ef6436f2a40f30dbd07c800f2169650f019d64d90f214d0f01df", 0x38}], 0x1, 0x0, &(0x7f0000000200), 0x10000000000000e2) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000500)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 00:24:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943f"], 0x12}}], 0x2, 0x0) 00:24:08 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1ff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @local}}}, 0x98) 00:24:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) sendto$inet6(r0, &(0x7f0000000180)="0401000000c000ddb8460900fff5", 0xe, 0x0, &(0x7f0000000000)={0xa, 0x200800806, 0x20000000005, @ipv4={[], [], @multicast2}}, 0x1c) 00:24:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000080)=0x866) 00:24:09 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943f"], 0x12}}], 0x2, 0x0) 00:24:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x6, &(0x7f0000cbc000)=""/244, &(0x7f00000000c0)=0x61) 00:24:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = memfd_create(&(0x7f0000000000)="23656d31232b0085d8b102000000000000006a437432a2aa18be887be98a8f259e2d99c9785c3e5533f6b68bba843fc4", 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8801}) 00:24:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) ustat(0x1, &(0x7f0000000080)) 00:24:09 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb6"], 0x13}}], 0x2, 0x0) 00:24:09 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000009740)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x2061, &(0x7f00000099c0)) 00:24:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000001c0)) 00:24:10 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f000021d000)={0x2, 0x4e21}, 0x3e) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast1, @local, @remote}, 0xc) syz_emit_ethernet(0x5c, &(0x7f0000359fd5)={@link_local, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 00:24:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) getpeername$netlink(r0, &(0x7f0000000740), &(0x7f0000000700)=0xfffffdbc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer\x00', 0x800, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086607, 0x400023) 00:24:10 executing program 1: r0 = msgget$private(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000004c0)='/dev/adsp#\x00', 0x1, 0x0) shmctl$SHM_LOCK(r0, 0xb) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x0) close(r1) 00:24:10 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000280)={@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, {&(0x7f00000000c0)=""/142, 0x8e}, &(0x7f0000000180)}, 0xa0) 00:24:10 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb6"], 0x13}}], 0x2, 0x0) 00:24:10 executing program 5: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8410000000000084) bind$inet6(r0, &(0x7f0000000a80)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x300, 0x300000001000000, 0x0, 0xa00, 0x4000000]}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) [ 565.604739] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:24:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b35f78f98bcacc838cf70641cfc2891b1e1b07ac3d34b2fc8360cd89ed0b72be", 0x20) 00:24:10 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb6"], 0x13}}], 0x2, 0x0) 00:24:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 00:24:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) dup3(r0, r1, 0x0) 00:24:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000), 0xc, &(0x7f0000016ff0)={&(0x7f0000000180)={0x1c, 0x55, 0x3ef, 0x0, 0x0, {0x7}, [@typed={0x8, 0x88, @uid}]}, 0x1c}}, 0x0) [ 566.057680] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 566.177092] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 566.187110] PF_BRIDGE: br_mdb_parse() with unknown ifindex 00:24:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb612"], 0x14}}], 0x1, 0x0) 00:24:11 executing program 0: unshare(0x20000400) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x5}}, &(0x7f0000005fe0)) 00:24:11 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00004aaffc)=0xfffffffffffffa1c, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000080)=0xffffffee) 00:24:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d4"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x1000000000000032, 0xffffffffffffffff, 0x0) 00:24:11 executing program 3: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) read(r3, &(0x7f0000000280)=""/1, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x1000000000016) 00:24:11 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0), 0x10) fchdir(r0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000140)) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000080)="24000000100007031dfffd946fa2830020200a0009000300001d85687f0000000400ff7e280000000b0a43ba5d8060000000060000000029ec2400020cd37ed01cc0730ec279b2fcbf4042d1", 0x4c}], 0x1}, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(r3, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000240)='ns/net\x00', 0x7, 0x2) r4 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x200000) getsockopt$inet_buf(r4, 0x0, 0x22, &(0x7f00000014c0)=""/4096, &(0x7f00000002c0)=0x1000) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1000) r5 = getpid() r6 = syz_open_procfs$namespace(r5, &(0x7f0000000140)='ns/net\x00') r7 = open(&(0x7f0000000100)='./file0\x00', 0x100, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="020100090a0000000000000000000000020010000000000004000000007600000300060000000000332fb48a355602000000e00000010000000000000002030005000000000002000000f100000100000000000000008756797044d8f7b838bc4a83aeede72c6a00eeace40acc9e4f4bf25edaa35ad1f08a1fcde904d91a8b62d16a9a58ce28c6ec3b19faf327b1b45e7d4111f885b63ca889246963b936"], 0x9e}}, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@remote}}, {{@in=@multicast1}}}, &(0x7f0000000380)=0xe8) setreuid(0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r6) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/loop-control\x00', 0x80404, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) r10 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mq_timedreceive(r10, &(0x7f00000013c0)=""/164, 0xa4, 0x3f, &(0x7f0000001480)={0x77359400}) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000100)) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) 00:24:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb612"], 0x14}}], 0x1, 0x0) 00:24:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc08c5336, &(0x7f0000000040)={{}, 'port1\x00'}) [ 566.958675] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 00:24:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000140)=@srh, 0x8) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000080)=@fragment, 0x0) 00:24:12 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0'}, 0xb) 00:24:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000380)="66b80500000066b9006800000f01d90f220166b8009000000f23d00f21f86635200000060f23f8ba400066b87c3cf8b866ef66b8010000000f23c80f21f86635000020000f23f80f326766c7442400000000006766c744240203f300006766c744240600000000670f0114240f01c966b9800000c00f326635000100000f300fae8ef71f", 0x84}], 0x1, 0x0, &(0x7f0000000440)=[@efer={0x2, 0x7000}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x0, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:24:12 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb988de7e07195d78f7ddd19a3782fba5bf4af44acfe05900000053c40600", "ee52c10d1e72a9432c222982fcccff747a3131991a00000000000004002000"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 00:24:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]}}], 0x1, 0x0) [ 567.301873] netlink: 20 bytes leftover after parsing attributes in process `syz-executor1'. 00:24:12 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x12, &(0x7f00000003c0), &(0x7f0000000380)=0x4) getsockopt$inet6_buf(r0, 0x29, 0xd3, &(0x7f0000000140)=""/2, &(0x7f0000000400)=0x2) [ 567.603107] *** Guest State *** [ 567.606620] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 567.615822] CR4: actual=0x0000000000002060, shadow=0x0000000000000020, gh_mask=ffffffffffffe871 [ 567.624961] CR3 = 0x0000000000002000 [ 567.628890] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 567.635729] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 567.642528] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 567.648707] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 567.655043] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 567.662014] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 567.670211] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 567.678627] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 567.686924] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 567.695330] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 567.703631] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 567.711986] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 567.720196] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 567.728604] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 567.736911] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 567.745288] EFER = 0x0000000000007001 PAT = 0x0007040600070406 [ 567.752034] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 567.759701] Interruptibility = 00000000 ActivityState = 00000000 [ 567.766315] *** Host State *** [ 567.769898] RIP = 0xffffffff812c8203 RSP = 0xffff8801b8bff3c8 [ 567.776186] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 567.782914] FSBase=00007f0bed6d9700 GSBase=ffff88021fd00000 TRBase=fffffe000003e000 [ 567.790927] GDTBase=fffffe000003c000 IDTBase=fffffe0000000000 [ 567.797147] CR0=0000000080050033 CR3=00000001034d5000 CR4=00000000001426e0 [ 567.804502] Sysenter RSP=fffffe000003d200 CS:RIP=0010:ffffffff8ae01260 [ 567.811433] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 567.817788] *** Control State *** [ 567.821453] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 567.828423] EntryControls=0000d1ff ExitControls=002fefff [ 567.834198] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 567.841370] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 567.848359] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 567.855584] reason=80000021 qualification=0000000000000000 [ 567.862200] IDTVectoring: info=00000000 errcode=00000000 [ 567.867889] TSC Offset = 0xfffffeca2e3dfdd6 [ 567.872517] EPT pointer = 0x00000001b8ae701e 00:24:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]}}], 0x1, 0x0) 00:24:13 executing program 3: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000140)=""/66) 00:24:13 executing program 1: r0 = socket(0x40000000001e, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x10f, 0x80, &(0x7f0000000000)="00210300", 0x4) 00:24:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x7b, 0xbff, [0x400000b0]}) 00:24:13 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000180)={0x100000000, 0x9}) unshare(0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="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", 0x1000, 0x4004881, &(0x7f00000013c0)={0xa, 0x4e20, 0x9, @local}, 0x1c) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e21, 0x7, @empty, 0x1ff}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r1, &(0x7f00000002c0)="f62e222dc044d17071ab8d6d2d79d646f5852184a1e216ef0007c8918eb2535e020f042a95160188ccb96b424e113a2aa76c98a319063b5f2bffe0ab0e82ee1f64306371aa449e8cc88b146b8d4b6928759fdc42a1b957ed34d56b8f3d7d1860f93f16349aa4929278af7584cedd153b32dc98561ace9aeb4718bb", &(0x7f0000000340)=""/24}, 0x18) times(&(0x7f0000000040)) clone(0x70024104, &(0x7f0000001440)="3aca901ea5733f513d125533818267f7812baa3d154b32eab6228e17ca0004f31eabada7565161d51b04164dc0bfe2e0526a7dd6b8acfeea6837711ae281afac0f737394c0f91497f396eb51434f71158adc8c59c340804877aca3640e12e706e3ee790048c5f589ed01acca82", &(0x7f0000001400), &(0x7f0000000000), &(0x7f00000000c0)="9df7115968c3fb75bb6128afcca794fe93354e1bb2da5b1d71c974d5b9f5b47f6d9252254191e5bb93e0e578c37934b1738252972361f1dc9cd9713426b7647ccb949c0256d48232295fa717c7103eea069aebc9864ca390") getcwd(&(0x7f00000014c0)=""/136, 0x88) 00:24:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]}}], 0x1, 0x0) 00:24:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000005880)='attr/keycreate\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "7b3177f4fc2eb04172daa8fdd1c4c4cf144a23173b6605afb988de7e07195d78f7ddd19a3782fba5bf4af44acfe05900000053c40600", "ee52c10d1e72a9432c222982fcccff747a3131991a00000000000004002000"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 00:24:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x0, @u64=0x2}]}, 0x20}}, 0x0) 00:24:13 executing program 1: io_setup(0x203, &(0x7f0000000040)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) close(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f00000002c0)={0x0, 0x8, 0x0, 0x5, 0x0, r1, 0x0}]) 00:24:13 executing program 2: r0 = memfd_create(&(0x7f0000000140)='md5sumbdev.vmnet1lo\x00', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') chdir(&(0x7f0000000780)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') chown(&(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x0) 00:24:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000004c0)=0x340d) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(sha1-avx,ctr-camellia-asm)\x00'}, 0x58) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="b6e669cb16f2a84300b2c64dc8c566ef", 0x10) flock(r1, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280)=0x3, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x511) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f00000009c0)=ANY=[]], 0x2) 00:24:14 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]}}], 0x1, 0x0) 00:24:14 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r1, r0) 00:24:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000000000)) 00:24:14 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0xa, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) getsockopt$sock_cred(r0, 0x1, 0x2b, &(0x7f0000001240), &(0x7f0000001280)=0xc) stat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000002440)) 00:24:14 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0xc000000100079) ioctl$KVM_SET_CPUID(r0, 0xc0185500, &(0x7f0000000080)=ANY=[@ANYBLOB="2303080008"]) 00:24:14 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40044104, &(0x7f0000001f64)) 00:24:14 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]}}], 0x1, 0x0) 00:24:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x4170000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001040)=@updpolicy={0xb8, 0x19, 0x101, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x24f}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f0000000100)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 00:24:14 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000010c0)=@nat={'nat\x00', 0x19, 0x4, 0xb80, [0x200002c0, 0x0, 0x0, 0x20000d38, 0x20000d68], 0x11000000, &(0x7f0000000000), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{{{0x0, 0x0, 0x0, 'ip6gretap0\x00', 'bond_slave_1\x00', 'eql\x00', '\x00', @dev, [], @dev, [], 0x70, 0x70, 0xa8}}, @common=@mark={'mark\x00', 0x10}}, {{{0x0, 0x0, 0x0, 'bcsf0\x00', 'bond_slave_0\x00', 'veth0\x00', 'vlan0\x00', @empty, [], @broadcast, [], 0x968, 0x968, 0x9a0, [@among={'among\x00', 0x8d0, {{0x0, 0x0, 0x0, {[], 0x6, [{}, {[], @remote}, {[], @multicast2}, {[], @local}, {[], @loopback}, {[], @loopback}]}, {[], 0x9, [{[], @rand_addr}, {[], @multicast1}, {[], @dev}, {}, {[], @multicast2}, {[], @dev}, {[], @multicast2}, {[], @multicast1}, {[], @rand_addr}]}}}}]}}, @snat={'snat\x00', 0x10, {{@random="4c9913a6f3ec"}}}}]}, {0x0, '\x00', 0x2}, {0x0, '\x00', 0x2, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'team_slave_1\x00', 'irlan0\x00', 'irlan0\x00', 'syzkaller0\x00', @link_local, [], @random="f646793b7b39", [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0xbf8) 00:24:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c8, &(0x7f0000000100)={0x0, @broadcast}) 00:24:15 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000002f00)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0xffffff1f}}, 0x14}}, 0x0) 00:24:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0x22, &(0x7f0000000580), 0x8) 00:24:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b28000)='./file0\x00', 0x0) mount(&(0x7f0000071ff8), &(0x7f0000026ff8)='./file0\x00', &(0x7f0000d1a000)='mqueue\x00', 0x0, &(0x7f0000b1d000)) mount(&(0x7f00002be000), &(0x7f0000c53000)='./file0\x00', &(0x7f000002effa)='nfs\x00', 0x140000, &(0x7f0000fce000)) 00:24:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]}}], 0x1, 0x0) 00:24:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x7, 0x81, 0x2, 0x1, 0x0}, 0x2c) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000380)={0x18, 0x0, 0x4, {0x3}}, 0x18) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r1, &(0x7f0000000780)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0xcd) keyctl$set_reqkey_keyring(0xe, 0x5) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000280)=""/76}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="0024ade3c90400000054db5f9a1e744acf9bd1aa35bb6818218e5a9202fc664de312ad084000000000"], &(0x7f00000002c0)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000280)={@loopback, 0x64, r4}) setsockopt$inet6_int(r3, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0xfeff, 0x3ef, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3d0]}, 0x75, r5}) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@local, @empty={[0x0, 0x0, 0x0, 0x2]}, @loopback, 0x3, 0x0, 0x0, 0x0, 0x100000000, 0x1c0270, r5}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x10, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) removexattr(&(0x7f0000000300)='./file0//ile0\x00', &(0x7f0000000340)=@known='security.capability\x00') syz_open_dev$dmmidi(&(0x7f00000005c0)='/dev/dmmidi#\x00', 0x7fffffff, 0x400) set_robust_list(&(0x7f0000000180)={&(0x7f0000000480), 0x0, &(0x7f0000000500)={&(0x7f00000004c0)}}, 0xc) mount(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x0) 00:24:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r2 = perf_event_open(&(0x7f0000000080)={0x7, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) 00:24:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) setrlimit(0x400000000000007, &(0x7f0000000000)) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) chdir(&(0x7f0000000000)='./file0\x00') 00:24:15 executing program 1: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x48400, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)="7465716c30025cfffe00") r2 = dup2(r0, r1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x2, 0x0, 0x6, 0x400, 0x1116, 0xe5c, 0x1, 0x6, 0x2, 0x6, 0x1, 0x6}) 00:24:15 executing program 2: epoll_create1(0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 00:24:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900"], 0xa}}], 0x1, 0x0) 00:24:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x9}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 00:24:16 executing program 5: ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000400)) fchdir(0xffffffffffffffff) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@loopback, @loopback}, &(0x7f0000000300)=0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x8, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) sendfile(r2, r2, &(0x7f0000000040), 0x8080fffffffe) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)}, 0x20) sendfile(r2, r2, &(0x7f0000000380), 0x1000000020000) 00:24:16 executing program 2: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={"0000000000000000000000000200", 0x20000005003}) r2 = socket$nl_route(0x10, 0x3, 0x0) get_thread_area(&(0x7f0000000080)={0x80000001, 0x0, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000080), 0x14d}]) 00:24:16 executing program 3: inotify_init() perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) clock_adjtime(0x0, &(0x7f0000000440)={0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x3}) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000040)) 00:24:16 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getroute={0x1c, 0x1a, 0x201}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0xff4f}}, 0x0) recvmsg(r0, &(0x7f0000000600)={&(0x7f00000002c0)=@nl=@proc, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=""/47, 0x2f}, 0x0) 00:24:16 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900"], 0xa}}], 0x1, 0x0) 00:24:16 executing program 0: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000700), 0x113, 0xa}}, 0x20) r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, &(0x7f00000003c0), r0, &(0x7f0000000400), 0x8, 0x0) semget$private(0x0, 0x0, 0x0) socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00'}) r1 = add_key(&(0x7f0000000440)='blacklist\x00', &(0x7f0000000480), &(0x7f00000004c0)="6c967307ac2b654d37f0a315335127b893c8b0cc2b993e23c624088daa2510bb8d2dc2333780ab99e4fbc94e27aa64768e7f7b3d5d36eff1fd78d8033982b014c6ef6461e8f62e67c0d9c96d0565d4f67ec9cc150c4a08e00aeda1e72fdbf376546cf4de44fd3a3f981d218b8b3a4a7a2943c83acf5646f33454ac4bbbf6f2e0697dddd1abb50951ab33b731d7c5dc6c717958fc9deb098ea13045f476f3472564c02ce2ec29a4752bc9518bbe5c88a12aa1489b46a867", 0xb7, 0xfffffffffffffffb) keyctl$read(0xb, r1, &(0x7f00000005c0)=""/250, 0xfa) 00:24:16 executing program 0: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000000)) 00:24:16 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900"], 0xa}}], 0x1, 0x0) 00:24:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x48c, 0x0, 0xc0010015, 0x80ffff]}) 00:24:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x894c, &(0x7f0000000180)={0x0, &(0x7f0000000240)}) 00:24:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000029000000430000"], 0xf}}], 0x1, 0x0) [ 572.342662] kvm [15999]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0x80feb7 [ 572.393522] kvm [15999]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0x80feb7 00:24:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x100000002, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400218) ioctl$KVM_SET_MSRS(r2, 0x9000aea4, &(0x7f0000000080)) 00:24:17 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000029000000430000"], 0xf}}], 0x1, 0x0) [ 573.074282] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 573.081118] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 573.090756] device team0 left promiscuous mode [ 573.096638] device team_slave_0 left promiscuous mode [ 573.102413] device team_slave_1 left promiscuous mode [ 573.132290] device lo entered promiscuous mode [ 573.148760] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 573.724061] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 573.743028] device lo left promiscuous mode [ 574.202510] device lo entered promiscuous mode [ 574.217801] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:24:19 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)) mmap$binder(&(0x7f00006f8000/0x3000)=nil, 0x3000, 0x0, 0x2131, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x9}) socket$packet(0x11, 0x0, 0x300) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 00:24:19 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000029000000430000"], 0xf}}], 0x1, 0x0) 00:24:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x40045436, 0x3) 00:24:19 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) mount(&(0x7f0000000040)=@nbd={'/dev/nbd'}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='squashfs\x00', 0x20, 0x0) 00:24:19 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioprio_set$pid(0x0, 0x0, 0x9) 00:24:19 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x10000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1b47, 0x0, r0}, 0x2c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendto$inet6(r2, &(0x7f0000000300), 0xff5e, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) [ 574.758631] not chained 150000 origins [ 574.761619] CPU: 1 PID: 16032 Comm: syz-executor1 Not tainted 4.19.0+ #77 [ 574.761619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.761619] Call Trace: [ 574.761619] dump_stack+0x32d/0x480 [ 574.761619] kmsan_internal_chain_origin+0x222/0x240 [ 574.761619] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 574.761619] ? is_bpf_text_address+0x49e/0x4d0 [ 574.761619] ? INIT_INT+0xc/0x30 [ 574.761619] ? __msan_warning+0x74/0xd0 [ 574.761619] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 574.761619] ? __save_stack_trace+0x9f2/0xc60 [ 574.761619] __msan_chain_origin+0x6d/0xd0 [ 574.761619] save_stack_trace+0xfa/0x110 [ 574.761619] kmsan_internal_chain_origin+0x136/0x240 [ 574.761619] ? udp_sendmsg+0x3b90/0x4200 [ 574.761619] ? kmsan_internal_chain_origin+0x136/0x240 [ 574.835979] ? kmsan_memcpy_origins+0x13d/0x1b0 [ 574.835979] ? __msan_memcpy+0x6f/0x80 [ 574.846687] ? pskb_expand_head+0x43b/0x1d20 [ 574.846687] ? gre_tap_xmit+0x4e3/0x910 [ 574.846687] ? dev_hard_start_xmit+0x6dc/0xe00 [ 574.846687] ? sch_direct_xmit+0x59b/0x890 [ 574.846687] ? __qdisc_run+0x1bac/0x3600 [ 574.846687] ? __dev_queue_xmit+0x2131/0x3e00 [ 574.846687] ? dev_queue_xmit+0x4b/0x60 [ 574.846687] ? ip_finish_output2+0x136d/0x1560 [ 574.846687] ? ip_do_fragment+0x37f0/0x3ed0 [ 574.846687] ? ip_fragment+0x247/0x400 [ 574.846687] ? ip_finish_output+0x1056/0x10f0 [ 574.846687] ? ip_output+0x55c/0x630 [ 574.899308] ? ip_send_skb+0x178/0x370 [ 574.899308] ? udp_send_skb+0x1439/0x1920 [ 574.899308] ? udp_sendmsg+0x3b90/0x4200 [ 574.899308] ? udpv6_sendmsg+0x123e/0x4960 [ 574.899308] ? inet_sendmsg+0x4e9/0x800 [ 574.899308] ? __sys_sendto+0x97b/0xb80 [ 574.899308] ? __se_sys_sendto+0x107/0x130 [ 574.899308] ? __x64_sys_sendto+0x6e/0x90 [ 574.899308] ? do_syscall_64+0xcf/0x110 [ 574.899308] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 574.899308] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 574.899308] ? memcg_kmem_put_cache+0x8e/0x460 [ 574.899308] ? __msan_get_context_state+0x9/0x30 [ 574.899308] ? INIT_INT+0xc/0x30 [ 574.899308] ? __kmalloc_node_track_caller+0x369/0x14e0 [ 574.899308] ? ip_check_defrag+0x7ec/0xbc0 [ 574.899308] kmsan_memcpy_origins+0x13d/0x1b0 [ 574.899308] __msan_memcpy+0x6f/0x80 [ 574.899308] pskb_expand_head+0x43b/0x1d20 [ 574.899308] gre_tap_xmit+0x4e3/0x910 [ 574.899308] ? gre_tap_init+0x650/0x650 [ 574.899308] dev_hard_start_xmit+0x6dc/0xe00 [ 574.899308] sch_direct_xmit+0x59b/0x890 [ 574.899308] __qdisc_run+0x1bac/0x3600 [ 574.899308] ? __msan_get_context_state+0x9/0x30 [ 574.899308] __dev_queue_xmit+0x2131/0x3e00 [ 574.899308] dev_queue_xmit+0x4b/0x60 [ 574.899308] ip_finish_output2+0x136d/0x1560 [ 574.899308] ip_do_fragment+0x37f0/0x3ed0 [ 574.899308] ? ip_fragment+0x400/0x400 [ 574.899308] ip_fragment+0x247/0x400 [ 574.899308] ip_finish_output+0x1056/0x10f0 [ 574.899308] ip_output+0x55c/0x630 [ 574.899308] ? ip_mc_finish_output+0x440/0x440 [ 574.899308] ? ip_finish_output+0x10f0/0x10f0 [ 575.048346] ip_send_skb+0x178/0x370 [ 575.048346] udp_send_skb+0x1439/0x1920 [ 575.048346] udp_sendmsg+0x3b90/0x4200 [ 575.048346] ? ip_copy_metadata+0x1710/0x1710 [ 575.048346] ? kmsan_set_origin+0x83/0x130 [ 575.048346] udpv6_sendmsg+0x123e/0x4960 [ 575.048346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 575.048346] ? aa_sk_perm+0x7ab/0x9e0 [ 575.048346] ? __udp6_lib_rcv+0x3ea0/0x3ea0 [ 575.048346] inet_sendmsg+0x4e9/0x800 [ 575.048346] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 575.048346] ? security_socket_sendmsg+0x1bd/0x200 [ 575.048346] ? inet_getname+0x490/0x490 [ 575.048346] __sys_sendto+0x97b/0xb80 [ 575.048346] ? syscall_return_slowpath+0x123/0x8c0 [ 575.048346] ? put_timespec64+0x162/0x220 [ 575.048346] __se_sys_sendto+0x107/0x130 [ 575.048346] __x64_sys_sendto+0x6e/0x90 [ 575.048346] do_syscall_64+0xcf/0x110 [ 575.048346] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 575.048346] RIP: 0033:0x457569 [ 575.048346] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 575.048346] RSP: 002b:00007f29d111ac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 575.048346] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457569 [ 575.048346] RDX: 000000000000ff5e RSI: 0000000020000300 RDI: 0000000000000005 [ 575.048346] RBP: 000000000072bf00 R08: 00000000200000c0 R09: 000000000000001c [ 575.048346] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f29d111b6d4 [ 575.048346] R13: 00000000004c3b92 R14: 00000000004d5ce0 R15: 00000000ffffffff [ 575.048346] Uninit was stored to memory at: [ 575.048346] kmsan_internal_chain_origin+0x136/0x240 [ 575.048346] __msan_chain_origin+0x6d/0xd0 [ 575.048346] save_stack_trace+0xfa/0x110 [ 575.048346] kmsan_internal_chain_origin+0x136/0x240 [ 575.048346] kmsan_memcpy_origins+0x13d/0x1b0 [ 575.048346] __msan_memcpy+0x6f/0x80 [ 575.048346] pskb_expand_head+0x43b/0x1d20 [ 575.048346] gre_tap_xmit+0x4e3/0x910 [ 575.048346] dev_hard_start_xmit+0x6dc/0xe00 [ 575.048346] sch_direct_xmit+0x59b/0x890 [ 575.048346] __qdisc_run+0x1bac/0x3600 [ 575.048346] __dev_queue_xmit+0x2131/0x3e00 [ 575.048346] dev_queue_xmit+0x4b/0x60 [ 575.048346] ip_finish_output2+0x136d/0x1560 [ 575.048346] ip_do_fragment+0x37f0/0x3ed0 [ 575.048346] ip_fragment+0x247/0x400 [ 575.048346] ip_finish_output+0x1056/0x10f0 [ 575.048346] ip_output+0x55c/0x630 [ 575.048346] ip_send_skb+0x178/0x370 [ 575.048346] udp_send_skb+0x1439/0x1920 [ 575.048346] udp_sendmsg+0x3b90/0x4200 [ 575.048346] udpv6_sendmsg+0x123e/0x4960 [ 575.048346] inet_sendmsg+0x4e9/0x800 [ 575.048346] __sys_sendto+0x97b/0xb80 [ 575.048346] __se_sys_sendto+0x107/0x130 [ 575.048346] __x64_sys_sendto+0x6e/0x90 [ 575.048346] do_syscall_64+0xcf/0x110 [ 575.048346] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 575.048346] [ 575.048346] Uninit was stored to memory at: [ 575.048346] kmsan_internal_chain_origin+0x136/0x240 [ 575.048346] __msan_chain_origin+0x6d/0xd0 [ 575.048346] __save_stack_trace+0x833/0xc60 [ 575.048346] save_stack_trace+0xc6/0x110 [ 575.048346] kmsan_internal_chain_origin+0x136/0x240 [ 575.048346] kmsan_memcpy_origins+0x13d/0x1b0 [ 575.048346] __msan_memcpy+0x6f/0x80 [ 575.048346] pskb_expand_head+0x43b/0x1d20 [ 575.048346] gre_tap_xmit+0x4e3/0x910 [ 575.048346] dev_hard_start_xmit+0x6dc/0xe00 [ 575.048346] sch_direct_xmit+0x59b/0x890 [ 575.048346] __qdisc_run+0x1bac/0x3600 [ 575.048346] __dev_queue_xmit+0x2131/0x3e00 [ 575.048346] dev_queue_xmit+0x4b/0x60 [ 575.048346] ip_finish_output2+0x136d/0x1560 [ 575.048346] ip_do_fragment+0x37f0/0x3ed0 [ 575.048346] ip_fragment+0x247/0x400 [ 575.048346] ip_finish_output+0x1056/0x10f0 [ 575.048346] ip_output+0x55c/0x630 [ 575.048346] ip_send_skb+0x178/0x370 [ 575.048346] udp_send_skb+0x1439/0x1920 [ 575.048346] udp_sendmsg+0x3b90/0x4200 [ 575.048346] udpv6_sendmsg+0x123e/0x4960 [ 575.048346] inet_sendmsg+0x4e9/0x800 [ 575.048346] __sys_sendto+0x97b/0xb80 [ 575.048346] __se_sys_sendto+0x107/0x130 [ 575.048346] __x64_sys_sendto+0x6e/0x90 [ 575.048346] do_syscall_64+0xcf/0x110 [ 575.048346] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 575.048346] [ 575.048346] Uninit was stored to memory at: [ 575.048346] kmsan_internal_chain_origin+0x136/0x240 [ 575.048346] __msan_chain_origin+0x6d/0xd0 [ 575.048346] save_stack_trace+0xfa/0x110 [ 575.048346] kmsan_internal_chain_origin+0x136/0x240 [ 575.048346] kmsan_memcpy_origins+0x13d/0x1b0 [ 575.048346] __msan_memcpy+0x6f/0x80 [ 575.048346] pskb_expand_head+0x43b/0x1d20 [ 575.048346] gre_tap_xmit+0x4e3/0x910 [ 575.048346] dev_hard_start_xmit+0x6dc/0xe00 [ 575.048346] sch_direct_xmit+0x59b/0x890 [ 575.048346] __qdisc_run+0x1bac/0x3600 [ 575.048346] __dev_queue_xmit+0x2131/0x3e00 [ 575.048346] dev_queue_xmit+0x4b/0x60 [ 575.048346] ip_finish_output2+0x136d/0x1560 [ 575.048346] ip_do_fragment+0x37f0/0x3ed0 [ 575.048346] ip_fragment+0x247/0x400 [ 575.048346] ip_finish_output+0x1056/0x10f0 [ 575.048346] ip_output+0x55c/0x630 [ 575.048346] ip_send_skb+0x178/0x370 [ 575.048346] udp_send_skb+0x1439/0x1920 [ 575.048346] udp_sendmsg+0x3b90/0x4200 [ 575.048346] udpv6_sendmsg+0x123e/0x4960 [ 575.048346] inet_sendmsg+0x4e9/0x800 [ 575.048346] __sys_sendto+0x97b/0xb80 [ 575.048346] __se_sys_sendto+0x107/0x130 [ 575.048346] __x64_sys_sendto+0x6e/0x90 [ 575.048346] do_syscall_64+0xcf/0x110 [ 575.048346] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 575.048346] [ 575.048346] Uninit was stored to memory at: [ 575.048346] kmsan_internal_chain_origin+0x136/0x240 [ 575.048346] __msan_chain_origin+0x6d/0xd0 [ 575.048346] __save_stack_trace+0x833/0xc60 [ 575.048346] save_stack_trace+0xc6/0x110 [ 575.048346] kmsan_internal_chain_origin+0x136/0x240 [ 575.048346] kmsan_memcpy_origins+0x13d/0x1b0 [ 575.048346] __msan_memcpy+0x6f/0x80 [ 575.048346] pskb_expand_head+0x43b/0x1d20 [ 575.048346] gre_tap_xmit+0x4e3/0x910 [ 575.048346] dev_hard_start_xmit+0x6dc/0xe00 [ 575.048346] sch_direct_xmit+0x59b/0x890 [ 575.048346] __qdisc_run+0x1bac/0x3600 [ 575.048346] __dev_queue_xmit+0x2131/0x3e00 [ 575.048346] dev_queue_xmit+0x4b/0x60 [ 575.048346] ip_finish_output2+0x136d/0x1560 [ 575.048346] ip_do_fragment+0x37f0/0x3ed0 [ 575.048346] ip_fragment+0x247/0x400 [ 575.048346] ip_finish_output+0x1056/0x10f0 [ 575.048346] ip_output+0x55c/0x630 [ 575.048346] ip_send_skb+0x178/0x370 [ 575.048346] udp_send_skb+0x1439/0x1920 [ 575.048346] udp_sendmsg+0x3b90/0x4200 [ 575.048346] udpv6_sendmsg+0x123e/0x4960 [ 575.048346] inet_sendmsg+0x4e9/0x800 [ 575.048346] __sys_sendto+0x97b/0xb80 [ 575.048346] __se_sys_sendto+0x107/0x130 [ 575.048346] __x64_sys_sendto+0x6e/0x90 [ 575.048346] do_syscall_64+0xcf/0x110 [ 575.048346] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 575.048346] [ 575.048346] Uninit was stored to memory at: [ 575.048346] kmsan_internal_chain_origin+0x136/0x240 [ 575.048346] __msan_chain_origin+0x6d/0xd0 [ 575.048346] save_stack_trace+0xfa/0x110 [ 575.048346] kmsan_internal_chain_origin+0x136/0x240 [ 575.048346] kmsan_memcpy_origins+0x13d/0x1b0 [ 575.048346] __msan_memcpy+0x6f/0x80 [ 575.048346] pskb_expand_head+0x43b/0x1d20 [ 575.048346] gre_tap_xmit+0x4e3/0x910 [ 575.048346] dev_hard_start_xmit+0x6dc/0xe00 [ 575.048346] sch_direct_xmit+0x59b/0x890 [ 575.048346] __qdisc_run+0x1bac/0x3600 [ 575.048346] __dev_queue_xmit+0x2131/0x3e00 [ 575.048346] dev_queue_xmit+0x4b/0x60 [ 575.048346] ip_finish_output2+0x136d/0x1560 [ 575.048346] ip_do_fragment+0x37f0/0x3ed0 [ 575.048346] ip_fragment+0x247/0x400 [ 575.048346] ip_finish_output+0x1056/0x10f0 [ 575.048346] ip_output+0x55c/0x630 [ 575.048346] ip_send_skb+0x178/0x370 [ 575.048346] udp_send_skb+0x1439/0x1920 [ 575.048346] udp_sendmsg+0x3b90/0x4200 [ 575.048346] udpv6_sendmsg+0x123e/0x4960 [ 575.048346] inet_sendmsg+0x4e9/0x800 [ 575.048346] __sys_sendto+0x97b/0xb80 [ 575.048346] __se_sys_sendto+0x107/0x130 [ 575.048346] __x64_sys_sendto+0x6e/0x90 [ 575.048346] do_syscall_64+0xcf/0x110 [ 575.048346] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 575.048346] [ 575.048346] Uninit was stored to memory at: [ 575.048346] kmsan_internal_chain_origin+0x136/0x240 [ 575.048346] __msan_chain_origin+0x6d/0xd0 [ 575.048346] __save_stack_trace+0x833/0xc60 [ 575.048346] save_stack_trace+0xc6/0x110 [ 575.048346] kmsan_internal_chain_origin+0x136/0x240 [ 575.048346] kmsan_memcpy_origins+0x13d/0x1b0 [ 575.048346] __msan_memcpy+0x6f/0x80 [ 575.048346] pskb_expand_head+0x43b/0x1d20 [ 575.048346] gre_tap_xmit+0x4e3/0x910 [ 575.048346] dev_hard_start_xmit+0x6dc/0xe00 [ 575.048346] sch_direct_xmit+0x59b/0x890 [ 575.048346] __qdisc_run+0x1bac/0x3600 [ 575.048346] __dev_queue_xmit+0x2131/0x3e00 [ 575.048346] dev_queue_xmit+0x4b/0x60 [ 575.048346] ip_finish_output2+0x136d/0x1560 [ 575.048346] ip_do_fragment+0x37f0/0x3ed0 [ 575.048346] ip_fragment+0x247/0x400 [ 575.048346] ip_finish_output+0x1056/0x10f0 [ 575.048346] ip_output+0x55c/0x630 [ 575.048346] ip_send_skb+0x178/0x370 [ 575.048346] udp_send_skb+0x1439/0x1920 [ 575.048346] udp_sendmsg+0x3b90/0x4200 [ 575.048346] udpv6_sendmsg+0x123e/0x4960 [ 575.048346] inet_sendmsg+0x4e9/0x800 [ 575.048346] __sys_sendto+0x97b/0xb80 [ 575.048346] __se_sys_sendto+0x107/0x130 [ 575.048346] __x64_sys_sendto+0x6e/0x90 [ 575.048346] do_syscall_64+0xcf/0x110 [ 575.048346] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 575.048346] [ 575.048346] Uninit was stored to memory at: [ 575.048346] kmsan_internal_chain_origin+0x136/0x240 [ 575.048346] __msan_chain_origin+0x6d/0xd0 [ 575.048346] save_stack_trace+0xfa/0x110 [ 575.048346] kmsan_internal_chain_origin+0x136/0x240 [ 575.048346] kmsan_memcpy_origins+0x13d/0x1b0 [ 575.048346] __msan_memcpy+0x6f/0x80 [ 575.048346] pskb_expand_head+0x43b/0x1d20 [ 575.048346] gre_tap_xmit+0x4e3/0x910 [ 575.048346] dev_hard_start_xmit+0x6dc/0xe00 [ 575.048346] sch_direct_xmit+0x59b/0x890 [ 575.048346] __qdisc_run+0x1bac/0x3600 [ 575.048346] __dev_queue_xmit+0x2131/0x3e00 [ 575.048346] dev_queue_xmit+0x4b/0x60 [ 575.048346] ip_finish_output2+0x136d/0x1560 [ 575.048346] ip_do_fragment+0x37f0/0x3ed0 [ 575.048346] ip_fragment+0x247/0x400 [ 575.048346] ip_finish_output+0x1056/0x10f0 [ 575.048346] ip_output+0x55c/0x630 [ 575.048346] ip_send_skb+0x178/0x370 [ 575.048346] udp_send_skb+0x1439/0x1920 [ 575.048346] udp_sendmsg+0x3b90/0x4200 [ 575.048346] udpv6_sendmsg+0x123e/0x4960 [ 575.048346] inet_sendmsg+0x4e9/0x800 [ 575.048346] __sys_sendto+0x97b/0xb80 [ 575.048346] __se_sys_sendto+0x107/0x130 [ 575.048346] __x64_sys_sendto+0x6e/0x90 00:24:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x40045436, 0x3) 00:24:19 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 00:24:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x0, &(0x7f0000000100), 0x1000000000000046) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r4, 0x0) [ 575.048346] do_syscall_64+0xcf/0x110 [ 575.048346] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 575.048346] [ 575.048346] Local variable description: ----__ai_n1.i.i.i.i@kfree [ 575.048346] Variable was created at: [ 575.048346] kfree+0x115/0x2f20 [ 575.048346] skb_release_data+0xbcb/0xc90 00:24:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x40045436, 0x3) 00:24:21 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943f"], 0x12}}], 0x1, 0x0) 00:24:21 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() setpriority(0x2, r1, 0x0) 00:24:21 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)) mmap$binder(&(0x7f00006f8000/0x3000)=nil, 0x3000, 0x0, 0x2131, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x9}) socket$packet(0x11, 0x0, 0x300) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 00:24:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x40045436, 0x3) 00:24:21 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000002900000043000000943fb6"], 0x13}}], 0x1, 0x0) 00:24:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xff5e, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 00:24:22 executing program 5: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x40045436, 0x3) 00:24:22 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000004c0)) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000280), 0x108) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) socket$packet(0x11, 0x0, 0x300) write(0xffffffffffffffff, &(0x7f0000fa8000), 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 00:24:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, "89b1de5c52d3cac0a9cfc280c11f9d3af18b550fd55c3bcd086bfbb5f56c4947de6eb062b47af7c143cd8863c3e790f68158bbd4f0fea0d7505174f65da98d62", "d1cdc64c92b038d9b7ee8ab43eec823b7c159f2a203b75db913681f04d71ce12c9df46eba183fdd2b1b7fdfb2afcffb6c0ff64bd7cb7d85840d90b391b59d08e", "447834ab57b33011eb80ac8db8f78001c5370bfd88b3dc1378dbf324020ef9af"}) 00:24:22 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x40045436, 0x3) 00:24:22 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x15, r0, &(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz'}, 0x0) 00:24:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x0, &(0x7f0000000100), 0x1000000000000046) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000180)) 00:24:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)=0xfffffffffffffff8) mmap$binder(&(0x7f00006f8000/0x3000)=nil, 0x3000, 0x8, 0x2131, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000004c0)) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={0x0, {{0x2, 0x4e24}}}, 0x108) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9, 0x9}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000006c0)={0x0, 0x110000}) socket$packet(0x11, 0x10000000000003, 0x300) write(0xffffffffffffffff, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000000)={'veth1\x00', 0x6c5e}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 00:24:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xff5e, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 00:24:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x40045436, 0x0) 00:24:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0xffff8000) 00:24:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0xff5e, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 00:24:23 executing program 1: r0 = socket(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r3 = pkey_alloc(0x0, 0xf7ffffdffffffffc) pkey_free(r3) r4 = dup3(r2, 0xffffffffffffffff, 0x80000) futimesat(r4, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0x7530}}) flock(0xffffffffffffffff, 0x2) flock(0xffffffffffffffff, 0x100000000000001) r5 = gettid() gettid() syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xc0, 0x80) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r7, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000040000)) tkill(r5, 0x1000000000015) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0xffffffff, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) futimesat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x77359400}, {0x77359400}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xd}}, 0xf0) setxattr$security_smack_entry(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.SMACK64IPOUT\x00', &(0x7f0000000340)='/dev/amidi#\x00', 0xc, 0x2) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 0xc95920e5537317c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00?\x00', 0x19, 0x2, 0x64, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, &(0x7f0000000080), &(0x7f0000000600)=ANY=[@ANYBLOB="0014841aead03439fb000000000000000000000000001f0000000000000000000000000000200000feffffff0000000000000000000000000000000000000000000000000000000000545e785bd3e2fb9210000000000000000000000000000000ffffff"]}, 0xdc) 00:24:23 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x3, 0x1b0, [0x20000500, 0x0, 0x0, 0x20000670, 0x200006a0], 0x0, &(0x7f0000000000), &(0x7f0000000500)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'ipddp0\x00', 'dummy0\x00', 'gre0\x00', 'team0\x00', @empty, [], @random="ac3790b7c223", [0x0, 0x0, 0x0, 0x0, 0xff], 0xa0, 0xe8, 0x120, [@cgroup0={'cgroup\x00', 0x8, {{0xfffffffffffffff7}}}]}, [@common=@ERROR={'ERROR\x00', 0x20, {"d541b1445599fc79225e1f93a36ff70d92e7b013d880b65c1b09e8480cbe"}}]}, @arpreply={'arpreply\x00', 0x10, {{@broadcast}}}}]}]}, 0x228) 00:24:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000000)) [ 578.661488] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 578.676689] kernel msg: ebtables bug: please report to author: entries_size too small [ 578.723972] kernel msg: ebtables bug: please report to author: entries_size too small 00:24:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f0000000100), 0x1000000000000046) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:24:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000000), 0x0, 0xffffffffffffffff, 0x1}) 00:24:24 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='cmdline\x00') preadv(r1, &(0x7f0000000480), 0x10000000000001ed, 0x0) 00:24:24 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)=0xfffffffffffffff8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000004c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x65, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0563df081d7c481455677969221bec86a2da5312f16d5c2f8abd47bc89aa6c18220d0f52c4697c5fed52eb205cad41bfef4aaeaf6ef4be7f1300020000889fe05e2c6ef10fc0f5fbb0ef29a4fa3a8fe8633fc217c188cd0efe9e17ec270adac0f8062b9e8b"], 0xc5, 0x0, &(0x7f0000000580)="6d321fa1cb83210d6da5a7fc0a42458266a7d41a7f565bc605eca132e22669b2fe23c4595ccc835e22347b92ea3b6d91687d46e2c940fea9ca7d153d5c7843707697eee0d8c408f5f43701311589ca03577adee6080d8d8363a4fceb092ed5465461af91d1496e618e69abdbada55b14ca19467d09353a42d5dd49a62b7cfe168525b0796217e544889c887fe1e7b042ca4fbec0324cb80cd85663af6bfd9516377417474cbdc44b775cefb7abbe39ce9513aefab95b7ec29d7108f2ea45e553632a6c2416"}) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000280)={0x3e76}, 0x108) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x6, 0x5d, 0x0, 0x9, 0x9}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000006c0)) socket$packet(0x11, 0x0, 0x300) write(0xffffffffffffffff, &(0x7f0000fa8000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000000)={'veth1\x00', 0x6c5e}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 00:24:24 executing program 1: keyctl$search(0x16, 0x0, &(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz'}, 0x0) 00:24:24 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioprio_set$pid(0x0, 0x0, 0xbaa0) 00:24:24 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f00000000c0), 0x8) 00:24:24 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0x4, r0, &(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz'}, 0x0) 00:24:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)) 00:24:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000000)=0x44) 00:24:24 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(xeta)\x00'}, 0x58) accept4(r0, &(0x7f00000001c0)=@ethernet={0x0, @link_local}, &(0x7f0000000040)=0x80, 0x0) 00:24:25 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000280)=0x68) 00:24:25 executing program 3: ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x82) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, "89b1de5c52d3cac0a9cfc280c11f9d3af18b550fd55c3bcd086bfbb5f56c4947de6eb062b47af7c143cd8863c3e790f68158bbd4f0fea0d7505174f65da98d62", "d1cdc64c92b038d9b7ee8ab43eec823b7c159f2a203b75db913681f04d71ce12c9df46eba183fdd2b1b7fdfb2afcffb6c0ff64bd7cb7d85840d90b391b59d08e", "447834ab57b33011eb80ac8db8f78001c5370bfd88b3dc1378dbf324020ef9af"}) 00:24:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x13, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000000)=0x44) 00:24:25 executing program 1: keyctl$search(0x2, 0x0, &(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz'}, 0x0) 00:24:25 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffff023}]}, 0x10) 00:24:25 executing program 4: syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x200) 00:24:25 executing program 5: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r0, &(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={'syz'}, 0x0) 00:24:25 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 00:24:25 executing program 3: 00:24:25 executing program 2: 00:24:25 executing program 0: 00:24:26 executing program 5: 00:24:26 executing program 3: 00:24:26 executing program 1: 00:24:26 executing program 4: 00:24:26 executing program 0: 00:24:26 executing program 2: 00:24:26 executing program 5: 00:24:26 executing program 4: 00:24:26 executing program 3: 00:24:26 executing program 0: 00:24:26 executing program 5: 00:24:26 executing program 2: 00:24:26 executing program 1: 00:24:26 executing program 4: 00:24:27 executing program 5: 00:24:27 executing program 3: 00:24:27 executing program 2: 00:24:27 executing program 1: 00:24:27 executing program 0: 00:24:27 executing program 4: 00:24:27 executing program 3: 00:24:27 executing program 5: 00:24:27 executing program 1: 00:24:27 executing program 4: 00:24:27 executing program 3: 00:24:27 executing program 0: 00:24:27 executing program 2: 00:24:28 executing program 5: 00:24:28 executing program 0: 00:24:28 executing program 1: 00:24:28 executing program 4: 00:24:28 executing program 5: 00:24:28 executing program 2: 00:24:28 executing program 3: syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000040)=""/148, 0x94}], 0x100000000000015d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001ed, 0x0) 00:24:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 00:24:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0x14, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8}]}}}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) 00:24:28 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001ac0)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000003480)='cgroup.controllers\x00', 0x0, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000003500)=0xffffffffffffffff, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000003540)={0xffffffffffffffff, r4}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b80)={r1, 0x50, &(0x7f0000001b00)}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socketpair(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000001a00)={0xa892104e6f69ec90, 0x70, 0x8, 0x1, 0x7ff, 0x3ff, 0x0, 0x2, 0x2280, 0x0, 0xffffffffa5e07ef9, 0x0, 0x0, 0x3, 0xe892, 0x0, 0x30, 0x3f, 0x3, 0x2, 0x7ff, 0x7, 0x6, 0x3, 0x1, 0x0, 0x40, 0x1, 0x8, 0x20, 0x2, 0x9, 0x5, 0x7ff, 0x6, 0x4354, 0x6, 0xc937, 0x0, 0x0, 0x6, @perf_config_ext={0xfffffffffffffffa, 0x7}, 0x1000, 0x0, 0x4, 0x7, 0x8, 0x9bb7, 0x5}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x323) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = gettid() bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f00000001c0)}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)) socket$kcm(0xa, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x2c, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r8, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r8}, 0x10) perf_event_open(&(0x7f0000001c00)={0x6, 0x70, 0xce, 0x4, 0x6, 0xd17, 0x0, 0x9, 0x204, 0x0, 0x8, 0x7, 0x6, 0x5, 0x6, 0x70b, 0x40, 0x0, 0xffffffff, 0x100000000, 0x5, 0x6, 0x7fff, 0x7, 0x2, 0x100, 0x0, 0x739, 0x0, 0x401, 0x1fd, 0x1, 0x3ff, 0x9, 0x7, 0x4, 0x600000000000000, 0x80000000, 0x0, 0x84, 0x4, @perf_bp={&(0x7f0000001bc0), 0x4}, 0x10000, 0x5, 0x5, 0x7, 0x2b4, 0x0, 0x44}, r7, 0x5, r6, 0x3) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)="6576656e7473000000c7aaff0fb0c79b9391e4ae6479d80000000000", 0xf0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000001a80)={r2}) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000001c80)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r9, 0x40086607, &(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r4) [ 583.754974] binder: 16280:16284 got transaction with invalid handle, 0 [ 583.762134] binder: 16280:16284 transaction failed 29201/-22, size 24-8 line 3062 [ 583.816278] binder_alloc: binder_alloc_mmap_handler: 16280 20001000-20004000 already mapped failed -16 00:24:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000480)) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000580)=ANY=[@ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="852a62", @ANYBLOB]], 0x0, 0x0, &(0x7f0000000740)}) pipe(&(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000300)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000380)={r1}) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000040)) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) lseek(r2, 0x0, 0x2) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r4, &(0x7f0000d83ff8)=0x8000, 0x8000fffffffb) ftruncate(r3, 0x3) [ 583.860962] binder: BINDER_SET_CONTEXT_MGR already set [ 583.866643] binder: 16280:16284 ioctl 40046207 0 returned -16 [ 583.894864] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 583.947303] binder_alloc: 16280: binder_alloc_buf, no vma [ 583.953308] binder: 16280:16293 transaction failed 29189/-3, size 24-8 line 2970 00:24:29 executing program 2: r0 = add_key(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={'syz'}, &(0x7f0000000200)="e7", 0x1, 0xfffffffffffffffb) add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000080), 0x0, r0) [ 584.066248] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.074296] binder: undelivered TRANSACTION_ERROR: 29189 00:24:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x0, 0x70fe0000000000, 0xf000) 00:24:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) dup3(r2, r3, 0x0) 00:24:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@flat={0x77682a85}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000340)}) 00:24:29 executing program 4: r0 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x7, &(0x7f0000000180), 0x4) 00:24:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') preadv(r1, &(0x7f000055ff80)=[{&(0x7f00002f0f89)=""/204, 0xcc}], 0x1, 0x0) 00:24:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x3e4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x2000, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000040)=""/95) splice(0xffffffffffffffff, &(0x7f0000000380), 0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0) semctl$GETPID(0x0, 0x3, 0xb, &(0x7f0000000400)=""/82) [ 584.664085] binder: 16313:16315 got transaction with invalid handle, 0 [ 584.671017] binder: 16313:16315 transaction failed 29201/-22, size 24-8 line 3062 [ 584.764408] binder: undelivered TRANSACTION_ERROR: 29201 00:24:29 executing program 1: r0 = socket$kcm(0x10, 0x1000000100000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000008f40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f000000a380)=[{&(0x7f0000008fc0)=""/200, 0xc8}, {&(0x7f00000090c0)=""/83, 0x53}, {&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f00000091c0)=""/190, 0xbe}, {&(0x7f0000009280)=""/151, 0x97}, {&(0x7f0000009340)=""/9, 0x9}, {&(0x7f0000009380)=""/4096, 0x1000}], 0x7, &(0x7f000000a400)=""/218, 0x27a}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f0000008bc609f6d8ffffff9e000000000000000000", 0x23}], 0x1, &(0x7f0000000100)}, 0x0) 00:24:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x408c5333, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'}) getsockname(0xffffffffffffffff, &(0x7f0000000200)=@hci, &(0x7f0000000140)=0x80) 00:24:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0x4}]}, 0x18}}, 0x0) 00:24:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000013000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7030000000000006a0a00fe00000000850000002b000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x1000, &(0x7f00000001c0)="e84373f460e0f11c39f9b7a31ba2", &(0x7f0000000500)=""/4096, 0x1282}, 0x28) 00:24:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000280)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100) lseek(0xffffffffffffffff, 0x0, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) modify_ldt$read(0x0, &(0x7f0000000180)=""/60, 0x3c) 00:24:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000980)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) close(r1) 00:24:30 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000000), 0x80) 00:24:30 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080), 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f00000001c0), &(0x7f00000002c0)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x1000000000016) futex(&(0x7f000000cffc), 0x800000000005, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040), 0x0) 00:24:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x2102}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000240)}]) 00:24:30 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000737000), 0x170, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x8001, 0x4) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0xc, &(0x7f0000000040), 0x0, &(0x7f00000003c0)=""/36, 0x24}, 0x2000) [ 585.845486] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:24:30 executing program 3: r0 = memfd_create(&(0x7f0000000140)="0d47fb", 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000e50003000300000000000000000038000000000000000000000000082000f9"], 0x2d) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f0000000280), &(0x7f0000000500), 0x1000) [ 586.036559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:24:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000791000), 0xc, &(0x7f0000000040)={&(0x7f0000d3dc98)={0x1c, 0x217, 0x10000000000a, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x2, @pid}]}, 0x1c}}, 0x0) 00:24:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffa4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e6e65742f73797a31eb", 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x18, 0x4, 0x0, 0xee2, 0x4, 0xffffffffffffffff, 0x100000001}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f00000005c0)="a2354781355311f5c58e8b7894446b505898d1b905e36e4f844bea8c11edf461e0b8a04835c0577248dd081f80142654aa9b658561f8b8e625df1a06393cb91abc332f14865c8c2c35d8a375ea433fc446f273a142a52fe42ff0b3599714c3dbacbb3145a477cdcba4ff4f9429f8db6a1e6398a8ce0677f846b40d28aecf97c01bdd5ef63a0bb7095028525619e70ccdfc6e56914e8cdf1f0f7161c901cb7c33f4f833edbea90adde35da3", &(0x7f0000000340)=""/150}, 0x18) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0x0, 0x7}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x1, 0x76, 0x0, 0x400}, 0x2c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000540)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r1, &(0x7f00000006c0)="473740901eb836430a90fefb961e77b5037cdf5790d62a7fe5df4b79505a4268df9ecd3c44fd7c140ebf2bc45a7d6e18ae7813539da646e245ca476215572adafa2097dc36b0a661e6a9c1d070689611ba38e7b9736748dcfaaf85d01b5f3c0d8c9746bdb44e991e9cc2b39f244b6b2fe338a9cdf4230d7298db24e01f0317178f64a846803c24a385b82709ac51f0a9bcac0426bfbe7572708ac3358decbfbd9b96e0a2041b8264a52c93afcd29fcae168ca2f46f91211eb8de77163e72ed8a01f2fd671e90348fbbc909f4064c85ccfe", &(0x7f0000000440)=""/99}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=""/99}, 0x20000098) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='\\posix_acl_access(/-md5sum\x00', 0xffffffffffffff9c}, 0x63364666eb2ea497) 00:24:31 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x81) r1 = gettid() perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0xe20, 0x8, 0x8000, 0xffff, 0x0, 0x183902a, 0x10000, 0xa, 0xfffffffffffffc01, 0x5, 0x0, 0xffffffffffffffff, 0x809, 0x6, 0x7f, 0x3, 0x81, 0x2c00000000000000, 0x21da, 0x5, 0x319, 0x9, 0xffffffff, 0xffffffffffff5067, 0x7, 0x4887, 0xff, 0x0, 0x20, 0x0, 0xffffffffffff5994, 0x0, 0x80000000, 0xd86, 0x1ff, 0x58000000000000, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x20000, 0xfffffffffffffffc, 0x3ff, 0x3, 0xfff, 0x8000, 0x3}, r1, 0x2, r0, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2d27b806d30dcbb6ecad78dbe5696f20"], 0x10) sendmsg$kcm(r2, &(0x7f0000002c80)={0x0, 0x0, &(0x7f00000015c0), 0x3ae, &(0x7f0000000000)}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000740)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000640), 0x0, &(0x7f00000006c0), 0xffffffffffffffa6}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000000200)=""/60) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000600)={"00ac730000000000ec973f820f7c4000", 0xc202}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x7) close(r6) 00:24:31 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080)={0x2, 0xfffffffffffffffa}, 0x2) 00:24:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c744240006000000c744240200000080c7442406000000000f01142466b8c2008ec80f070f0f369a0f2002674669f9c12c000026660f38157e0f660f0dbead00000066baf80cb8bcecb281ef66bafc0cb80b000000ef0f20d835080000000f22d8", 0x61}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f21abd9f6b8fc0d8ec03e0cfcd8fa2e3e0f00d9baf80c66b89c39008866efbafc0c66b80a5e000066efbaf80c66b884929d8f66efbafc0c66b8e100000066eff2f30f19809988260f06", 0x4a}], 0x1, 0x0, &(0x7f0000000480), 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000000)={0x7fffffff, 0x13, 0x0, 0x0, "23c3bc29de93143c772d109b38f6d22eb1dd9a874dee3827997d469b1a3014b4"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 586.773240] misc userio: No port type given on /dev/userio [ 586.814861] misc userio: The device must be registered before sending interrupts [ 586.851943] misc userio: The device must be registered before sending interrupts [ 586.900688] misc userio: The device must be registered before sending interrupts [ 587.677418] kvm: emulating exchange as write 00:24:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x20000000000007}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 00:24:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000002500)={0x0, &(0x7f0000002480), 0x4}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x0) 00:24:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$negate(0xd, 0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x8, @mcast1}, 0x1c) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) rt_sigpending(&(0x7f00000000c0), 0x8) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x100000080000000) 00:24:34 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffa4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1a7b, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)="2e2f6367726f75702e6e65742f73797a31eb", 0x1ff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x28, &(0x7f0000000480)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={r1, 0x7, 0x18}, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}, 0xfffffffffffffe00}, 0x80, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x4}, 0x8080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000540)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=""/99}, 0x20000098) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='\\posix_acl_access(/-md5sum\x00', 0xffffffffffffff9c}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r2, 0x3, 0x1, 0x0, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x20) 00:24:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000), 0xc, &(0x7f00006bcff0)={&(0x7f0000000680)=@newlink={0x38, 0x10, 0x111, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @ip6erspan={{0x14, 0x1, 'ip6erspan\x00'}, {0x4}}}]}, 0x38}}, 0x0) 00:24:34 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000002500)={0x0, &(0x7f0000002480), 0x4}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x0) 00:24:34 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x1}}, 0x28) 00:24:34 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400218) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000000140)=@sr0='/dev/sr0\x00', &(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='fuse.lk\x00', 0x0, 0x0) [ 589.311921] misc userio: Buffer overflowed, userio client isn't keeping up 00:24:34 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f00000000c0)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400218) unshare(0x40600) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000380)="db", 0x1}], 0x1) r2 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x0) dup2(r2, r0) 00:24:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000400), 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r0) [ 590.371897] ================================================================== [ 590.379276] BUG: KMSAN: uninit-value in synaptics_detect+0x207/0x2c0 [ 590.381670] CPU: 0 PID: 6244 Comm: kworker/0:3 Not tainted 4.19.0+ #77 [ 590.381670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.381670] Workqueue: events_long serio_handle_event [ 590.381670] Call Trace: [ 590.381670] dump_stack+0x32d/0x480 [ 590.381670] ? synaptics_detect+0x207/0x2c0 [ 590.381670] kmsan_report+0x1a2/0x2e0 [ 590.381670] __msan_warning+0x74/0xd0 [ 590.381670] synaptics_detect+0x207/0x2c0 [ 590.381670] psmouse_extensions+0x117e/0x3930 [ 590.381670] psmouse_switch_protocol+0x184/0xdc0 [ 590.381670] psmouse_connect+0x14d3/0x2380 [ 590.381670] serio_driver_probe+0xe3/0x150 [ 590.381670] ? psmouse_interrupt+0x1950/0x1950 [ 590.381670] ? serio_uevent+0x6e0/0x6e0 [ 590.381670] really_probe+0x98a/0x1410 [ 590.381670] driver_probe_device+0x1b4/0x4f0 [ 590.381670] __device_attach_driver+0x63b/0x750 [ 590.381670] bus_for_each_drv+0x28e/0x3b0 [ 590.381670] ? driver_deferred_probe_add_trigger+0x3c0/0x3c0 [ 590.381670] __device_attach+0x444/0x6d0 [ 590.381670] device_initial_probe+0x4a/0x60 [ 590.381670] bus_probe_device+0x137/0x390 [ 590.381670] device_add+0x2692/0x2c90 [ 590.381670] ? __list_add_valid+0xb8/0x480 [ 590.381670] serio_handle_event+0x1cee/0x2650 [ 590.381670] ? serio_resume+0x2b0/0x2b0 [ 590.381670] process_one_work+0x19fe/0x25f0 [ 590.381670] worker_thread+0x1601/0x2bd0 [ 590.381670] kthread+0x5e7/0x620 [ 590.381670] ? process_one_work+0x25f0/0x25f0 [ 590.381670] ? INIT_BOOL+0x30/0x30 [ 590.381670] ret_from_fork+0x35/0x40 [ 590.381670] [ 590.381670] Local variable description: ----param@synaptics_detect [ 590.381670] Variable was created at: [ 590.381670] synaptics_detect+0x5d/0x2c0 [ 590.381670] psmouse_extensions+0x117e/0x3930 [ 590.381670] ================================================================== [ 590.381670] Disabling lock debugging due to kernel taint [ 590.381670] Kernel panic - not syncing: panic_on_warn set ... [ 590.381670] [ 590.381670] CPU: 0 PID: 6244 Comm: kworker/0:3 Tainted: G B 4.19.0+ #77 [ 590.381670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.381670] Workqueue: events_long serio_handle_event [ 590.381670] Call Trace: [ 590.381670] dump_stack+0x32d/0x480 [ 590.381670] panic+0x57e/0xb28 [ 590.381670] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 590.381670] kmsan_report+0x2d3/0x2e0 [ 590.381670] __msan_warning+0x74/0xd0 [ 590.381670] synaptics_detect+0x207/0x2c0 [ 590.381670] psmouse_extensions+0x117e/0x3930 [ 590.381670] psmouse_switch_protocol+0x184/0xdc0 [ 590.381670] psmouse_connect+0x14d3/0x2380 [ 590.381670] serio_driver_probe+0xe3/0x150 [ 590.381670] ? psmouse_interrupt+0x1950/0x1950 [ 590.381670] ? serio_uevent+0x6e0/0x6e0 [ 590.381670] really_probe+0x98a/0x1410 [ 590.381670] driver_probe_device+0x1b4/0x4f0 [ 590.381670] __device_attach_driver+0x63b/0x750 [ 590.381670] bus_for_each_drv+0x28e/0x3b0 [ 590.381670] ? driver_deferred_probe_add_trigger+0x3c0/0x3c0 [ 590.381670] __device_attach+0x444/0x6d0 [ 590.381670] device_initial_probe+0x4a/0x60 [ 590.381670] bus_probe_device+0x137/0x390 [ 590.381670] device_add+0x2692/0x2c90 [ 590.381670] ? __list_add_valid+0xb8/0x480 [ 590.381670] serio_handle_event+0x1cee/0x2650 [ 590.381670] ? serio_resume+0x2b0/0x2b0 [ 590.381670] process_one_work+0x19fe/0x25f0 [ 590.381670] worker_thread+0x1601/0x2bd0 [ 590.381670] kthread+0x5e7/0x620 [ 590.381670] ? process_one_work+0x25f0/0x25f0 [ 590.381670] ? INIT_BOOL+0x30/0x30 [ 590.381670] ret_from_fork+0x35/0x40 [ 590.381670] Kernel Offset: disabled [ 590.381670] Rebooting in 86400 seconds..