_readv+0x310/0x310 [ 2864.392206] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2864.397752] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2864.403123] ? trace_hardirqs_off_caller+0x310/0x310 [ 2864.408241] __x64_sys_preadv+0x9a/0xf0 [ 2864.412249] do_syscall_64+0x1b9/0x820 [ 2864.416145] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2864.421529] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2864.426466] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2864.431323] ? trace_hardirqs_on_caller+0x310/0x310 [ 2864.436362] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2864.441418] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2864.446454] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2864.451316] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2864.456513] RIP: 0033:0x457679 [ 2864.459711] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2864.478618] RSP: 002b:00007f318af95c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2864.486337] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457679 [ 2864.493613] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000004 [ 2864.500883] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2864.508158] R10: 000000002000107c R11: 0000000000000246 R12: 00007f318af966d4 10:36:35 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) [ 2864.515464] R13: 00000000004c39db R14: 00000000004d63e8 R15: 00000000ffffffff 10:36:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x7, @local, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 2864.552045] Task in /syz1 killed as a result of limit of /syz1 [ 2864.558068] memory: usage 307136kB, limit 307200kB, failcnt 940 [ 2864.625136] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 10:36:36 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0xc0, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a2656490000000000120000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000e1ff000000000000000000000000000000000008000000000000000400000000000000000000000000000000000000000000000000000000000000"]}, 0x138) [ 2864.665905] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2864.703505] Memory cgroup stats for /syz1: cache:56208KB rss:220912KB rss_huge:208896KB shmem:56260KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:56120KB active_anon:220968KB inactive_file:0KB active_file:4KB unevictable:4KB 10:36:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10000, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300), 0x4) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = socket$inet(0x2, 0xa, 0xffd) connect$inet(r1, &(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10) r3 = semget(0x2, 0x1, 0x20) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000680)=""/144) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x2, 0x1) r4 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x80000001, 0x549080) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x200, 0x0, 0x8, 0x8001, 0x4, 0x10001, 0xc04, 0xfffffffffffffffb, 0xff}, 0xb) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x8000, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000003c0)={0x30800, 0xfff, 0x3c5, 0xbef}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000240)=0xb) fanotify_mark(r4, 0x2, 0x5f5b0fc457bcba65, r4, &(0x7f0000000200)='./file0\x00') getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in=@loopback, @in6=@loopback}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000500)=0xc) r6 = memfd_create(&(0x7f00000002c0)="000000008c00000000000000000000", 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)='/dev/loop#\x00', 0xb, 0x1) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000540)=""/51) sendfile(r5, r5, &(0x7f0000000280)=0x1c00, 0x102004800) 10:36:37 executing program 3: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000300)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000280)={0x1, 0x0, [0x7a, 0xe, 0x3cd40875, 0x100, 0x1, 0xffffffff, 0x250b, 0xfffffffffffffffc]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000380)={0x0, 0x0, [0x9, 0x4, 0x0, 0xfffffffffffffffd]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x8, @local, 0x6}, {0xa, 0x0, 0x0, @loopback}, 0xffffffffffffff00, [0x0, 0x0, 0x0, 0x8, 0x0, 0x9]}, 0x5c) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x100000001, 0x4000) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000140)={0x3, 0x2}) 10:36:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x2f) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0xc000002000000000, &(0x7f00000009c0), 0x3e8, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) 10:36:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10000, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300), 0x4) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = socket$inet(0x2, 0xa, 0xffd) connect$inet(r1, &(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10) r3 = semget(0x2, 0x1, 0x20) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000680)=""/144) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x2, 0x1) r4 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x80000001, 0x549080) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x200, 0x0, 0x8, 0x8001, 0x4, 0x10001, 0xc04, 0xfffffffffffffffb, 0xff}, 0xb) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x8000, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000003c0)={0x30800, 0xfff, 0x3c5, 0xbef}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000240)=0xb) fanotify_mark(r4, 0x2, 0x5f5b0fc457bcba65, r4, &(0x7f0000000200)='./file0\x00') getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in=@loopback, @in6=@loopback}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000500)=0xc) r6 = memfd_create(&(0x7f00000002c0)="000000008c00000000000000000000", 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)='/dev/loop#\x00', 0xb, 0x1) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000540)=""/51) sendfile(r5, r5, &(0x7f0000000280)=0x1c00, 0x102004800) [ 2865.121755] Memory cgroup out of memory: Kill process 16359 (syz-executor1) score 135 or sacrifice child [ 2865.138361] Killed process 16360 (syz-executor1) total-vm:70472kB, anon-rss:8576kB, file-rss:33624kB, shmem-rss:0kB [ 2865.164161] syz-executor2 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), nodemask=(null), order=0, oom_score_adj=0 [ 2865.167636] oom_reaper: reaped process 16360 (syz-executor1), now anon-rss:0kB, file-rss:32792kB, shmem-rss:0kB [ 2865.185362] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2865.210102] CPU: 1 PID: 16371 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #371 [ 2865.217478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2865.226836] Call Trace: [ 2865.229443] dump_stack+0x244/0x39d [ 2865.233094] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2865.238316] dump_header+0x27b/0xf72 [ 2865.242054] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2865.247610] ? check_preemption_disabled+0x48/0x280 [ 2865.252639] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2865.258289] ? pagefault_out_of_memory+0x197/0x197 [ 2865.263231] ? debug_smp_processor_id+0x1c/0x20 [ 2865.267913] ? perf_trace_lock+0x14d/0x7a0 [ 2865.272171] ? debug_smp_processor_id+0x1c/0x20 [ 2865.276870] ? perf_trace_lock_acquire+0x15b/0x800 [ 2865.281838] ? lock_is_held_type+0x210/0x210 [ 2865.286306] ? perf_trace_lock+0x7a0/0x7a0 [ 2865.290574] ? debug_smp_processor_id+0x1c/0x20 [ 2865.295284] ? perf_trace_lock+0x14d/0x7a0 [ 2865.299592] ? zap_class+0x640/0x640 [ 2865.303330] ? print_usage_bug+0xc0/0xc0 [ 2865.307404] ? lock_is_held_type+0x210/0x210 [ 2865.311827] ? perf_trace_lock+0x7a0/0x7a0 [ 2865.316088] ? find_held_lock+0x36/0x1c0 [ 2865.320201] ? mark_held_locks+0xc7/0x130 [ 2865.324366] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2865.329482] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2865.334601] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2865.339222] ? trace_hardirqs_on+0xbd/0x310 [ 2865.343556] ? kasan_check_read+0x11/0x20 [ 2865.347723] ? ___ratelimit+0x3b4/0x672 [ 2865.351723] ? trace_hardirqs_off_caller+0x310/0x310 [ 2865.356840] ? trace_hardirqs_on+0x310/0x310 [ 2865.361263] ? lock_downgrade+0x900/0x900 [ 2865.365433] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2865.370557] ? ___ratelimit+0x3b9/0x672 [ 2865.374563] ? idr_get_free+0xf70/0xf70 [ 2865.378567] ? _raw_spin_unlock_irq+0x27/0x80 [ 2865.383072] ? _raw_spin_unlock_irq+0x27/0x80 [ 2865.387603] oom_kill_process.cold.27+0x10/0x903 [ 2865.392395] ? _raw_spin_unlock_irq+0x27/0x80 [ 2865.396908] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2865.401515] ? oom_evaluate_task+0x540/0x540 [ 2865.405951] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2865.411503] ? cgroup_procs_next+0x70/0x70 [ 2865.415756] ? _raw_spin_unlock_irq+0x60/0x80 [ 2865.420263] ? oom_badness+0xaa0/0xaa0 [ 2865.424163] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2865.428952] ? mem_cgroup_iter_break+0x30/0x30 [ 2865.433567] ? mark_held_locks+0xc7/0x130 [ 2865.437736] out_of_memory+0xa84/0x1430 [ 2865.441725] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2865.446319] ? kasan_check_read+0x11/0x20 [ 2865.450483] ? oom_killer_disable+0x3a0/0x3a0 [ 2865.455020] mem_cgroup_out_of_memory+0x15e/0x210 [ 2865.459878] ? memory_oom_group_write+0x160/0x160 [ 2865.464732] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2865.469615] ? page_counter_try_charge+0x1c1/0x220 [ 2865.474605] try_charge+0xda9/0x1700 [ 2865.478361] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2865.483067] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2865.488012] ? kasan_check_read+0x11/0x20 [ 2865.492172] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2865.497485] ? rcu_softirq_qs+0x20/0x20 [ 2865.501510] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2865.507080] ? debug_smp_processor_id+0x1c/0x20 [ 2865.511777] ? perf_trace_lock+0x14d/0x7a0 [ 2865.516029] ? lock_page_memcg+0x350/0x350 [ 2865.520291] ? lock_acquire+0x1ed/0x520 [ 2865.524314] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2865.529706] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2865.535260] ? check_preemption_disabled+0x48/0x280 [ 2865.540302] memcg_kmem_charge_memcg+0x7c/0x120 [ 2865.544988] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2865.549531] memcg_kmem_charge+0x149/0x350 [ 2865.553787] __alloc_pages_nodemask+0x75e/0xea0 [ 2865.558497] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 2865.563534] ? perf_trace_sched_process_exec+0x860/0x860 [ 2865.569008] ? kasan_check_write+0x14/0x20 [ 2865.573262] ? copyin+0xb7/0x100 [ 2865.576664] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2865.581707] ? copy_page_from_iter+0x541/0x8f0 [ 2865.586318] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2865.591879] alloc_pages_current+0x173/0x350 [ 2865.596315] pipe_write+0x910/0xec0 [ 2865.599997] __vfs_write+0x6b8/0x9f0 [ 2865.603742] ? kernel_read+0x120/0x120 [ 2865.607644] ? apparmor_path_rmdir+0x30/0x30 [ 2865.612061] ? trace_hardirqs_off_caller+0x310/0x310 [ 2865.612091] ? apparmor_file_permission+0x24/0x30 [ 2865.612116] ? rw_verify_area+0x118/0x360 [ 2865.612138] vfs_write+0x1fc/0x560 [ 2865.612162] ksys_write+0x101/0x260 [ 2865.612194] ? __ia32_sys_read+0xb0/0xb0 [ 2865.612215] ? trace_hardirqs_off_caller+0x310/0x310 [ 2865.612240] __x64_sys_write+0x73/0xb0 [ 2865.612260] do_syscall_64+0x1b9/0x820 [ 2865.650394] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2865.655786] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2865.660730] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2865.665595] ? trace_hardirqs_on_caller+0x310/0x310 [ 2865.670629] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2865.675660] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2865.680710] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2865.685582] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2865.690810] RIP: 0033:0x457679 [ 2865.694016] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2865.712923] RSP: 002b:00007fe78315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 10:36:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) capset(0x0, &(0x7f0000000000)={0x0, 0x41e49f14}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000180)={[{}, {0x0, 0x0, 0xffffffffffffffff}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2865.720643] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457679 [ 2865.727922] RDX: 00000000ffffffea RSI: 00000000200001c0 RDI: 0000000000000004 [ 2865.735212] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2865.742491] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe7831606d4 [ 2865.749769] R13: 00000000004c2db5 R14: 00000000004da348 R15: 00000000ffffffff 10:36:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10000, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300), 0x4) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = socket$inet(0x2, 0xa, 0xffd) connect$inet(r1, &(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10) r3 = semget(0x2, 0x1, 0x20) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000680)=""/144) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x2, 0x1) r4 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x80000001, 0x549080) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x200, 0x0, 0x8, 0x8001, 0x4, 0x10001, 0xc04, 0xfffffffffffffffb, 0xff}, 0xb) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x8000, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000003c0)={0x30800, 0xfff, 0x3c5, 0xbef}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000240)=0xb) fanotify_mark(r4, 0x2, 0x5f5b0fc457bcba65, r4, &(0x7f0000000200)='./file0\x00') getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in=@loopback, @in6=@loopback}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000500)=0xc) r6 = memfd_create(&(0x7f00000002c0)="000000008c00000000000000000000", 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)='/dev/loop#\x00', 0xb, 0x1) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000540)=""/51) sendfile(r5, r5, &(0x7f0000000280)=0x1c00, 0x102004800) 10:36:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x10000, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300), 0x4) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = socket$inet(0x2, 0xa, 0xffd) connect$inet(r1, &(0x7f0000000580)={0x2, 0x4e20, @remote}, 0x10) r3 = semget(0x2, 0x1, 0x20) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000680)=""/144) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x2, 0x1) r4 = syz_open_dev$audion(&(0x7f00000005c0)='/dev/audio#\x00', 0x80000001, 0x549080) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x9, 0x200, 0x0, 0x8, 0x8001, 0x4, 0x10001, 0xc04, 0xfffffffffffffffb, 0xff}, 0xb) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x2, 0x3}, 0x10) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mixer\x00', 0x8000, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x105082) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000003c0)={0x30800, 0xfff, 0x3c5, 0xbef}, 0x10) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x1) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000240)=0xb) fanotify_mark(r4, 0x2, 0x5f5b0fc457bcba65, r4, &(0x7f0000000200)='./file0\x00') getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000740)={{{@in=@loopback, @in6=@loopback}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000500)=0xc) r6 = memfd_create(&(0x7f00000002c0)="000000008c00000000000000000000", 0x1) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)='/dev/loop#\x00', 0xb, 0x1) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000540)=""/51) sendfile(r5, r5, &(0x7f0000000280)=0x1c00, 0x102004800) 10:36:38 executing program 1: ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x278) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000000080), 0x86, 0x0) close(r2) close(r1) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 10:36:38 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x181101, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x8}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) statfs(0x0, &(0x7f0000001980)=""/128) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0xc0) write$P9_RLOCK(r0, &(0x7f00000003c0)={0x8, 0x35, 0x2, 0x1}, 0x8) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64ca1839, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffd5c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x0, 0x0, 0x1, 0x7, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000440)={0x7d, 0x0, [0x20, 0x7fffffff, 0x6, 0x80000001]}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvfrom(r0, &(0x7f0000000940)=""/4096, 0x1000, 0x42, &(0x7f0000000100)=@ipx={0x4, 0x7, 0x1f, "c8fcba0886e8"}, 0x80) pipe(&(0x7f0000000000)) clone(0x40002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x8, 0x3, @remote={0xfe, 0x80, [0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, 0x8d}, 0x1c) finit_module(r2, &(0x7f00000002c0)='/dev/vsock\x00', 0x2) [ 2866.144214] Unknown ioctl 21521 [ 2866.193369] Unknown ioctl 1080602275 [ 2866.228890] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 2866.264788] Unknown ioctl 21521 [ 2866.277063] Unknown ioctl 1080602275 [ 2866.691745] Task in /syz2 killed as a result of limit of /syz2 [ 2866.697802] memory: usage 307200kB, limit 307200kB, failcnt 725 [ 2866.711805] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2866.718574] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2866.736960] Memory cgroup stats for /syz2: cache:0KB rss:273412KB rss_huge:253952KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:273520KB inactive_file:0KB active_file:0KB unevictable:16KB [ 2866.781203] Memory cgroup out of memory: Kill process 13469 (syz-executor2) score 1106 or sacrifice child [ 2866.801912] Killed process 13469 (syz-executor2) total-vm:70472kB, anon-rss:2204kB, file-rss:33548kB, shmem-rss:0kB 10:36:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000003700)={0x3, 0x0, 0x9, 0x4}, 0x8) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'changehat ', 0x1, 0x5e, ['/proc/thread-self/attr/current\x00', 'stack ', '\x00']}, 0x43) 10:36:39 executing program 3: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000300)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000280)={0x1, 0x0, [0x7a, 0xe, 0x3cd40875, 0x100, 0x1, 0xffffffff, 0x250b, 0xfffffffffffffffc]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000380)={0x0, 0x0, [0x9, 0x4, 0x0, 0xfffffffffffffffd]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x8, @local, 0x6}, {0xa, 0x0, 0x0, @loopback}, 0xffffffffffffff00, [0x0, 0x0, 0x0, 0x8, 0x0, 0x9]}, 0x5c) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x100000001, 0x4000) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000140)={0x3, 0x2}) 10:36:39 executing program 5: r0 = socket$inet6(0xa, 0x200000000000001, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @multicast1}}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000180)=0x40) setsockopt$inet_buf(r0, 0x0, 0x100000040, &(0x7f0000000040), 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 10:36:39 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x181101, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x8}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) statfs(0x0, &(0x7f0000001980)=""/128) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0xc0) write$P9_RLOCK(r0, &(0x7f00000003c0)={0x8, 0x35, 0x2, 0x1}, 0x8) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64ca1839, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffd5c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x0, 0x0, 0x1, 0x7, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000440)={0x7d, 0x0, [0x20, 0x7fffffff, 0x6, 0x80000001]}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvfrom(r0, &(0x7f0000000940)=""/4096, 0x1000, 0x42, &(0x7f0000000100)=@ipx={0x4, 0x7, 0x1f, "c8fcba0886e8"}, 0x80) pipe(&(0x7f0000000000)) clone(0x40002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x8, 0x3, @remote={0xfe, 0x80, [0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, 0x8d}, 0x1c) finit_module(r2, &(0x7f00000002c0)='/dev/vsock\x00', 0x2) 10:36:39 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x181101, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x8}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) statfs(0x0, &(0x7f0000001980)=""/128) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0xc0) write$P9_RLOCK(r0, &(0x7f00000003c0)={0x8, 0x35, 0x2, 0x1}, 0x8) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64ca1839, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffd5c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x0, 0x0, 0x1, 0x7, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000440)={0x7d, 0x0, [0x20, 0x7fffffff, 0x6, 0x80000001]}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvfrom(r0, &(0x7f0000000940)=""/4096, 0x1000, 0x42, &(0x7f0000000100)=@ipx={0x4, 0x7, 0x1f, "c8fcba0886e8"}, 0x80) pipe(&(0x7f0000000000)) clone(0x40002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x8, 0x3, @remote={0xfe, 0x80, [0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, 0x8d}, 0x1c) finit_module(r2, &(0x7f00000002c0)='/dev/vsock\x00', 0x2) [ 2867.049056] Unknown ioctl 21521 [ 2867.076760] Unknown ioctl 21521 [ 2867.096536] Unknown ioctl 1080602275 [ 2867.130140] Unknown ioctl 1080602275 [ 2867.184022] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 2867.191045] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 2867.269003] syz-executor5 invoked oom-killer: gfp_mask=0x7002c2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), nodemask=(null), order=0, oom_score_adj=1000 [ 2867.344544] syz-executor5 cpuset=syz5 mems_allowed=0 [ 2867.383607] CPU: 0 PID: 16452 Comm: syz-executor5 Not tainted 4.20.0-rc6+ #371 [ 2867.390983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2867.400342] Call Trace: [ 2867.402953] dump_stack+0x244/0x39d [ 2867.406605] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2867.411820] ? mark_held_locks+0x130/0x130 [ 2867.416071] ? mark_held_locks+0x130/0x130 [ 2867.420325] dump_header+0x27b/0xf72 [ 2867.424066] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2867.429620] ? check_preemption_disabled+0x48/0x280 [ 2867.434668] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2867.440257] ? pagefault_out_of_memory+0x197/0x197 [ 2867.445217] ? debug_smp_processor_id+0x1c/0x20 [ 2867.449905] ? perf_trace_lock+0x14d/0x7a0 [ 2867.454156] ? debug_smp_processor_id+0x1c/0x20 [ 2867.458856] ? perf_trace_lock_acquire+0x15b/0x800 [ 2867.463806] ? lock_is_held_type+0x210/0x210 [ 2867.468237] ? perf_trace_lock+0x7a0/0x7a0 [ 2867.472494] ? debug_smp_processor_id+0x1c/0x20 [ 2867.477181] ? perf_trace_lock+0x14d/0x7a0 [ 2867.481452] ? zap_class+0x640/0x640 [ 2867.485234] ? print_usage_bug+0xc0/0xc0 [ 2867.489314] ? lock_is_held_type+0x210/0x210 [ 2867.493754] ? find_held_lock+0x36/0x1c0 [ 2867.497834] ? mark_held_locks+0xc7/0x130 [ 2867.502005] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2867.507126] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2867.512248] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2867.516849] ? trace_hardirqs_on+0xbd/0x310 [ 2867.521205] ? kasan_check_read+0x11/0x20 [ 2867.525368] ? ___ratelimit+0x3b4/0x672 [ 2867.529361] ? trace_hardirqs_off_caller+0x310/0x310 [ 2867.534483] ? trace_hardirqs_on+0x310/0x310 [ 2867.538910] ? lock_downgrade+0x900/0x900 [ 2867.543077] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2867.548210] ? ___ratelimit+0x3b9/0x672 [ 2867.552217] ? idr_get_free+0xf70/0xf70 [ 2867.556250] ? _raw_spin_unlock_irq+0x27/0x80 [ 2867.560761] ? _raw_spin_unlock_irq+0x27/0x80 [ 2867.565285] oom_kill_process.cold.27+0x10/0x903 [ 2867.570077] ? _raw_spin_unlock_irq+0x27/0x80 [ 2867.574588] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2867.579239] ? oom_evaluate_task+0x540/0x540 [ 2867.583676] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2867.589240] ? cgroup_procs_next+0x70/0x70 [ 2867.593514] ? _raw_spin_unlock_irq+0x60/0x80 [ 2867.598023] ? oom_badness+0xaa0/0xaa0 [ 2867.601942] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2867.606743] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2867.612298] ? mem_cgroup_iter_break+0x30/0x30 [ 2867.616919] ? cgroup_file_notify+0x226/0x2f0 [ 2867.621438] out_of_memory+0xa84/0x1430 [ 2867.625432] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2867.630038] ? kasan_check_read+0x11/0x20 [ 2867.634218] ? oom_killer_disable+0x3a0/0x3a0 [ 2867.638746] mem_cgroup_out_of_memory+0x15e/0x210 [ 2867.643605] ? memory_oom_group_write+0x160/0x160 [ 2867.648567] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2867.653447] ? page_counter_try_charge+0x1c1/0x220 [ 2867.658423] try_charge+0xda9/0x1700 [ 2867.662163] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2867.666859] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2867.671797] ? kasan_check_read+0x11/0x20 [ 2867.675961] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2867.681254] ? rcu_softirq_qs+0x20/0x20 [ 2867.685266] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2867.690823] ? lock_page_memcg+0x350/0x350 [ 2867.695081] ? lock_acquire+0x1ed/0x520 [ 2867.699068] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2867.704460] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2867.710021] ? check_preemption_disabled+0x48/0x280 [ 2867.715064] memcg_kmem_charge_memcg+0x7c/0x120 [ 2867.719758] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2867.724301] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2867.729854] ? rcu_pm_notify+0xc0/0xc0 [ 2867.733761] memcg_kmem_charge+0x149/0x350 [ 2867.738049] __alloc_pages_nodemask+0x75e/0xea0 [ 2867.742731] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2867.747767] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 2867.752816] ? __insert_vmap_area+0x550/0x550 [ 2867.757348] ? perf_trace_sched_process_exec+0x860/0x860 [ 2867.762845] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2867.768404] alloc_pages_current+0x173/0x350 [ 2867.772832] __vmalloc_node_range+0x498/0x750 [ 2867.777438] ? xt_alloc_table_info+0x42/0xa0 [ 2867.781863] __vmalloc_node_flags_caller+0x75/0x90 [ 2867.786806] ? xt_alloc_table_info+0x42/0xa0 [ 2867.791246] kvmalloc_node+0xd7/0xf0 [ 2867.794974] xt_alloc_table_info+0x42/0xa0 [ 2867.799278] do_ipt_set_ctl+0x2dc/0x645 [ 2867.803293] ? compat_do_ipt_set_ctl+0x160/0x160 [ 2867.808081] ? mutex_unlock+0xd/0x10 [ 2867.811807] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 2867.817099] nf_setsockopt+0x7d/0xd0 [ 2867.820829] ip_setsockopt+0xd8/0xf0 [ 2867.824573] udp_setsockopt+0x62/0xa0 [ 2867.828433] ipv6_setsockopt+0x149/0x170 [ 2867.832514] tcp_setsockopt+0x93/0xe0 [ 2867.836338] sock_common_setsockopt+0x9a/0xe0 [ 2867.840852] __sys_setsockopt+0x1ba/0x3c0 [ 2867.845012] ? kernel_accept+0x310/0x310 [ 2867.849084] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2867.853677] ? trace_hardirqs_on+0xbd/0x310 [ 2867.858006] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2867.863381] ? trace_hardirqs_off_caller+0x310/0x310 [ 2867.868536] __x64_sys_setsockopt+0xbe/0x150 [ 2867.872960] do_syscall_64+0x1b9/0x820 [ 2867.876858] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2867.882243] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2867.887203] ? trace_hardirqs_on_caller+0x310/0x310 [ 2867.892240] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2867.897266] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 2867.903940] ? __switch_to_asm+0x40/0x70 [ 2867.908006] ? __switch_to_asm+0x34/0x70 [ 2867.912082] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2867.916947] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2867.922141] RIP: 0033:0x457679 [ 2867.925340] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2867.944249] RSP: 002b:00007f4e4aa66c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2867.951965] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457679 [ 2867.959254] RDX: 0000000100000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 2867.966529] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 2867.973806] R10: 0000000020000040 R11: 0000000000000246 R12: 00007f4e4aa676d4 [ 2867.981077] R13: 00000000004c4ba5 R14: 00000000004d81a0 R15: 00000000ffffffff [ 2868.191832] Task in /syz5 killed as a result of limit of /syz5 [ 2868.197888] memory: usage 307200kB, limit 307200kB, failcnt 1464 [ 2868.224335] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2868.245573] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2868.271753] Memory cgroup stats for /syz5: cache:44KB rss:264612KB rss_huge:241664KB shmem:0KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:16KB active_anon:264540KB inactive_file:0KB active_file:0KB unevictable:20KB [ 2868.381678] Memory cgroup out of memory: Kill process 29810 (syz-executor5) score 1106 or sacrifice child [ 2868.391955] Killed process 29810 (syz-executor5) total-vm:70340kB, anon-rss:2200kB, file-rss:33640kB, shmem-rss:0kB [ 2868.453022] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2868.477411] syz-executor5 cpuset=syz5 mems_allowed=0 [ 2868.491703] CPU: 0 PID: 16432 Comm: syz-executor5 Not tainted 4.20.0-rc6+ #371 [ 2868.499075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2868.508434] Call Trace: [ 2868.511076] dump_stack+0x244/0x39d [ 2868.514734] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2868.519946] dump_header+0x27b/0xf72 [ 2868.523682] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2868.529251] ? check_preemption_disabled+0x48/0x280 [ 2868.534277] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2868.539836] ? pagefault_out_of_memory+0x197/0x197 [ 2868.544774] ? debug_smp_processor_id+0x1c/0x20 [ 2868.549470] ? perf_trace_lock+0x14d/0x7a0 [ 2868.553714] ? debug_smp_processor_id+0x1c/0x20 [ 2868.558392] ? perf_trace_lock_acquire+0x15b/0x800 [ 2868.563347] ? lock_is_held_type+0x210/0x210 [ 2868.567788] ? perf_trace_lock+0x7a0/0x7a0 [ 2868.572034] ? debug_smp_processor_id+0x1c/0x20 [ 2868.576710] ? perf_trace_lock+0x14d/0x7a0 [ 2868.580955] ? zap_class+0x640/0x640 [ 2868.584699] ? print_usage_bug+0xc0/0xc0 [ 2868.588795] ? lock_is_held_type+0x210/0x210 [ 2868.593226] ? perf_trace_lock+0x7a0/0x7a0 [ 2868.597479] ? find_held_lock+0x36/0x1c0 [ 2868.601560] ? mark_held_locks+0xc7/0x130 [ 2868.605728] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2868.610867] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2868.615987] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2868.620601] ? trace_hardirqs_on+0xbd/0x310 [ 2868.624948] ? kasan_check_read+0x11/0x20 [ 2868.629109] ? ___ratelimit+0x3b4/0x672 [ 2868.633096] ? trace_hardirqs_off_caller+0x310/0x310 [ 2868.638218] ? trace_hardirqs_on+0x310/0x310 [ 2868.642637] ? lock_downgrade+0x900/0x900 [ 2868.646805] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2868.651914] ? ___ratelimit+0x3b9/0x672 [ 2868.655894] ? idr_get_free+0xf70/0xf70 [ 2868.659870] ? _raw_spin_unlock_irq+0x27/0x80 [ 2868.664369] ? _raw_spin_unlock_irq+0x27/0x80 [ 2868.668886] oom_kill_process.cold.27+0x10/0x903 [ 2868.673665] ? _raw_spin_unlock_irq+0x27/0x80 [ 2868.678171] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2868.682793] ? oom_evaluate_task+0x540/0x540 [ 2868.687279] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2868.692837] ? cgroup_procs_next+0x70/0x70 [ 2868.697083] ? _raw_spin_unlock_irq+0x60/0x80 [ 2868.701581] ? oom_badness+0xaa0/0xaa0 [ 2868.705488] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2868.710256] ? mem_cgroup_iter_break+0x30/0x30 [ 2868.714863] ? mark_held_locks+0xc7/0x130 [ 2868.719029] out_of_memory+0xa84/0x1430 [ 2868.723014] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2868.727630] ? kasan_check_read+0x11/0x20 [ 2868.731791] ? oom_killer_disable+0x3a0/0x3a0 [ 2868.736320] mem_cgroup_out_of_memory+0x15e/0x210 [ 2868.741205] ? memory_oom_group_write+0x160/0x160 [ 2868.746079] ? mem_cgroup_try_charge+0x627/0xe20 [ 2868.750860] ? page_counter_try_charge+0x1c1/0x220 [ 2868.755815] try_charge+0xda9/0x1700 [ 2868.759548] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2868.764482] ? kasan_check_read+0x11/0x20 [ 2868.768678] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2868.773378] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2868.778926] ? lock_page_memcg+0x350/0x350 [ 2868.783179] ? lock_acquire+0x1ed/0x520 [ 2868.787214] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2868.792589] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2868.798132] ? check_preemption_disabled+0x48/0x280 [ 2868.803161] ? kasan_check_read+0x11/0x20 [ 2868.807337] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2868.812638] ? rcu_softirq_qs+0x20/0x20 [ 2868.816652] mem_cgroup_try_charge+0x627/0xe20 [ 2868.821244] ? __anon_vma_prepare+0x325/0x6c0 [ 2868.825757] ? mem_cgroup_protected+0xa60/0xa60 [ 2868.830480] ? up_write+0x7b/0x220 [ 2868.834030] ? down_write_nested+0x130/0x130 [ 2868.838477] ? __anon_vma_prepare+0x353/0x6c0 [ 2868.843004] ? anon_vma_fork+0x820/0x820 [ 2868.847085] ? mark_held_locks+0x130/0x130 [ 2868.851339] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2868.856897] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2868.861857] __handle_mm_fault+0x2854/0x5be0 [ 2868.866291] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2868.871142] ? lock_is_held_type+0x210/0x210 [ 2868.875563] ? perf_trace_lock+0x7a0/0x7a0 [ 2868.879803] ? perf_trace_lock+0x7a0/0x7a0 [ 2868.884050] ? lock_downgrade+0x900/0x900 [ 2868.888254] ? zap_class+0x640/0x640 [ 2868.891977] ? zap_class+0x640/0x640 [ 2868.895719] ? find_held_lock+0x36/0x1c0 [ 2868.899794] ? handle_mm_fault+0x42a/0xc70 [ 2868.904036] ? lock_downgrade+0x900/0x900 [ 2868.908211] ? check_preemption_disabled+0x48/0x280 [ 2868.913272] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2868.918220] ? kasan_check_read+0x11/0x20 [ 2868.922376] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2868.927818] ? rcu_softirq_qs+0x20/0x20 [ 2868.931802] ? trace_hardirqs_off_caller+0x310/0x310 [ 2868.936952] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2868.942499] ? check_preemption_disabled+0x48/0x280 [ 2868.947549] handle_mm_fault+0x54f/0xc70 [ 2868.951624] ? __handle_mm_fault+0x5be0/0x5be0 [ 2868.956235] ? find_vma+0x34/0x190 [ 2868.959793] __do_page_fault+0x5e8/0xe60 [ 2868.963864] ? trace_hardirqs_off+0xb8/0x310 [ 2868.968301] do_page_fault+0xf2/0x7e0 [ 2868.972129] ? vmalloc_sync_all+0x30/0x30 [ 2868.976285] ? error_entry+0x70/0xd0 [ 2868.980017] ? trace_hardirqs_off_caller+0xbb/0x310 [ 2868.985040] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2868.989985] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2868.994930] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2869.000256] ? trace_hardirqs_on_caller+0x310/0x310 [ 2869.005286] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2869.010747] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2869.015771] ? page_fault+0x8/0x30 [ 2869.019331] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2869.024233] ? page_fault+0x8/0x30 [ 2869.024263] Unknown ioctl 21521 [ 2869.027796] page_fault+0x1e/0x30 [ 2869.027819] RIP: 0033:0x40ed8f 10:36:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x2f) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0xc000002000000000, &(0x7f00000009c0), 0x3e8, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) 10:36:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000003700)={0x3, 0x0, 0x9, 0x4}, 0x8) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'changehat ', 0x1, 0x5e, ['/proc/thread-self/attr/current\x00', 'stack ', '\x00']}, 0x43) 10:36:41 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x181101, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x8}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) statfs(0x0, &(0x7f0000001980)=""/128) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0xc0) write$P9_RLOCK(r0, &(0x7f00000003c0)={0x8, 0x35, 0x2, 0x1}, 0x8) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64ca1839, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffd5c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x0, 0x0, 0x1, 0x7, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000440)={0x7d, 0x0, [0x20, 0x7fffffff, 0x6, 0x80000001]}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvfrom(r0, &(0x7f0000000940)=""/4096, 0x1000, 0x42, &(0x7f0000000100)=@ipx={0x4, 0x7, 0x1f, "c8fcba0886e8"}, 0x80) pipe(&(0x7f0000000000)) clone(0x40002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x8, 0x3, @remote={0xfe, 0x80, [0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, 0x8d}, 0x1c) finit_module(r2, &(0x7f00000002c0)='/dev/vsock\x00', 0x2) 10:36:41 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x181101, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x8}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) statfs(0x0, &(0x7f0000001980)=""/128) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0xc0) write$P9_RLOCK(r0, &(0x7f00000003c0)={0x8, 0x35, 0x2, 0x1}, 0x8) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64ca1839, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffd5c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x0, 0x0, 0x1, 0x7, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000440)={0x7d, 0x0, [0x20, 0x7fffffff, 0x6, 0x80000001]}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvfrom(r0, &(0x7f0000000940)=""/4096, 0x1000, 0x42, &(0x7f0000000100)=@ipx={0x4, 0x7, 0x1f, "c8fcba0886e8"}, 0x80) pipe(&(0x7f0000000000)) clone(0x40002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x8, 0x3, @remote={0xfe, 0x80, [0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, 0x8d}, 0x1c) finit_module(r2, &(0x7f00000002c0)='/dev/vsock\x00', 0x2) 10:36:41 executing program 3: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000300)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000280)={0x1, 0x0, [0x7a, 0xe, 0x3cd40875, 0x100, 0x1, 0xffffffff, 0x250b, 0xfffffffffffffffc]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000380)={0x0, 0x0, [0x9, 0x4, 0x0, 0xfffffffffffffffd]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x8, @local, 0x6}, {0xa, 0x0, 0x0, @loopback}, 0xffffffffffffff00, [0x0, 0x0, 0x0, 0x8, 0x0, 0x9]}, 0x5c) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x100000001, 0x4000) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000140)={0x3, 0x2}) [ 2869.027837] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 2869.027846] RSP: 002b:0000000000a3fb10 EFLAGS: 00010206 [ 2869.027873] RAX: 00007f4e4aa26000 RBX: 0000000000020000 RCX: 00000000004576ca [ 2869.063021] Unknown ioctl 1080602275 [ 2869.069300] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 2869.069312] RBP: 0000000000a3fbf0 R08: ffffffffffffffff R09: 0000000000000000 [ 2869.069321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a3fcd0 [ 2869.069331] R13: 00007f4e4aa46700 R14: 000000000072c0ec R15: 000000000072c0ec [ 2869.136498] Unknown ioctl 21521 [ 2869.165874] Unknown ioctl 1080602275 10:36:41 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x181101, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x8}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) statfs(0x0, &(0x7f0000001980)=""/128) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0xc0) write$P9_RLOCK(r0, &(0x7f00000003c0)={0x8, 0x35, 0x2, 0x1}, 0x8) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64ca1839, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffd5c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x0, 0x0, 0x1, 0x7, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000440)={0x7d, 0x0, [0x20, 0x7fffffff, 0x6, 0x80000001]}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvfrom(r0, &(0x7f0000000940)=""/4096, 0x1000, 0x42, &(0x7f0000000100)=@ipx={0x4, 0x7, 0x1f, "c8fcba0886e8"}, 0x80) pipe(&(0x7f0000000000)) clone(0x40002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x8, 0x3, @remote={0xfe, 0x80, [0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, 0x8d}, 0x1c) finit_module(r2, &(0x7f00000002c0)='/dev/vsock\x00', 0x2) 10:36:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000003700)={0x3, 0x0, 0x9, 0x4}, 0x8) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'changehat ', 0x1, 0x5e, ['/proc/thread-self/attr/current\x00', 'stack ', '\x00']}, 0x43) [ 2869.195881] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? 10:36:41 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./control\x00', 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x181101, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000800)={0x0, 0x8}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x13f}}, 0x20) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000880)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300)}, 0xa0) statfs(0x0, &(0x7f0000001980)=""/128) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0xc0) write$P9_RLOCK(r0, &(0x7f00000003c0)={0x8, 0x35, 0x2, 0x1}, 0x8) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64ca1839, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffd5c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x0, 0x0, 0x1, 0x7, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000440)={0x7d, 0x0, [0x20, 0x7fffffff, 0x6, 0x80000001]}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvfrom(r0, &(0x7f0000000940)=""/4096, 0x1000, 0x42, &(0x7f0000000100)=@ipx={0x4, 0x7, 0x1f, "c8fcba0886e8"}, 0x80) pipe(&(0x7f0000000000)) clone(0x40002102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x8, 0x3, @remote={0xfe, 0x80, [0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}, 0x8d}, 0x1c) finit_module(r2, &(0x7f00000002c0)='/dev/vsock\x00', 0x2) [ 2869.237817] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? 10:36:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000003700)={0x3, 0x0, 0x9, 0x4}, 0x8) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'changehat ', 0x1, 0x5e, ['/proc/thread-self/attr/current\x00', 'stack ', '\x00']}, 0x43) [ 2869.365355] Unknown ioctl 21521 [ 2869.438742] Unknown ioctl 1080602275 [ 2869.457893] Unknown ioctl 21521 [ 2869.521419] Unknown ioctl 1080602275 [ 2869.535218] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 2869.544321] Task in /syz5 killed as a result of limit of /syz5 [ 2869.555063] memory: usage 307152kB, limit 307200kB, failcnt 1472 [ 2869.593670] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2869.686568] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2869.779021] Memory cgroup stats for /syz5: cache:44KB rss:262484KB rss_huge:239616KB shmem:0KB mapped_file:0KB dirty:132KB writeback:132KB swap:0KB inactive_anon:16KB active_anon:262392KB inactive_file:0KB active_file:0KB unevictable:20KB [ 2869.971727] Memory cgroup out of memory: Kill process 6705 (syz-executor5) score 1106 or sacrifice child [ 2870.018158] Killed process 6705 (syz-executor5) total-vm:70340kB, anon-rss:2200kB, file-rss:33636kB, shmem-rss:0kB 10:36:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x80400000001, 0x240) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0xffffffffffffff1f, 0x0, 0x0, 0x56c3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) close(r3) dup3(r1, r2, 0x0) 10:36:42 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x87}, {0x6}]}, 0x10) 10:36:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000f00000000ff3f03000000450001070000001419001a0015001c00040008000200000800005d14a4e91ee438", 0x39}], 0x1) exit(0x0) [ 2870.242580] oom_reaper: reaped process 16443 (syz-executor5), now anon-rss:0kB, file-rss:32780kB, shmem-rss:0kB 10:36:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x2f) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0xc000002000000000, &(0x7f00000009c0), 0x3e8, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) 10:36:43 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000019007f5300fe01b2a4a280930a60100000a8430891000000390009000a000c00060000001900a30700000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 10:36:43 executing program 3: perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000300)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000280)={0x1, 0x0, [0x7a, 0xe, 0x3cd40875, 0x100, 0x1, 0xffffffff, 0x250b, 0xfffffffffffffffc]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000380)={0x0, 0x0, [0x9, 0x4, 0x0, 0xfffffffffffffffd]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x8, @local, 0x6}, {0xa, 0x0, 0x0, @loopback}, 0xffffffffffffff00, [0x0, 0x0, 0x0, 0x8, 0x0, 0x9]}, 0x5c) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x100000001, 0x4000) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000140)={0x3, 0x2}) 10:36:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="fb0cb0cce232e9a09e1e80f00b0c3eb633c37ea3a0", 0x15) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @local}, 0x8) sendto$inet(r0, &(0x7f0000e76000)="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", 0x5a9, 0x0, &(0x7f0000bc8ff0)={0x2, 0x4e20, @multicast1}, 0x10) 10:36:43 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) creat(&(0x7f0000000280)='./file0/file1/file0\x00', 0x0) rename(&(0x7f00000013c0)='./file0/file0\x00', &(0x7f0000001380)='./file0/file1\x00') 10:36:43 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000f00000000ff3f03000000450001070000001419001a0015001c00040008000200000800005d14a4e91ee438", 0x39}], 0x1) exit(0x0) 10:36:43 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) creat(&(0x7f0000000280)='./file0/file1/file0\x00', 0x0) rename(&(0x7f00000013c0)='./file0/file0\x00', &(0x7f0000001380)='./file0/file1\x00') 10:36:43 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f000091dff8), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 10:36:43 executing program 5: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(0xffffffffffffffff, &(0x7f0000000140), 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f00000001c0)={0x7, 0x4b, 0x1}, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/96, 0x60}], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000140), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0xac0, 0x0, 0xdd7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1b54}, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@sg0='u\ni!/#g0\x00', &(0x7f0000000380)='.', &(0x7f0000fdb000)='ubifs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000440)={{0x5}, 'port1\x00', 0x20, 0x0, 0x0, 0x9, 0x9, 0x9}) ioctl$TCXONC(r1, 0x540a, 0x1) 10:36:43 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) creat(&(0x7f0000000280)='./file0/file1/file0\x00', 0x0) rename(&(0x7f00000013c0)='./file0/file0\x00', &(0x7f0000001380)='./file0/file1\x00') 10:36:44 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0xa0018000) [ 2871.668917] UBIFS error (pid: 16525): cannot open "u [ 2871.668917] i!/#g0", error -22 10:36:44 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0xa0018000) [ 2871.700326] UBIFS error (pid: 16527): cannot open "u [ 2871.700326] i!/#g0", error -22 10:36:45 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0xa0018000) 10:36:45 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0/file1\x00', 0x0) creat(&(0x7f0000000280)='./file0/file1/file0\x00', 0x0) rename(&(0x7f00000013c0)='./file0/file0\x00', &(0x7f0000001380)='./file0/file1\x00') 10:36:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x2f) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0xc000002000000000, &(0x7f00000009c0), 0x3e8, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) 10:36:45 executing program 3: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x2) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000140)=""/209) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) uname(&(0x7f0000000380)=""/211) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x4000, @dev={0xac, 0x2a4}}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000280)=0x6ab, 0x8) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000540), 0x4) r4 = socket$netlink(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000480)=0x1) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 10:36:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000f00000000ff3f03000000450001070000001419001a0015001c00040008000200000800005d14a4e91ee438", 0x39}], 0x1) exit(0x0) 10:36:45 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000180), 0x400001a, 0x0, &(0x7f0000000200)) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x18, 0x2d, 0x80010b, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 10:36:45 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @vbi={0x0, 0x3f03}}}) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xffffffffffffffff, 0x11, r0, 0xa0018000) 10:36:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4000000000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0xff37) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) connect(r0, &(0x7f0000000280)=@un=@abs, 0x80) 10:36:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0xd0001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x30000, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0xd, 0x4, r0, &(0x7f0000000540)="cd366a77460e84b6027c670157cb0d8944faa9450915bbd15a8f85745ec8ff846cd718c58c7e02a3a084aa5efd7c6258f3596e7750099c6f34166dc3a372124d7c43ce95b2f9687cb2ad4c39ec7fa1300f3a630e1a3193e65f2bfe7894e8cc2b35af5b0a61108c8dcf13f5cec315bb31812d4c4551b1cc3621c435d6479d1635", 0x80, 0x6, 0x0, 0x3}]) syz_open_dev$dspn(0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000680)='encrypted\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)="f6d4ad32b3f86d16d71883ab8c4bc165a1dea7b8d93c07bac2ed2de46e82c5f607f22e2038a110a229a0c1e577eafe9d3dc4531da0acb358057ed35211ba62d402a3f6e9739550174a0b23f11b4fd9aa5ee518e6da96ab5f0e3dd7d68f44279e7b14f2c46fed56961e5bce2fc454a4898350db379403e5d1", 0x78, 0xfffffffffffffffa) keyctl$revoke(0x3, r3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) io_submit(r5, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf0000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) 10:36:45 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000180), 0x400001a, 0x0, &(0x7f0000000200)) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x18, 0x2d, 0x80010b, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 10:36:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4000000000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0xff37) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) connect(r0, &(0x7f0000000280)=@un=@abs, 0x80) 10:36:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4000000000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0xff37) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) connect(r0, &(0x7f0000000280)=@un=@abs, 0x80) 10:36:45 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0xd0001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x30000, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000000000000800000000000000564a000000000000ff7f000000000000440000000000000008010855000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000007685000000000000000707000000000000000000000000000000000000000000000000000000000000000000000000003f000000000000003508000000000000060000000000000001003c000000000000000000000000000000000000000000000000000000000000000070000000000000001f00000000000000060000000000000000014d00000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff05000000000000000800000000000000090800ff000000000000000000000000000000000000000000000000000000000000000000000000fefffffff7ffffff24dd00000000000007000000000000009e06000800000000000000000000000000000000000000000000000000000000000000000000000008162cf3a5efc6eff5b3ba61e4000000000000000600000000000000cd62000000000000004501000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000c033000000000000070000000000000007060900000000000000000000000000000000000000000000000000000000000000000000000000795b0d409d1e817fd8ac3ef2482c111982d98999a40e75740df01c6ccc57694a41799a5ffffee0272e159eb890899bf559929efa1f0379c9ac837bb258eb63da4428d3143e6fe24a24dacf202582a6967b1333469a95e232ece381692c6a318dad05648253446659212fe51db5007e1e83886542180f379f0e29c89be585e141e0898ac2540ab643a6afbbdac6f39d1b765674d7ec04013a024c1a77f0cab41a23dfb38f63f4344011df9f324e70da0c0c97b198d2581b51b93cc4bb64abc392fbe8773027a249a96c8c7bc50a2a5632a9c38d3a36e75ed99d5147ed94c6de100a2bc5acecc17b81f6dd401763dcd72f2023790d655076f3d2b4050fc67dbcea3f386345e3817ac61c1ea636ca0768e14e5c99a6fa2d3f4eb4d19774275cd30bb67efc1be0"]) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0xd, 0x4, r0, &(0x7f0000000540)="cd366a77460e84b6027c670157cb0d8944faa9450915bbd15a8f85745ec8ff846cd718c58c7e02a3a084aa5efd7c6258f3596e7750099c6f34166dc3a372124d7c43ce95b2f9687cb2ad4c39ec7fa1300f3a630e1a3193e65f2bfe7894e8cc2b35af5b0a61108c8dcf13f5cec315bb31812d4c4551b1cc3621c435d6479d1635", 0x80, 0x6, 0x0, 0x3}]) syz_open_dev$dspn(0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000680)='encrypted\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)="f6d4ad32b3f86d16d71883ab8c4bc165a1dea7b8d93c07bac2ed2de46e82c5f607f22e2038a110a229a0c1e577eafe9d3dc4531da0acb358057ed35211ba62d402a3f6e9739550174a0b23f11b4fd9aa5ee518e6da96ab5f0e3dd7d68f44279e7b14f2c46fed56961e5bce2fc454a4898350db379403e5d1", 0x78, 0xfffffffffffffffa) keyctl$revoke(0x3, r3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) io_submit(r5, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf0000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) 10:36:45 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000180), 0x400001a, 0x0, &(0x7f0000000200)) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x18, 0x2d, 0x80010b, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 10:36:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4000000000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0xff37) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) connect(r0, &(0x7f0000000280)=@un=@abs, 0x80) 10:36:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4000000000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0xff37) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) connect(r0, &(0x7f0000000280)=@un=@abs, 0x80) 10:36:47 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000180), 0x400001a, 0x0, &(0x7f0000000200)) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x18, 0x2d, 0x80010b, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) 10:36:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0704000f00000000ff3f03000000450001070000001419001a0015001c00040008000200000800005d14a4e91ee438", 0x39}], 0x1) exit(0x0) 10:36:47 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0xd0001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x30000, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0xd, 0x4, r0, &(0x7f0000000540)="cd366a77460e84b6027c670157cb0d8944faa9450915bbd15a8f85745ec8ff846cd718c58c7e02a3a084aa5efd7c6258f3596e7750099c6f34166dc3a372124d7c43ce95b2f9687cb2ad4c39ec7fa1300f3a630e1a3193e65f2bfe7894e8cc2b35af5b0a61108c8dcf13f5cec315bb31812d4c4551b1cc3621c435d6479d1635", 0x80, 0x6, 0x0, 0x3}]) syz_open_dev$dspn(0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000680)='encrypted\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)="f6d4ad32b3f86d16d71883ab8c4bc165a1dea7b8d93c07bac2ed2de46e82c5f607f22e2038a110a229a0c1e577eafe9d3dc4531da0acb358057ed35211ba62d402a3f6e9739550174a0b23f11b4fd9aa5ee518e6da96ab5f0e3dd7d68f44279e7b14f2c46fed56961e5bce2fc454a4898350db379403e5d1", 0x78, 0xfffffffffffffffa) keyctl$revoke(0x3, r3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) io_submit(r5, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf0000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) 10:36:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x45, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) 10:36:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4000000000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0xff37) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) connect(r0, &(0x7f0000000280)=@un=@abs, 0x80) 10:36:47 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x0, 0xf}) 10:36:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4000000000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0xff37) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffdef, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) connect(r0, &(0x7f0000000280)=@un=@abs, 0x80) 10:36:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000640), 0x2e2, &(0x7f0000000180)=[{0x12, 0x84, 0x6}], 0x20}, 0x0) 10:36:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) ioctl(0xffffffffffffffff, 0x88912, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0xffe7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x10000, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000200)={'raw\x00'}, &(0x7f0000000280)=0x54) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e24, 0x3, @loopback}, 0x0, [0x4, 0x3, 0x101, 0xce, 0x0, 0x7, 0x0, 0x1f]}, 0x5c) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) getgroups(0x0, 0x0) getresgid(0x0, 0x0, &(0x7f00000007c0)) getgroups(0x9, &(0x7f00000008c0)=[0x0, 0xee01, 0x0, 0xee00, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) getgroups(0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x106e) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000003c0)) dup3(0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) clone(0x4, 0x0, 0xfffffffffffffffe, &(0x7f0000000a80), 0xffffffffffffffff) 10:36:47 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x6, 0x1c, &(0x7f0000000040), &(0x7f0000013000)=0x221) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 10:36:47 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000640), 0x2e2, &(0x7f0000000180)=[{0x12, 0x84, 0x6}], 0x20}, 0x0) 10:36:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) io_setup(0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x400000}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2875.768667] syz-executor2 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 2875.822524] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2875.832216] CPU: 1 PID: 16620 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #371 [ 2875.839604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2875.848981] Call Trace: [ 2875.851582] dump_stack+0x244/0x39d [ 2875.855234] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2875.860435] ? mark_held_locks+0x130/0x130 [ 2875.864677] ? mark_held_locks+0x130/0x130 [ 2875.868930] dump_header+0x27b/0xf72 [ 2875.872662] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2875.878225] ? check_preemption_disabled+0x48/0x280 [ 2875.883272] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2875.888826] ? pagefault_out_of_memory+0x197/0x197 [ 2875.893771] ? debug_smp_processor_id+0x1c/0x20 [ 2875.898451] ? perf_trace_lock+0x14d/0x7a0 [ 2875.902693] ? debug_smp_processor_id+0x1c/0x20 [ 2875.907391] ? perf_trace_lock_acquire+0x15b/0x800 [ 2875.912341] ? lock_is_held_type+0x210/0x210 [ 2875.916776] ? perf_trace_lock+0x7a0/0x7a0 [ 2875.921023] ? debug_smp_processor_id+0x1c/0x20 [ 2875.925707] ? perf_trace_lock+0x14d/0x7a0 [ 2875.929955] ? zap_class+0x640/0x640 [ 2875.933686] ? print_usage_bug+0xc0/0xc0 [ 2875.937779] ? lock_is_held_type+0x210/0x210 [ 2875.942224] ? find_held_lock+0x36/0x1c0 [ 2875.946310] ? mark_held_locks+0xc7/0x130 [ 2875.950485] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2875.955613] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2875.955647] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2875.955682] ? trace_hardirqs_on+0xbd/0x310 [ 2875.955709] ? kasan_check_read+0x11/0x20 [ 2875.973852] ? ___ratelimit+0x3b4/0x672 [ 2875.977835] ? trace_hardirqs_off_caller+0x310/0x310 [ 2875.982946] ? trace_hardirqs_on+0x310/0x310 [ 2875.982965] ? lock_downgrade+0x900/0x900 [ 2875.982990] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2875.983007] ? ___ratelimit+0x3b9/0x672 [ 2875.983027] ? idr_get_free+0xf70/0xf70 [ 2875.983041] ? _raw_spin_unlock_irq+0x27/0x80 [ 2875.983059] ? _raw_spin_unlock_irq+0x27/0x80 [ 2876.013708] oom_kill_process.cold.27+0x10/0x903 [ 2876.018493] ? _raw_spin_unlock_irq+0x27/0x80 [ 2876.023002] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2876.027627] ? oom_evaluate_task+0x540/0x540 [ 2876.032052] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2876.037609] ? cgroup_procs_next+0x70/0x70 [ 2876.041883] ? _raw_spin_unlock_irq+0x60/0x80 [ 2876.046388] ? oom_badness+0xaa0/0xaa0 [ 2876.050285] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2876.055044] ? mem_cgroup_iter_break+0x30/0x30 [ 2876.059641] ? mark_held_locks+0xc7/0x130 [ 2876.063793] out_of_memory+0xa84/0x1430 [ 2876.067769] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2876.072373] ? kasan_check_read+0x11/0x20 [ 2876.076553] ? oom_killer_disable+0x3a0/0x3a0 [ 2876.081090] mem_cgroup_out_of_memory+0x15e/0x210 [ 2876.086420] ? memory_oom_group_write+0x160/0x160 [ 2876.091260] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2876.096131] ? page_counter_try_charge+0x1c1/0x220 [ 2876.101068] try_charge+0xda9/0x1700 [ 2876.104806] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2876.109511] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2876.114443] ? kasan_check_read+0x11/0x20 [ 2876.118598] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2876.123873] ? rcu_softirq_qs+0x20/0x20 [ 2876.127866] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2876.133899] ? debug_smp_processor_id+0x1c/0x20 [ 2876.138594] ? lock_page_memcg+0x350/0x350 [ 2876.142841] ? lock_acquire+0x1ed/0x520 [ 2876.146846] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2876.152226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2876.157769] ? check_preemption_disabled+0x48/0x280 [ 2876.162794] memcg_kmem_charge_memcg+0x7c/0x120 [ 2876.167463] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2876.171975] memcg_kmem_charge+0x149/0x350 [ 2876.176242] __alloc_pages_nodemask+0x75e/0xea0 [ 2876.180922] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 2876.185942] ? lock_downgrade+0x900/0x900 [ 2876.190092] ? do_raw_spin_trylock+0x270/0x270 [ 2876.194686] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2876.199720] ? kvm_mmu_notifier_invalidate_range_start+0x111/0x150 [ 2876.206066] ? __mmu_notifier_invalidate_range_start+0x2b2/0x360 [ 2876.212241] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2876.217788] alloc_pages_current+0x173/0x350 [ 2876.222217] get_zeroed_page+0x14/0x50 [ 2876.226109] __pud_alloc+0x3b/0x240 [ 2876.229744] copy_page_range+0x1c4d/0x2ee0 [ 2876.233990] ? mark_held_locks+0x130/0x130 [ 2876.238229] ? rcu_softirq_qs+0x20/0x20 [ 2876.242245] ? unwind_dump+0x190/0x190 [ 2876.246207] ? __pmd_alloc+0x450/0x450 [ 2876.250104] ? __rb_insert_augmented+0x3b2/0x1890 [ 2876.254946] ? lock_is_held_type+0x210/0x210 [ 2876.259364] ? rb_insert_color_cached+0x14b0/0x14b0 [ 2876.264416] ? save_stack+0xa9/0xd0 [ 2876.268047] ? zap_class+0x640/0x640 [ 2876.271765] ? kasan_kmalloc+0xc7/0xe0 [ 2876.275653] ? kasan_slab_alloc+0x12/0x20 [ 2876.279807] ? kmem_cache_alloc+0x12e/0x730 [ 2876.284138] ? zap_class+0x640/0x640 [ 2876.287852] ? __x64_sys_clone+0xbf/0x150 [ 2876.292006] ? do_syscall_64+0x1b9/0x820 [ 2876.296066] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2876.301445] ? find_held_lock+0x36/0x1c0 [ 2876.305528] ? anon_vma_fork+0x5ef/0x820 [ 2876.309595] ? lock_downgrade+0x900/0x900 [ 2876.313757] ? lock_release+0xa00/0xa00 [ 2876.317731] ? perf_trace_sched_process_exec+0x860/0x860 [ 2876.323204] ? __lock_is_held+0xb5/0x140 [ 2876.327291] ? up_write+0x7b/0x220 [ 2876.330849] ? down_write_nested+0x130/0x130 [ 2876.335268] ? anon_vma_interval_tree_insert+0x2c9/0x370 [ 2876.340741] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2876.345764] ? vma_compute_subtree_gap+0x160/0x240 [ 2876.350718] ? validate_mm_rb+0xaa/0xc0 [ 2876.354710] ? __vma_link_rb+0x26c/0x370 [ 2876.358779] copy_process+0x45e9/0x87a0 [ 2876.362858] ? __cleanup_sighand+0x70/0x70 [ 2876.367117] ? _raw_spin_unlock_irq+0x27/0x80 [ 2876.371632] ? _raw_spin_unlock_irq+0x27/0x80 [ 2876.376138] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2876.380729] ? trace_hardirqs_on+0xbd/0x310 [ 2876.385058] ? kasan_check_read+0x11/0x20 [ 2876.389218] ? finish_task_switch+0x1f4/0x910 [ 2876.393726] ? trace_hardirqs_off_caller+0x310/0x310 [ 2876.398834] ? compat_start_thread+0x80/0x80 [ 2876.403268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2876.408811] ? _raw_spin_unlock_irq+0x60/0x80 [ 2876.413315] ? finish_task_switch+0x1f4/0x910 [ 2876.417821] ? finish_task_switch+0x1b4/0x910 [ 2876.422324] ? __switch_to_asm+0x34/0x70 [ 2876.426397] ? preempt_notifier_register+0x200/0x200 [ 2876.431507] ? __switch_to_asm+0x34/0x70 [ 2876.435572] ? __switch_to_asm+0x34/0x70 [ 2876.439671] ? __switch_to_asm+0x34/0x70 [ 2876.443748] ? __switch_to_asm+0x40/0x70 [ 2876.447816] ? __switch_to_asm+0x34/0x70 [ 2876.451900] ? __switch_to_asm+0x40/0x70 [ 2876.455965] ? __switch_to_asm+0x34/0x70 [ 2876.460031] ? __switch_to_asm+0x34/0x70 [ 2876.464112] ? __switch_to_asm+0x34/0x70 [ 2876.468171] ? __switch_to_asm+0x40/0x70 [ 2876.472254] ? __switch_to_asm+0x34/0x70 [ 2876.476320] ? __switch_to_asm+0x40/0x70 [ 2876.480398] ? __schedule+0x8d7/0x21d0 [ 2876.484303] ? __sched_text_start+0x8/0x8 [ 2876.488460] ? check_preemption_disabled+0x48/0x280 [ 2876.493499] ? find_held_lock+0x36/0x1c0 [ 2876.497575] ? try_to_wake_up+0x11c/0x1440 [ 2876.501820] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2876.506925] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2876.512034] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2876.516626] ? preempt_schedule+0x4d/0x60 [ 2876.520782] ? preempt_schedule_common+0x1f/0xe0 [ 2876.525583] ? preempt_schedule+0x4d/0x60 [ 2876.529743] ? _raw_spin_unlock_irqrestore+0xbb/0xd0 [ 2876.534854] ? try_to_wake_up+0x11c/0x1440 [ 2876.539107] ? migrate_swap_stop+0x8a0/0x8a0 [ 2876.543535] ? find_held_lock+0x36/0x1c0 [ 2876.547656] ? futex_wake+0x613/0x760 [ 2876.551477] ? lock_downgrade+0x900/0x900 [ 2876.555645] ? kasan_check_read+0x11/0x20 [ 2876.559795] ? do_raw_spin_trylock+0x270/0x270 [ 2876.564384] ? print_usage_bug+0xc0/0xc0 [ 2876.568447] ? mark_held_locks+0x130/0x130 [ 2876.572710] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2876.577915] ? futex_wake+0x304/0x760 [ 2876.581756] ? __lock_acquire+0x62f/0x4c20 [ 2876.585997] ? debug_smp_processor_id+0x1c/0x20 [ 2876.590674] ? perf_trace_lock_acquire+0x15b/0x800 [ 2876.595634] ? mark_held_locks+0x130/0x130 [ 2876.599908] ? do_futex+0x249/0x26d0 [ 2876.603631] ? debug_smp_processor_id+0x1c/0x20 [ 2876.608303] ? perf_trace_lock_acquire+0x15b/0x800 [ 2876.613246] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2876.618804] ? check_preemption_disabled+0x48/0x280 [ 2876.623844] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2876.629398] ? check_preemption_disabled+0x48/0x280 [ 2876.634424] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2876.639988] ? debug_smp_processor_id+0x1c/0x20 [ 2876.644692] ? perf_trace_lock+0x14d/0x7a0 [ 2876.648937] ? debug_smp_processor_id+0x1c/0x20 [ 2876.653613] ? perf_trace_lock_acquire+0x15b/0x800 [ 2876.658553] ? lock_is_held_type+0x210/0x210 [ 2876.662972] ? zap_class+0x640/0x640 [ 2876.666696] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2876.671650] ? kasan_check_read+0x11/0x20 [ 2876.675802] ? zap_class+0x640/0x640 [ 2876.679551] ? rcu_softirq_qs+0x20/0x20 [ 2876.683564] ? find_held_lock+0x36/0x1c0 [ 2876.687680] _do_fork+0x1cb/0x11d0 [ 2876.691270] ? fork_idle+0x1d0/0x1d0 [ 2876.695001] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2876.700562] ? kasan_check_read+0x11/0x20 [ 2876.704720] ? _copy_to_user+0xc8/0x110 [ 2876.708713] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2876.714272] ? put_timespec64+0x10f/0x1b0 [ 2876.718430] ? nsecs_to_jiffies+0x30/0x30 [ 2876.722588] ? do_syscall_64+0x9a/0x820 [ 2876.726569] ? do_syscall_64+0x9a/0x820 [ 2876.730552] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2876.735145] ? trace_hardirqs_on+0xbd/0x310 [ 2876.739475] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2876.745017] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2876.750415] ? trace_hardirqs_off_caller+0x310/0x310 [ 2876.755539] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2876.761084] __x64_sys_clone+0xbf/0x150 [ 2876.765070] do_syscall_64+0x1b9/0x820 [ 2876.768959] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2876.774343] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2876.779311] ? trace_hardirqs_on_caller+0x310/0x310 [ 2876.784336] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2876.789357] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 2876.796057] ? __switch_to_asm+0x40/0x70 [ 2876.800132] ? __switch_to_asm+0x34/0x70 [ 2876.804212] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2876.809080] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2876.814270] RIP: 0033:0x457679 [ 2876.817475] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2876.836403] RSP: 002b:00007fe78313ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2876.844113] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000457679 [ 2876.851401] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000004 [ 2876.858674] RBP: 000000000072bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 2876.865947] R10: 0000000020000a80 R11: 0000000000000246 R12: 00007fe78313f6d4 10:36:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x45, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) 10:36:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r1, 0x10e, 0xb, &(0x7f0000f67000)="9adc01ce", 0x4) sendmsg$nl_route(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)}, 0x0) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0xffffffffffffffda}, 0x18) [ 2876.873226] R13: 00000000004bdbdd R14: 00000000004cd580 R15: 00000000ffffffff 10:36:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0xd0001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x30000, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"]) io_submit(r1, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0xd, 0x4, r0, &(0x7f0000000540)="cd366a77460e84b6027c670157cb0d8944faa9450915bbd15a8f85745ec8ff846cd718c58c7e02a3a084aa5efd7c6258f3596e7750099c6f34166dc3a372124d7c43ce95b2f9687cb2ad4c39ec7fa1300f3a630e1a3193e65f2bfe7894e8cc2b35af5b0a61108c8dcf13f5cec315bb31812d4c4551b1cc3621c435d6479d1635", 0x80, 0x6, 0x0, 0x3}]) syz_open_dev$dspn(0x0, 0x0, 0x0) r3 = add_key(&(0x7f0000000680)='encrypted\x00', &(0x7f00000006c0)={'syz', 0x3}, &(0x7f0000000700)="f6d4ad32b3f86d16d71883ab8c4bc165a1dea7b8d93c07bac2ed2de46e82c5f607f22e2038a110a229a0c1e577eafe9d3dc4531da0acb358057ed35211ba62d402a3f6e9739550174a0b23f11b4fd9aa5ee518e6da96ab5f0e3dd7d68f44279e7b14f2c46fed56961e5bce2fc454a4898350db379403e5d1", 0x78, 0xfffffffffffffffa) keyctl$revoke(0x3, r3) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x5b3, &(0x7f0000000040)=0x0) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) io_submit(r5, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xf0000000000000, 0x1, 0x0, r4, &(0x7f0000000000), 0xfffffce4}]) 10:36:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000640), 0x2e2, &(0x7f0000000180)=[{0x12, 0x84, 0x6}], 0x20}, 0x0) 10:36:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={'syz', 0x1}, r1) 10:36:49 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000000640), 0x2e2, &(0x7f0000000180)=[{0x12, 0x84, 0x6}], 0x20}, 0x0) 10:36:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={'syz', 0x1}, r1) [ 2877.131621] Task in /syz2 killed as a result of limit of /syz2 [ 2877.157557] memory: usage 307172kB, limit 307200kB, failcnt 747 [ 2877.233952] *** Guest State *** [ 2877.261561] CR0: actual=0x0000000080000031, shadow=0x00000000e0000031, gh_mask=fffffffffffffff7 [ 2877.313780] CR4: actual=0x0000000000402060, shadow=0x0000000000402020, gh_mask=ffffffffffffe871 10:36:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={'syz', 0x1}, r1) [ 2877.377477] CR3 = 0x0000000000002000 [ 2877.411228] RSP = 0x0000000000000f80 RIP = 0x0000000000000043 [ 2877.496374] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 2877.563509] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 2877.593955] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 2877.642015] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 2877.660392] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 2877.685612] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 2877.711885] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 2877.730276] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 2877.754906] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 2877.781834] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 2877.795778] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 2877.811681] TR: sel=0x00d8, attr=0x0008b, limit=0x000001ff, base=0x0000000000003a00 [ 2877.819863] EFER = 0x0000000000000501 PAT = 0x0007040600070406 [ 2877.831639] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 2877.839267] Interruptibility = 00000000 ActivityState = 00000000 [ 2877.851640] *** Host State *** [ 2877.855006] RIP = 0xffffffff812047de RSP = 0xffff888199eaf390 [ 2877.872941] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 2877.887642] FSBase=00007f4e4aaa9700 GSBase=ffff8881daf00000 TRBase=fffffe0000033000 [ 2877.911673] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 2877.921616] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2877.924172] CR0=0000000080050033 CR3=00000001d96f4000 CR4=00000000001426e0 [ 2877.928628] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2877.953265] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 2877.953722] Memory cgroup stats for /syz2: cache:0KB rss:273380KB rss_huge:253952KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:273416KB inactive_file:0KB active_file:0KB unevictable:16KB [ 2877.971637] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 2877.993059] *** Control State *** [ 2877.996718] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 2878.011733] EntryControls=0000d3ff ExitControls=002fefff [ 2878.017374] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 2878.034113] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 2878.042631] VMExit: intr_info=00000000 errcode=00000000 ilen=00000001 [ 2878.049389] reason=80000021 qualification=0000000000000000 [ 2878.061684] IDTVectoring: info=00000000 errcode=00000000 [ 2878.067318] TSC Offset = 0xfffff9f98996d8af [ 2878.072331] EPT pointer = 0x0000000194cf301e [ 2878.121594] Memory cgroup out of memory: Kill process 10860 (syz-executor2) score 1106 or sacrifice child [ 2878.141746] Killed process 10860 (syz-executor2) total-vm:70340kB, anon-rss:2196kB, file-rss:33548kB, shmem-rss:0kB [ 2878.164780] oom_reaper: reaped process 10860 (syz-executor2), now anon-rss:0kB, file-rss:32780kB, shmem-rss:0kB [ 2878.326307] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2878.361726] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2878.367069] CPU: 0 PID: 16612 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #371 [ 2878.374436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2878.383794] Call Trace: [ 2878.386395] dump_stack+0x244/0x39d [ 2878.390040] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2878.395247] ? mark_held_locks+0x130/0x130 [ 2878.399490] ? mark_held_locks+0x130/0x130 [ 2878.403768] dump_header+0x27b/0xf72 [ 2878.407520] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2878.413075] ? check_preemption_disabled+0x48/0x280 [ 2878.418101] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2878.423651] ? pagefault_out_of_memory+0x197/0x197 [ 2878.428587] ? debug_smp_processor_id+0x1c/0x20 [ 2878.433271] ? perf_trace_lock+0x14d/0x7a0 [ 2878.437519] ? debug_smp_processor_id+0x1c/0x20 [ 2878.442214] ? perf_trace_lock_acquire+0x15b/0x800 [ 2878.447177] ? lock_is_held_type+0x210/0x210 [ 2878.452090] ? perf_trace_lock+0x7a0/0x7a0 [ 2878.456337] ? debug_smp_processor_id+0x1c/0x20 [ 2878.461008] ? perf_trace_lock+0x14d/0x7a0 [ 2878.465249] ? zap_class+0x640/0x640 [ 2878.469024] ? print_usage_bug+0xc0/0xc0 [ 2878.473113] ? lock_is_held_type+0x210/0x210 [ 2878.477548] ? find_held_lock+0x36/0x1c0 [ 2878.481636] ? mark_held_locks+0xc7/0x130 [ 2878.485811] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2878.490925] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2878.496038] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2878.500665] ? trace_hardirqs_on+0xbd/0x310 [ 2878.504994] ? kasan_check_read+0x11/0x20 [ 2878.509159] ? ___ratelimit+0x3b4/0x672 [ 2878.513164] ? trace_hardirqs_off_caller+0x310/0x310 [ 2878.518320] ? trace_hardirqs_on+0x310/0x310 [ 2878.522744] ? lock_downgrade+0x900/0x900 [ 2878.526921] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2878.532037] ? ___ratelimit+0x3b9/0x672 [ 2878.536024] ? idr_get_free+0xf70/0xf70 [ 2878.540013] ? _raw_spin_unlock_irq+0x27/0x80 [ 2878.544519] ? _raw_spin_unlock_irq+0x27/0x80 [ 2878.549038] oom_kill_process.cold.27+0x10/0x903 [ 2878.553809] ? _raw_spin_unlock_irq+0x27/0x80 [ 2878.558317] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2878.562926] ? oom_evaluate_task+0x540/0x540 [ 2878.567347] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2878.572899] ? cgroup_procs_next+0x70/0x70 [ 2878.577146] ? _raw_spin_unlock_irq+0x60/0x80 [ 2878.581650] ? oom_badness+0xaa0/0xaa0 [ 2878.585552] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2878.590324] ? mem_cgroup_iter_break+0x30/0x30 [ 2878.594934] ? mark_held_locks+0xc7/0x130 [ 2878.599093] out_of_memory+0xa84/0x1430 [ 2878.603073] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2878.607668] ? kasan_check_read+0x11/0x20 [ 2878.611833] ? oom_killer_disable+0x3a0/0x3a0 [ 2878.616360] mem_cgroup_out_of_memory+0x15e/0x210 [ 2878.621224] ? memory_oom_group_write+0x160/0x160 [ 2878.626078] ? mem_cgroup_try_charge+0x627/0xe20 [ 2878.630850] ? page_counter_try_charge+0x1c1/0x220 [ 2878.635793] try_charge+0xda9/0x1700 [ 2878.639515] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2878.644451] ? kasan_check_read+0x11/0x20 [ 2878.648619] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2878.653311] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2878.658861] ? lock_page_memcg+0x350/0x350 [ 2878.663113] ? lock_acquire+0x1ed/0x520 [ 2878.667095] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2878.672471] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2878.678023] ? check_preemption_disabled+0x48/0x280 [ 2878.683060] ? kasan_check_read+0x11/0x20 [ 2878.687258] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2878.692540] ? rcu_softirq_qs+0x20/0x20 [ 2878.696542] mem_cgroup_try_charge+0x627/0xe20 [ 2878.701143] ? mem_cgroup_protected+0xa60/0xa60 [ 2878.705844] ? perf_trace_lock_acquire+0x15b/0x800 [ 2878.710798] ? __lock_acquire+0x62f/0x4c20 [ 2878.715054] ? debug_smp_processor_id+0x1c/0x20 [ 2878.719740] ? perf_trace_lock+0x14d/0x7a0 [ 2878.723984] ? debug_smp_processor_id+0x1c/0x20 [ 2878.728664] ? lock_is_held_type+0x210/0x210 [ 2878.733086] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2878.738661] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2878.743640] wp_page_copy+0x520/0x2500 [ 2878.747568] ? follow_pfn+0x2e0/0x2e0 [ 2878.751383] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2878.756931] ? reuse_swap_page+0x4bd/0x1520 [ 2878.761279] ? check_preemption_disabled+0x48/0x280 [ 2878.766308] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2878.771856] ? swp_swapcount+0x530/0x530 [ 2878.775924] ? debug_smp_processor_id+0x1c/0x20 [ 2878.780600] ? perf_trace_lock+0x14d/0x7a0 [ 2878.784841] ? debug_smp_processor_id+0x1c/0x20 [ 2878.789516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2878.795079] ? check_preemption_disabled+0x48/0x280 [ 2878.800112] ? debug_smp_processor_id+0x1c/0x20 [ 2878.804790] ? perf_trace_lock+0x14d/0x7a0 [ 2878.809075] ? lock_is_held_type+0x210/0x210 [ 2878.813523] ? zap_class+0x640/0x640 [ 2878.817291] ? lock_is_held_type+0x210/0x210 [ 2878.821704] ? zap_class+0x640/0x640 [ 2878.825433] ? mark_held_locks+0x130/0x130 [ 2878.829721] ? find_held_lock+0x36/0x1c0 [ 2878.833803] ? do_wp_page+0x518/0x2920 [ 2878.837712] ? lock_downgrade+0x900/0x900 [ 2878.841869] ? wake_up_page_bit+0x6f0/0x6f0 [ 2878.846206] ? do_raw_spin_trylock+0x270/0x270 [ 2878.850804] ? kasan_check_read+0x11/0x20 [ 2878.854954] ? do_raw_spin_unlock+0xa7/0x330 [ 2878.859383] ? do_raw_spin_trylock+0x270/0x270 [ 2878.863973] ? __pte_alloc_kernel+0x220/0x220 [ 2878.868470] ? unlock_page_memcg+0x2c/0x40 [ 2878.872728] ? __set_page_dirty_buffers+0x36f/0x810 [ 2878.877758] do_wp_page+0x520/0x2920 [ 2878.881491] ? finish_mkwrite_fault+0x650/0x650 [ 2878.886171] ? find_held_lock+0x36/0x1c0 [ 2878.890254] ? print_usage_bug+0xc0/0xc0 [ 2878.894334] ? balance_dirty_pages_ratelimited+0x705/0x2370 [ 2878.900056] ? lock_downgrade+0x900/0x900 [ 2878.904224] ? check_preemption_disabled+0x48/0x280 [ 2878.909252] ? __lock_acquire+0x62f/0x4c20 [ 2878.913494] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2878.918783] ? __lock_acquire+0x62f/0x4c20 [ 2878.923020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2878.928575] ? mark_held_locks+0x130/0x130 [ 2878.932823] ? mark_held_locks+0x130/0x130 [ 2878.937086] ? balance_dirty_pages+0x3800/0x3800 [ 2878.941847] ? set_page_dirty+0x639/0x1030 [ 2878.946092] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2878.951666] ? check_preemption_disabled+0x48/0x280 [ 2878.956689] ? perf_trace_lock+0x14d/0x7a0 [ 2878.960935] ? debug_smp_processor_id+0x1c/0x20 [ 2878.965611] ? perf_trace_lock_acquire+0x15b/0x800 [ 2878.970564] ? print_usage_bug+0xc0/0xc0 [ 2878.974636] ? print_usage_bug+0xc0/0xc0 [ 2878.978736] ? perf_trace_lock+0x7a0/0x7a0 [ 2878.982986] ? do_swap_page+0x3690/0x3690 [ 2878.987143] ? zap_class+0x640/0x640 [ 2878.990866] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2878.996903] ? __lock_acquire+0x62f/0x4c20 [ 2879.001157] ? lock_acquire+0x1ed/0x520 [ 2879.005148] ? __handle_mm_fault+0x1fac/0x5be0 [ 2879.009750] ? kasan_check_read+0x11/0x20 [ 2879.013925] ? do_raw_spin_lock+0x14f/0x350 [ 2879.018255] ? rwlock_bug.part.2+0x90/0x90 [ 2879.022508] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2879.027460] ? kasan_check_read+0x11/0x20 [ 2879.031645] __handle_mm_fault+0x3bef/0x5be0 [ 2879.036073] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2879.040919] ? lock_is_held_type+0x210/0x210 [ 2879.045339] ? perf_trace_lock+0x7a0/0x7a0 [ 2879.049595] ? perf_trace_lock+0x7a0/0x7a0 [ 2879.053850] ? zap_class+0x640/0x640 [ 2879.057570] ? zap_class+0x640/0x640 [ 2879.061300] ? find_held_lock+0x36/0x1c0 [ 2879.065387] ? handle_mm_fault+0x42a/0xc70 [ 2879.069634] ? lock_downgrade+0x900/0x900 [ 2879.073789] ? check_preemption_disabled+0x48/0x280 [ 2879.078809] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2879.083739] ? kasan_check_read+0x11/0x20 [ 2879.087889] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2879.093182] ? rcu_softirq_qs+0x20/0x20 [ 2879.097175] ? trace_hardirqs_off_caller+0x310/0x310 [ 2879.102311] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2879.107873] ? check_preemption_disabled+0x48/0x280 [ 2879.112905] handle_mm_fault+0x54f/0xc70 [ 2879.116974] ? __handle_mm_fault+0x5be0/0x5be0 [ 2879.121583] ? find_vma+0x34/0x190 [ 2879.125134] __do_page_fault+0x5e8/0xe60 [ 2879.129224] do_page_fault+0xf2/0x7e0 [ 2879.133034] ? vmalloc_sync_all+0x30/0x30 [ 2879.137186] ? error_entry+0x70/0xd0 [ 2879.140918] ? trace_hardirqs_off_caller+0xbb/0x310 [ 2879.145939] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2879.150873] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2879.155806] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2879.160660] ? trace_hardirqs_on_caller+0x310/0x310 [ 2879.165679] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2879.171139] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2879.176687] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2879.181725] ? page_fault+0x8/0x30 [ 2879.185277] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2879.190142] ? page_fault+0x8/0x30 [ 2879.193689] page_fault+0x1e/0x30 [ 2879.197146] RIP: 0033:0x40a3d4 [ 2879.200348] Code: 3d f0 dc 2f 00 00 48 89 ea 48 89 de 4c 89 f7 0f 85 e1 00 00 00 e8 4c 26 00 00 8b 05 36 dc 31 00 48 8b 15 5f 5c 63 00 83 c0 01 <89> 05 26 dc 31 00 89 02 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e 41 5f [ 2879.219252] RSP: 002b:0000000000a3fb90 EFLAGS: 00010206 [ 2879.224617] RAX: 0000000000000017 RBX: 0000001b2f326f60 RCX: 0000001b30320000 [ 2879.231890] RDX: 0000001b2f320000 RSI: 00000000000009e7 RDI: ffffffffc86129e7 [ 2879.239156] RBP: 0000001b2f326f64 R08: 00000000c86129e7 R09: 00000000c86129eb [ 2879.246433] R10: 0000000000a3fcc0 R11: 0000000000000246 R12: 0000001b2f326f68 [ 2879.253707] R13: 00000000002be15e R14: 000000000072bfa0 R15: 000000000072bfac [ 2880.171533] Task in /syz2 killed as a result of limit of /syz2 [ 2880.177570] memory: usage 307112kB, limit 307200kB, failcnt 765 [ 2880.183760] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2880.190528] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2880.201548] Memory cgroup stats for /syz2: cache:0KB rss:273312KB rss_huge:253952KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:273320KB inactive_file:0KB active_file:0KB unevictable:16KB [ 2880.241543] Memory cgroup out of memory: Kill process 10868 (syz-executor2) score 1106 or sacrifice child [ 2880.251355] Killed process 10868 (syz-executor2) total-vm:70340kB, anon-rss:2196kB, file-rss:33548kB, shmem-rss:0kB 10:36:52 executing program 2: r0 = getpgrp(0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000a00)=0x10) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/245, 0xf5}, {&(0x7f0000000380)=""/92, 0x14f}, {&(0x7f0000000680)=""/176, 0x20000730}, {&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/112, 0x70}], 0x5, &(0x7f0000000980)=[{&(0x7f0000000400)}, {&(0x7f0000000480)=""/222, 0xfd40}, {&(0x7f0000000940)=""/18, 0x12}], 0x14b, 0x0) 10:36:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$sock_ifreq(r1, 0x89b6, &(0x7f0000000300)={"69705f76746930000000000000000200", @ifru_ivalue}) 10:36:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000ac0)='keyring\x00', &(0x7f0000000b00)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$search(0xa, r0, &(0x7f0000000a40)='keyring\x00', &(0x7f0000000a80)={'syz', 0x1}, r1) 10:36:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x45, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) 10:36:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x0, &(0x7f0000000180), 0x0, r2}) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, &(0x7f0000000080), 0x0, r3, 0x4}) 10:36:52 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) write$P9_RMKNOD(r0, &(0x7f0000000080)={0x1c4}, 0xfffffea1) ioctl$int_in(r0, 0x80000000005001, 0x0) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) [ 2880.272450] oom_reaper: reaped process 10868 (syz-executor2), now anon-rss:0kB, file-rss:32780kB, shmem-rss:0kB 10:36:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000003740)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000700)=""/57) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8) quotactl(0x1000, &(0x7f0000000340)='./file0\x00', r3, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3c") pwritev(r2, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mlockall(0x0) getpeername$unix(r2, &(0x7f0000000a00), &(0x7f0000000a80)=0x6e) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, &(0x7f0000000240)=0xe, 0x20000102000007) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000ac0)={{{@in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xfffffebd) fsync(r2) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@random={'btrfs.', ')em1.-\x00'}) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x27, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/39}, &(0x7f0000000400)=0x78) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x0, 0x7fffffff, 0x1}) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000440)=""/123) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) 10:36:52 executing program 0: capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) 10:36:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x1000000000000002, 0x0, [0xd90]}) 10:36:52 executing program 0: epoll_create1(0x0) r0 = epoll_create1(0x0) unshare(0x20400) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/4\x00') fcntl$lock(r0, 0x7, &(0x7f0000000040)) readv(r1, &(0x7f0000f46000)=[{&(0x7f0000949000)=""/101, 0x65}], 0x1) 10:36:52 executing program 2: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) readv(r0, &(0x7f00000010c0)=[{&(0x7f0000000040)=""/99, 0x63}], 0x1) 10:36:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000003740)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000700)=""/57) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8) quotactl(0x1000, &(0x7f0000000340)='./file0\x00', r3, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3c") pwritev(r2, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mlockall(0x0) getpeername$unix(r2, &(0x7f0000000a00), &(0x7f0000000a80)=0x6e) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, &(0x7f0000000240)=0xe, 0x20000102000007) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000ac0)={{{@in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xfffffebd) fsync(r2) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@random={'btrfs.', ')em1.-\x00'}) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x27, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/39}, &(0x7f0000000400)=0x78) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x0, 0x7fffffff, 0x1}) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000440)=""/123) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) 10:36:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x1000000000000002, 0x0, [0xd90]}) 10:36:53 executing program 2: creat(&(0x7f0000000500)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)="760001b076", 0x3080, &(0x7f0000000200)) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f00000000c0)='cramfs\x00', 0x2000, &(0x7f0000000100)="760001b076") 10:36:53 executing program 0: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snapshot\x00', 0x40000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) fchmodat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000600), &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000880)=ANY=[], 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f00000009c0)={"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"}) socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000800)={0x0, 0x73e}) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, r1) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000002c0), &(0x7f00000006c0)=0x4) getpid() setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:36:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x45, 0x0, 0x0, 0xfffffffffffff010}, {0x6}]}, 0x10) 10:36:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000003740)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000700)=""/57) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8) quotactl(0x1000, &(0x7f0000000340)='./file0\x00', r3, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3c") pwritev(r2, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mlockall(0x0) getpeername$unix(r2, &(0x7f0000000a00), &(0x7f0000000a80)=0x6e) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, &(0x7f0000000240)=0xe, 0x20000102000007) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000ac0)={{{@in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xfffffebd) fsync(r2) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@random={'btrfs.', ')em1.-\x00'}) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x27, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/39}, &(0x7f0000000400)=0x78) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x0, 0x7fffffff, 0x1}) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000440)=""/123) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) 10:36:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) fanotify_init(0x29, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[0x0, 0x9, 0x0]}) 10:36:53 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)="966ed79138ff2f70726f632f7379732f6e65742f697054342f76732f6c626c63725f6578706972", 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000540)={'bond_slsve_1\x00', 0x600}) gettid() sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @broadcast}, 0x3, 0x2, 0x3, 0x3}}, 0x3d5, &(0x7f0000000840), 0x117f, &(0x7f0000000840), 0x0, 0x7fd}, 0x20000050) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}, 0xfffffffffffffe00}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x8080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702e6370752f73797a3000357e659cd12d1df412fb6e82d786b583a18fe8773fe3af522333cde77bbada59f51f64dbe7993e45693acda3af1e92f907f5bab78a8171a1277d3747f55e16e49ff450d149d3f60dbd81aa70c51d9170214e435ab520efb727ae9dcd03a63ec620e021c3fc32a15841be0ead75045a8f5a1ea601363d2b9830e3a847d66f23a678f4cd0d6e0ca51033d7d8472e7a5a354a1bcefe66d809596f23cc850cc269a820", 0x200002, 0x0) r5 = accept$inet(r2, &(0x7f0000000480)={0x2, 0x0, @remote}, &(0x7f00000004c0)=0x10) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000500)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, {0x401, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x400) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x9f) sendto$inet6(r5, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000006c0)={0x0, 0x6, 0x101, 0x2, [], [], [], 0x9, 0x100000001, 0x3, 0x5, "90b40b69b44584bf3c00921d1cfa34cc"}) 10:36:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:36:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x1000000000000002, 0x0, [0xd90]}) 10:36:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000003740)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000000700)=""/57) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8) quotactl(0x1000, &(0x7f0000000340)='./file0\x00', r3, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3c") pwritev(r2, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mlockall(0x0) getpeername$unix(r2, &(0x7f0000000a00), &(0x7f0000000a80)=0x6e) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, &(0x7f0000000240)=0xe, 0x20000102000007) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000ac0)={{{@in=@loopback}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xfffffebd) fsync(r2) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000180)=0xc) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@random={'btrfs.', ')em1.-\x00'}) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x27, [], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=""/39}, &(0x7f0000000400)=0x78) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x0, 0x7fffffff, 0x1}) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000440)=""/123) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) 10:36:53 executing program 4: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) r1 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8) creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r2, 0x0) read(r3, &(0x7f0000000280)=""/1, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc)) fcntl$setlease(r0, 0x400, 0x2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 10:36:53 executing program 1: inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00007a7000)='./control\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) getpid() openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001cf, 0x0) add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000140), 0x0, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f00000003c0), &(0x7f0000000400)=""/57, 0x39, 0x0) [ 2881.472751] device lo entered promiscuous mode 10:36:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000040)={0x1000000000000002, 0x0, [0xd90]}) 10:36:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet(0x2b, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000000c0)="0a5c2d0240316285717070") r2 = socket(0x1e, 0x2, 0x0) bind(r2, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) perf_event_open(&(0x7f0000000080)={0x200000002, 0x70, 0x671b, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x80400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x6) bind$inet(r3, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {r5, r6/1000+30000}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x5}]}}}]}, 0x3c}}, 0x0) sendto(r3, &(0x7f0000000380)="eb80a0bb20c44fb8144133ea473c9bf1f335f6e5e1f0e02e57e1f69f97f24647a8c51e57443f0c886518f6c19aeee92e76cd4cc568e151ead4ed5ded28ff7b1539910ddcfa39a342580ec907b563233157f35bd93be261ab13067bff60f7622ab525bd3cd4655d5800a05447419854755a6672852c5f4ef2d3a7103a88f9e19c533e97ac42461c295481cb4ab5d011aa0f22a0a29b70de78c108571deaad05b7bf1ef03e012e898ea828e42f835d0ab7ee7986c049af02cc1580e5e8fd", 0xbd, 0x200040c0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7fff, 0x80000001}, 0x14) shutdown(r3, 0x1) 10:36:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) sendmmsg(r0, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="15", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x50) 10:36:54 executing program 1: inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00007a7000)='./control\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) getpid() openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001cf, 0x0) add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000140), 0x0, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f00000003c0), &(0x7f0000000400)=""/57, 0x39, 0x0) 10:36:54 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) fanotify_init(0x29, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[0x0, 0x9, 0x0]}) 10:36:54 executing program 1: inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00007a7000)='./control\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) getpid() openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001cf, 0x0) add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000140), 0x0, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f00000003c0), &(0x7f0000000400)=""/57, 0x39, 0x0) [ 2882.867655] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled 10:36:55 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)="966ed79138ff2f70726f632f7379732f6e65742f697054342f76732f6c626c63725f6578706972", 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000540)={'bond_slsve_1\x00', 0x600}) gettid() sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @broadcast}, 0x3, 0x2, 0x3, 0x3}}, 0x3d5, &(0x7f0000000840), 0x117f, &(0x7f0000000840), 0x0, 0x7fd}, 0x20000050) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}, 0xfffffffffffffe00}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x8080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702e6370752f73797a3000357e659cd12d1df412fb6e82d786b583a18fe8773fe3af522333cde77bbada59f51f64dbe7993e45693acda3af1e92f907f5bab78a8171a1277d3747f55e16e49ff450d149d3f60dbd81aa70c51d9170214e435ab520efb727ae9dcd03a63ec620e021c3fc32a15841be0ead75045a8f5a1ea601363d2b9830e3a847d66f23a678f4cd0d6e0ca51033d7d8472e7a5a354a1bcefe66d809596f23cc850cc269a820", 0x200002, 0x0) r5 = accept$inet(r2, &(0x7f0000000480)={0x2, 0x0, @remote}, &(0x7f00000004c0)=0x10) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000500)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, {0x401, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x400) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x9f) sendto$inet6(r5, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000006c0)={0x0, 0x6, 0x101, 0x2, [], [], [], 0x9, 0x100000001, 0x3, 0x5, "90b40b69b44584bf3c00921d1cfa34cc"}) 10:36:55 executing program 1: inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00007a7000)='./control\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) getpid() openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001cf, 0x0) add_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz'}, &(0x7f0000000140), 0x0, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f00000003c0), &(0x7f0000000400)=""/57, 0x39, 0x0) 10:36:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) fanotify_init(0x29, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[0x0, 0x9, 0x0]}) 10:36:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) fanotify_init(0x29, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[0x0, 0x9, 0x0]}) 10:36:55 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)="2f70f26f632f7379e314f247742f697076342f76732f699b07000000c0b842000000", 0x2, 0x0) connect$can_bcm(r0, &(0x7f0000000180), 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0xa) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) unshare(0x40000000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="00100008000801c7481e74f27c7378dbc43ce5dc7a614383fc5b4af7a4ae714bcbb96a14ee19c14ef45f6ec53bac11eb4b609bc46a70592aae0a253845260a672fe74b17585dd7bbc336c1b02e4112ed76afc6d5de18898e184743979856"], 0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x0, &(0x7f0000000200)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x4e24}}, 0x5, 0x0, 0x5, "1e92caf261673c67250b5ebaf9a998952b815f6ce8960eb87bb830f5692b2ec51493c0d2cd15a33c96d6694ab628beafef3566a169d7d884bacfc563f4f7816d69e7824aea89f9d8a6e0f34380da4a5d"}, 0xd8) recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x2a37, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x0, 0x38) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000340)={0x1, 0x4, 0x0, 'queue0\x00', 0x5cfee86c}) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x184, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xa, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L+', 0xcdb}, 0x28, 0x2) gettid() r5 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, &(0x7f0000000200)) r6 = creat(&(0x7f00000008c0)='./bus\x00', 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@local, @multicast2, @dev}, 0xffffffffffffffaa) sendfile(r6, r2, &(0x7f0000000180), 0x10013c93a) clock_gettime(0x0, &(0x7f0000000400)) 10:36:55 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)="966ed79138ff2f70726f632f7379732f6e65742f697054342f76732f6c626c63725f6578706972", 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000540)={'bond_slsve_1\x00', 0x600}) gettid() sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @broadcast}, 0x3, 0x2, 0x3, 0x3}}, 0x3d5, &(0x7f0000000840), 0x117f, &(0x7f0000000840), 0x0, 0x7fd}, 0x20000050) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}, 0xfffffffffffffe00}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x8080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702e6370752f73797a3000357e659cd12d1df412fb6e82d786b583a18fe8773fe3af522333cde77bbada59f51f64dbe7993e45693acda3af1e92f907f5bab78a8171a1277d3747f55e16e49ff450d149d3f60dbd81aa70c51d9170214e435ab520efb727ae9dcd03a63ec620e021c3fc32a15841be0ead75045a8f5a1ea601363d2b9830e3a847d66f23a678f4cd0d6e0ca51033d7d8472e7a5a354a1bcefe66d809596f23cc850cc269a820", 0x200002, 0x0) r5 = accept$inet(r2, &(0x7f0000000480)={0x2, 0x0, @remote}, &(0x7f00000004c0)=0x10) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000500)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, {0x401, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x400) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x9f) sendto$inet6(r5, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000006c0)={0x0, 0x6, 0x101, 0x2, [], [], [], 0x9, 0x100000001, 0x3, 0x5, "90b40b69b44584bf3c00921d1cfa34cc"}) [ 2883.180575] device lo entered promiscuous mode [ 2883.254938] IPVS: ftp: loaded support on port[0] = 21 10:36:55 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)="966ed79138ff2f70726f632f7379732f6e65742f697054342f76732f6c626c63725f6578706972", 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000540)={'bond_slsve_1\x00', 0x600}) gettid() sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @broadcast}, 0x3, 0x2, 0x3, 0x3}}, 0x3d5, &(0x7f0000000840), 0x117f, &(0x7f0000000840), 0x0, 0x7fd}, 0x20000050) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}, 0xfffffffffffffe00}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x8080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702e6370752f73797a3000357e659cd12d1df412fb6e82d786b583a18fe8773fe3af522333cde77bbada59f51f64dbe7993e45693acda3af1e92f907f5bab78a8171a1277d3747f55e16e49ff450d149d3f60dbd81aa70c51d9170214e435ab520efb727ae9dcd03a63ec620e021c3fc32a15841be0ead75045a8f5a1ea601363d2b9830e3a847d66f23a678f4cd0d6e0ca51033d7d8472e7a5a354a1bcefe66d809596f23cc850cc269a820", 0x200002, 0x0) r5 = accept$inet(r2, &(0x7f0000000480)={0x2, 0x0, @remote}, &(0x7f00000004c0)=0x10) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000500)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, {0x401, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x400) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x9f) sendto$inet6(r5, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000006c0)={0x0, 0x6, 0x101, 0x2, [], [], [], 0x9, 0x100000001, 0x3, 0x5, "90b40b69b44584bf3c00921d1cfa34cc"}) 10:36:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) fanotify_init(0x29, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[0x0, 0x9, 0x0]}) 10:36:55 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)="966ed79138ff2f70726f632f7379732f6e65742f697054342f76732f6c626c63725f6578706972", 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000540)={'bond_slsve_1\x00', 0x600}) gettid() sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @broadcast}, 0x3, 0x2, 0x3, 0x3}}, 0x3d5, &(0x7f0000000840), 0x117f, &(0x7f0000000840), 0x0, 0x7fd}, 0x20000050) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}, 0xfffffffffffffe00}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x8080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702e6370752f73797a3000357e659cd12d1df412fb6e82d786b583a18fe8773fe3af522333cde77bbada59f51f64dbe7993e45693acda3af1e92f907f5bab78a8171a1277d3747f55e16e49ff450d149d3f60dbd81aa70c51d9170214e435ab520efb727ae9dcd03a63ec620e021c3fc32a15841be0ead75045a8f5a1ea601363d2b9830e3a847d66f23a678f4cd0d6e0ca51033d7d8472e7a5a354a1bcefe66d809596f23cc850cc269a820", 0x200002, 0x0) r5 = accept$inet(r2, &(0x7f0000000480)={0x2, 0x0, @remote}, &(0x7f00000004c0)=0x10) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000500)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, {0x401, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x400) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x9f) sendto$inet6(r5, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000006c0)={0x0, 0x6, 0x101, 0x2, [], [], [], 0x9, 0x100000001, 0x3, 0x5, "90b40b69b44584bf3c00921d1cfa34cc"}) 10:36:56 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) fanotify_init(0x29, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[0x0, 0x9, 0x0]}) 10:36:56 executing program 5: syz_open_dev$vbi(0x0, 0x2, 0x2) syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc0109207, 0x20000000) tkill(0x0, 0x0) 10:36:56 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)="966ed79138ff2f70726f632f7379732f6e65742f697054342f76732f6c626c63725f6578706972", 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000540)={'bond_slsve_1\x00', 0x600}) gettid() sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @broadcast}, 0x3, 0x2, 0x3, 0x3}}, 0x3d5, &(0x7f0000000840), 0x117f, &(0x7f0000000840), 0x0, 0x7fd}, 0x20000050) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}, 0xfffffffffffffe00}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x8080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702e6370752f73797a3000357e659cd12d1df412fb6e82d786b583a18fe8773fe3af522333cde77bbada59f51f64dbe7993e45693acda3af1e92f907f5bab78a8171a1277d3747f55e16e49ff450d149d3f60dbd81aa70c51d9170214e435ab520efb727ae9dcd03a63ec620e021c3fc32a15841be0ead75045a8f5a1ea601363d2b9830e3a847d66f23a678f4cd0d6e0ca51033d7d8472e7a5a354a1bcefe66d809596f23cc850cc269a820", 0x200002, 0x0) r5 = accept$inet(r2, &(0x7f0000000480)={0x2, 0x0, @remote}, &(0x7f00000004c0)=0x10) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000500)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, {0x401, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x400) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x9f) sendto$inet6(r5, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000006c0)={0x0, 0x6, 0x101, 0x2, [], [], [], 0x9, 0x100000001, 0x3, 0x5, "90b40b69b44584bf3c00921d1cfa34cc"}) 10:36:57 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) fanotify_init(0x29, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[0x0, 0x9, 0x0]}) [ 2884.811620] device lo entered promiscuous mode [ 2884.905814] syz-executor5 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=1000 [ 2884.941722] syz-executor5 cpuset=syz5 mems_allowed=0 [ 2884.958239] CPU: 0 PID: 16824 Comm: syz-executor5 Not tainted 4.20.0-rc6+ #371 [ 2884.965622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2884.974976] Call Trace: [ 2884.977576] dump_stack+0x244/0x39d [ 2884.981239] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2884.986455] ? mark_held_locks+0x130/0x130 [ 2884.990720] ? mark_held_locks+0x130/0x130 [ 2884.994976] dump_header+0x27b/0xf72 [ 2884.999150] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2885.004718] ? check_preemption_disabled+0x48/0x280 [ 2885.009746] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2885.015297] ? pagefault_out_of_memory+0x197/0x197 [ 2885.020257] ? debug_smp_processor_id+0x1c/0x20 [ 2885.024934] ? perf_trace_lock+0x14d/0x7a0 [ 2885.029179] ? debug_smp_processor_id+0x1c/0x20 [ 2885.033871] ? perf_trace_lock_acquire+0x15b/0x800 [ 2885.038817] ? lock_is_held_type+0x210/0x210 [ 2885.043243] ? perf_trace_lock+0x7a0/0x7a0 [ 2885.047499] ? debug_smp_processor_id+0x1c/0x20 [ 2885.052190] ? perf_trace_lock+0x14d/0x7a0 [ 2885.056461] ? zap_class+0x640/0x640 [ 2885.060214] ? print_usage_bug+0xc0/0xc0 [ 2885.064291] ? lock_is_held_type+0x210/0x210 [ 2885.068737] ? find_held_lock+0x36/0x1c0 [ 2885.072828] ? mark_held_locks+0xc7/0x130 [ 2885.077032] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2885.082150] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2885.087268] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2885.091861] ? trace_hardirqs_on+0xbd/0x310 [ 2885.096188] ? kasan_check_read+0x11/0x20 [ 2885.100367] ? ___ratelimit+0x3b4/0x672 [ 2885.104357] ? trace_hardirqs_off_caller+0x310/0x310 [ 2885.109474] ? trace_hardirqs_on+0x310/0x310 [ 2885.113896] ? lock_downgrade+0x900/0x900 [ 2885.118061] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2885.123175] ? ___ratelimit+0x3b9/0x672 [ 2885.127174] ? idr_get_free+0xf70/0xf70 [ 2885.131159] ? _raw_spin_unlock_irq+0x27/0x80 [ 2885.135657] ? _raw_spin_unlock_irq+0x27/0x80 [ 2885.140180] oom_kill_process.cold.27+0x10/0x903 [ 2885.144954] ? _raw_spin_unlock_irq+0x27/0x80 [ 2885.149455] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2885.154056] ? oom_evaluate_task+0x540/0x540 [ 2885.158503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2885.164104] ? cgroup_procs_next+0x70/0x70 [ 2885.168353] ? _raw_spin_unlock_irq+0x60/0x80 [ 2885.172855] ? oom_badness+0xaa0/0xaa0 [ 2885.176750] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2885.181520] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2885.187073] ? mem_cgroup_iter_break+0x30/0x30 [ 2885.191681] ? cgroup_file_notify+0x226/0x2f0 [ 2885.196217] out_of_memory+0xa84/0x1430 [ 2885.200215] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2885.204814] ? kasan_check_read+0x11/0x20 [ 2885.209004] ? oom_killer_disable+0x3a0/0x3a0 [ 2885.213551] mem_cgroup_out_of_memory+0x15e/0x210 [ 2885.218406] ? memory_oom_group_write+0x160/0x160 [ 2885.223253] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2885.228109] ? page_counter_try_charge+0x1c1/0x220 [ 2885.233047] try_charge+0xda9/0x1700 [ 2885.236796] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2885.241476] ? rcu_pm_notify+0xc0/0xc0 [ 2885.245385] ? rcu_read_lock_sched_held+0x14f/0x180 [ 2885.250483] ? __alloc_pages_nodemask+0xb87/0xea0 [ 2885.255334] ? zap_class+0x640/0x640 [ 2885.259076] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 2885.264148] ? find_held_lock+0x36/0x1c0 [ 2885.268249] ? cache_grow_begin+0x65/0x8c0 [ 2885.272501] memcg_kmem_charge_memcg+0x7c/0x120 [ 2885.277216] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2885.281733] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2885.287289] cache_grow_begin+0x43f/0x8c0 [ 2885.291451] ? do_raw_spin_unlock+0xa7/0x330 [ 2885.295881] fallback_alloc+0x204/0x2e0 [ 2885.299875] ____cache_alloc_node+0x1c7/0x1e0 [ 2885.299899] kmem_cache_alloc_node+0xe3/0x730 [ 2885.299944] copy_process+0x2026/0x87a0 [ 2885.312884] ? __lock_acquire+0x62f/0x4c20 [ 2885.317132] ? __lock_acquire+0x62f/0x4c20 [ 2885.321395] ? debug_smp_processor_id+0x1c/0x20 [ 2885.326079] ? perf_trace_lock+0x14d/0x7a0 [ 2885.330335] ? debug_smp_processor_id+0x1c/0x20 [ 2885.335050] ? __cleanup_sighand+0x70/0x70 [ 2885.339338] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2885.344893] ? print_usage_bug+0xc0/0xc0 [ 2885.348972] ? debug_smp_processor_id+0x1c/0x20 [ 2885.353653] ? perf_trace_lock+0x14d/0x7a0 [ 2885.357900] ? debug_smp_processor_id+0x1c/0x20 [ 2885.362583] ? perf_trace_lock_acquire+0x15b/0x800 [ 2885.367524] ? perf_trace_lock+0x14d/0x7a0 [ 2885.371775] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2885.377331] ? check_preemption_disabled+0x48/0x280 [ 2885.382365] ? debug_smp_processor_id+0x1c/0x20 [ 2885.387052] ? __lock_acquire+0x62f/0x4c20 [ 2885.391304] ? lock_is_held_type+0x210/0x210 [ 2885.395761] ? mark_held_locks+0x130/0x130 [ 2885.400009] ? print_usage_bug+0xc0/0xc0 [ 2885.404104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2885.409658] ? check_preemption_disabled+0x48/0x280 [ 2885.414702] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2885.420282] ? print_usage_bug+0xc0/0xc0 [ 2885.424377] ? __lock_acquire+0x62f/0x4c20 [ 2885.428633] ? lock_is_held_type+0x210/0x210 [ 2885.433072] ? print_usage_bug+0xc0/0xc0 [ 2885.437149] ? __lock_acquire+0x62f/0x4c20 [ 2885.441421] ? print_usage_bug+0xc0/0xc0 [ 2885.445511] ? __lock_acquire+0x62f/0x4c20 [ 2885.449751] ? perf_trace_lock_acquire+0x15b/0x800 [ 2885.454739] ? mark_held_locks+0x130/0x130 [ 2885.458987] ? debug_smp_processor_id+0x1c/0x20 [ 2885.463701] ? mark_held_locks+0x130/0x130 [ 2885.467961] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2885.473509] ? check_preemption_disabled+0x48/0x280 [ 2885.478538] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2885.484090] ? debug_smp_processor_id+0x1c/0x20 [ 2885.488769] ? perf_trace_lock+0x14d/0x7a0 [ 2885.493012] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2885.498585] ? check_preemption_disabled+0x48/0x280 [ 2885.503612] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2885.509161] ? debug_smp_processor_id+0x1c/0x20 [ 2885.513844] ? perf_trace_lock+0x14d/0x7a0 [ 2885.518099] ? perf_trace_lock_acquire+0x15b/0x800 [ 2885.523054] ? print_usage_bug+0xc0/0xc0 [ 2885.527120] ? zap_class+0x640/0x640 [ 2885.530842] ? delayacct_end+0xc5/0x100 [ 2885.534823] ? zap_class+0x640/0x640 [ 2885.538540] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2885.543681] ? __lock_acquire+0x62f/0x4c20 [ 2885.547924] ? find_held_lock+0x36/0x1c0 [ 2885.552016] ? mark_held_locks+0x130/0x130 [ 2885.556260] ? _raw_spin_unlock_irq+0x27/0x80 [ 2885.560772] ? _raw_spin_unlock_irq+0x27/0x80 [ 2885.565272] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2885.569858] ? trace_hardirqs_on+0xbd/0x310 [ 2885.574182] ? kasan_check_read+0x11/0x20 [ 2885.578348] ? psi_memstall_leave+0x202/0x260 [ 2885.582854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2885.588397] ? check_preemption_disabled+0x48/0x280 [ 2885.593421] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2885.598962] ? debug_smp_processor_id+0x1c/0x20 [ 2885.603649] ? perf_trace_lock+0x14d/0x7a0 [ 2885.607883] ? debug_smp_processor_id+0x1c/0x20 [ 2885.612559] ? perf_trace_lock_acquire+0x15b/0x800 [ 2885.617515] ? lock_is_held_type+0x210/0x210 [ 2885.621927] ? perf_trace_lock+0x7a0/0x7a0 [ 2885.626169] ? zap_class+0x640/0x640 [ 2885.629898] ? cgroup_file_notify+0x226/0x2f0 [ 2885.634415] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2885.639544] _do_fork+0x1cb/0x11d0 [ 2885.643095] ? fork_idle+0x1d0/0x1d0 [ 2885.646819] ? percpu_ref_put_many+0x11c/0x260 [ 2885.651405] ? lock_downgrade+0x900/0x900 [ 2885.655556] ? check_preemption_disabled+0x48/0x280 [ 2885.660615] ? kasan_check_read+0x11/0x20 [ 2885.664770] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2885.670052] ? rcu_softirq_qs+0x20/0x20 [ 2885.674033] ? check_preemption_disabled+0x48/0x280 [ 2885.679061] ? do_syscall_64+0x9a/0x820 [ 2885.683053] ? do_syscall_64+0x9a/0x820 [ 2885.687049] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2885.691636] ? trace_hardirqs_on+0xbd/0x310 [ 2885.695995] ? trace_hardirqs_on+0x310/0x310 [ 2885.700406] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2885.705777] ? trace_hardirqs_off_caller+0x310/0x310 [ 2885.710903] __x64_sys_clone+0xbf/0x150 [ 2885.714907] do_syscall_64+0x1b9/0x820 [ 2885.718831] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2885.724212] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2885.729158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2885.734004] ? trace_hardirqs_on_caller+0x310/0x310 [ 2885.739027] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2885.744054] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2885.748912] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2885.754099] RIP: 0033:0x45a049 [ 2885.757296] Code: ff 48 85 f6 0f 84 27 8a fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 89 fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2885.776201] RSP: 002b:0000000000a3fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2885.783923] RAX: ffffffffffffffda RBX: 00007f4e4aa67700 RCX: 000000000045a049 [ 2885.791189] RDX: 00007f4e4aa679d0 RSI: 00007f4e4aa66db0 RDI: 00000000003d0f00 [ 2885.798473] RBP: 0000000000a3fcd0 R08: 00007f4e4aa67700 R09: 00007f4e4aa67700 10:36:57 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)="966ed79138ff2f70726f632f7379732f6e65742f697054342f76732f6c626c63725f6578706972", 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000540)={'bond_slsve_1\x00', 0x600}) gettid() sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @broadcast}, 0x3, 0x2, 0x3, 0x3}}, 0x3d5, &(0x7f0000000840), 0x117f, &(0x7f0000000840), 0x0, 0x7fd}, 0x20000050) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}, 0xfffffffffffffe00}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x8080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702e6370752f73797a3000357e659cd12d1df412fb6e82d786b583a18fe8773fe3af522333cde77bbada59f51f64dbe7993e45693acda3af1e92f907f5bab78a8171a1277d3747f55e16e49ff450d149d3f60dbd81aa70c51d9170214e435ab520efb727ae9dcd03a63ec620e021c3fc32a15841be0ead75045a8f5a1ea601363d2b9830e3a847d66f23a678f4cd0d6e0ca51033d7d8472e7a5a354a1bcefe66d809596f23cc850cc269a820", 0x200002, 0x0) r5 = accept$inet(r2, &(0x7f0000000480)={0x2, 0x0, @remote}, &(0x7f00000004c0)=0x10) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000500)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, {0x401, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x400) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x9f) sendto$inet6(r5, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000006c0)={0x0, 0x6, 0x101, 0x2, [], [], [], 0x9, 0x100000001, 0x3, 0x5, "90b40b69b44584bf3c00921d1cfa34cc"}) [ 2885.805753] R10: 00007f4e4aa679d0 R11: 0000000000000202 R12: 0000000000000000 [ 2885.813021] R13: 0000000000a3fb7f R14: 00007f4e4aa679c0 R15: 000000000072c04c 10:36:58 executing program 0: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)="966ed79138ff2f70726f632f7379732f6e65742f697054342f76732f6c626c63725f6578706972", 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000540)={'bond_slsve_1\x00', 0x600}) gettid() sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @broadcast}, 0x3, 0x2, 0x3, 0x3}}, 0x3d5, &(0x7f0000000840), 0x117f, &(0x7f0000000840), 0x0, 0x7fd}, 0x20000050) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}, 0xfffffffffffffe00}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x8080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702e6370752f73797a3000357e659cd12d1df412fb6e82d786b583a18fe8773fe3af522333cde77bbada59f51f64dbe7993e45693acda3af1e92f907f5bab78a8171a1277d3747f55e16e49ff450d149d3f60dbd81aa70c51d9170214e435ab520efb727ae9dcd03a63ec620e021c3fc32a15841be0ead75045a8f5a1ea601363d2b9830e3a847d66f23a678f4cd0d6e0ca51033d7d8472e7a5a354a1bcefe66d809596f23cc850cc269a820", 0x200002, 0x0) r5 = accept$inet(r2, &(0x7f0000000480)={0x2, 0x0, @remote}, &(0x7f00000004c0)=0x10) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000500)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, {0x401, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x400) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x9f) sendto$inet6(r5, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000006c0)={0x0, 0x6, 0x101, 0x2, [], [], [], 0x9, 0x100000001, 0x3, 0x5, "90b40b69b44584bf3c00921d1cfa34cc"}) 10:36:58 executing program 1: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)="966ed79138ff2f70726f632f7379732f6e65742f697054342f76732f6c626c63725f6578706972", 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000540)={'bond_slsve_1\x00', 0x600}) gettid() sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @broadcast}, 0x3, 0x2, 0x3, 0x3}}, 0x3d5, &(0x7f0000000840), 0x117f, &(0x7f0000000840), 0x0, 0x7fd}, 0x20000050) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}, 0xfffffffffffffe00}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x8080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702e6370752f73797a3000357e659cd12d1df412fb6e82d786b583a18fe8773fe3af522333cde77bbada59f51f64dbe7993e45693acda3af1e92f907f5bab78a8171a1277d3747f55e16e49ff450d149d3f60dbd81aa70c51d9170214e435ab520efb727ae9dcd03a63ec620e021c3fc32a15841be0ead75045a8f5a1ea601363d2b9830e3a847d66f23a678f4cd0d6e0ca51033d7d8472e7a5a354a1bcefe66d809596f23cc850cc269a820", 0x200002, 0x0) r5 = accept$inet(r2, &(0x7f0000000480)={0x2, 0x0, @remote}, &(0x7f00000004c0)=0x10) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000500)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, {0x401, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x400) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x9f) sendto$inet6(r5, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000006c0)={0x0, 0x6, 0x101, 0x2, [], [], [], 0x9, 0x100000001, 0x3, 0x5, "90b40b69b44584bf3c00921d1cfa34cc"}) [ 2885.952250] Task in /syz5 killed as a result of limit of /syz5 [ 2885.958285] memory: usage 307140kB, limit 307200kB, failcnt 1495 [ 2886.041432] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2886.082645] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2886.125016] Memory cgroup stats for /syz5: cache:176KB rss:264564KB rss_huge:241664KB shmem:0KB mapped_file:0KB dirty:0KB writeback:132KB swap:0KB inactive_anon:16KB active_anon:264464KB inactive_file:0KB active_file:0KB unevictable:20KB [ 2886.240874] Memory cgroup out of memory: Kill process 16528 (syz-executor5) score 1113 or sacrifice child [ 2886.268792] Killed process 16528 (syz-executor5) total-vm:70604kB, anon-rss:4264kB, file-rss:33552kB, shmem-rss:0kB 10:37:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sigaltstack(&(0x7f0000a94000/0x4000)=nil, &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000000)=0x100000, 0x100000008001) 10:37:01 executing program 5: syz_open_dev$vbi(0x0, 0x2, 0x2) syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc0109207, 0x20000000) tkill(0x0, 0x0) 10:37:01 executing program 2: openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)="966ed79138ff2f70726f632f7379732f6e65742f697054342f76732f6c626c63725f6578706972", 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000003c0), &(0x7f0000000400)=0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)="47501a00f9d3c471b4a5430b11691d81fb4b9c49106ab3a01eaa6e1494e10112f6e527a746961b2da661bc0517d1fed124f6efb4292dc4c6df52a2c0623cdc1a18767d961c26d3aa8c633a234967dfe047b15997efc5a3bb522cb0393846dcc3f6e76a288635697c642b3cc7b3b36b3d1354dd508712a1f15e3b542d8a0c0c9a73d19d952bcef7d7d5cb703b44c4f17e5f76e7a2f9c44e076fb1000000000000000000000000000000", 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a58c67b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c9f5a537a66377bbc", 0x43}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970403dc0d") ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000540)={'bond_slsve_1\x00', 0x600}) gettid() sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @broadcast}, 0x3, 0x2, 0x3, 0x3}}, 0x3d5, &(0x7f0000000840), 0x117f, &(0x7f0000000840), 0x0, 0x7fd}, 0x20000050) sendmsg(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@ax25={0x3, {"b8738e610d62ed"}, 0xfffffffffffffe00}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x8080) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)="2e2f6367726f75702e6370752f73797a3000357e659cd12d1df412fb6e82d786b583a18fe8773fe3af522333cde77bbada59f51f64dbe7993e45693acda3af1e92f907f5bab78a8171a1277d3747f55e16e49ff450d149d3f60dbd81aa70c51d9170214e435ab520efb727ae9dcd03a63ec620e021c3fc32a15841be0ead75045a8f5a1ea601363d2b9830e3a847d66f23a678f4cd0d6e0ca51033d7d8472e7a5a354a1bcefe66d809596f23cc850cc269a820", 0x200002, 0x0) r5 = accept$inet(r2, &(0x7f0000000480)={0x2, 0x0, @remote}, &(0x7f00000004c0)=0x10) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000500)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xa}, {0x401, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x400) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000040)=0x100, 0x9f) sendto$inet6(r5, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000006c0)={0x0, 0x6, 0x101, 0x2, [], [], [], 0x9, 0x100000001, 0x3, 0x5, "90b40b69b44584bf3c00921d1cfa34cc"}) 10:37:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x6, 0x2, 0x9, 0x0, 0xffffffffffffff00, 0x0, 0x5, 0x1, 0x0, 0x0, 0xce, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4, 0x6, 0x3, 0x2, 0x0, 0x0, 0x3, 0x80000000, 0x8001]}) io_setup(0x1, &(0x7f0000000100)=0x0) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)="59ac72ca06cc8360994e9718aa60057149c08198aad43b54fb54b11ec0c8d60af4578842995fc121", 0x28, 0x2, 0x0, 0x1}, &(0x7f0000000240)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x1277, 0x0) 10:37:01 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)="2f70f26f632f7379e314f247742f697076342f76732f699b07000000c0b842000000", 0x2, 0x0) connect$can_bcm(r0, &(0x7f0000000180), 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0xa) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) unshare(0x40000000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="00100008000801c7481e74f27c7378dbc43ce5dc7a614383fc5b4af7a4ae714bcbb96a14ee19c14ef45f6ec53bac11eb4b609bc46a70592aae0a253845260a672fe74b17585dd7bbc336c1b02e4112ed76afc6d5de18898e184743979856"], 0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x0, &(0x7f0000000200)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x4e24}}, 0x5, 0x0, 0x5, "1e92caf261673c67250b5ebaf9a998952b815f6ce8960eb87bb830f5692b2ec51493c0d2cd15a33c96d6694ab628beafef3566a169d7d884bacfc563f4f7816d69e7824aea89f9d8a6e0f34380da4a5d"}, 0xd8) recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x2a37, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x0, 0x38) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000340)={0x1, 0x4, 0x0, 'queue0\x00', 0x5cfee86c}) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x184, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xa, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L+', 0xcdb}, 0x28, 0x2) gettid() r5 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, &(0x7f0000000200)) r6 = creat(&(0x7f00000008c0)='./bus\x00', 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@local, @multicast2, @dev}, 0xffffffffffffffaa) sendfile(r6, r2, &(0x7f0000000180), 0x10013c93a) clock_gettime(0x0, &(0x7f0000000400)) 10:37:01 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0x0, 0x37}) 10:37:01 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)="2f70f26f632f7379e314f247742f697076342f76732f699b07000000c0b842000000", 0x2, 0x0) connect$can_bcm(r0, &(0x7f0000000180), 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0xa) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) unshare(0x40000000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="00100008000801c7481e74f27c7378dbc43ce5dc7a614383fc5b4af7a4ae714bcbb96a14ee19c14ef45f6ec53bac11eb4b609bc46a70592aae0a253845260a672fe74b17585dd7bbc336c1b02e4112ed76afc6d5de18898e184743979856"], 0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x0, &(0x7f0000000200)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x4e24}}, 0x5, 0x0, 0x5, "1e92caf261673c67250b5ebaf9a998952b815f6ce8960eb87bb830f5692b2ec51493c0d2cd15a33c96d6694ab628beafef3566a169d7d884bacfc563f4f7816d69e7824aea89f9d8a6e0f34380da4a5d"}, 0xd8) recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x2a37, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x0, 0x38) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000340)={0x1, 0x4, 0x0, 'queue0\x00', 0x5cfee86c}) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x184, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xa, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L+', 0xcdb}, 0x28, 0x2) gettid() r5 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, &(0x7f0000000200)) r6 = creat(&(0x7f00000008c0)='./bus\x00', 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@local, @multicast2, @dev}, 0xffffffffffffffaa) sendfile(r6, r2, &(0x7f0000000180), 0x10013c93a) clock_gettime(0x0, &(0x7f0000000400)) 10:37:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x6, 0x2, 0x9, 0x0, 0xffffffffffffff00, 0x0, 0x5, 0x1, 0x0, 0x0, 0xce, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4, 0x6, 0x3, 0x2, 0x0, 0x0, 0x3, 0x80000000, 0x8001]}) io_setup(0x1, &(0x7f0000000100)=0x0) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)="59ac72ca06cc8360994e9718aa60057149c08198aad43b54fb54b11ec0c8d60af4578842995fc121", 0x28, 0x2, 0x0, 0x1}, &(0x7f0000000240)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x1277, 0x0) 10:37:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x6, 0x2, 0x9, 0x0, 0xffffffffffffff00, 0x0, 0x5, 0x1, 0x0, 0x0, 0xce, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4, 0x6, 0x3, 0x2, 0x0, 0x0, 0x3, 0x80000000, 0x8001]}) io_setup(0x1, &(0x7f0000000100)=0x0) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)="59ac72ca06cc8360994e9718aa60057149c08198aad43b54fb54b11ec0c8d60af4578842995fc121", 0x28, 0x2, 0x0, 0x1}, &(0x7f0000000240)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x1277, 0x0) [ 2889.423613] IPVS: ftp: loaded support on port[0] = 21 10:37:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x6, 0x2, 0x9, 0x0, 0xffffffffffffff00, 0x0, 0x5, 0x1, 0x0, 0x0, 0xce, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4, 0x6, 0x3, 0x2, 0x0, 0x0, 0x3, 0x80000000, 0x8001]}) io_setup(0x1, &(0x7f0000000100)=0x0) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)="59ac72ca06cc8360994e9718aa60057149c08198aad43b54fb54b11ec0c8d60af4578842995fc121", 0x28, 0x2, 0x0, 0x1}, &(0x7f0000000240)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x1277, 0x0) 10:37:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x6, 0x2, 0x9, 0x0, 0xffffffffffffff00, 0x0, 0x5, 0x1, 0x0, 0x0, 0xce, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4, 0x6, 0x3, 0x2, 0x0, 0x0, 0x3, 0x80000000, 0x8001]}) io_setup(0x1, &(0x7f0000000100)=0x0) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)="59ac72ca06cc8360994e9718aa60057149c08198aad43b54fb54b11ec0c8d60af4578842995fc121", 0x28, 0x2, 0x0, 0x1}, &(0x7f0000000240)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x1277, 0x0) 10:37:02 executing program 5: syz_open_dev$vbi(0x0, 0x2, 0x2) syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc0109207, 0x20000000) tkill(0x0, 0x0) 10:37:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x6, 0x2, 0x9, 0x0, 0xffffffffffffff00, 0x0, 0x5, 0x1, 0x0, 0x0, 0xce, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4, 0x6, 0x3, 0x2, 0x0, 0x0, 0x3, 0x80000000, 0x8001]}) io_setup(0x1, &(0x7f0000000100)=0x0) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)="59ac72ca06cc8360994e9718aa60057149c08198aad43b54fb54b11ec0c8d60af4578842995fc121", 0x28, 0x2, 0x0, 0x1}, &(0x7f0000000240)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x1277, 0x0) 10:37:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x6, 0x2, 0x9, 0x0, 0xffffffffffffff00, 0x0, 0x5, 0x1, 0x0, 0x0, 0xce, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4, 0x6, 0x3, 0x2, 0x0, 0x0, 0x3, 0x80000000, 0x8001]}) io_setup(0x1, &(0x7f0000000100)=0x0) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)="59ac72ca06cc8360994e9718aa60057149c08198aad43b54fb54b11ec0c8d60af4578842995fc121", 0x28, 0x2, 0x0, 0x1}, &(0x7f0000000240)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x1277, 0x0) 10:37:02 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)="2f70f26f632f7379e314f247742f697076342f76732f699b07000000c0b842000000", 0x2, 0x0) connect$can_bcm(r0, &(0x7f0000000180), 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0xa) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) unshare(0x40000000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="00100008000801c7481e74f27c7378dbc43ce5dc7a614383fc5b4af7a4ae714bcbb96a14ee19c14ef45f6ec53bac11eb4b609bc46a70592aae0a253845260a672fe74b17585dd7bbc336c1b02e4112ed76afc6d5de18898e184743979856"], 0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x0, &(0x7f0000000200)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x4e24}}, 0x5, 0x0, 0x5, "1e92caf261673c67250b5ebaf9a998952b815f6ce8960eb87bb830f5692b2ec51493c0d2cd15a33c96d6694ab628beafef3566a169d7d884bacfc563f4f7816d69e7824aea89f9d8a6e0f34380da4a5d"}, 0xd8) recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x2a37, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x0, 0x38) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000340)={0x1, 0x4, 0x0, 'queue0\x00', 0x5cfee86c}) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x184, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xa, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L+', 0xcdb}, 0x28, 0x2) gettid() r5 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, &(0x7f0000000200)) r6 = creat(&(0x7f00000008c0)='./bus\x00', 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@local, @multicast2, @dev}, 0xffffffffffffffaa) sendfile(r6, r2, &(0x7f0000000180), 0x10013c93a) clock_gettime(0x0, &(0x7f0000000400)) 10:37:02 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff84}, [@ldst={0x7, 0x1ce2ff, 0x1bc571}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x265, &(0x7f000000cf3d)=""/195}, 0x48) 10:37:02 executing program 5: syz_open_dev$vbi(0x0, 0x2, 0x2) syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xc0109207, 0x20000000) tkill(0x0, 0x0) 10:37:03 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100090c0800410400000000fcff", 0x58}], 0x1) 10:37:05 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)="2f70f26f632f7379e314f247742f697076342f76732f699b07000000c0b842000000", 0x2, 0x0) connect$can_bcm(r0, &(0x7f0000000180), 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0xa) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) unshare(0x40000000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="00100008000801c7481e74f27c7378dbc43ce5dc7a614383fc5b4af7a4ae714bcbb96a14ee19c14ef45f6ec53bac11eb4b609bc46a70592aae0a253845260a672fe74b17585dd7bbc336c1b02e4112ed76afc6d5de18898e184743979856"], 0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x0, &(0x7f0000000200)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x4e24}}, 0x5, 0x0, 0x5, "1e92caf261673c67250b5ebaf9a998952b815f6ce8960eb87bb830f5692b2ec51493c0d2cd15a33c96d6694ab628beafef3566a169d7d884bacfc563f4f7816d69e7824aea89f9d8a6e0f34380da4a5d"}, 0xd8) recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x2a37, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x0, 0x38) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000340)={0x1, 0x4, 0x0, 'queue0\x00', 0x5cfee86c}) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x184, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xa, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L+', 0xcdb}, 0x28, 0x2) gettid() r5 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, &(0x7f0000000200)) r6 = creat(&(0x7f00000008c0)='./bus\x00', 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@local, @multicast2, @dev}, 0xffffffffffffffaa) sendfile(r6, r2, &(0x7f0000000180), 0x10013c93a) clock_gettime(0x0, &(0x7f0000000400)) 10:37:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x6, 0x2, 0x9, 0x0, 0xffffffffffffff00, 0x0, 0x5, 0x1, 0x0, 0x0, 0xce, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4, 0x6, 0x3, 0x2, 0x0, 0x0, 0x3, 0x80000000, 0x8001]}) io_setup(0x1, &(0x7f0000000100)=0x0) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)="59ac72ca06cc8360994e9718aa60057149c08198aad43b54fb54b11ec0c8d60af4578842995fc121", 0x28, 0x2, 0x0, 0x1}, &(0x7f0000000240)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x1277, 0x0) 10:37:05 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)='E', 0x1}], 0x1}], 0x1, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000080), 0x1ab, 0x0, &(0x7f000000a240)={0x0, r2+10000000}) 10:37:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x6, 0x2, 0x9, 0x0, 0xffffffffffffff00, 0x0, 0x5, 0x1, 0x0, 0x0, 0xce, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4, 0x6, 0x3, 0x2, 0x0, 0x0, 0x3, 0x80000000, 0x8001]}) io_setup(0x1, &(0x7f0000000100)=0x0) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)="59ac72ca06cc8360994e9718aa60057149c08198aad43b54fb54b11ec0c8d60af4578842995fc121", 0x28, 0x2, 0x0, 0x1}, &(0x7f0000000240)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x1277, 0x0) 10:37:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) munmap(&(0x7f0000fec000/0x14000)=nil, 0x14000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r1, 0x0) 10:37:05 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)="2f70f26f632f7379e314f247742f697076342f76732f699b07000000c0b842000000", 0x2, 0x0) connect$can_bcm(r0, &(0x7f0000000180), 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0xa) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) unshare(0x40000000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="00100008000801c7481e74f27c7378dbc43ce5dc7a614383fc5b4af7a4ae714bcbb96a14ee19c14ef45f6ec53bac11eb4b609bc46a70592aae0a253845260a672fe74b17585dd7bbc336c1b02e4112ed76afc6d5de18898e184743979856"], 0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x0, &(0x7f0000000200)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x4e24}}, 0x5, 0x0, 0x5, "1e92caf261673c67250b5ebaf9a998952b815f6ce8960eb87bb830f5692b2ec51493c0d2cd15a33c96d6694ab628beafef3566a169d7d884bacfc563f4f7816d69e7824aea89f9d8a6e0f34380da4a5d"}, 0xd8) recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x2a37, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x0, 0x38) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000340)={0x1, 0x4, 0x0, 'queue0\x00', 0x5cfee86c}) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x184, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xa, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L+', 0xcdb}, 0x28, 0x2) gettid() r5 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, &(0x7f0000000200)) r6 = creat(&(0x7f00000008c0)='./bus\x00', 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@local, @multicast2, @dev}, 0xffffffffffffffaa) sendfile(r6, r2, &(0x7f0000000180), 0x10013c93a) clock_gettime(0x0, &(0x7f0000000400)) 10:37:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000200)={0x0, @aes128, 0x2, "9f821cb522602d76"}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000800)='/dev/hwrng\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000000100)={{0x0, 0x1c9c380}}, &(0x7f0000000280)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) pkey_alloc(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000db4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000000)={0x0, 0x0, 0x100000000, 0x4}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f00000006c0)={0x7, {{0xa, 0x4e24, 0x0, @mcast1, 0x3}}, {{0xa, 0x0, 0x81, @ipv4={[], [], @local}, 0xc891}}}, 0x108) mlock(&(0x7f0000ff1000/0x2000)=nil, 0x2000) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380), 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[]}}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:37:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r1, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@remote}, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1={0xff, 0x1, [0x0, 0x500]}, 0x0, 0x0, 0x3, 0x3}, 0x2e) close(r1) socket$inet6(0xa, 0x1000000000002, 0x0) dup3(r1, r2, 0x0) [ 2893.470580] IPVS: ftp: loaded support on port[0] = 21 10:37:05 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000000c0)={"6e6174000000000001fc00000000000000000000000000000800"}, &(0x7f0000000140)=0x54) [ 2893.714137] syz-executor0 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 2893.831782] syz-executor0 cpuset=syz0 mems_allowed=0 [ 2893.841817] CPU: 1 PID: 16954 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #371 [ 2893.849198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2893.858567] Call Trace: [ 2893.858593] dump_stack+0x244/0x39d [ 2893.858617] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2893.858649] dump_header+0x27b/0xf72 [ 2893.858675] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2893.864879] ? check_preemption_disabled+0x48/0x280 [ 2893.864896] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2893.864917] ? pagefault_out_of_memory+0x197/0x197 [ 2893.864934] ? debug_smp_processor_id+0x1c/0x20 [ 2893.864952] ? perf_trace_lock+0x14d/0x7a0 [ 2893.864967] ? debug_smp_processor_id+0x1c/0x20 [ 2893.864987] ? perf_trace_lock_acquire+0x15b/0x800 [ 2893.873885] ? lock_is_held_type+0x210/0x210 [ 2893.873905] ? perf_trace_lock+0x7a0/0x7a0 [ 2893.873925] ? debug_smp_processor_id+0x1c/0x20 [ 2893.873941] ? perf_trace_lock+0x14d/0x7a0 [ 2893.873958] ? zap_class+0x640/0x640 [ 2893.873978] ? print_usage_bug+0xc0/0xc0 [ 2893.873996] ? lock_is_held_type+0x210/0x210 [ 2893.874014] ? perf_trace_lock+0x7a0/0x7a0 [ 2893.874041] ? find_held_lock+0x36/0x1c0 [ 2893.874072] ? mark_held_locks+0xc7/0x130 [ 2893.899754] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2893.899772] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2893.899791] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2893.899811] ? trace_hardirqs_on+0xbd/0x310 [ 2893.899829] ? kasan_check_read+0x11/0x20 [ 2893.899848] ? ___ratelimit+0x3b4/0x672 [ 2893.908752] ? trace_hardirqs_off_caller+0x310/0x310 [ 2893.908771] ? trace_hardirqs_on+0x310/0x310 [ 2893.908790] ? lock_downgrade+0x900/0x900 [ 2893.908815] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2893.908832] ? ___ratelimit+0x3b9/0x672 [ 2893.908853] ? idr_get_free+0xf70/0xf70 [ 2893.908866] ? _raw_spin_unlock_irq+0x27/0x80 [ 2893.908885] ? _raw_spin_unlock_irq+0x27/0x80 [ 2893.918238] oom_kill_process.cold.27+0x10/0x903 [ 2893.918256] ? _raw_spin_unlock_irq+0x27/0x80 [ 2893.918275] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2893.918303] ? oom_evaluate_task+0x540/0x540 [ 2893.918321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2893.918341] ? cgroup_procs_next+0x70/0x70 [ 2893.927247] ? _raw_spin_unlock_irq+0x60/0x80 [ 2893.927264] ? oom_badness+0xaa0/0xaa0 [ 2893.927285] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2893.927304] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2893.927323] ? mem_cgroup_iter_break+0x30/0x30 [ 2893.927357] ? cgroup_file_notify+0x226/0x2f0 [ 2893.935289] out_of_memory+0xa84/0x1430 [ 2893.935307] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2893.935329] ? kasan_check_read+0x11/0x20 [ 2893.935349] ? oom_killer_disable+0x3a0/0x3a0 [ 2893.935394] mem_cgroup_out_of_memory+0x15e/0x210 [ 2893.935414] ? memory_oom_group_write+0x160/0x160 [ 2893.948098] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2893.948126] ? page_counter_try_charge+0x1c1/0x220 [ 2893.948148] try_charge+0xda9/0x1700 [ 2893.948180] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2893.948211] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2893.948227] ? kasan_check_read+0x11/0x20 [ 2893.948243] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2893.948260] ? rcu_softirq_qs+0x20/0x20 [ 2893.948291] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2893.979719] ? __kernel_text_address+0xd/0x40 [ 2893.979743] ? lock_page_memcg+0x350/0x350 [ 2893.979769] ? lock_acquire+0x1ed/0x520 [ 2893.979795] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2893.993272] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2893.993293] ? check_preemption_disabled+0x48/0x280 [ 2893.993324] memcg_kmem_charge_memcg+0x7c/0x120 [ 2893.993342] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2893.993358] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2893.993387] memcg_kmem_charge+0x149/0x350 [ 2893.993414] __alloc_pages_nodemask+0x75e/0xea0 [ 2893.993436] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2894.015625] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 2894.015645] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2894.015664] ? check_preemption_disabled+0x48/0x280 [ 2894.015694] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2894.015720] ? rcu_pm_notify+0xc0/0xc0 [ 2894.015751] ? copy_process+0x2026/0x87a0 [ 2894.048223] ? rcu_read_lock_sched_held+0x14f/0x180 [ 2894.048245] ? kmem_cache_alloc_node+0x349/0x730 [ 2894.048266] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2894.048293] copy_process+0xa09/0x87a0 [ 2894.061417] ? __lock_acquire+0x62f/0x4c20 [ 2894.061436] ? shrink_inactive_list+0x1c60/0x1c60 [ 2894.061457] ? find_held_lock+0x36/0x1c0 [ 2894.061496] ? __cleanup_sighand+0x70/0x70 [ 2894.061522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2894.061541] ? print_usage_bug+0xc0/0xc0 [ 2894.061565] ? debug_smp_processor_id+0x1c/0x20 [ 2894.061581] ? perf_trace_lock+0x14d/0x7a0 [ 2894.061597] ? debug_smp_processor_id+0x1c/0x20 [ 2894.061614] ? perf_trace_lock_acquire+0x15b/0x800 [ 2894.061630] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2894.061648] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2894.061666] ? check_preemption_disabled+0x48/0x280 [ 2894.061690] ? debug_smp_processor_id+0x1c/0x20 [ 2894.061719] ? __lock_acquire+0x62f/0x4c20 [ 2894.061739] ? lock_is_held_type+0x210/0x210 [ 2894.061775] ? mark_held_locks+0x130/0x130 [ 2894.061793] ? print_usage_bug+0xc0/0xc0 [ 2894.061826] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2894.061844] ? check_preemption_disabled+0x48/0x280 [ 2894.061860] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2894.061885] ? print_usage_bug+0xc0/0xc0 [ 2894.061904] ? __lock_acquire+0x62f/0x4c20 [ 2894.061926] ? lock_is_held_type+0x210/0x210 [ 2894.061960] ? print_usage_bug+0xc0/0xc0 [ 2894.061979] ? __lock_acquire+0x62f/0x4c20 10:37:06 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x77, 0x0, [0x40000000, 0x800002c0, 0x4b564d02], [0xc2]}) [ 2894.062005] ? print_usage_bug+0xc0/0xc0 [ 2894.062039] ? __lock_acquire+0x62f/0x4c20 [ 2894.062055] ? perf_trace_lock_acquire+0x15b/0x800 [ 2894.062095] ? mark_held_locks+0x130/0x130 [ 2894.062112] ? debug_smp_processor_id+0x1c/0x20 [ 2894.062139] ? mark_held_locks+0x130/0x130 [ 2894.076742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2894.076762] ? check_preemption_disabled+0x48/0x280 [ 2894.076778] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2894.076802] ? debug_smp_processor_id+0x1c/0x20 [ 2894.076819] ? perf_trace_lock+0x14d/0x7a0 [ 2894.076836] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2894.076855] ? check_preemption_disabled+0x48/0x280 [ 2894.076877] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2894.085737] ? debug_smp_processor_id+0x1c/0x20 [ 2894.085754] ? perf_trace_lock+0x14d/0x7a0 [ 2894.085772] ? perf_trace_lock_acquire+0x15b/0x800 [ 2894.085796] ? print_usage_bug+0xc0/0xc0 [ 2894.085810] ? zap_class+0x640/0x640 [ 2894.085837] ? delayacct_end+0xc5/0x100 [ 2894.085856] ? zap_class+0x640/0x640 [ 2894.085870] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2894.085906] ? __lock_acquire+0x62f/0x4c20 [ 2894.104220] ? find_held_lock+0x36/0x1c0 [ 2894.104255] ? mark_held_locks+0x130/0x130 [ 2894.104271] ? _raw_spin_unlock_irq+0x27/0x80 [ 2894.104286] ? _raw_spin_unlock_irq+0x27/0x80 [ 2894.104310] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2894.114070] ? trace_hardirqs_on+0xbd/0x310 [ 2894.114088] ? kasan_check_read+0x11/0x20 [ 2894.114104] ? psi_memstall_leave+0x202/0x260 [ 2894.114125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2894.114144] ? check_preemption_disabled+0x48/0x280 [ 2894.114160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2894.114182] ? debug_smp_processor_id+0x1c/0x20 [ 2894.114199] ? perf_trace_lock+0x14d/0x7a0 [ 2894.114225] ? debug_smp_processor_id+0x1c/0x20 [ 2894.114241] ? perf_trace_lock_acquire+0x15b/0x800 [ 2894.114265] ? lock_is_held_type+0x210/0x210 [ 2894.114285] ? perf_trace_lock+0x7a0/0x7a0 [ 2894.114309] ? zap_class+0x640/0x640 [ 2894.114329] ? cgroup_file_notify+0x226/0x2f0 [ 2894.114357] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2894.114387] _do_fork+0x1cb/0x11d0 [ 2894.114410] ? fork_idle+0x1d0/0x1d0 [ 2894.114438] ? percpu_ref_put_many+0x11c/0x260 [ 2894.114458] ? lock_downgrade+0x900/0x900 [ 2894.128809] ? check_preemption_disabled+0x48/0x280 [ 2894.128843] ? kasan_check_read+0x11/0x20 [ 2894.128859] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2894.128874] ? rcu_softirq_qs+0x20/0x20 [ 2894.128888] ? check_preemption_disabled+0x48/0x280 [ 2894.128916] ? do_syscall_64+0x9a/0x820 [ 2894.128932] ? do_syscall_64+0x9a/0x820 [ 2894.128954] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2894.128979] ? trace_hardirqs_on+0xbd/0x310 [ 2894.129006] ? trace_hardirqs_on+0x310/0x310 [ 2894.148011] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2894.148033] ? trace_hardirqs_off_caller+0x310/0x310 [ 2894.148058] __x64_sys_clone+0xbf/0x150 [ 2894.148082] do_syscall_64+0x1b9/0x820 [ 2894.148102] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2894.156829] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2894.156846] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2894.156866] ? trace_hardirqs_on_caller+0x310/0x310 [ 2894.156888] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2894.156914] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2894.156940] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2894.156954] RIP: 0033:0x45a049 [ 2894.156972] Code: ff 48 85 f6 0f 84 27 8a fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c fe 89 fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 2894.156992] RSP: 002b:0000000000a3fac8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 2894.176871] RAX: ffffffffffffffda RBX: 00007f9b68fba700 RCX: 000000000045a049 [ 2894.176882] RDX: 00007f9b68fba9d0 RSI: 00007f9b68fb9db0 RDI: 00000000003d0f00 [ 2894.176892] RBP: 0000000000a3fcd0 R08: 00007f9b68fba700 R09: 00007f9b68fba700 [ 2894.176902] R10: 00007f9b68fba9d0 R11: 0000000000000202 R12: 0000000000000000 [ 2894.176913] R13: 0000000000a3fb7f R14: 00007f9b68fba9c0 R15: 000000000072c22c [ 2894.501442] Task in /syz0 killed as a result of limit of /syz0 [ 2894.551645] memory: usage 307172kB, limit 307200kB, failcnt 1080 [ 2894.661777] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2894.751811] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2894.791804] Memory cgroup stats for /syz0: cache:4212KB rss:265720KB rss_huge:245760KB shmem:4124KB mapped_file:4092KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4124KB active_anon:265936KB inactive_file:4KB active_file:0KB unevictable:36KB [ 2894.821724] Memory cgroup out of memory: Kill process 9811 (syz-executor0) score 1099 or sacrifice child [ 2894.851917] Killed process 9811 (syz-executor0) total-vm:70340kB, anon-rss:152kB, file-rss:33624kB, shmem-rss:0kB [ 2894.903408] syz-executor5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 2894.928411] syz-executor5 cpuset=syz5 mems_allowed=0 [ 2894.942123] CPU: 1 PID: 16966 Comm: syz-executor5 Not tainted 4.20.0-rc6+ #371 [ 2894.949559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2894.958943] Call Trace: [ 2894.961561] dump_stack+0x244/0x39d [ 2894.965238] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2894.970467] ? mark_held_locks+0x130/0x130 [ 2894.974737] ? mark_held_locks+0x130/0x130 [ 2894.979009] dump_header+0x27b/0xf72 [ 2894.982778] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2894.988363] ? check_preemption_disabled+0x48/0x280 [ 2894.993406] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2894.999522] ? pagefault_out_of_memory+0x197/0x197 [ 2895.004492] ? debug_smp_processor_id+0x1c/0x20 [ 2895.009196] ? perf_trace_lock+0x14d/0x7a0 [ 2895.013509] ? debug_smp_processor_id+0x1c/0x20 [ 2895.018219] ? perf_trace_lock_acquire+0x15b/0x800 [ 2895.023182] ? lock_is_held_type+0x210/0x210 [ 2895.027624] ? perf_trace_lock+0x7a0/0x7a0 [ 2895.031894] ? debug_smp_processor_id+0x1c/0x20 [ 2895.036590] ? perf_trace_lock+0x14d/0x7a0 [ 2895.040859] ? zap_class+0x640/0x640 [ 2895.044622] ? print_usage_bug+0xc0/0xc0 [ 2895.048709] ? lock_is_held_type+0x210/0x210 [ 2895.053155] ? find_held_lock+0x36/0x1c0 [ 2895.057253] ? mark_held_locks+0xc7/0x130 [ 2895.061428] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2895.066655] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2895.071781] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2895.076392] ? trace_hardirqs_on+0xbd/0x310 [ 2895.080737] ? kasan_check_read+0x11/0x20 [ 2895.084908] ? ___ratelimit+0x3b4/0x672 [ 2895.088911] ? trace_hardirqs_off_caller+0x310/0x310 [ 2895.094032] ? trace_hardirqs_on+0x310/0x310 [ 2895.098459] ? lock_downgrade+0x900/0x900 [ 2895.102627] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2895.107748] ? ___ratelimit+0x3b9/0x672 [ 2895.111748] ? idr_get_free+0xf70/0xf70 [ 2895.115739] ? _raw_spin_unlock_irq+0x27/0x80 [ 2895.120267] ? _raw_spin_unlock_irq+0x27/0x80 [ 2895.124792] oom_kill_process.cold.27+0x10/0x903 [ 2895.130084] ? _raw_spin_unlock_irq+0x27/0x80 [ 2895.134599] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2895.139223] ? oom_evaluate_task+0x540/0x540 [ 2895.143661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2895.149245] ? cgroup_procs_next+0x70/0x70 [ 2895.153522] ? _raw_spin_unlock_irq+0x60/0x80 [ 2895.158059] ? oom_badness+0xaa0/0xaa0 [ 2895.161975] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2895.166767] ? mem_cgroup_iter_break+0x30/0x30 [ 2895.171401] ? mark_held_locks+0xc7/0x130 [ 2895.175602] out_of_memory+0xa84/0x1430 [ 2895.179616] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2895.184236] ? kasan_check_read+0x11/0x20 [ 2895.188410] ? oom_killer_disable+0x3a0/0x3a0 [ 2895.192961] mem_cgroup_out_of_memory+0x15e/0x210 [ 2895.197839] ? memory_oom_group_write+0x160/0x160 [ 2895.202717] ? mem_cgroup_try_charge+0x627/0xe20 [ 2895.207519] ? page_counter_try_charge+0x1c1/0x220 [ 2895.212482] try_charge+0xda9/0x1700 [ 2895.216237] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2895.221208] ? kasan_check_read+0x11/0x20 [ 2895.225398] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2895.230107] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2895.235677] ? lock_page_memcg+0x350/0x350 [ 2895.239955] ? lock_acquire+0x1ed/0x520 [ 2895.243958] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2895.249347] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2895.254912] ? check_preemption_disabled+0x48/0x280 [ 2895.259968] ? kasan_check_read+0x11/0x20 [ 2895.264142] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2895.269453] ? rcu_softirq_qs+0x20/0x20 [ 2895.273466] mem_cgroup_try_charge+0x627/0xe20 [ 2895.278073] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2895.283645] ? mem_cgroup_protected+0xa60/0xa60 [ 2895.288333] ? shmem_getattr+0x2c0/0x2c0 [ 2895.292442] ? mark_held_locks+0xc7/0x130 [ 2895.296624] ? print_usage_bug+0xc0/0xc0 [ 2895.300725] ? _raw_spin_unlock_irq+0x27/0x80 [ 2895.305263] ? _raw_spin_unlock_irq+0x27/0x80 [ 2895.309804] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2895.314426] ? print_usage_bug+0xc0/0xc0 [ 2895.318537] ? trace_hardirqs_off_caller+0x310/0x310 [ 2895.323705] ? __lock_acquire+0x62f/0x4c20 [ 2895.328011] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2895.332982] shmem_getpage_gfp+0x186b/0x4840 [ 2895.337457] ? shmem_add_to_page_cache+0x1950/0x1950 [ 2895.342597] ? mark_held_locks+0x130/0x130 [ 2895.346874] ? debug_smp_processor_id+0x1c/0x20 [ 2895.351570] ? perf_trace_lock+0x14d/0x7a0 [ 2895.355842] ? debug_smp_processor_id+0x1c/0x20 [ 2895.360550] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2895.366122] ? check_preemption_disabled+0x48/0x280 [ 2895.371185] ? print_usage_bug+0xc0/0xc0 [ 2895.375311] ? __lock_acquire+0x62f/0x4c20 [ 2895.379574] ? check_preemption_disabled+0x48/0x280 [ 2895.384637] ? mark_held_locks+0x130/0x130 [ 2895.388902] ? debug_smp_processor_id+0x1c/0x20 [ 2895.393587] ? perf_trace_lock+0x14d/0x7a0 [ 2895.397856] ? mark_held_locks+0x130/0x130 [ 2895.402109] ? zap_class+0x640/0x640 [ 2895.405846] ? lock_acquire+0x1ed/0x520 [ 2895.409837] ? alloc_set_pte+0x1447/0x1f40 [ 2895.414096] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2895.419654] ? check_preemption_disabled+0x48/0x280 [ 2895.424699] ? debug_smp_processor_id+0x1c/0x20 [ 2895.429401] ? perf_trace_lock+0x14d/0x7a0 [ 2895.433658] ? rwlock_bug.part.2+0x90/0x90 [ 2895.437927] ? lock_is_held_type+0x210/0x210 [ 2895.442369] ? _raw_spin_lock+0x35/0x40 [ 2895.446386] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2895.451954] ? alloc_set_pte+0xdee/0x1f40 [ 2895.456133] ? zap_class+0x640/0x640 [ 2895.459889] ? reacquire_held_locks+0x137/0x510 [ 2895.464587] ? alloc_set_pte+0x1447/0x1f40 [ 2895.468864] ? find_held_lock+0x13f/0x1c0 [ 2895.473060] ? filemap_map_pages+0xd6b/0x1a20 [ 2895.477610] ? lock_downgrade+0x900/0x900 [ 2895.481795] ? check_preemption_disabled+0x48/0x280 [ 2895.486860] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2895.491815] ? kasan_check_read+0x11/0x20 [ 2895.496007] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2895.501320] ? rcu_softirq_qs+0x20/0x20 [ 2895.505350] ? filemap_map_pages+0xd92/0x1a20 [ 2895.509902] ? find_get_entries_tag+0x1400/0x1400 [ 2895.514800] ? lock_downgrade+0x900/0x900 [ 2895.519000] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2895.524583] ? check_preemption_disabled+0x48/0x280 [ 2895.529634] ? debug_smp_processor_id+0x1c/0x20 [ 2895.534328] ? perf_trace_lock+0x14d/0x7a0 [ 2895.538584] ? __pte_alloc_kernel+0x220/0x220 [ 2895.543110] ? lock_is_held_type+0x210/0x210 [ 2895.547549] ? lock_is_held_type+0x210/0x210 [ 2895.551988] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2895.557556] shmem_fault+0x25f/0x960 [ 2895.561299] ? zap_class+0x640/0x640 [ 2895.565039] ? shmem_read_mapping_page_gfp+0x1f0/0x1f0 [ 2895.570349] ? find_held_lock+0x36/0x1c0 [ 2895.574443] __do_fault+0x100/0x6b0 [ 2895.578095] ? lock_downgrade+0x900/0x900 [ 2895.582265] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2895.587399] ? kasan_check_read+0x11/0x20 [ 2895.591571] ? do_raw_spin_unlock+0xa7/0x330 [ 2895.596020] ? do_raw_spin_trylock+0x270/0x270 [ 2895.600658] __handle_mm_fault+0x3ea6/0x5be0 [ 2895.605117] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2895.610006] ? lock_is_held_type+0x210/0x210 [ 2895.614446] ? perf_trace_lock+0x7a0/0x7a0 [ 2895.618773] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2895.624372] ? pmd_huge+0xf4/0x140 [ 2895.627972] ? zap_class+0x640/0x640 [ 2895.631711] ? zap_class+0x640/0x640 [ 2895.635482] ? find_held_lock+0x36/0x1c0 [ 2895.639608] ? handle_mm_fault+0x42a/0xc70 [ 2895.643874] ? lock_downgrade+0x900/0x900 [ 2895.648050] ? check_preemption_disabled+0x48/0x280 [ 2895.653096] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2895.658053] ? kasan_check_read+0x11/0x20 [ 2895.662236] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2895.667546] ? rcu_softirq_qs+0x20/0x20 [ 2895.671544] ? trace_hardirqs_off_caller+0x310/0x310 [ 2895.676685] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2895.682258] ? check_preemption_disabled+0x48/0x280 [ 2895.687310] handle_mm_fault+0x54f/0xc70 [ 2895.691397] ? __handle_mm_fault+0x5be0/0x5be0 [ 2895.696005] ? __get_user_pages+0x2c4/0x1ea0 [ 2895.700443] __get_user_pages+0xa3d/0x1ea0 [ 2895.704728] ? follow_page_mask+0x2160/0x2160 [ 2895.709248] ? perf_trace_lock+0x14d/0x7a0 [ 2895.713525] ? lock_is_held_type+0x210/0x210 [ 2895.717963] ? zap_class+0x640/0x640 [ 2895.721711] ? lock_acquire+0x1ed/0x520 [ 2895.725726] ? __mm_populate+0x31a/0x4d0 [ 2895.729827] ? lock_release+0xa00/0xa00 [ 2895.733829] ? perf_trace_sched_process_exec+0x860/0x860 [ 2895.739333] populate_vma_page_range+0x2db/0x3d0 [ 2895.744146] ? follow_page+0x420/0x420 [ 2895.748075] ? find_vma+0x34/0x190 [ 2895.751647] __mm_populate+0x286/0x4d0 [ 2895.755607] ? populate_vma_page_range+0x3d0/0x3d0 [ 2895.760611] ? down_read_killable+0x150/0x150 [ 2895.765147] ? security_mmap_file+0x174/0x1b0 [ 2895.769684] vm_mmap_pgoff+0x27f/0x2c0 [ 2895.773609] ? vma_is_stack_for_current+0xd0/0xd0 [ 2895.778495] ? kasan_check_read+0x11/0x20 [ 2895.782676] ? _copy_to_user+0xc8/0x110 [ 2895.786692] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2895.792277] ksys_mmap_pgoff+0xf1/0x660 [ 2895.796290] ? do_syscall_64+0x9a/0x820 [ 2895.800314] ? find_mergeable_anon_vma+0xd0/0xd0 [ 2895.805102] ? trace_hardirqs_on+0xbd/0x310 [ 2895.809448] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2895.815009] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2895.820421] ? trace_hardirqs_off_caller+0x310/0x310 [ 2895.825568] __x64_sys_mmap+0xe9/0x1b0 [ 2895.829487] do_syscall_64+0x1b9/0x820 [ 2895.833390] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2895.838775] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2895.843729] ? trace_hardirqs_on_caller+0x310/0x310 [ 2895.848760] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2895.853790] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 2895.860470] ? __switch_to_asm+0x40/0x70 [ 2895.864536] ? __switch_to_asm+0x34/0x70 [ 2895.868621] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2895.873491] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2895.878708] RIP: 0033:0x457679 [ 2895.881931] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2895.900858] RSP: 002b:00007f4e4aa87c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2895.908603] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457679 [ 2895.915897] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 2895.923184] RBP: 000000000072bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 2895.930493] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f4e4aa886d4 [ 2895.937784] R13: 00000000004c2d5e R14: 00000000004d5098 R15: 00000000ffffffff 10:37:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000040)=""/184) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000010000/0x2000)=nil, 0x2000}, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x4000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000001c0)=""/114) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:37:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00007f2000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mbind(&(0x7f00003b5000/0x800000)=nil, 0x800000, 0x0, &(0x7f0000000080), 0x1, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x6, 0x2, 0x9, 0x0, 0xffffffffffffff00, 0x0, 0x5, 0x1, 0x0, 0x0, 0xce, 0x0, 0x0, 0x7, 0x8, 0x0, 0x4, 0x6, 0x3, 0x2, 0x0, 0x0, 0x3, 0x80000000, 0x8001]}) io_setup(0x1, &(0x7f0000000100)=0x0) io_cancel(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)="59ac72ca06cc8360994e9718aa60057149c08198aad43b54fb54b11ec0c8d60af4578842995fc121", 0x28, 0x2, 0x0, 0x1}, &(0x7f0000000240)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x1277, 0x0) [ 2896.161782] Task in /syz5 killed as a result of limit of /syz5 [ 2896.169256] memory: usage 307092kB, limit 307200kB, failcnt 1557 [ 2896.179231] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2896.189752] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2896.199707] Memory cgroup stats for /syz5: cache:968KB rss:262656KB rss_huge:239616KB shmem:880KB mapped_file:924KB dirty:0KB writeback:132KB swap:0KB inactive_anon:972KB active_anon:262744KB inactive_file:0KB active_file:0KB unevictable:20KB [ 2896.235630] Memory cgroup out of memory: Kill process 16878 (syz-executor5) score 1106 or sacrifice child [ 2896.253829] Killed process 16878 (syz-executor5) total-vm:70472kB, anon-rss:2208kB, file-rss:33632kB, shmem-rss:0kB [ 2896.279357] oom_reaper: reaped process 16878 (syz-executor5), now anon-rss:0kB, file-rss:32800kB, shmem-rss:0kB [ 2896.396518] syz-executor5 invoked oom-killer: gfp_mask=0x6200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=1000 [ 2896.430544] syz-executor5 cpuset=syz5 mems_allowed=0 [ 2896.538369] CPU: 0 PID: 16966 Comm: syz-executor5 Not tainted 4.20.0-rc6+ #371 [ 2896.545830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2896.555197] Call Trace: [ 2896.557822] dump_stack+0x244/0x39d [ 2896.561473] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2896.566684] ? mark_held_locks+0x130/0x130 [ 2896.570935] ? mark_held_locks+0x130/0x130 [ 2896.575200] dump_header+0x27b/0xf72 [ 2896.578956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2896.584512] ? check_preemption_disabled+0x48/0x280 [ 2896.589547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2896.595106] ? pagefault_out_of_memory+0x197/0x197 [ 2896.600049] ? debug_smp_processor_id+0x1c/0x20 [ 2896.604734] ? perf_trace_lock+0x14d/0x7a0 [ 2896.608989] ? debug_smp_processor_id+0x1c/0x20 [ 2896.613678] ? perf_trace_lock_acquire+0x15b/0x800 [ 2896.618633] ? lock_is_held_type+0x210/0x210 [ 2896.623062] ? perf_trace_lock+0x7a0/0x7a0 [ 2896.627318] ? debug_smp_processor_id+0x1c/0x20 [ 2896.631998] ? perf_trace_lock+0x14d/0x7a0 [ 2896.636258] ? zap_class+0x640/0x640 [ 2896.639987] ? print_usage_bug+0xc0/0xc0 [ 2896.644067] ? lock_is_held_type+0x210/0x210 [ 2896.648505] ? find_held_lock+0x36/0x1c0 [ 2896.652597] ? mark_held_locks+0xc7/0x130 [ 2896.656767] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2896.661884] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2896.667004] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2896.671603] ? trace_hardirqs_on+0xbd/0x310 [ 2896.675943] ? kasan_check_read+0x11/0x20 [ 2896.680113] ? ___ratelimit+0x3b4/0x672 [ 2896.684108] ? trace_hardirqs_off_caller+0x310/0x310 [ 2896.689268] ? trace_hardirqs_on+0x310/0x310 [ 2896.693694] ? lock_downgrade+0x900/0x900 [ 2896.697867] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2896.702988] ? ___ratelimit+0x3b9/0x672 [ 2896.706979] ? idr_get_free+0xf70/0xf70 [ 2896.710965] ? _raw_spin_unlock_irq+0x27/0x80 [ 2896.715475] ? _raw_spin_unlock_irq+0x27/0x80 [ 2896.720000] oom_kill_process.cold.27+0x10/0x903 [ 2896.724773] ? _raw_spin_unlock_irq+0x27/0x80 [ 2896.729287] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2896.733925] ? oom_evaluate_task+0x540/0x540 [ 2896.738357] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2896.743921] ? cgroup_procs_next+0x70/0x70 [ 2896.748178] ? _raw_spin_unlock_irq+0x60/0x80 [ 2896.752719] ? oom_badness+0xaa0/0xaa0 [ 2896.756629] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2896.761407] ? mem_cgroup_iter_break+0x30/0x30 [ 2896.766025] ? mark_held_locks+0xc7/0x130 [ 2896.770196] out_of_memory+0xa84/0x1430 [ 2896.774219] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2896.778821] ? kasan_check_read+0x11/0x20 [ 2896.782990] ? oom_killer_disable+0x3a0/0x3a0 [ 2896.787528] mem_cgroup_out_of_memory+0x15e/0x210 [ 2896.792390] ? memory_oom_group_write+0x160/0x160 [ 2896.797252] ? mem_cgroup_try_charge+0x627/0xe20 [ 2896.802037] ? page_counter_try_charge+0x1c1/0x220 [ 2896.806986] try_charge+0xda9/0x1700 [ 2896.810720] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2896.815663] ? kasan_check_read+0x11/0x20 [ 2896.819833] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2896.824527] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2896.830085] ? lock_page_memcg+0x350/0x350 [ 2896.834348] ? lock_acquire+0x1ed/0x520 [ 2896.838341] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2896.843722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2896.849293] ? check_preemption_disabled+0x48/0x280 [ 2896.854335] ? kasan_check_read+0x11/0x20 [ 2896.858498] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2896.863789] ? rcu_softirq_qs+0x20/0x20 [ 2896.867805] mem_cgroup_try_charge+0x627/0xe20 [ 2896.872409] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2896.877970] ? mem_cgroup_protected+0xa60/0xa60 [ 2896.882663] ? shmem_getattr+0x2c0/0x2c0 [ 2896.886790] ? mark_held_locks+0xc7/0x130 [ 2896.890957] ? print_usage_bug+0xc0/0xc0 [ 2896.895031] ? _raw_spin_unlock_irq+0x27/0x80 [ 2896.899541] ? _raw_spin_unlock_irq+0x27/0x80 [ 2896.904052] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2896.908657] ? print_usage_bug+0xc0/0xc0 [ 2896.912739] ? trace_hardirqs_off_caller+0x310/0x310 [ 2896.917855] ? __lock_acquire+0x62f/0x4c20 [ 2896.922113] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2896.927061] shmem_getpage_gfp+0x186b/0x4840 [ 2896.931524] ? shmem_add_to_page_cache+0x1950/0x1950 [ 2896.936645] ? mark_held_locks+0x130/0x130 [ 2896.940911] ? debug_smp_processor_id+0x1c/0x20 [ 2896.945606] ? perf_trace_lock+0x14d/0x7a0 [ 2896.949864] ? debug_smp_processor_id+0x1c/0x20 [ 2896.954565] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2896.960121] ? check_preemption_disabled+0x48/0x280 [ 2896.965147] ? print_usage_bug+0xc0/0xc0 [ 2896.969252] ? __lock_acquire+0x62f/0x4c20 [ 2896.973506] ? check_preemption_disabled+0x48/0x280 [ 2896.978575] ? mark_held_locks+0x130/0x130 [ 2896.982827] ? debug_smp_processor_id+0x1c/0x20 [ 2896.987510] ? perf_trace_lock+0x14d/0x7a0 [ 2896.991776] ? mark_held_locks+0x130/0x130 [ 2896.996564] ? zap_class+0x640/0x640 [ 2897.000316] ? lock_acquire+0x1ed/0x520 [ 2897.004305] ? alloc_set_pte+0x1447/0x1f40 [ 2897.008576] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2897.014126] ? check_preemption_disabled+0x48/0x280 [ 2897.019160] ? debug_smp_processor_id+0x1c/0x20 [ 2897.023845] ? perf_trace_lock+0x14d/0x7a0 [ 2897.028112] ? rwlock_bug.part.2+0x90/0x90 [ 2897.032386] ? lock_is_held_type+0x210/0x210 [ 2897.036820] ? _raw_spin_lock+0x35/0x40 [ 2897.040810] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2897.046361] ? alloc_set_pte+0xdee/0x1f40 [ 2897.050538] ? zap_class+0x640/0x640 [ 2897.054278] ? reacquire_held_locks+0x137/0x510 [ 2897.058954] ? alloc_set_pte+0x1447/0x1f40 [ 2897.063223] ? find_held_lock+0x13f/0x1c0 [ 2897.067400] ? filemap_map_pages+0xd6b/0x1a20 [ 2897.071931] ? lock_downgrade+0x900/0x900 [ 2897.076095] ? check_preemption_disabled+0x48/0x280 [ 2897.081134] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2897.086847] ? kasan_check_read+0x11/0x20 [ 2897.091010] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2897.096301] ? rcu_softirq_qs+0x20/0x20 [ 2897.100305] ? filemap_map_pages+0xd92/0x1a20 [ 2897.104839] ? find_get_entries_tag+0x1400/0x1400 [ 2897.109698] ? lock_downgrade+0x900/0x900 [ 2897.113885] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2897.119469] ? check_preemption_disabled+0x48/0x280 [ 2897.124512] ? debug_smp_processor_id+0x1c/0x20 [ 2897.129224] ? perf_trace_lock+0x14d/0x7a0 [ 2897.133473] ? __pte_alloc_kernel+0x220/0x220 [ 2897.137593] IPVS: ftp: loaded support on port[0] = 21 [ 2897.137986] ? lock_is_held_type+0x210/0x210 [ 2897.147582] ? lock_is_held_type+0x210/0x210 [ 2897.152008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2897.157568] shmem_fault+0x25f/0x960 [ 2897.161303] ? zap_class+0x640/0x640 [ 2897.165043] ? shmem_read_mapping_page_gfp+0x1f0/0x1f0 [ 2897.170346] ? find_held_lock+0x36/0x1c0 [ 2897.174444] __do_fault+0x100/0x6b0 [ 2897.178108] ? lock_downgrade+0x900/0x900 [ 2897.182271] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2897.182295] ? kasan_check_read+0x11/0x20 [ 2897.182313] ? do_raw_spin_unlock+0xa7/0x330 [ 2897.191569] ? do_raw_spin_trylock+0x270/0x270 [ 2897.191605] __handle_mm_fault+0x3ea6/0x5be0 [ 2897.191632] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2897.209883] ? lock_is_held_type+0x210/0x210 [ 2897.209904] ? perf_trace_lock+0x7a0/0x7a0 [ 2897.209925] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2897.218597] ? pmd_huge+0xf4/0x140 [ 2897.227669] ? zap_class+0x640/0x640 [ 2897.231390] ? zap_class+0x640/0x640 [ 2897.235119] ? find_held_lock+0x36/0x1c0 [ 2897.235152] ? handle_mm_fault+0x42a/0xc70 [ 2897.243444] ? lock_downgrade+0x900/0x900 [ 2897.243463] ? check_preemption_disabled+0x48/0x280 [ 2897.243483] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2897.243504] ? kasan_check_read+0x11/0x20 [ 2897.252662] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2897.252679] ? rcu_softirq_qs+0x20/0x20 [ 2897.252696] ? trace_hardirqs_off_caller+0x310/0x310 [ 2897.252714] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2897.252732] ? check_preemption_disabled+0x48/0x280 [ 2897.252756] handle_mm_fault+0x54f/0xc70 [ 2897.261844] ? __handle_mm_fault+0x5be0/0x5be0 [ 2897.261865] ? __get_user_pages+0x2c4/0x1ea0 [ 2897.261889] __get_user_pages+0xa3d/0x1ea0 [ 2897.261922] ? follow_page_mask+0x2160/0x2160 [ 2897.271151] ? perf_trace_lock+0x14d/0x7a0 [ 2897.312705] ? lock_is_held_type+0x210/0x210 [ 2897.317135] ? zap_class+0x640/0x640 [ 2897.320880] ? lock_acquire+0x1ed/0x520 [ 2897.324875] ? __mm_populate+0x31a/0x4d0 [ 2897.328946] ? lock_release+0xa00/0xa00 [ 2897.332949] ? perf_trace_sched_process_exec+0x860/0x860 [ 2897.338418] populate_vma_page_range+0x2db/0x3d0 [ 2897.343187] ? follow_page+0x420/0x420 [ 2897.347122] ? find_vma+0x34/0x190 [ 2897.350671] __mm_populate+0x286/0x4d0 [ 2897.354586] ? populate_vma_page_range+0x3d0/0x3d0 [ 2897.359532] ? down_read_killable+0x150/0x150 [ 2897.364032] ? security_mmap_file+0x174/0x1b0 [ 2897.368539] vm_mmap_pgoff+0x27f/0x2c0 [ 2897.372447] ? vma_is_stack_for_current+0xd0/0xd0 [ 2897.377299] ? kasan_check_read+0x11/0x20 [ 2897.381451] ? _copy_to_user+0xc8/0x110 [ 2897.385440] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2897.390991] ksys_mmap_pgoff+0xf1/0x660 [ 2897.394988] ? do_syscall_64+0x9a/0x820 [ 2897.398987] ? find_mergeable_anon_vma+0xd0/0xd0 [ 2897.403744] ? trace_hardirqs_on+0xbd/0x310 [ 2897.408066] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2897.413610] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2897.418984] ? trace_hardirqs_off_caller+0x310/0x310 [ 2897.424099] __x64_sys_mmap+0xe9/0x1b0 [ 2897.428011] do_syscall_64+0x1b9/0x820 [ 2897.431919] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2897.437294] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2897.442243] ? trace_hardirqs_on_caller+0x310/0x310 [ 2897.447266] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2897.452289] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 2897.458960] ? __switch_to_asm+0x40/0x70 [ 2897.463026] ? __switch_to_asm+0x34/0x70 [ 2897.467099] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2897.471953] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2897.477156] RIP: 0033:0x457679 [ 2897.480353] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2897.499366] RSP: 002b:00007f4e4aa87c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2897.507078] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457679 [ 2897.514347] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000000020000000 [ 2897.521618] RBP: 000000000072bfa0 R08: ffffffffffffffff R09: 0000000000000000 [ 2897.528891] R10: 0000000000008031 R11: 0000000000000246 R12: 00007f4e4aa886d4 [ 2897.536160] R13: 00000000004c2d5e R14: 00000000004d5098 R15: 00000000ffffffff 10:37:09 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)="2f70f26f632f7379e314f247742f697076342f76732f699b07000000c0b842000000", 0x2, 0x0) connect$can_bcm(r0, &(0x7f0000000180), 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0xa) gettid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) unshare(0x40000000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000640)=ANY=[@ANYBLOB="00100008000801c7481e74f27c7378dbc43ce5dc7a614383fc5b4af7a4ae714bcbb96a14ee19c14ef45f6ec53bac11eb4b609bc46a70592aae0a253845260a672fe74b17585dd7bbc336c1b02e4112ed76afc6d5de18898e184743979856"], 0x0) r3 = epoll_create1(0x0) fcntl$lock(r3, 0x0, &(0x7f0000000200)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000040)}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x4e24}}, 0x5, 0x0, 0x5, "1e92caf261673c67250b5ebaf9a998952b815f6ce8960eb87bb830f5692b2ec51493c0d2cd15a33c96d6694ab628beafef3566a169d7d884bacfc563f4f7816d69e7824aea89f9d8a6e0f34380da4a5d"}, 0xd8) recvmmsg(0xffffffffffffffff, &(0x7f0000004100), 0x2a37, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x0, 0x38) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000340)={0x1, 0x4, 0x0, 'queue0\x00', 0x5cfee86c}) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x184, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xa, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f00000002c0)={'L+', 0xcdb}, 0x28, 0x2) gettid() r5 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, &(0x7f0000000200)) r6 = creat(&(0x7f00000008c0)='./bus\x00', 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@local, @multicast2, @dev}, 0xffffffffffffffaa) sendfile(r6, r2, &(0x7f0000000180), 0x10013c93a) clock_gettime(0x0, &(0x7f0000000400)) 10:37:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)={@multicast2, @loopback, 0x0, 0x1, [@empty]}, 0x14) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2, @loopback}, 0xc) dup3(r0, r2, 0x0) 10:37:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000040)=""/184) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000010000/0x2000)=nil, 0x2000}, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x4000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000001c0)=""/114) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:37:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000040)=""/184) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000010000/0x2000)=nil, 0x2000}, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x4000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000001c0)=""/114) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2897.684035] Task in /syz5 killed as a result of limit of /syz5 [ 2897.690403] memory: usage 307172kB, limit 307200kB, failcnt 1590 [ 2897.730914] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2897.765662] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2897.782617] Memory cgroup stats for /syz5: cache:3080KB rss:260536KB rss_huge:237568KB shmem:3124KB mapped_file:3168KB dirty:0KB writeback:132KB swap:0KB inactive_anon:3240KB active_anon:260584KB inactive_file:0KB active_file:0KB unevictable:20KB [ 2897.837887] Memory cgroup out of memory: Kill process 16964 (syz-executor5) score 1107 or sacrifice child [ 2897.864484] Killed process 16966 (syz-executor5) total-vm:70472kB, anon-rss:128kB, file-rss:33476kB, shmem-rss:3164kB [ 2897.909138] oom_reaper: reaped process 16966 (syz-executor5), now anon-rss:0kB, file-rss:32772kB, shmem-rss:3228kB 10:37:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000140)=@gettaction={0x2c, 0x32, 0x301, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x18}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x2c}}, 0x0) 10:37:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000700)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)="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", 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f00000004c0)=0xc) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x2}, 'syz0\x00', 0x42}) add_key(&(0x7f0000000680)='blacklist\x00', &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, 0x0) socket(0x0, 0x0, 0x0) gettid() syz_extract_tcp_res(&(0x7f0000000380), 0x10000, 0x2) keyctl$get_security(0x11, 0x0, &(0x7f00000000c0)=""/50, 0x32) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[]}}, 0x0) setpriority(0x0, 0x0, 0x0) 10:37:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000040)=""/184) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000010000/0x2000)=nil, 0x2000}, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x4000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000001c0)=""/114) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:37:12 executing program 0: r0 = semget$private(0x0, 0x4, 0x0) semctl$SETVAL(r0, 0xfffffffffffffffc, 0x10, 0x0) 10:37:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000040)=""/184) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000010000/0x2000)=nil, 0x2000}, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x4000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000001c0)=""/114) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:37:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2480, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = request_key(0x0, 0x0, &(0x7f00000006c0)='broute\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000600)='\x00', r4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'yam0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB]}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'broute\x00'}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000580)=[@text16={0x10, &(0x7f0000000700)="66b96e0200000f3266b9760b00000f3262a92a9e66b8018cf16c0f23d80f21f86635000000c00f23f80f01c8ca0000ba2000ed660f382883bb750f20d86635080000000f22d8b800008ed0", 0x4b}], 0x1, 0x6, &(0x7f0000000780)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x80}], 0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)) 10:37:12 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x2) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) getpeername$inet(r1, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) 10:37:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000700)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)="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", 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f00000004c0)=0xc) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x2}, 'syz0\x00', 0x42}) add_key(&(0x7f0000000680)='blacklist\x00', &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, 0x0) socket(0x0, 0x0, 0x0) gettid() syz_extract_tcp_res(&(0x7f0000000380), 0x10000, 0x2) keyctl$get_security(0x11, 0x0, &(0x7f00000000c0)=""/50, 0x32) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[]}}, 0x0) setpriority(0x0, 0x0, 0x0) 10:37:14 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000700)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)="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", 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f00000004c0)=0xc) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x2}, 'syz0\x00', 0x42}) add_key(&(0x7f0000000680)='blacklist\x00', &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, 0x0) socket(0x0, 0x0, 0x0) gettid() syz_extract_tcp_res(&(0x7f0000000380), 0x10000, 0x2) keyctl$get_security(0x11, 0x0, &(0x7f00000000c0)=""/50, 0x32) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[]}}, 0x0) setpriority(0x0, 0x0, 0x0) 10:37:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) 10:37:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2480, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = request_key(0x0, 0x0, &(0x7f00000006c0)='broute\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000600)='\x00', r4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'yam0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB]}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'broute\x00'}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000580)=[@text16={0x10, &(0x7f0000000700)="66b96e0200000f3266b9760b00000f3262a92a9e66b8018cf16c0f23d80f21f86635000000c00f23f80f01c8ca0000ba2000ed660f382883bb750f20d86635080000000f22d8b800008ed0", 0x4b}], 0x1, 0x6, &(0x7f0000000780)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x80}], 0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)) 10:37:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000040)=""/184) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000010000/0x2000)=nil, 0x2000}, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x4000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000001c0)=""/114) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:37:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000000040)=""/184) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000010000/0x2000)=nil, 0x2000}, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x4000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f00000001c0)=""/114) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:37:14 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x10002}) 10:37:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000700)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001140)="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", 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f00000004c0)=0xc) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000780)={{0x0, 0x0, 0x0, 0x2}, 'syz0\x00', 0x42}) add_key(&(0x7f0000000680)='blacklist\x00', &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, 0x0) socket(0x0, 0x0, 0x0) gettid() syz_extract_tcp_res(&(0x7f0000000380), 0x10000, 0x2) keyctl$get_security(0x11, 0x0, &(0x7f00000000c0)=""/50, 0x32) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[]}}, 0x0) setpriority(0x0, 0x0, 0x0) 10:37:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x3, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x1, 0x3, &(0x7f0000000080)=@framed={{}, [], {0x95, 0x2}}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x90, &(0x7f0000000140)=""/144}, 0x48) 10:37:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2480, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = request_key(0x0, 0x0, &(0x7f00000006c0)='broute\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000600)='\x00', r4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'yam0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB]}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'broute\x00'}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000580)=[@text16={0x10, &(0x7f0000000700)="66b96e0200000f3266b9760b00000f3262a92a9e66b8018cf16c0f23d80f21f86635000000c00f23f80f01c8ca0000ba2000ed660f382883bb750f20d86635080000000f22d8b800008ed0", 0x4b}], 0x1, 0x6, &(0x7f0000000780)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x80}], 0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)) 10:37:15 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = open(&(0x7f0000000100)='./file1\x00', 0x8020101842, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000480)={0x13, 0x18, 0x14, 0x0, 0x6, 0x0, 0x5, 0x4f}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)) r3 = memfd_create(&(0x7f0000000240)="74086e75000018000000e35bf80000820ab60d7703b8abda81ab2a8604f5a0c45c558df535d46711f28fe60a", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x2d, 0x2000005) listxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) ioctl$LOOP_SET_FD(r2, 0x4c00, r3) setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000003c0)={@multicast2, @multicast1}, 0x8) 10:37:15 executing program 5: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000140)=0x4, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"00001c0000000000001c9e000200", 0x811}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000740)) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x19) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={r0, 0x0, 0x20}, 0xc) write$P9_RSETATTR(r4, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r0}, &(0x7f0000000380)=0x8) sendfile(r1, r4, &(0x7f0000d83ff8), 0x800000000024) ioctl$KDSETMODE(r4, 0x4b3a, 0x2) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000004c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 10:37:15 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2480, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = request_key(0x0, 0x0, &(0x7f00000006c0)='broute\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000540)={'syz'}, &(0x7f0000000600)='\x00', r4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'yam0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB]}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'broute\x00'}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000580)=[@text16={0x10, &(0x7f0000000700)="66b96e0200000f3266b9760b00000f3262a92a9e66b8018cf16c0f23d80f21f86635000000c00f23f80f01c8ca0000ba2000ed660f382883bb750f20d86635080000000f22d8b800008ed0", 0x4b}], 0x1, 0x6, &(0x7f0000000780)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x80}], 0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)) 10:37:15 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x40045408, &(0x7f0000000000)) [ 2903.620512] device bridge0 left promiscuous mode [ 2903.731383] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2903.760001] device team0 left promiscuous mode 10:37:16 executing program 3: r0 = semget$private(0x0, 0x9, 0x0) semtimedop(r0, &(0x7f00000a8000)=[{0x0, 0xfffffffffffffff9}], 0x1, 0x0) semop(r0, &(0x7f0000000000)=[{}, {0x0, 0xffff}], 0x2) semctl$IPC_RMID(r0, 0x0, 0x0) [ 2903.781142] device team_slave_0 left promiscuous mode [ 2903.797590] device team_slave_1 left promiscuous mode [ 2903.820765] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready 10:37:16 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x801}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) [ 2903.908885] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2903.954327] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2903.968629] IPv6: ADDRCONF(NETDEV_UP): wlan2: link is not ready [ 2903.980322] IPv6: ADDRCONF(NETDEV_UP): wlan3: link is not ready [ 2903.997865] IPv6: ADDRCONF(NETDEV_UP): wlan4: link is not ready [ 2904.018002] IPv6: ADDRCONF(NETDEV_UP): wlan5: link is not ready [ 2904.033383] IPv6: ADDRCONF(NETDEV_UP): wlan6: link is not ready [ 2904.046783] IPv6: ADDRCONF(NETDEV_UP): wlan7: link is not ready [ 2904.063229] IPv6: ADDRCONF(NETDEV_UP): wlan8: link is not ready [ 2904.087803] IPv6: ADDRCONF(NETDEV_UP): wlan9: link is not ready [ 2904.103769] IPv6: ADDRCONF(NETDEV_UP): wlan10: link is not ready [ 2904.118843] IPv6: ADDRCONF(NETDEV_UP): wlan11: link is not ready [ 2904.134093] IPv6: ADDRCONF(NETDEV_UP): wlan12: link is not ready 10:37:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) capset(0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) 10:37:16 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)}, {&(0x7f00000002c0)=""/250, 0x384}], 0x10000000000002bb, 0x0) [ 2904.163238] IPv6: ADDRCONF(NETDEV_UP): wlan13: link is not ready [ 2904.198450] IPv6: ADDRCONF(NETDEV_UP): bond5: link is not ready [ 2904.211989] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2904.231302] IPv6: ADDRCONF(NETDEV_UP): bond6: link is not ready [ 2904.247808] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2904.265153] IPv6: ADDRCONF(NETDEV_UP): bond7: link is not ready [ 2904.271272] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2904.295246] IPv6: ADDRCONF(NETDEV_UP): bond8: link is not ready [ 2904.307974] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2904.327627] IPv6: ADDRCONF(NETDEV_UP): wlan14: link is not ready [ 2904.343797] IPv6: ADDRCONF(NETDEV_UP): wlan15: link is not ready [ 2904.357769] IPv6: ADDRCONF(NETDEV_UP): wlan16: link is not ready [ 2904.367703] IPv6: ADDRCONF(NETDEV_UP): wlan17: link is not ready 10:37:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000080)=0x3, 0x382) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="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", 0x218, 0x8000, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) close(r0) 10:37:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000480)=0x9) sendfile(r0, r1, &(0x7f0000000000), 0x10000) [ 2904.378168] IPv6: ADDRCONF(NETDEV_UP): wlan18: link is not ready 10:37:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1}, 0x14) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, 0x0, 0x2da02533a9afff0d) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8), 0x71, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0xd83, 0x4) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x280) r3 = socket$packet(0x11, 0x0, 0x300) sendto$inet6(r3, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') clock_adjtime(0x0, 0x0) getsockopt$packet_buf(r2, 0x107, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) 10:37:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000480)=0x9) sendfile(r0, r1, &(0x7f0000000000), 0x10000) 10:37:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000480)=0x9) sendfile(r0, r1, &(0x7f0000000000), 0x10000) [ 2905.124074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2905.138676] bridge0: port 1(bridge_slave_0) entered blocking state [ 2905.145287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2905.416695] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:37:21 executing program 5: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000140)=0x4, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"00001c0000000000001c9e000200", 0x811}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000740)) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x19) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={r0, 0x0, 0x20}, 0xc) write$P9_RSETATTR(r4, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r0}, &(0x7f0000000380)=0x8) sendfile(r1, r4, &(0x7f0000d83ff8), 0x800000000024) ioctl$KDSETMODE(r4, 0x4b3a, 0x2) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000004c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 10:37:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000480)=0x9) sendfile(r0, r1, &(0x7f0000000000), 0x10000) 10:37:21 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000480)=0x9) sendfile(r0, r1, &(0x7f0000000000), 0x10000) 10:37:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) 10:37:21 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000006c0)={0x0, 0x99, "2c160a1a47fd1ac119371a2fdcc26db3773ce5a90e88e059bbbf448b1519d1139cb2df1fe602864cd763b26eae4a1ee255ede14b0c9b10668c8c500d830bf1cccdf54320d623bc4af38022b74310dca0c9b3f2634a381a124befb399051f128efdcee63952b9e95000fa3c14d55e332b11b3e4c18f7dbf42ff396937a1eda3f31bdde2ee39f7b4f693c751df4361628e38a81fb4237913e5d5"}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000780)={r4, 0x98, "182ad0a4f45dcb4066869117232ec11b0df462c113a3c5fe882fb2024f8382a996f9dd5ac2bef6482ddaa32ef045013d5238d4b7d520aaccdc40d36c432f56bb7023940e9f1e561dd9f8c3f2cb93f138a26aa078a3db927fb363c70963201692b300b5ab42b387791d671dfb8841f34567f6bf22baf5b541200fbb21989404fb4eca225a08930ba9e1d4666ddf4ea452184824218b7bb2e7"}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x3, 0x0, @dev, 0x7}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) delete_module(&(0x7f0000000400)='\x00', 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) sendto$inet(r3, &(0x7f0000000540)="37e76151d42908c487b8cf23a9cf419987c068070d425bf8333edf341def63b4b15ebca33e6716f58e660b02e2fc2033acf810f38e2adb70e2a1cf6da8b2ea19772a1c93eacfe98dc90b2c667ad009e6908e465061e7649d94829e8208ef482b6a39d0db26ff90e295341ccd22feac4d171dcf8e083e96c0", 0x78, 0x8000, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)=0x200) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0xffffffffffffffed, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) epoll_create1(0x0) 10:37:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = gettid() ioctl$TCSETS(r2, 0x5402, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000015) 10:37:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000480)=0x9) sendfile(r0, r1, &(0x7f0000000000), 0x10000) 10:37:22 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x20000000008947, &(0x7f0000000040)={'bond0\x00', @ifru_map={0x10000}}) 10:37:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000380)=0x801) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') ioctl$int_in(r0, 0x5452, &(0x7f0000000480)=0x9) sendfile(r0, r1, &(0x7f0000000000), 0x10000) 10:37:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = gettid() ioctl$TCSETS(r2, 0x5402, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000015) [ 2910.168513] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:37:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = gettid() ioctl$TCSETS(r2, 0x5402, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000015) [ 2910.299461] syz-executor0 invoked oom-killer: gfp_mask=0x6040d0(GFP_KERNEL|__GFP_COMP|__GFP_RECLAIMABLE), nodemask=(null), order=0, oom_score_adj=0 [ 2910.420448] syz-executor0 cpuset=syz0 mems_allowed=0 10:37:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000000)={0x80000f000000, 0x100000001, 0x0, [], &(0x7f0000000180)={0x98f909, 0xfffffffffffffffd, [], @p_u8=&(0x7f0000000080)}}) [ 2910.443252] CPU: 0 PID: 17160 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #371 [ 2910.450640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2910.460045] Call Trace: [ 2910.462661] dump_stack+0x244/0x39d [ 2910.466321] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2910.471551] dump_header+0x27b/0xf72 [ 2910.475305] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2910.480872] ? check_preemption_disabled+0x48/0x280 [ 2910.485922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2910.491492] ? pagefault_out_of_memory+0x197/0x197 [ 2910.496441] ? debug_smp_processor_id+0x1c/0x20 [ 2910.496460] ? perf_trace_lock+0x14d/0x7a0 [ 2910.496477] ? debug_smp_processor_id+0x1c/0x20 [ 2910.496498] ? perf_trace_lock_acquire+0x15b/0x800 [ 2910.515071] ? lock_is_held_type+0x210/0x210 [ 2910.519515] ? perf_trace_lock+0x7a0/0x7a0 [ 2910.523781] ? debug_smp_processor_id+0x1c/0x20 [ 2910.528475] ? perf_trace_lock+0x14d/0x7a0 [ 2910.532733] ? zap_class+0x640/0x640 [ 2910.536480] ? print_usage_bug+0xc0/0xc0 [ 2910.540564] ? lock_is_held_type+0x210/0x210 [ 2910.544997] ? perf_trace_lock+0x7a0/0x7a0 [ 2910.549290] ? find_held_lock+0x36/0x1c0 [ 2910.553390] ? mark_held_locks+0xc7/0x130 [ 2910.557568] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2910.562708] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2910.567853] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2910.572468] ? trace_hardirqs_on+0xbd/0x310 [ 2910.576810] ? kasan_check_read+0x11/0x20 [ 2910.580980] ? ___ratelimit+0x3b4/0x672 [ 2910.584974] ? trace_hardirqs_off_caller+0x310/0x310 [ 2910.584993] ? trace_hardirqs_on+0x310/0x310 [ 2910.585015] ? lock_downgrade+0x900/0x900 [ 2910.594538] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2910.594557] ? ___ratelimit+0x3b9/0x672 [ 2910.594577] ? idr_get_free+0xf70/0xf70 [ 2910.594591] ? _raw_spin_unlock_irq+0x27/0x80 [ 2910.594609] ? _raw_spin_unlock_irq+0x27/0x80 [ 2910.620826] oom_kill_process.cold.27+0x10/0x903 [ 2910.625612] ? _raw_spin_unlock_irq+0x27/0x80 [ 2910.630139] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2910.634756] ? oom_evaluate_task+0x540/0x540 [ 2910.639193] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2910.644811] ? cgroup_procs_next+0x70/0x70 [ 2910.649090] ? _raw_spin_unlock_irq+0x60/0x80 [ 2910.653609] ? oom_badness+0xaa0/0xaa0 [ 2910.657521] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2910.662309] ? mem_cgroup_iter_break+0x30/0x30 [ 2910.666933] ? mark_held_locks+0xc7/0x130 [ 2910.671108] out_of_memory+0xa84/0x1430 [ 2910.675101] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2910.679703] ? preempt_schedule+0x4d/0x60 [ 2910.683882] ? oom_killer_disable+0x3a0/0x3a0 [ 2910.688396] ? preempt_schedule+0x4d/0x60 [ 2910.692565] ? ___preempt_schedule+0x16/0x18 [ 2910.697019] mem_cgroup_out_of_memory+0x15e/0x210 [ 2910.701891] ? memory_oom_group_write+0x160/0x160 [ 2910.706754] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2910.711630] ? page_counter_try_charge+0x1c1/0x220 [ 2910.716585] try_charge+0xda9/0x1700 [ 2910.720344] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2910.725039] ? __lock_is_held+0xb5/0x140 [ 2910.729134] ? rcu_read_lock_sched_held+0x14f/0x180 [ 2910.734175] ? __alloc_pages_nodemask+0xb87/0xea0 [ 2910.739061] ? zap_class+0x640/0x640 [ 2910.742803] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 2910.747861] ? mark_held_locks+0xc7/0x130 [ 2910.752042] ? cache_grow_begin+0x65/0x8c0 [ 2910.756311] memcg_kmem_charge_memcg+0x7c/0x120 [ 2910.761004] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2910.765532] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2910.771098] cache_grow_begin+0x43f/0x8c0 [ 2910.775279] ? do_raw_spin_unlock+0xa7/0x330 [ 2910.779717] fallback_alloc+0x204/0x2e0 [ 2910.783723] ____cache_alloc_node+0x1c7/0x1e0 [ 2910.788276] kmem_cache_alloc+0x1f8/0x730 [ 2910.792463] alloc_inode+0xb2/0x190 [ 2910.796116] new_inode_pseudo+0x71/0x1a0 [ 2910.800199] ? prune_icache_sb+0x1c0/0x1c0 [ 2910.804485] ? down_read+0x120/0x120 [ 2910.808244] ? mntput+0x74/0xa0 [ 2910.811553] new_inode+0x1c/0x40 [ 2910.814945] debugfs_get_inode+0x19/0x120 [ 2910.819118] __debugfs_create_file+0xb5/0x400 [ 2910.823644] debugfs_create_file+0x57/0x70 [ 2910.827913] kvm_dev_ioctl+0xc0a/0x1ae0 [ 2910.831927] ? kvm_debugfs_release+0x90/0x90 [ 2910.836353] ? zap_class+0x640/0x640 [ 2910.840089] ? do_futex+0x249/0x26d0 [ 2910.843826] ? rcu_softirq_qs+0x20/0x20 [ 2910.847826] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2910.853391] ? check_preemption_disabled+0x48/0x280 [ 2910.858432] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2910.863998] ? find_held_lock+0x36/0x1c0 [ 2910.868093] ? __fget+0x4aa/0x740 [ 2910.871572] ? lock_downgrade+0x900/0x900 [ 2910.875742] ? check_preemption_disabled+0x48/0x280 [ 2910.880790] ? kasan_check_read+0x11/0x20 [ 2910.884957] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2910.890280] ? rcu_softirq_qs+0x20/0x20 [ 2910.894306] ? ksys_dup3+0x680/0x680 [ 2910.898048] ? __might_fault+0x12b/0x1e0 [ 2910.902136] ? lock_downgrade+0x900/0x900 [ 2910.906314] ? lock_release+0xa00/0xa00 [ 2910.910315] ? perf_trace_sched_process_exec+0x860/0x860 [ 2910.915792] ? kvm_debugfs_release+0x90/0x90 [ 2910.920247] do_vfs_ioctl+0x1de/0x1790 [ 2910.924170] ? ioctl_preallocate+0x300/0x300 [ 2910.928600] ? __fget_light+0x2e9/0x430 [ 2910.932597] ? fget_raw+0x20/0x20 [ 2910.936072] ? _copy_to_user+0xc8/0x110 [ 2910.940071] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2910.945630] ? put_timespec64+0x10f/0x1b0 [ 2910.949802] ? nsecs_to_jiffies+0x30/0x30 [ 2910.953978] ? do_syscall_64+0x9a/0x820 [ 2910.957974] ? do_syscall_64+0x9a/0x820 [ 2910.961972] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2910.966582] ? security_file_ioctl+0x94/0xc0 [ 2910.971016] ksys_ioctl+0xa9/0xd0 [ 2910.974500] __x64_sys_ioctl+0x73/0xb0 [ 2910.978417] do_syscall_64+0x1b9/0x820 [ 2910.982328] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2910.987715] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2910.992673] ? trace_hardirqs_on_caller+0x310/0x310 [ 2910.998271] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2911.003318] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 2911.010004] ? __switch_to_asm+0x40/0x70 [ 2911.014082] ? __switch_to_asm+0x34/0x70 [ 2911.018176] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2911.023074] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2911.028282] RIP: 0033:0x457679 [ 2911.031496] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2911.050414] RSP: 002b:00007f9b6903dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2911.058145] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457679 [ 2911.065518] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 2911.072803] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2911.080091] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9b6903e6d4 [ 2911.087555] R13: 00000000004c00fe R14: 00000000004d1138 R15: 00000000ffffffff 10:37:23 executing program 5: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000140)=0x4, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"00001c0000000000001c9e000200", 0x811}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000740)) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x19) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={r0, 0x0, 0x20}, 0xc) write$P9_RSETATTR(r4, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r0}, &(0x7f0000000380)=0x8) sendfile(r1, r4, &(0x7f0000d83ff8), 0x800000000024) ioctl$KDSETMODE(r4, 0x4b3a, 0x2) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000004c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 10:37:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000000)={0x80000f000000, 0x100000001, 0x0, [], &(0x7f0000000180)={0x98f909, 0xfffffffffffffffd, [], @p_u8=&(0x7f0000000080)}}) 10:37:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0xc09f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$cgroup_int(r2, &(0x7f0000000700)=0xc152, 0x12) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000900)={0x9, 0x0, 0x4, 0x0, 0x0}) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000740)=""/120) inotify_init1(0x800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x331) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:37:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = gettid() ioctl$TCSETS(r2, 0x5402, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000015) [ 2911.794193] kvm [17192]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000035 data 0x0 [ 2911.811293] kvm [17192]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000031 data 0x0 [ 2911.829472] picdev_read: 1209 callbacks suppressed [ 2911.829498] kvm: pic: non byte read [ 2911.855651] kvm: pic: non byte read [ 2911.862859] kvm: pic: non byte read [ 2911.869896] kvm: pic: non byte read [ 2911.877996] kvm: pic: non byte read [ 2911.885699] kvm: pic: non byte read [ 2911.894976] kvm: pic: non byte read [ 2911.903241] kvm: pic: non byte read [ 2911.910962] kvm: pic: non byte read [ 2911.923138] Task in /syz0 killed as a result of limit of /syz0 [ 2911.929588] memory: usage 307172kB, limit 307200kB, failcnt 1264 [ 2911.932967] kvm: pic: non byte read [ 2911.952638] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2911.970485] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2911.988052] Memory cgroup stats for /syz0: cache:4212KB rss:265840KB rss_huge:245760KB shmem:4124KB mapped_file:4092KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4124KB active_anon:265752KB inactive_file:4KB active_file:0KB unevictable:28KB [ 2912.014692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2912.021107] Memory cgroup out of memory: Kill process 9753 (syz-executor0) score 1099 or sacrifice child [ 2912.022302] kvm [17192]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000016 data 0x0 [ 2912.038585] Killed process 9753 (syz-executor0) total-vm:70472kB, anon-rss:160kB, file-rss:33548kB, shmem-rss:0kB [ 2912.136290] syz-executor0 invoked oom-killer: gfp_mask=0x6200c0(GFP_USER), nodemask=(null), order=0, oom_score_adj=0 [ 2912.202170] syz-executor0 cpuset=syz0 mems_allowed=0 [ 2912.215804] CPU: 1 PID: 17147 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #371 [ 2912.223194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2912.232583] Call Trace: [ 2912.235196] dump_stack+0x244/0x39d [ 2912.238873] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2912.244096] dump_header+0x27b/0xf72 [ 2912.247842] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2912.253406] ? check_preemption_disabled+0x48/0x280 [ 2912.258441] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2912.264004] ? pagefault_out_of_memory+0x197/0x197 [ 2912.268949] ? debug_smp_processor_id+0x1c/0x20 [ 2912.273640] ? perf_trace_lock+0x14d/0x7a0 [ 2912.277894] ? debug_smp_processor_id+0x1c/0x20 [ 2912.282580] ? perf_trace_lock_acquire+0x15b/0x800 [ 2912.287535] ? lock_is_held_type+0x210/0x210 [ 2912.291966] ? perf_trace_lock+0x7a0/0x7a0 [ 2912.296242] ? debug_smp_processor_id+0x1c/0x20 [ 2912.300932] ? perf_trace_lock+0x14d/0x7a0 [ 2912.305185] ? zap_class+0x640/0x640 [ 2912.308943] ? print_usage_bug+0xc0/0xc0 [ 2912.313030] ? lock_is_held_type+0x210/0x210 [ 2912.317457] ? perf_trace_lock+0x7a0/0x7a0 [ 2912.321731] ? find_held_lock+0x36/0x1c0 [ 2912.325834] ? mark_held_locks+0xc7/0x130 [ 2912.330001] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2912.335128] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2912.340272] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2912.344875] ? trace_hardirqs_on+0xbd/0x310 [ 2912.349231] ? kasan_check_read+0x11/0x20 [ 2912.353409] ? ___ratelimit+0x3b4/0x672 [ 2912.357402] ? trace_hardirqs_off_caller+0x310/0x310 [ 2912.362527] ? trace_hardirqs_on+0x310/0x310 [ 2912.366954] ? lock_downgrade+0x900/0x900 [ 2912.371127] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2912.376273] ? ___ratelimit+0x3b9/0x672 [ 2912.380289] ? idr_get_free+0xf70/0xf70 [ 2912.384283] ? _raw_spin_unlock_irq+0x27/0x80 [ 2912.388796] ? _raw_spin_unlock_irq+0x27/0x80 [ 2912.393326] oom_kill_process.cold.27+0x10/0x903 [ 2912.398098] ? _raw_spin_unlock_irq+0x27/0x80 [ 2912.402611] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2912.407244] ? oom_evaluate_task+0x540/0x540 [ 2912.411676] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2912.417260] ? cgroup_procs_next+0x70/0x70 [ 2912.421535] ? _raw_spin_unlock_irq+0x60/0x80 [ 2912.426055] ? oom_badness+0xaa0/0xaa0 [ 2912.429963] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2912.434749] ? mem_cgroup_iter_break+0x30/0x30 [ 2912.439368] ? mark_held_locks+0xc7/0x130 [ 2912.443545] out_of_memory+0xa84/0x1430 [ 2912.447538] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2912.452142] ? kasan_check_read+0x11/0x20 [ 2912.456314] ? oom_killer_disable+0x3a0/0x3a0 [ 2912.460852] mem_cgroup_out_of_memory+0x15e/0x210 [ 2912.465717] ? memory_oom_group_write+0x160/0x160 [ 2912.470582] ? mem_cgroup_try_charge+0x627/0xe20 [ 2912.475383] ? page_counter_try_charge+0x1c1/0x220 [ 2912.480335] try_charge+0xda9/0x1700 [ 2912.484072] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2912.489019] ? kasan_check_read+0x11/0x20 [ 2912.493201] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2912.497921] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2912.503478] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2912.509033] ? lock_page_memcg+0x350/0x350 [ 2912.513302] ? lock_acquire+0x1ed/0x520 [ 2912.517295] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2912.522677] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2912.528249] ? check_preemption_disabled+0x48/0x280 [ 2912.533297] ? kasan_check_read+0x11/0x20 [ 2912.537460] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2912.542762] ? rcu_softirq_qs+0x20/0x20 [ 2912.546756] ? zap_class+0x640/0x640 [ 2912.550489] ? check_preemption_disabled+0x48/0x280 [ 2912.555537] mem_cgroup_try_charge+0x627/0xe20 [ 2912.560140] ? print_usage_bug+0xc0/0xc0 [ 2912.564241] ? mem_cgroup_protected+0xa60/0xa60 [ 2912.568945] ? find_get_entry+0xa87/0x1120 [ 2912.573202] ? lock_downgrade+0x900/0x900 [ 2912.577390] ? check_preemption_disabled+0x48/0x280 [ 2912.582438] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2912.587995] ? PageHuge+0x183/0x2b0 [ 2912.591642] ? vma_kernel_pagesize+0xb0/0xb0 [ 2912.596087] ? mark_held_locks+0x130/0x130 [ 2912.600352] __add_to_page_cache_locked+0x793/0x1840 [ 2912.605472] ? print_usage_bug+0xc0/0xc0 [ 2912.609567] ? find_lock_entry+0x8e0/0x8e0 [ 2912.613823] ? debug_smp_processor_id+0x1c/0x20 [ 2912.618508] ? perf_trace_lock+0x14d/0x7a0 [ 2912.622762] ? debug_smp_processor_id+0x1c/0x20 [ 2912.627455] ? count_shadow_nodes+0x670/0x670 [ 2912.631975] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2912.637534] ? should_fail+0x22d/0xd01 [ 2912.641436] ? perf_trace_lock+0x7a0/0x7a0 [ 2912.645694] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 2912.650820] ? zap_class+0x640/0x640 [ 2912.654560] ? zap_class+0x640/0x640 [ 2912.658299] ? __lock_acquire+0x62f/0x4c20 [ 2912.662560] ? rcu_read_lock_sched_held+0x14f/0x180 [ 2912.667609] ? zap_class+0x640/0x640 [ 2912.671345] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2912.676899] ? check_preemption_disabled+0x48/0x280 [ 2912.681945] ? __lock_is_held+0xb5/0x140 [ 2912.686047] add_to_page_cache_lru+0x355/0xdb0 [ 2912.690654] ? add_to_page_cache_locked+0x40/0x40 [ 2912.695519] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 2912.700567] ? mark_held_locks+0xc7/0x130 [ 2912.704756] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2912.709364] ? trace_hardirqs_on+0xbd/0x310 [ 2912.713707] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2912.719268] ? find_first_bit+0xbe/0x100 [ 2912.723352] ? __next_node_in+0x75/0x80 [ 2912.727352] ? __page_cache_alloc+0x191/0x5c0 [ 2912.731866] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2912.736827] ? generic_perform_write+0x6a0/0x6a0 [ 2912.741602] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2912.747158] ? check_preemption_disabled+0x48/0x280 [ 2912.752202] filemap_fault+0x15c5/0x25f0 [ 2912.756319] ? __lock_page_or_retry+0xa00/0xa00 [ 2912.761001] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2912.766122] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2912.771262] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2912.775864] ? trace_hardirqs_on+0xbd/0x310 [ 2912.780202] ? kasan_check_read+0x11/0x20 [ 2912.784389] ? __free_object+0x173/0x340 [ 2912.788469] ? trace_hardirqs_off_caller+0x310/0x310 [ 2912.793605] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2912.798734] ? __free_object+0x173/0x340 [ 2912.802818] ? __list_add_valid.cold.2+0x2a/0x2a [ 2912.807589] ? debug_object_free+0x325/0x690 [ 2912.812014] ? trace_hardirqs_off_caller+0x310/0x310 [ 2912.817138] ? hrtimer_try_to_cancel+0xb8/0x6f0 [ 2912.821844] ? kasan_check_read+0x11/0x20 [ 2912.826016] ? debug_object_destroy+0x2b0/0x2b0 [ 2912.830706] ? lock_pi_update_atomic+0x150/0x150 [ 2912.835489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2912.841045] ? __hrtimer_init+0xdb/0x240 [ 2912.845139] ? destroy_hrtimer_on_stack+0x1c/0x20 [ 2912.849999] ? futex_wait+0x5ec/0xa50 [ 2912.853826] ? print_usage_bug+0xc0/0xc0 [ 2912.857905] ? print_usage_bug+0xc0/0xc0 [ 2912.861999] ? futex_wait_setup+0x3e0/0x3e0 [ 2912.866342] ? print_usage_bug+0xc0/0xc0 [ 2912.870424] ? print_usage_bug+0xc0/0xc0 [ 2912.874501] ? clock_was_set_work+0x30/0x30 [ 2912.878856] ? __lock_acquire+0x62f/0x4c20 [ 2912.883113] __do_fault+0x100/0x6b0 [ 2912.886761] ? pmd_devmap_trans_unstable+0x220/0x220 [ 2912.891882] ? mark_held_locks+0x130/0x130 [ 2912.896151] ? mark_held_locks+0x130/0x130 [ 2912.900402] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2912.905951] ? check_preemption_disabled+0x48/0x280 [ 2912.910976] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2912.916562] ? check_preemption_disabled+0x48/0x280 [ 2912.921603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2912.927172] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2912.932729] __handle_mm_fault+0x3cac/0x5be0 [ 2912.937157] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2912.942029] ? lock_is_held_type+0x210/0x210 [ 2912.946464] ? perf_trace_lock+0x7a0/0x7a0 [ 2912.950732] ? perf_trace_lock+0x7a0/0x7a0 [ 2912.954996] ? zap_class+0x640/0x640 [ 2912.958721] ? zap_class+0x640/0x640 [ 2912.962463] ? find_held_lock+0x36/0x1c0 [ 2912.966577] ? handle_mm_fault+0x42a/0xc70 [ 2912.970838] ? lock_downgrade+0x900/0x900 [ 2912.974995] ? check_preemption_disabled+0x48/0x280 [ 2912.980026] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2912.984963] ? kasan_check_read+0x11/0x20 [ 2912.989118] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2912.994408] ? rcu_softirq_qs+0x20/0x20 [ 2912.998626] ? trace_hardirqs_off_caller+0x310/0x310 [ 2913.003747] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2913.009294] ? check_preemption_disabled+0x48/0x280 [ 2913.014333] handle_mm_fault+0x54f/0xc70 [ 2913.018407] ? __handle_mm_fault+0x5be0/0x5be0 [ 2913.023005] ? find_vma+0x34/0x190 [ 2913.026564] __do_page_fault+0x5e8/0xe60 [ 2913.030633] ? trace_hardirqs_off+0xb8/0x310 [ 2913.035068] do_page_fault+0xf2/0x7e0 [ 2913.038878] ? vmalloc_sync_all+0x30/0x30 [ 2913.043034] ? error_entry+0x70/0xd0 [ 2913.046764] ? trace_hardirqs_off_caller+0xbb/0x310 [ 2913.051789] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2913.056742] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2913.061683] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2913.066542] ? trace_hardirqs_on_caller+0x310/0x310 [ 2913.071582] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2913.077065] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2913.082105] ? page_fault+0x8/0x30 [ 2913.085689] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2913.090565] ? page_fault+0x8/0x30 [ 2913.094114] page_fault+0x1e/0x30 [ 2913.097574] RIP: 0033:0x400610 [ 2913.100790] Code: 01 e9 c9 00 00 00 48 8b 44 24 10 48 0b 44 24 28 be 08 00 00 00 48 8b 14 24 75 17 48 8b 7c 24 20 e8 c5 46 00 00 48 8b 4c 24 08 <48> 89 01 e9 9d 00 00 00 48 8b 44 24 08 48 8b 38 e8 ab 46 00 00 8a [ 2913.119709] RSP: 002b:0000000000a3fbc0 EFLAGS: 00010206 [ 2913.125087] RAX: 0000000000000008 RBX: 000000000072c900 RCX: 00000000200000c0 [ 2913.132813] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 2913.140080] RBP: 000000000072c900 R08: 0000000000000000 R09: 0000000000000000 [ 2913.147348] R10: 0000000000a3fcc0 R11: 0000000000000246 R12: 00000000000003e8 [ 2913.154631] R13: fffffffffffffffe R14: 00000000002c6816 R15: 000000000072bfac [ 2913.164503] Task in /syz0 killed as a result of limit of /syz0 [ 2913.166431] syz-executor0 (17148) used greatest stack depth: 104 bytes left [ 2913.170911] memory: usage 306972kB, limit 307200kB, failcnt 1264 [ 2913.184036] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2913.190796] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2913.197033] Memory cgroup stats for /syz0: cache:4212KB rss:265704KB rss_huge:245760KB shmem:4124KB mapped_file:4092KB dirty:0KB writeback:0KB swap:0KB inactive_anon:4124KB active_anon:265612KB inactive_file:0KB active_file:4KB unevictable:28KB [ 2913.220197] Memory cgroup out of memory: Kill process 1106 (syz-executor0) score 130 or sacrifice child [ 2913.230005] Killed process 1106 (syz-executor0) total-vm:70604kB, anon-rss:2212kB, file-rss:33584kB, shmem-rss:4096kB [ 2913.243925] oom_reaper: reaped process 1106 (syz-executor0), now anon-rss:0kB, file-rss:32816kB, shmem-rss:4096kB 10:37:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000000)={0x80000f000000, 0x100000001, 0x0, [], &(0x7f0000000180)={0x98f909, 0xfffffffffffffffd, [], @p_u8=&(0x7f0000000080)}}) 10:37:25 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = gettid() ioctl$TCSETS(r2, 0x5402, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000015) 10:37:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = gettid() ioctl$TCSETS(r2, 0x5402, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000015) 10:37:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0xc09f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$cgroup_int(r2, &(0x7f0000000700)=0xc152, 0x12) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000900)={0x9, 0x0, 0x4, 0x0, 0x0}) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000740)=""/120) inotify_init1(0x800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x331) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:37:25 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000006c0)={0x0, 0x99, "2c160a1a47fd1ac119371a2fdcc26db3773ce5a90e88e059bbbf448b1519d1139cb2df1fe602864cd763b26eae4a1ee255ede14b0c9b10668c8c500d830bf1cccdf54320d623bc4af38022b74310dca0c9b3f2634a381a124befb399051f128efdcee63952b9e95000fa3c14d55e332b11b3e4c18f7dbf42ff396937a1eda3f31bdde2ee39f7b4f693c751df4361628e38a81fb4237913e5d5"}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000780)={r4, 0x98, "182ad0a4f45dcb4066869117232ec11b0df462c113a3c5fe882fb2024f8382a996f9dd5ac2bef6482ddaa32ef045013d5238d4b7d520aaccdc40d36c432f56bb7023940e9f1e561dd9f8c3f2cb93f138a26aa078a3db927fb363c70963201692b300b5ab42b387791d671dfb8841f34567f6bf22baf5b541200fbb21989404fb4eca225a08930ba9e1d4666ddf4ea452184824218b7bb2e7"}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x3, 0x0, @dev, 0x7}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) delete_module(&(0x7f0000000400)='\x00', 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) sendto$inet(r3, &(0x7f0000000540)="37e76151d42908c487b8cf23a9cf419987c068070d425bf8333edf341def63b4b15ebca33e6716f58e660b02e2fc2033acf810f38e2adb70e2a1cf6da8b2ea19772a1c93eacfe98dc90b2c667ad009e6908e465061e7649d94829e8208ef482b6a39d0db26ff90e295341ccd22feac4d171dcf8e083e96c0", 0x78, 0x8000, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)=0x200) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0xffffffffffffffed, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) epoll_create1(0x0) 10:37:25 executing program 5: ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0x78f3}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000140)=0x4, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"00001c0000000000001c9e000200", 0x811}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000740)) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x2007fff) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x19) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={r0, 0x0, 0x20}, 0xc) write$P9_RSETATTR(r4, &(0x7f0000000040)={0x7}, 0x7) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000340)={r0}, &(0x7f0000000380)=0x8) sendfile(r1, r4, &(0x7f0000d83ff8), 0x800000000024) ioctl$KDSETMODE(r4, 0x4b3a, 0x2) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000004c0), 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) 10:37:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000000)={0x80000f000000, 0x100000001, 0x0, [], &(0x7f0000000180)={0x98f909, 0xfffffffffffffffd, [], @p_u8=&(0x7f0000000080)}}) 10:37:25 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x5) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x72, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r1, &(0x7f00000014c0)=""/91, 0x5b) [ 2913.630175] kvm [17215]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000035 data 0x0 10:37:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r2, r1, 0x0) [ 2913.692984] kvm [17215]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000031 data 0x0 [ 2913.766031] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:37:26 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000006c0)={0x0, 0x99, "2c160a1a47fd1ac119371a2fdcc26db3773ce5a90e88e059bbbf448b1519d1139cb2df1fe602864cd763b26eae4a1ee255ede14b0c9b10668c8c500d830bf1cccdf54320d623bc4af38022b74310dca0c9b3f2634a381a124befb399051f128efdcee63952b9e95000fa3c14d55e332b11b3e4c18f7dbf42ff396937a1eda3f31bdde2ee39f7b4f693c751df4361628e38a81fb4237913e5d5"}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000780)={r4, 0x98, "182ad0a4f45dcb4066869117232ec11b0df462c113a3c5fe882fb2024f8382a996f9dd5ac2bef6482ddaa32ef045013d5238d4b7d520aaccdc40d36c432f56bb7023940e9f1e561dd9f8c3f2cb93f138a26aa078a3db927fb363c70963201692b300b5ab42b387791d671dfb8841f34567f6bf22baf5b541200fbb21989404fb4eca225a08930ba9e1d4666ddf4ea452184824218b7bb2e7"}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x3, 0x0, @dev, 0x7}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) delete_module(&(0x7f0000000400)='\x00', 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) sendto$inet(r3, &(0x7f0000000540)="37e76151d42908c487b8cf23a9cf419987c068070d425bf8333edf341def63b4b15ebca33e6716f58e660b02e2fc2033acf810f38e2adb70e2a1cf6da8b2ea19772a1c93eacfe98dc90b2c667ad009e6908e465061e7649d94829e8208ef482b6a39d0db26ff90e295341ccd22feac4d171dcf8e083e96c0", 0x78, 0x8000, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)=0x200) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0xffffffffffffffed, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) epoll_create1(0x0) 10:37:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000006c0)={0x4000000, 0x0, 0x1a}) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000280), 0x108) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000540)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='statm\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000080), 0x1) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x0, 0x110000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="0f18e60f01b808002e0f01cf0f239f66b9800000c00f326635008000000f30baa000edba2100ec66b9020a000066b87a8b000066ba000000000f30f30f092e0fc7a90000", 0x44}], 0x1, 0x4e, &(0x7f0000000680)=[@flags={0x3, 0x4}, @efer={0x2, 0x800}], 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x400200, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000480)=""/141) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000740)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x7}) write(0xffffffffffffffff, &(0x7f0000fa8000), 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000700)=0x80000001, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) 10:37:26 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000), 0x4) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000380)) bind(r0, &(0x7f0000000080)=@in, 0x80) 10:37:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0xc09f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$cgroup_int(r2, &(0x7f0000000700)=0xc152, 0x12) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000900)={0x9, 0x0, 0x4, 0x0, 0x0}) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000740)=""/120) inotify_init1(0x800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x331) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:37:26 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) readv(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1) r3 = gettid() ioctl$TCSETS(r2, 0x5402, &(0x7f0000000300)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000015) 10:37:26 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendto(r1, &(0x7f0000000200)="7495a238b932a0d21b33624a18c726fc", 0x10, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0xa5}], 0x1}}], 0x1, 0x0, 0x0) 10:37:26 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.max.depth\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x2009) [ 2914.350965] kvm [17255]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000035 data 0x0 [ 2914.392667] kvm [17255]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000031 data 0x0 10:37:26 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, 0x0, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f00000006c0)={0x0, 0x99, "2c160a1a47fd1ac119371a2fdcc26db3773ce5a90e88e059bbbf448b1519d1139cb2df1fe602864cd763b26eae4a1ee255ede14b0c9b10668c8c500d830bf1cccdf54320d623bc4af38022b74310dca0c9b3f2634a381a124befb399051f128efdcee63952b9e95000fa3c14d55e332b11b3e4c18f7dbf42ff396937a1eda3f31bdde2ee39f7b4f693c751df4361628e38a81fb4237913e5d5"}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000780)={r4, 0x98, "182ad0a4f45dcb4066869117232ec11b0df462c113a3c5fe882fb2024f8382a996f9dd5ac2bef6482ddaa32ef045013d5238d4b7d520aaccdc40d36c432f56bb7023940e9f1e561dd9f8c3f2cb93f138a26aa078a3db927fb363c70963201692b300b5ab42b387791d671dfb8841f34567f6bf22baf5b541200fbb21989404fb4eca225a08930ba9e1d4666ddf4ea452184824218b7bb2e7"}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, 0xfffffffffffffffe) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x3, 0x0, @dev, 0x7}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) delete_module(&(0x7f0000000400)='\x00', 0x800) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) sendto$inet(r3, &(0x7f0000000540)="37e76151d42908c487b8cf23a9cf419987c068070d425bf8333edf341def63b4b15ebca33e6716f58e660b02e2fc2033acf810f38e2adb70e2a1cf6da8b2ea19772a1c93eacfe98dc90b2c667ad009e6908e465061e7649d94829e8208ef482b6a39d0db26ff90e295341ccd22feac4d171dcf8e083e96c0", 0x78, 0x8000, 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000000)=0x200) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0xffffffffffffffed, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) epoll_create1(0x0) 10:37:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000006c0)={0x4000000, 0x0, 0x1a}) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000280), 0x108) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000540)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='statm\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000080), 0x1) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x0, 0x110000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="0f18e60f01b808002e0f01cf0f239f66b9800000c00f326635008000000f30baa000edba2100ec66b9020a000066b87a8b000066ba000000000f30f30f092e0fc7a90000", 0x44}], 0x1, 0x4e, &(0x7f0000000680)=[@flags={0x3, 0x4}, @efer={0x2, 0x800}], 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x400200, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000480)=""/141) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000740)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x7}) write(0xffffffffffffffff, &(0x7f0000fa8000), 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000700)=0x80000001, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) 10:37:27 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x8, {0x2, 0x4e24, @broadcast}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0xfd00, 0x101, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}) seccomp(0x1, 0x1, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{}, {0x2, 0x4, 0x1, 0x8}, {0x9, 0x1ff, 0x80000000}, {0x0, 0x8, 0xd74}]}) membarrier(0x10, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, 0xb) recvmmsg(r3, &(0x7f0000001a40)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001980)=""/185, 0xb9}}], 0x1, 0x0, &(0x7f0000001ac0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r3) r5 = accept4(r2, 0x0, &(0x7f0000000340)=0xff92, 0x0) write$binfmt_misc(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x19f) r6 = open(&(0x7f0000000000)='./file0\x00', 0x7e, 0xa1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in6}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xcc870acb) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000100)=0x6) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000580)=0x100, 0x4) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @dev={[], 0xd}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000800)=ANY=[]) setsockopt$inet_buf(r6, 0x0, 0x2e, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffff9c, 0xc08c5332, &(0x7f0000000000)={0x0, 0x1, 0x1f, 'queue0\x00'}) 10:37:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) unshare(0x8020000) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)) 10:37:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0xc09f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$cgroup_int(r2, &(0x7f0000000700)=0xc152, 0x12) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000900)={0x9, 0x0, 0x4, 0x0, 0x0}) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000740)=""/120) inotify_init1(0x800) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000ac0)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="66b91000004066b80000000066ba000000000f30baa000eddb8f05000f89ae6a660f3a22efa80f09f00fc709f20f1ab60d0066b93608000066b80000000066ba008000000f3066b9800000c00f326635000800000f30", 0x56}], 0x1, 0x0, 0x0, 0x331) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10:37:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={"626f6e643000000054000000000100", @ifru_names='bond_slave_1\x00'}) [ 2915.247443] bond0: Releasing backup interface bond_slave_1 10:37:27 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000d11000), &(0x7f0000000000)=0x4) [ 2915.368398] kvm [17279]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000035 data 0x0 [ 2915.393108] kvm [17279]: vcpu0, guest rIP: 0x9112 Hyper-V uhandled wrmsr: 0x40000031 data 0x0 10:37:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x2c, 0x0, &(0x7f0000000080)) 10:37:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf21, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x4}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x38}}, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 10:37:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000006c0)={0x4000000, 0x0, 0x1a}) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000280), 0x108) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000540)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='statm\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000080), 0x1) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x0, 0x110000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="0f18e60f01b808002e0f01cf0f239f66b9800000c00f326635008000000f30baa000edba2100ec66b9020a000066b87a8b000066ba000000000f30f30f092e0fc7a90000", 0x44}], 0x1, 0x4e, &(0x7f0000000680)=[@flags={0x3, 0x4}, @efer={0x2, 0x800}], 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x400200, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000480)=""/141) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000740)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x7}) write(0xffffffffffffffff, &(0x7f0000fa8000), 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000700)=0x80000001, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) 10:37:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002240)={0x14, r1, 0xb21, 0x0, 0x0, {0x3, 0x0, 0xfffffffffffff000}}, 0x14}}, 0x0) 10:37:28 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x8, {0x2, 0x4e24, @broadcast}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0xfd00, 0x101, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}) seccomp(0x1, 0x1, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{}, {0x2, 0x4, 0x1, 0x8}, {0x9, 0x1ff, 0x80000000}, {0x0, 0x8, 0xd74}]}) membarrier(0x10, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, 0xb) recvmmsg(r3, &(0x7f0000001a40)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001980)=""/185, 0xb9}}], 0x1, 0x0, &(0x7f0000001ac0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r3) r5 = accept4(r2, 0x0, &(0x7f0000000340)=0xff92, 0x0) write$binfmt_misc(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="8de63bb75df0db2e5adf12aff77eb28c091a8169ad228b5e4d8aafc492b8b385993e0af7ead4785ddffb4506dfd3353e595796cb0dc142ef6cc2181dd45fd73317a9cc66eb984bc875bf4700cfb88b0000000000000027585c766d3dd65eaa42b5f41a06b96ed77a5ca3a4f3cd6a2d335c23e35dad518ec9cd8283bb16ec9e965aa645b0dc79b88b68898bf6601e186e96cb98e19823485786fc94d2c61b5b152a6833baf15fb241c7c08a8880cc783734ca45ac6f191a144f647add707b46149c6ead830182b90d0fe856df3207492a741117faad1b4b8c16f21c1c807a9deeaafce9a4b4c1b08b14d44bb6f515590e77b46d820a6b0dfedc63dad739bd16dcb8d3fb38d3d7a67975f9fe8a5c3b590aad2fe00f28461ebf5238ef525bd91543e61922fb0afef32208df1067cc533dce4d4300645a8209d7ce12ab86430c9b5ba2a05b1a3ca535f5ffbf5493e699e00b8df957fb067ad3871a0ae8a04c5120e03b977447dcc58c7d4ceb0fb94f26426e25b64b9e6cc436930782f6f7d80ee8253ea5f4a7215b86a44f462e88e8c330f04ed9c3d56c58703cfb6bcb497aa035"], 0x19f) r6 = open(&(0x7f0000000000)='./file0\x00', 0x7e, 0xa1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in6}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xcc870acb) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000100)=0x6) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000580)=0x100, 0x4) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @dev={[], 0xd}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000800)=ANY=[]) setsockopt$inet_buf(r6, 0x0, 0x2e, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffff9c, 0xc08c5332, &(0x7f0000000000)={0x0, 0x1, 0x1f, 'queue0\x00'}) [ 2916.140531] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 2916.160521] bond0: Releasing backup interface bond_slave_1 10:37:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000006c0)={0x4000000, 0x0, 0x1a}) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000280), 0x108) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000540)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='statm\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f0000000080), 0x1) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f000040e000/0x1000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x0, 0x110000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="0f18e60f01b808002e0f01cf0f239f66b9800000c00f326635008000000f30baa000edba2100ec66b9020a000066b87a8b000066ba000000000f30f30f092e0fc7a90000", 0x44}], 0x1, 0x4e, &(0x7f0000000680)=[@flags={0x3, 0x4}, @efer={0x2, 0x800}], 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x400200, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000480)=""/141) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000740)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x7}) write(0xffffffffffffffff, &(0x7f0000fa8000), 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000700)=0x80000001, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="360f303e0f01df6766c7442400090000006766c7442402020000006766c744240600000000670f011c240f20c06635200000000f22c0263356470f0764f30f2a342e260f0f970a008e0f08660f5808", 0x4f}], 0x1, 0x0, &(0x7f0000000200), 0x0) 10:37:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002240)={0x14, r1, 0xb21, 0x0, 0x0, {0x3, 0x0, 0xfffffffffffff000}}, 0x14}}, 0x0) 10:37:28 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x8, {0x2, 0x4e24, @broadcast}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0xfd00, 0x101, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}) seccomp(0x1, 0x1, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{}, {0x2, 0x4, 0x1, 0x8}, {0x9, 0x1ff, 0x80000000}, {0x0, 0x8, 0xd74}]}) membarrier(0x10, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, 0xb) recvmmsg(r3, &(0x7f0000001a40)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001980)=""/185, 0xb9}}], 0x1, 0x0, &(0x7f0000001ac0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r3) r5 = accept4(r2, 0x0, &(0x7f0000000340)=0xff92, 0x0) write$binfmt_misc(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="8de63bb75df0db2e5adf12aff77eb28c091a8169ad228b5e4d8aafc492b8b385993e0af7ead4785ddffb4506dfd3353e595796cb0dc142ef6cc2181dd45fd73317a9cc66eb984bc875bf4700cfb88b0000000000000027585c766d3dd65eaa42b5f41a06b96ed77a5ca3a4f3cd6a2d335c23e35dad518ec9cd8283bb16ec9e965aa645b0dc79b88b68898bf6601e186e96cb98e19823485786fc94d2c61b5b152a6833baf15fb241c7c08a8880cc783734ca45ac6f191a144f647add707b46149c6ead830182b90d0fe856df3207492a741117faad1b4b8c16f21c1c807a9deeaafce9a4b4c1b08b14d44bb6f515590e77b46d820a6b0dfedc63dad739bd16dcb8d3fb38d3d7a67975f9fe8a5c3b590aad2fe00f28461ebf5238ef525bd91543e61922fb0afef32208df1067cc533dce4d4300645a8209d7ce12ab86430c9b5ba2a05b1a3ca535f5ffbf5493e699e00b8df957fb067ad3871a0ae8a04c5120e03b977447dcc58c7d4ceb0fb94f26426e25b64b9e6cc436930782f6f7d80ee8253ea5f4a7215b86a44f462e88e8c330f04ed9c3d56c58703cfb6bcb497aa035"], 0x19f) r6 = open(&(0x7f0000000000)='./file0\x00', 0x7e, 0xa1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in6}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xcc870acb) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000100)=0x6) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000580)=0x100, 0x4) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @dev={[], 0xd}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000800)=ANY=[]) setsockopt$inet_buf(r6, 0x0, 0x2e, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffff9c, 0xc08c5332, &(0x7f0000000000)={0x0, 0x1, 0x1f, 'queue0\x00'}) 10:37:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002240)={0x14, r1, 0xb21, 0x0, 0x0, {0x3, 0x0, 0xfffffffffffff000}}, 0x14}}, 0x0) [ 2916.760419] bond0: Enslaving bond_slave_1 as an active interface with an up link 10:37:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf21, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x4}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x38}}, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 10:37:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x8, {0x2, 0x4e24, @broadcast}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0xfd00, 0x101, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}) seccomp(0x1, 0x1, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{}, {0x2, 0x4, 0x1, 0x8}, {0x9, 0x1ff, 0x80000000}, {0x0, 0x8, 0xd74}]}) membarrier(0x10, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, 0xb) recvmmsg(r3, &(0x7f0000001a40)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001980)=""/185, 0xb9}}], 0x1, 0x0, &(0x7f0000001ac0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r3) r5 = accept4(r2, 0x0, &(0x7f0000000340)=0xff92, 0x0) write$binfmt_misc(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x19f) r6 = open(&(0x7f0000000000)='./file0\x00', 0x7e, 0xa1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in6}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xcc870acb) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000100)=0x6) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000580)=0x100, 0x4) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @dev={[], 0xd}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000800)=ANY=[]) setsockopt$inet_buf(r6, 0x0, 0x2e, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffff9c, 0xc08c5332, &(0x7f0000000000)={0x0, 0x1, 0x1f, 'queue0\x00'}) 10:37:29 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x71000}], 0x200000000000000f, 0x0) 10:37:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf21, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x4}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x38}}, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 10:37:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002240)={0x14, r1, 0xb21, 0x0, 0x0, {0x3, 0x0, 0xfffffffffffff000}}, 0x14}}, 0x0) 10:37:29 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x8, {0x2, 0x4e24, @broadcast}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0xfd00, 0x101, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}) seccomp(0x1, 0x1, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{}, {0x2, 0x4, 0x1, 0x8}, {0x9, 0x1ff, 0x80000000}, {0x0, 0x8, 0xd74}]}) membarrier(0x10, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, 0xb) recvmmsg(r3, &(0x7f0000001a40)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001980)=""/185, 0xb9}}], 0x1, 0x0, &(0x7f0000001ac0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r3) r5 = accept4(r2, 0x0, &(0x7f0000000340)=0xff92, 0x0) write$binfmt_misc(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x19f) r6 = open(&(0x7f0000000000)='./file0\x00', 0x7e, 0xa1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in6}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xcc870acb) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000100)=0x6) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000580)=0x100, 0x4) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @dev={[], 0xd}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000800)=ANY=[]) setsockopt$inet_buf(r6, 0x0, 0x2e, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffff9c, 0xc08c5332, &(0x7f0000000000)={0x0, 0x1, 0x1f, 'queue0\x00'}) 10:37:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf21, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0x4}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x38}}, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 10:37:29 executing program 3: socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x1c) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@rc, 0x2c3, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/98, 0x62}, 0x0) [ 2917.339756] sock: sock_set_timeout: `syz-executor3' (pid 17362) tries to set negative timeout [ 2917.354958] sock: sock_set_timeout: `syz-executor3' (pid 17362) tries to set negative timeout 10:37:29 executing program 4: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x200000000008) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000340)={"6272696467653000000100"}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000500)={&(0x7f00000006c0), 0xc, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="100025bd7000fedbdf250d000000f5cd0100087e04004e20000014003258e04c7dd81c91"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000b40), 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) execve(&(0x7f0000000600)='./file0\x00', &(0x7f0000000740), &(0x7f0000000800)=[&(0x7f0000000780)='/dev/ptmx\x00']) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x1, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, [], [0x80000001, 0x0, 0x0, 0x401]}) pipe2(&(0x7f0000000900), 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x7) openat$ashmem(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ashmem\x00', 0x490000, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000009c0)={@loopback, 0x0, 0x0, 0xff, 0x0, 0x734a1d93}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x165, 0x0, 0x7, 0x9}, &(0x7f0000000300)=0x10) 10:37:29 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4000000000c) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="1f0000000203193b000007000000068100023b0509000200c0cd6d948d3aee", 0x1f}], 0x1) 10:37:29 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x8, {0x2, 0x4e24, @broadcast}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0xfd00, 0x101, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}) seccomp(0x1, 0x1, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{}, {0x2, 0x4, 0x1, 0x8}, {0x9, 0x1ff, 0x80000000}, {0x0, 0x8, 0xd74}]}) membarrier(0x10, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, 0xb) recvmmsg(r3, &(0x7f0000001a40)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001980)=""/185, 0xb9}}], 0x1, 0x0, &(0x7f0000001ac0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r3) r5 = accept4(r2, 0x0, &(0x7f0000000340)=0xff92, 0x0) write$binfmt_misc(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="8de63bb75df0db2e5adf12aff77eb28c091a8169ad228b5e4d8aafc492b8b385993e0af7ead4785ddffb4506dfd3353e595796cb0dc142ef6cc2181dd45fd73317a9cc66eb984bc875bf4700cfb88b0000000000000027585c766d3dd65eaa42b5f41a06b96ed77a5ca3a4f3cd6a2d335c23e35dad518ec9cd8283bb16ec9e965aa645b0dc79b88b68898bf6601e186e96cb98e19823485786fc94d2c61b5b152a6833baf15fb241c7c08a8880cc783734ca45ac6f191a144f647add707b46149c6ead830182b90d0fe856df3207492a741117faad1b4b8c16f21c1c807a9deeaafce9a4b4c1b08b14d44bb6f515590e77b46d820a6b0dfedc63dad739bd16dcb8d3fb38d3d7a67975f9fe8a5c3b590aad2fe00f28461ebf5238ef525bd91543e61922fb0afef32208df1067cc533dce4d4300645a8209d7ce12ab86430c9b5ba2a05b1a3ca535f5ffbf5493e699e00b8df957fb067ad3871a0ae8a04c5120e03b977447dcc58c7d4ceb0fb94f26426e25b64b9e6cc436930782f6f7d80ee8253ea5f4a7215b86a44f462e88e8c330f04ed9c3d56c58703cfb6bcb497aa035"], 0x19f) r6 = open(&(0x7f0000000000)='./file0\x00', 0x7e, 0xa1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in6}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xcc870acb) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000100)=0x6) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000580)=0x100, 0x4) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @dev={[], 0xd}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000800)=ANY=[]) setsockopt$inet_buf(r6, 0x0, 0x2e, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffff9c, 0xc08c5332, &(0x7f0000000000)={0x0, 0x1, 0x1f, 'queue0\x00'}) 10:37:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, 0x0) 10:37:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x8, {0x2, 0x4e24, @broadcast}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0xfd00, 0x101, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}) seccomp(0x1, 0x1, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{}, {0x2, 0x4, 0x1, 0x8}, {0x9, 0x1ff, 0x80000000}, {0x0, 0x8, 0xd74}]}) membarrier(0x10, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, 0xb) recvmmsg(r3, &(0x7f0000001a40)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001980)=""/185, 0xb9}}], 0x1, 0x0, &(0x7f0000001ac0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r3) r5 = accept4(r2, 0x0, &(0x7f0000000340)=0xff92, 0x0) write$binfmt_misc(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x19f) r6 = open(&(0x7f0000000000)='./file0\x00', 0x7e, 0xa1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in6}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xcc870acb) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000100)=0x6) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000580)=0x100, 0x4) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @dev={[], 0xd}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000800)=ANY=[]) setsockopt$inet_buf(r6, 0x0, 0x2e, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffff9c, 0xc08c5332, &(0x7f0000000000)={0x0, 0x1, 0x1f, 'queue0\x00'}) 10:37:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, 0x0) 10:37:30 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x8, {0x2, 0x4e24, @broadcast}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0xfd00, 0x101, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}) seccomp(0x1, 0x1, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{}, {0x2, 0x4, 0x1, 0x8}, {0x9, 0x1ff, 0x80000000}, {0x0, 0x8, 0xd74}]}) membarrier(0x10, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, 0xb) recvmmsg(r3, &(0x7f0000001a40)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001980)=""/185, 0xb9}}], 0x1, 0x0, &(0x7f0000001ac0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r3) r5 = accept4(r2, 0x0, &(0x7f0000000340)=0xff92, 0x0) write$binfmt_misc(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="8de63bb75df0db2e5adf12aff77eb28c091a8169ad228b5e4d8aafc492b8b385993e0af7ead4785ddffb4506dfd3353e595796cb0dc142ef6cc2181dd45fd73317a9cc66eb984bc875bf4700cfb88b0000000000000027585c766d3dd65eaa42b5f41a06b96ed77a5ca3a4f3cd6a2d335c23e35dad518ec9cd8283bb16ec9e965aa645b0dc79b88b68898bf6601e186e96cb98e19823485786fc94d2c61b5b152a6833baf15fb241c7c08a8880cc783734ca45ac6f191a144f647add707b46149c6ead830182b90d0fe856df3207492a741117faad1b4b8c16f21c1c807a9deeaafce9a4b4c1b08b14d44bb6f515590e77b46d820a6b0dfedc63dad739bd16dcb8d3fb38d3d7a67975f9fe8a5c3b590aad2fe00f28461ebf5238ef525bd91543e61922fb0afef32208df1067cc533dce4d4300645a8209d7ce12ab86430c9b5ba2a05b1a3ca535f5ffbf5493e699e00b8df957fb067ad3871a0ae8a04c5120e03b977447dcc58c7d4ceb0fb94f26426e25b64b9e6cc436930782f6f7d80ee8253ea5f4a7215b86a44f462e88e8c330f04ed9c3d56c58703cfb6bcb497aa035"], 0x19f) r6 = open(&(0x7f0000000000)='./file0\x00', 0x7e, 0xa1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in6}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xcc870acb) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000100)=0x6) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000580)=0x100, 0x4) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @dev={[], 0xd}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000800)=ANY=[]) setsockopt$inet_buf(r6, 0x0, 0x2e, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffff9c, 0xc08c5332, &(0x7f0000000000)={0x0, 0x1, 0x1f, 'queue0\x00'}) 10:37:30 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x71000}], 0x200000000000000f, 0x0) 10:37:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, 0x0) 10:37:30 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_adj\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000100)="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") r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r1, r1, 0x0, 0x1) sendfile(r1, r0, 0x0, 0x6) 10:37:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x9208, 0x0) 10:37:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x8, {0x2, 0x4e24, @broadcast}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0xfd00, 0x101, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}) seccomp(0x1, 0x1, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{}, {0x2, 0x4, 0x1, 0x8}, {0x9, 0x1ff, 0x80000000}, {0x0, 0x8, 0xd74}]}) membarrier(0x10, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, 0xb) recvmmsg(r3, &(0x7f0000001a40)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001980)=""/185, 0xb9}}], 0x1, 0x0, &(0x7f0000001ac0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r3) r5 = accept4(r2, 0x0, &(0x7f0000000340)=0xff92, 0x0) write$binfmt_misc(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x19f) r6 = open(&(0x7f0000000000)='./file0\x00', 0x7e, 0xa1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in6}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xcc870acb) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000100)=0x6) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000580)=0x100, 0x4) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @dev={[], 0xd}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000800)=ANY=[]) setsockopt$inet_buf(r6, 0x0, 0x2e, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffff9c, 0xc08c5332, &(0x7f0000000000)={0x0, 0x1, 0x1f, 'queue0\x00'}) 10:37:30 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) gettid() gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x0, 0x6, &(0x7f0000000240)='lblcr\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r1, 0xffffffffffffff01, &(0x7f0000000580)=0x800000d) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb8006504f3ff0000000004040000850000001f000001b70000140000000095000000000000000000000000000500058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000002c0)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a0205000000ac", 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r5) r9 = dup3(r4, r8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100021000000000000800120000ffff00000000000000000005ea847ce6981583524c800000000000e00200010000000000000000000035000000000000000000000000ff00ff0d6e978b77ff000000030006000000000002000004000000bb000000000000000003000500000000000200423b0000000000000040000000009428acad5a69c688eeb2f86450443945c8552f883f264aec8fcd6af93cac4c1a941faed5b8ad256facc0bc4f36fef8ed492917b7e195292cbf889d6d340353b33ad859a41206e32d30d228c233ee0362b550297784beaf4dea096f3047d0eabfd48d47dbf60f196d2f0df59f0d36261179"], 0xf2}}, 0x0) socket$key(0xf, 0x3, 0x2) getpeername$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14) sendmmsg(r3, &(0x7f0000000d00)=[{{&(0x7f0000000d40)=@hci={0x1f, r10, 0x3}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000008c0)="ec40ec80e4ae2cd753215fc29c29a1d61cb15b6bbed725bae0c6d1441c4123d51e7ffa0ba2be470555e3f0b465c00473206aeafefa700ee4a9e115ecea94ab0b66c57341df2b692a64f10b5194d1710e3f3ed50e132d945fbf7a9478c517152571bf0f8c9e25de494de12a20425cd96d5e149d7f7efa0ebadc1aefce0493653ba98a3e9877a48fcd06a1f7ea9a3b904ddfe0f522354453303b71828803acd08efcb215dfe1e8a4fffe5438f5a7f876ea984091d4a889423545b1e9cf8606279f70aba8902b3efa00179ccb8fb2605a6dbc5c4c8f175f1c54d1db76dcf7030be750ee8b85f3e8cf13a612dd7683d6c3599cc064a2939c", 0xf6}], 0x1, 0x0, 0x0, 0x80}}], 0x1, 0x0) r11 = syz_open_dev$radio(&(0x7f0000000680)='/dev/radio#\x00', 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r8, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r12, r13/1000+30000}, {0x77359400}}) listen(r11, 0xffffffffffffff00) munlockall() socket$inet6_udplite(0xa, 0x2, 0x88) 10:37:30 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0xc0305302, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x6) getsockopt$inet_buf(r1, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000280)=0x9c) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={0x8, {0x2, 0x4e24, @broadcast}, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, 0xfd00, 0x101, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}) seccomp(0x1, 0x1, &(0x7f0000000180)={0x4, &(0x7f0000000040)=[{}, {0x2, 0x4, 0x1, 0x8}, {0x9, 0x1ff, 0x80000000}, {0x0, 0x8, 0xd74}]}) membarrier(0x10, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1}, 0xb) recvmmsg(r3, &(0x7f0000001a40)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001980)=""/185, 0xb9}}], 0x1, 0x0, &(0x7f0000001ac0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(r3) r5 = accept4(r2, 0x0, &(0x7f0000000340)=0xff92, 0x0) write$binfmt_misc(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x19f) r6 = open(&(0x7f0000000000)='./file0\x00', 0x7e, 0xa1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in, @in6}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xcc870acb) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000100)=0x6) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f0000000580)=0x100, 0x4) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @dev={[], 0xd}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @loopback}, 0x10) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000800)=ANY=[]) setsockopt$inet_buf(r6, 0x0, 0x2e, &(0x7f00000005c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffff9c, 0xc08c5332, &(0x7f0000000000)={0x0, 0x1, 0x1f, 'queue0\x00'}) 10:37:31 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) gettid() gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x0, 0x6, &(0x7f0000000240)='lblcr\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r1, 0xffffffffffffff01, &(0x7f0000000580)=0x800000d) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb8006504f3ff0000000004040000850000001f000001b70000140000000095000000000000000000000000000500058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000002c0)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a0205000000ac", 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r5) r9 = dup3(r4, r8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100021000000000000800120000ffff00000000000000000005ea847ce6981583524c800000000000e00200010000000000000000000035000000000000000000000000ff00ff0d6e978b77ff000000030006000000000002000004000000bb000000000000000003000500000000000200423b0000000000000040000000009428acad5a69c688eeb2f86450443945c8552f883f264aec8fcd6af93cac4c1a941faed5b8ad256facc0bc4f36fef8ed492917b7e195292cbf889d6d340353b33ad859a41206e32d30d228c233ee0362b550297784beaf4dea096f3047d0eabfd48d47dbf60f196d2f0df59f0d36261179"], 0xf2}}, 0x0) socket$key(0xf, 0x3, 0x2) getpeername$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14) sendmmsg(r3, &(0x7f0000000d00)=[{{&(0x7f0000000d40)=@hci={0x1f, r10, 0x3}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000008c0)="ec40ec80e4ae2cd753215fc29c29a1d61cb15b6bbed725bae0c6d1441c4123d51e7ffa0ba2be470555e3f0b465c00473206aeafefa700ee4a9e115ecea94ab0b66c57341df2b692a64f10b5194d1710e3f3ed50e132d945fbf7a9478c517152571bf0f8c9e25de494de12a20425cd96d5e149d7f7efa0ebadc1aefce0493653ba98a3e9877a48fcd06a1f7ea9a3b904ddfe0f522354453303b71828803acd08efcb215dfe1e8a4fffe5438f5a7f876ea984091d4a889423545b1e9cf8606279f70aba8902b3efa00179ccb8fb2605a6dbc5c4c8f175f1c54d1db76dcf7030be750ee8b85f3e8cf13a612dd7683d6c3599cc064a2939c", 0xf6}], 0x1, 0x0, 0x0, 0x80}}], 0x1, 0x0) r11 = syz_open_dev$radio(&(0x7f0000000680)='/dev/radio#\x00', 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r8, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r12, r13/1000+30000}, {0x77359400}}) listen(r11, 0xffffffffffffff00) munlockall() socket$inet6_udplite(0xa, 0x2, 0x88) 10:37:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000181, 0x0) 10:37:31 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) gettid() gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x0, 0x6, &(0x7f0000000240)='lblcr\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r1, 0xffffffffffffff01, &(0x7f0000000580)=0x800000d) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb8006504f3ff0000000004040000850000001f000001b70000140000000095000000000000000000000000000500058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000002c0)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a0205000000ac", 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r5) r9 = dup3(r4, r8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100021000000000000800120000ffff00000000000000000005ea847ce6981583524c800000000000e00200010000000000000000000035000000000000000000000000ff00ff0d6e978b77ff000000030006000000000002000004000000bb000000000000000003000500000000000200423b0000000000000040000000009428acad5a69c688eeb2f86450443945c8552f883f264aec8fcd6af93cac4c1a941faed5b8ad256facc0bc4f36fef8ed492917b7e195292cbf889d6d340353b33ad859a41206e32d30d228c233ee0362b550297784beaf4dea096f3047d0eabfd48d47dbf60f196d2f0df59f0d36261179"], 0xf2}}, 0x0) socket$key(0xf, 0x3, 0x2) getpeername$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14) sendmmsg(r3, &(0x7f0000000d00)=[{{&(0x7f0000000d40)=@hci={0x1f, r10, 0x3}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000008c0)="ec40ec80e4ae2cd753215fc29c29a1d61cb15b6bbed725bae0c6d1441c4123d51e7ffa0ba2be470555e3f0b465c00473206aeafefa700ee4a9e115ecea94ab0b66c57341df2b692a64f10b5194d1710e3f3ed50e132d945fbf7a9478c517152571bf0f8c9e25de494de12a20425cd96d5e149d7f7efa0ebadc1aefce0493653ba98a3e9877a48fcd06a1f7ea9a3b904ddfe0f522354453303b71828803acd08efcb215dfe1e8a4fffe5438f5a7f876ea984091d4a889423545b1e9cf8606279f70aba8902b3efa00179ccb8fb2605a6dbc5c4c8f175f1c54d1db76dcf7030be750ee8b85f3e8cf13a612dd7683d6c3599cc064a2939c", 0xf6}], 0x1, 0x0, 0x0, 0x80}}], 0x1, 0x0) r11 = syz_open_dev$radio(&(0x7f0000000680)='/dev/radio#\x00', 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r8, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r12, r13/1000+30000}, {0x77359400}}) listen(r11, 0xffffffffffffff00) munlockall() socket$inet6_udplite(0xa, 0x2, 0x88) 10:37:31 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x71000}], 0x200000000000000f, 0x0) 10:37:31 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) gettid() gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x0, 0x6, &(0x7f0000000240)='lblcr\x00', 0xffffffffffffffff}, 0x30) sched_setaffinity(r1, 0xffffffffffffff01, &(0x7f0000000580)=0x800000d) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb8006504f3ff0000000004040000850000001f000001b70000140000000095000000000000000000000000000500058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000002c0)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a0205000000ac", 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r5) r9 = dup3(r4, r8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="020100021000000000000800120000ffff00000000000000000005ea847ce6981583524c800000000000e00200010000000000000000000035000000000000000000000000ff00ff0d6e978b77ff000000030006000000000002000004000000bb000000000000000003000500000000000200423b0000000000000040000000009428acad5a69c688eeb2f86450443945c8552f883f264aec8fcd6af93cac4c1a941faed5b8ad256facc0bc4f36fef8ed492917b7e195292cbf889d6d340353b33ad859a41206e32d30d228c233ee0362b550297784beaf4dea096f3047d0eabfd48d47dbf60f196d2f0df59f0d36261179"], 0xf2}}, 0x0) socket$key(0xf, 0x3, 0x2) getpeername$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000006c0)=0x14) sendmmsg(r3, &(0x7f0000000d00)=[{{&(0x7f0000000d40)=@hci={0x1f, r10, 0x3}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000008c0)="ec40ec80e4ae2cd753215fc29c29a1d61cb15b6bbed725bae0c6d1441c4123d51e7ffa0ba2be470555e3f0b465c00473206aeafefa700ee4a9e115ecea94ab0b66c57341df2b692a64f10b5194d1710e3f3ed50e132d945fbf7a9478c517152571bf0f8c9e25de494de12a20425cd96d5e149d7f7efa0ebadc1aefce0493653ba98a3e9877a48fcd06a1f7ea9a3b904ddfe0f522354453303b71828803acd08efcb215dfe1e8a4fffe5438f5a7f876ea984091d4a889423545b1e9cf8606279f70aba8902b3efa00179ccb8fb2605a6dbc5c4c8f175f1c54d1db76dcf7030be750ee8b85f3e8cf13a612dd7683d6c3599cc064a2939c", 0xf6}], 0x1, 0x0, 0x0, 0x80}}], 0x1, 0x0) r11 = syz_open_dev$radio(&(0x7f0000000680)='/dev/radio#\x00', 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r8, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r12, r13/1000+30000}, {0x77359400}}) listen(r11, 0xffffffffffffff00) munlockall() socket$inet6_udplite(0xa, 0x2, 0x88) 10:37:31 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl(r1, 0x40044103, &(0x7f0000000240)) 10:37:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000380), 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 10:37:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000289fa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000040)) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$cont(0xffffffffffffffff, r2, 0x7e, 0x2) getegid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r6 = socket$nl_route(0x10, 0x3, 0x0) pread64(r5, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r4, r5) 10:37:31 executing program 0: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc) gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1, 0xffffffffffff9b8d, 0x8}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x4, 0x0, 0x80000000, 0x6, 0x244c, 0x7ff, 0x2}, &(0x7f0000000800)=0x20) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000480), 0x2) r2 = getpid() r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x20a00, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000200)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000300)={{0x4, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x1, 0x20, 0x0, r2, 0x1, 0x2, 'syz1\x00', &(0x7f0000000180)=['uservboxnet0nodev[lo\x00'], 0x15, [], [0x0, 0x88a, 0x81]}) sendmsg$nl_generic(r3, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x28, 0x10, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@nested={0x14, 0x2e, [@generic="7a3990101aa46673beae4ec9f0"]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40810) socketpair(0x11, 0x2, 0x0, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000000a40), 0x400000000000038, 0x0) [ 2919.543814] device lo left promiscuous mode [ 2919.608775] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:37:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0x80dc5521, &(0x7f0000000740)) [ 2919.695397] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2919.759805] bridge0: port 2(bridge_slave_1) entered blocking state [ 2919.766316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2919.773078] bridge0: port 1(bridge_slave_0) entered blocking state [ 2919.779468] bridge0: port 1(bridge_slave_0) entered forwarding state 10:37:32 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) clone(0x0, &(0x7f0000000080), 0x0, &(0x7f0000915ffc), &(0x7f0000000180)) read(r0, &(0x7f0000009f9c)=""/100, 0x64) [ 2919.913448] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 10:37:32 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000000240), &(0x7f0000001ffc), &(0x7f00000001c0), &(0x7f0000000040)) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x71000}], 0x200000000000000f, 0x0) [ 2919.954953] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2919.970143] syz-executor0 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2919.992068] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2920.005325] syz-executor0 cpuset=syz0 mems_allowed=0 [ 2920.018816] CPU: 1 PID: 17462 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #371 [ 2920.026205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2920.029992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2920.035584] Call Trace: [ 2920.035610] dump_stack+0x244/0x39d [ 2920.035634] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2920.035656] ? mark_held_locks+0x130/0x130 [ 2920.035673] ? mark_held_locks+0x130/0x130 [ 2920.035696] dump_header+0x27b/0xf72 [ 2920.035722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2920.035751] ? check_preemption_disabled+0x48/0x280 [ 2920.077093] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2920.082650] ? pagefault_out_of_memory+0x197/0x197 [ 2920.087593] ? debug_smp_processor_id+0x1c/0x20 [ 2920.092273] ? perf_trace_lock+0x14d/0x7a0 [ 2920.096522] ? debug_smp_processor_id+0x1c/0x20 [ 2920.101206] ? perf_trace_lock_acquire+0x15b/0x800 [ 2920.106170] ? lock_is_held_type+0x210/0x210 [ 2920.110591] ? perf_trace_lock+0x7a0/0x7a0 [ 2920.114841] ? debug_smp_processor_id+0x1c/0x20 [ 2920.119522] ? perf_trace_lock+0x14d/0x7a0 [ 2920.122007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2920.123768] ? zap_class+0x640/0x640 [ 2920.123788] ? print_usage_bug+0xc0/0xc0 [ 2920.123805] ? lock_is_held_type+0x210/0x210 [ 2920.123833] ? find_held_lock+0x36/0x1c0 [ 2920.147328] ? mark_held_locks+0xc7/0x130 [ 2920.151495] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2920.156629] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2920.157688] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2920.161743] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2920.161762] ? trace_hardirqs_on+0xbd/0x310 [ 2920.161777] ? kasan_check_read+0x11/0x20 [ 2920.161792] ? ___ratelimit+0x3b4/0x672 [ 2920.161811] ? trace_hardirqs_off_caller+0x310/0x310 [ 2920.191027] ? trace_hardirqs_on+0x310/0x310 [ 2920.195449] ? lock_downgrade+0x900/0x900 [ 2920.199634] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2920.204752] ? ___ratelimit+0x3b9/0x672 [ 2920.208744] ? idr_get_free+0xf70/0xf70 [ 2920.212725] ? _raw_spin_unlock_irq+0x27/0x80 [ 2920.217244] ? _raw_spin_unlock_irq+0x27/0x80 [ 2920.221769] oom_kill_process.cold.27+0x10/0x903 [ 2920.225574] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2920.226548] ? _raw_spin_unlock_irq+0x27/0x80 [ 2920.226564] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2920.226588] ? oom_evaluate_task+0x540/0x540 [ 2920.247180] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2920.252749] ? cgroup_procs_next+0x70/0x70 [ 2920.257008] ? _raw_spin_unlock_irq+0x60/0x80 [ 2920.261529] ? oom_badness+0xaa0/0xaa0 [ 2920.265431] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2920.270213] ? mem_cgroup_iter_break+0x30/0x30 [ 2920.274832] ? mark_held_locks+0xc7/0x130 [ 2920.278999] out_of_memory+0xa84/0x1430 [ 2920.279721] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 2920.282978] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2920.282999] ? kasan_check_read+0x11/0x20 [ 2920.283019] ? oom_killer_disable+0x3a0/0x3a0 [ 2920.283060] mem_cgroup_out_of_memory+0x15e/0x210 [ 2920.283079] ? memory_oom_group_write+0x160/0x160 [ 2920.311995] ? mem_cgroup_try_charge+0x627/0xe20 [ 2920.316772] ? page_counter_try_charge+0x1c1/0x220 [ 2920.321742] try_charge+0xda9/0x1700 [ 2920.325503] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2920.330459] ? kasan_check_read+0x11/0x20 [ 2920.334657] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2920.339348] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2920.342326] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 2920.344897] ? lock_page_memcg+0x350/0x350 10:37:32 executing program 3: r0 = memfd_create(&(0x7f0000000140)="9ede7a885ae95e4800800000000000604f13eeab65c0323901dc6b0000000032f01b7f0b014f9f91eeb7c37c7240f476c8d753000074dbcfa6b74d00", 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2920.355186] ? lock_acquire+0x1ed/0x520 [ 2920.359178] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2920.364565] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2920.370113] ? check_preemption_disabled+0x48/0x280 [ 2920.375145] ? kasan_check_read+0x11/0x20 [ 2920.379303] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2920.384596] ? rcu_softirq_qs+0x20/0x20 [ 2920.388619] mem_cgroup_try_charge+0x627/0xe20 [ 2920.393234] ? mem_cgroup_protected+0xa60/0xa60 [ 2920.397949] ? print_usage_bug+0xc0/0xc0 [ 2920.401747] IPv6: ADDRCONF(NETDEV_UP): wlan2: link is not ready [ 2920.402039] ? __mod_zone_page_state+0x8a/0xf0 [ 2920.412686] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2920.418276] ? __lock_acquire+0x62f/0x4c20 [ 2920.422548] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2920.428111] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2920.431719] IPv6: ADDRCONF(NETDEV_UP): wlan3: link is not ready [ 2920.433053] wp_page_copy+0x520/0x2500 [ 2920.433075] ? print_usage_bug+0xc0/0xc0 [ 2920.433101] ? follow_pfn+0x2e0/0x2e0 [ 2920.450891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2920.456456] ? reuse_swap_page+0x4bd/0x1520 [ 2920.460794] ? swp_swapcount+0x530/0x530 [ 2920.461691] IPv6: ADDRCONF(NETDEV_UP): wlan4: link is not ready [ 2920.464869] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2920.476447] ? check_preemption_disabled+0x48/0x280 [ 2920.481473] ? __lock_acquire+0x62f/0x4c20 [ 2920.485735] ? debug_smp_processor_id+0x1c/0x20 [ 2920.490414] ? perf_trace_lock+0x14d/0x7a0 [ 2920.494684] ? lock_is_held_type+0x210/0x210 [ 2920.499116] ? debug_smp_processor_id+0x1c/0x20 [ 2920.503795] ? print_usage_bug+0xc0/0xc0 [ 2920.504441] IPv6: ADDRCONF(NETDEV_UP): wlan5: link is not ready [ 2920.507891] ? perf_trace_lock_acquire+0x15b/0x800 [ 2920.507910] ? zap_class+0x640/0x640 [ 2920.507927] ? check_preemption_disabled+0x48/0x280 [ 2920.507950] ? debug_smp_processor_id+0x1c/0x20 [ 2920.507979] ? find_held_lock+0x36/0x1c0 [ 2920.536423] ? do_wp_page+0x518/0x2920 [ 2920.540348] ? lock_downgrade+0x900/0x900 [ 2920.544512] ? wake_up_page_bit+0x6f0/0x6f0 [ 2920.548856] ? kasan_check_read+0x11/0x20 [ 2920.553015] ? do_raw_spin_unlock+0xa7/0x330 [ 2920.557440] ? do_raw_spin_trylock+0x270/0x270 [ 2920.562036] ? __pte_alloc_kernel+0x220/0x220 [ 2920.566546] ? check_preemption_disabled+0x48/0x280 [ 2920.570707] IPv6: ADDRCONF(NETDEV_UP): wlan6: link is not ready [ 2920.571588] do_wp_page+0x520/0x2920 [ 2920.571617] ? finish_mkwrite_fault+0x650/0x650 [ 2920.571643] ? print_usage_bug+0xc0/0xc0 [ 2920.571660] ? __lock_acquire+0x62f/0x4c20 [ 2920.571704] ? __lock_acquire+0x62f/0x4c20 [ 2920.571764] ? mark_held_locks+0x130/0x130 [ 2920.571794] ? debug_smp_processor_id+0x1c/0x20 [ 2920.571813] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2920.571830] ? check_preemption_disabled+0x48/0x280 [ 2920.571851] ? debug_smp_processor_id+0x1c/0x20 [ 2920.571867] ? perf_trace_lock_acquire+0x15b/0x800 [ 2920.571882] ? check_preemption_disabled+0x48/0x280 [ 2920.571897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2920.571924] ? print_usage_bug+0xc0/0xc0 [ 2920.571940] ? print_usage_bug+0xc0/0xc0 [ 2920.571956] ? debug_smp_processor_id+0x1c/0x20 [ 2920.571970] ? perf_trace_lock+0x14d/0x7a0 [ 2920.571986] ? perf_trace_lock_acquire+0x15b/0x800 [ 2920.572008] ? print_usage_bug+0xc0/0xc0 [ 2920.572021] ? zap_class+0x640/0x640 [ 2920.572047] ? __lock_acquire+0x62f/0x4c20 [ 2920.572069] ? lock_acquire+0x1ed/0x520 [ 2920.572085] ? __handle_mm_fault+0x1fac/0x5be0 [ 2920.572108] ? kasan_check_read+0x11/0x20 [ 2920.572122] ? do_raw_spin_lock+0x14f/0x350 [ 2920.572139] ? rwlock_bug.part.2+0x90/0x90 [ 2920.572193] __handle_mm_fault+0x3bef/0x5be0 [ 2920.572232] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2920.572267] ? lock_is_held_type+0x210/0x210 [ 2920.572287] ? perf_trace_lock+0x7a0/0x7a0 [ 2920.572303] ? perf_trace_lock+0x7a0/0x7a0 [ 2920.572319] ? perf_trace_lock_acquire+0x15b/0x800 [ 2920.572351] ? zap_class+0x640/0x640 [ 2920.572366] ? zap_class+0x640/0x640 [ 2920.572391] ? find_held_lock+0x36/0x1c0 [ 2920.572420] ? handle_mm_fault+0x42a/0xc70 [ 2920.572439] ? lock_downgrade+0x900/0x900 [ 2920.572455] ? check_preemption_disabled+0x48/0x280 [ 2920.572476] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2920.572490] ? kasan_check_read+0x11/0x20 10:37:33 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)='?', 0x1}], 0x1) writev(r1, &(0x7f00007af000)=[{&(0x7f0000000080)="480000001500190c20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ff9f510040041feff5aff2b0000000000e7069a00000000", 0x48}], 0x1) [ 2920.572505] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2920.572521] ? rcu_softirq_qs+0x20/0x20 [ 2920.572538] ? trace_hardirqs_off_caller+0x310/0x310 [ 2920.572557] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2920.572574] ? check_preemption_disabled+0x48/0x280 [ 2920.572599] handle_mm_fault+0x54f/0xc70 [ 2920.572627] ? __handle_mm_fault+0x5be0/0x5be0 [ 2920.597507] IPv6: ADDRCONF(NETDEV_UP): wlan7: link is not ready [ 2920.599601] ? find_vma+0x34/0x190 [ 2920.599627] __do_page_fault+0x5e8/0xe60 [ 2920.599661] do_page_fault+0xf2/0x7e0 [ 2920.655429] IPv6: ADDRCONF(NETDEV_UP): wlan8: link is not ready [ 2920.656198] ? vmalloc_sync_all+0x30/0x30 [ 2920.656217] ? error_entry+0x70/0xd0 [ 2920.656246] ? trace_hardirqs_off_caller+0xbb/0x310 [ 2920.656267] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2920.698817] IPv6: ADDRCONF(NETDEV_UP): wlan9: link is not ready [ 2920.703625] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2920.703642] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2920.703661] ? trace_hardirqs_on_caller+0x310/0x310 [ 2920.703677] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2920.703700] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2920.703716] ? page_fault+0x8/0x30 [ 2920.703742] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2920.703762] ? page_fault+0x8/0x30 [ 2920.741929] IPv6: ADDRCONF(NETDEV_UP): wlan10: link is not ready [ 2920.746443] page_fault+0x1e/0x30 [ 2920.746458] RIP: 0033:0x40afc1 [ 2920.746475] Code: 85 50 63 00 01 41 bc e8 03 00 00 48 19 db 48 81 e3 45 fc ff ff 48 81 c3 e8 03 00 00 e8 28 6e ff ff 49 89 c6 4c 8d 2c 03 eb 10 1a 6e ff ff 48 89 c2 4c 29 f2 48 39 d3 72 52 4c 89 e9 31 d2 4c [ 2920.746484] RSP: 002b:0000000000a3fc00 EFLAGS: 00010246 [ 2920.746498] RAX: 0000000000000000 RBX: 000000000000002d RCX: 0000000000457679 [ 2920.746508] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000072bf0c [ 2920.746523] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2920.794805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1.: link becomes ready [ 2920.795138] R10: 0000000000a3fcc0 R11: 0000000000000246 R12: 00000000000003e8 [ 2920.808721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1.: link becomes ready [ 2920.812578] R13: 00000000002c8e05 R14: 00000000002c8dd8 R15: 000000000072bf0c [ 2920.962141] Task in /syz0 killed as a result of limit of /syz0 [ 2920.971239] memory: usage 307084kB, limit 307200kB, failcnt 1280 [ 2920.976230] IPv6: ADDRCONF(NETDEV_UP): veth2: link is not ready 10:37:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xb, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@getsa={0x30, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@ipv6_hthresh={0x8}]}, 0x30}}, 0x0) [ 2921.006654] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2921.009435] IPv6: ADDRCONF(NETDEV_UP): veth3: link is not ready [ 2921.033061] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 10:37:33 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x232}, 0x1c) [ 2921.061010] Memory cgroup stats for /syz0: cache:264KB rss:269656KB rss_huge:249856KB shmem:172KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:28KB active_anon:269700KB inactive_file:4KB active_file:0KB unevictable:28KB [ 2921.077567] IPv6: ADDRCONF(NETDEV_UP): veth4: link is not ready [ 2921.109350] IPv6: ADDRCONF(NETDEV_UP): veth5: link is not ready [ 2921.126798] IPv6: ADDRCONF(NETDEV_UP): veth6: link is not ready [ 2921.139886] IPv6: ADDRCONF(NETDEV_UP): veth7: link is not ready [ 2921.145884] Memory cgroup out of memory: Kill process 11290 (syz-executor0) score 123 or sacrifice child [ 2921.152247] IPv6: ADDRCONF(NETDEV_UP): veth8: link is not ready 10:37:33 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 2921.173433] Killed process 11290 (syz-executor0) total-vm:70604kB, anon-rss:4260kB, file-rss:33660kB, shmem-rss:0kB [ 2921.181213] IPv6: ADDRCONF(NETDEV_UP): veth9: link is not ready [ 2921.205522] IPv6: ADDRCONF(NETDEV_UP): wlan11: link is not ready [ 2921.223670] IPv6: ADDRCONF(NETDEV_UP): wlan12: link is not ready [ 2921.238189] IPv6: ADDRCONF(NETDEV_UP): wlan13: link is not ready [ 2921.252553] IPv6: ADDRCONF(NETDEV_UP): wlan14: link is not ready [ 2921.267364] IPv6: ADDRCONF(NETDEV_UP): wlan15: link is not ready [ 2921.290061] IPv6: ADDRCONF(NETDEV_UP): wlan16: link is not ready [ 2921.315394] IPv6: ADDRCONF(NETDEV_UP): wlan17: link is not ready [ 2921.329602] IPv6: ADDRCONF(NETDEV_UP): wlan18: link is not ready [ 2921.338746] IPv6: ADDRCONF(NETDEV_UP): wlan19: link is not ready [ 2921.347758] IPv6: ADDRCONF(NETDEV_UP): wlan20: link is not ready [ 2921.356728] IPv6: ADDRCONF(NETDEV_UP): wlan21: link is not ready [ 2921.367458] IPv6: ADDRCONF(NETDEV_UP): wlan22: link is not ready [ 2921.376481] IPv6: ADDRCONF(NETDEV_UP): wlan23: link is not ready [ 2921.385377] IPv6: ADDRCONF(NETDEV_UP): wlan24: link is not ready [ 2921.394441] IPv6: ADDRCONF(NETDEV_UP): wlan25: link is not ready [ 2921.403655] IPv6: ADDRCONF(NETDEV_UP): wlan26: link is not ready [ 2921.412875] IPv6: ADDRCONF(NETDEV_UP): wlan27: link is not ready 10:37:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x2, &(0x7f0000000340)={0x0, 0x29, 0x0, @thr={&(0x7f00000001c0)="6b26c0d5d9a5055fc458d6488f15e48a0003b149a17b4e1e172382e975c6e9df5ee786139107fcd550e14e241c10dd943cda5cd82762e9bde2456f35741245428d293b9bec9722d87352bf0cd23242e50f025c04c47a672f6cc72c008f45d3c8ae6968f8a11160975fbade5399a00df6bf2139aa72430370c45719eeca72836b6d33df58dbdb0e3e9c9c66e04d4368c84b398add918725528a223712a38430b85b07c9f2ecfe959ca35fa7db338134f5efe73eba5745082ed9c32292733e9919e13090011b002d5d5cd243c17a985a6184ff6edc8c613c63a9c67c070f124f1206821608d30f05cd3752daa9422eeab447b90aea2998a09aac", &(0x7f00000002c0)="cdb6f9b8c5eb7d6063caad6f3863541243ed96089588870fcf79eaaf7f47e330d13e53209e01d4fe3829887d9abf1754f038030efde40f6eaf55355d23a7e9a88af963f8a355b9ecaf2056826f883f3bf1f5c929550da025"}}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x0, &(0x7f00000003c0)={{}, {0x77359400}}, &(0x7f0000000400)) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0x6f0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x3, 0xf0ffffffffffff}]}}}]}, 0x3c}}, 0x0) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1) timer_create(0x7, &(0x7f0000000540)={0x0, 0xf, 0x0, @thr={&(0x7f0000000440)="49b544d3c02632c74a663f14e9b58cd46bab84c064ca7b31c2c0a99258884478539a2d616f7b585bc5f2f8cad21e570f2afe1cfda44a95eca53cf146449cdc", &(0x7f0000000480)="90ce9b9ada1690b930c2028b405a"}}, &(0x7f0000000500)) 10:37:33 executing program 5: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x20011, r1, 0x0) ioctl$SG_IO(r1, 0x2201, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2921.503833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2921.523239] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 2921.557623] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 2921.568690] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 2921.582575] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 2921.595850] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 2921.608246] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 2921.622006] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 2921.635481] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 2921.670327] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2921.699855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2921.716413] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2921.743452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2921.765081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2921.787066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2921.808166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2921.844159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1.: link becomes ready [ 2922.487688] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2922.498126] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2922.509525] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 2922.519265] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2922.533334] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 2922.551830] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 2922.576463] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 2922.603128] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 2922.612060] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 2922.630523] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2922.637566] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 2922.652078] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2922.672620] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2922.680192] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2922.687937] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! 10:37:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000289fa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000040)) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$cont(0xffffffffffffffff, r2, 0x7e, 0x2) getegid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r6 = socket$nl_route(0x10, 0x3, 0x0) pread64(r5, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r4, r5) 10:37:35 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000c40)=0x1, 0x2a5) poll(&(0x7f0000000f00)=[{r0}], 0x8, 0x0) 10:37:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0xc080aebe, &(0x7f0000000140)={0xfffffffffffffffe}) 10:37:35 executing program 5: r0 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="3400070003000100000000000000000000000000000025000000000000000000000000000000200000000000"], 0x2c) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x4db, &(0x7f0000000000)=[{}]}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/uhid\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) 10:37:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x80000002, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000aba000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000bf8000/0xe000)=nil) madvise(&(0x7f0000a62000/0x1000)=nil, 0x1000, 0x10200000008) 10:37:35 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)='?', 0x1}], 0x1) writev(r1, &(0x7f00007af000)=[{&(0x7f0000000080)="480000001500190c20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ff9f510040041feff5aff2b0000000000e7069a00000000", 0x48}], 0x1) [ 2922.701753] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2922.721765] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 10:37:35 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000c40)=0x1, 0x2a5) poll(&(0x7f0000000f00)=[{r0}], 0x8, 0x0) 10:37:35 executing program 0: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x0, 0x0) r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={"ffffff"}, &(0x7f0000000340)="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", 0x4c9, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000005340)=""/4096, 0x1000) [ 2922.918608] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2922.954704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2922.961834] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2923.035997] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2923.042941] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2923.053246] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 10:37:35 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000c40)=0x1, 0x2a5) poll(&(0x7f0000000f00)=[{r0}], 0x8, 0x0) [ 2923.094085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2923.111742] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! 10:37:35 executing program 0: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x0, 0x0) r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={"ffffff"}, &(0x7f0000000340)="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", 0x4c9, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000005340)=""/4096, 0x1000) [ 2923.137114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2923.169878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 10:37:35 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000c40)=0x1, 0x2a5) poll(&(0x7f0000000f00)=[{r0}], 0x8, 0x0) [ 2923.225234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1.: link becomes ready [ 2923.281779] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2923.288796] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 2923.295873] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2923.303005] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 10:37:35 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x4, &(0x7f0000013ff4)={@local, @rand_addr, @multicast2}, 0xc) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f00000001c0)=0x3a8) close(r3) dup3(r1, r2, 0x0) [ 2923.611722] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2923.618802] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2923.681692] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2924.011855] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! 10:37:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000289fa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000040)) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$cont(0xffffffffffffffff, r2, 0x7e, 0x2) getegid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r6 = socket$nl_route(0x10, 0x3, 0x0) pread64(r5, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r4, r5) 10:37:36 executing program 0: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x0, 0x0) r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={"ffffff"}, &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f061a1b67f6c3d7605eab3b675b6c061e6ef32b7ea8847b6f84da1334d35322b94447bfaca74b152eb64cfa54cb63126c2cc662e7898e6459ed40c4566403f303d341c9c34c6049d9f8e1c2a9483f003c20e66886d0e1629f498668c202f183de294d03da07c9f5feb65bc196554a79a2f255828c1f1cf9a09654f9df849443e8d290debcc78efbdca391a348b33f18ef618011273faa1f095298dd71db08a90e177a1e9a0c771deca3b51670a26850b89d4439574328c19d9e91766dd52169e0ad5011e4acc005861b3b3146d67445e6f6c75ce4af9d8db6963887d79113613267c5bc42fb0aca828590fb291ce8836d3cd391d364efdbb7015d8ec643d83b623380c21c6ebbf774498c94e60838a45d4692bfe73aaea2bbcecb6dcec20e5aa48a950428e2372009212f2f6be608cdec5ff84108f3f3d2e42c99a6d4cd4577ec9f39a51533efe71d494ccadb66eddd4cc0e56b33eefb0ada68ae36c905a977d9042a63299d2130f4e85357b0078c31bc45b00f5ccd879a6735d85882bfddbc6f2cff4a2b976b29e5a8adc74893c748b297a660ba0f64ad8a6ac6fcf180b6a4357ad6733cb75035cd58631142bd720cf52bcd1438647cbe1058e32d33c38f1327bef3f6b1c815ab4f2d47366473ae37c65a2d1df88823dd4c326d640c50e5bddfa976f04cd034331b632cd7a8bbc838081f28f6e24ed646721cea36e56501f9085e428a6c94b7ba5431f59651f36c8f715e4547ffed53c03cc58d2d4382193625cf69c197c4eb3c3c86c291d693837ab7eb23d61d2518379f0c61acf67425afa1ff8d1fac196a7ef9f6f9b514a2028ae010d1bf10833940294c400401ec706ce366dc4c62f6c55c6985a31592360cc7e6cc30a90cae1891b4cffb882b0329457503055db6a8e3b651b3302c24e6d149e8368ee6d3bafbc417256d042b4b87cb1bf46169ad1a593da66b2c6f453180f2c51be35c431e1af07e54c1251334415135422fa81b015a7a746c1979827e3d32057d408016cdc2b641a42626bbf8b7970a5638e9e48783ff80ded5b5184b69d41e60ba9e2ff7ef3e85b4419db2b064d64f833dc2035a6cc3ea28335ad94eb5ba974d9799ce94565559e6a7636b725c4c3dc1702af3c0f3d9dc77f6d404b7c8ff2cec2b4e703451a1d2750d9a22e9f4b5e27da765d228f09bbd30088ac9dff793ec759161849cf4217f5684bff8eddd65be61d3ed2dcc7bae8ab5e1260c3a90cdb37626c4871098802b34f271d8a091b0517bd1588b43cf21b2e3fe676e34d115a56d450d50a97ac7e2ea5904f9695dbde822dba41ac3a1190d63ef486a1829d38b005f9458a82533a555a2f674eea95af7ef7f0cf9654e0ed8d2ab722ca065fd97e6518b76a39cc1b04dc49c395f3aad5e05c76c1881f6a85fee6c6fba8340692eb0b7f3f948350e6947dac635cfef9e4ff4d3f756802cbd97e8c5845b25bc5a021d9875277f197d1bce55661e6961dd788a444962e33fa582a01d0bd61aaa22a76adf68b3169d3f0b49db0325e975a7a8a3", 0x4c9, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000005340)=""/4096, 0x1000) 10:37:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000300)) 10:37:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000480)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast1}, @in6=@ipv4={[], [], @dev}, {@in=@loopback, @in6=@local}, {{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast1}, 0x0, @in=@multicast1, 0x0, 0xa}]}]}, 0x16c}}, 0x0) [ 2924.172522] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 10:37:36 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)='?', 0x1}], 0x1) writev(r1, &(0x7f00007af000)=[{&(0x7f0000000080)="480000001500190c20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ff9f510040041feff5aff2b0000000000e7069a00000000", 0x48}], 0x1) 10:37:36 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) close(r0) syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x0, 0x107001) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, r4) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000003c0)={0x2, 0x5, 0x0, [{0x3f, 0xffffffff80000001, 0x8, 0x2, 0x0, 0x20, 0x10001}, {0x25aaf378, 0x3f, 0xe93, 0x8, 0x4000000000000, 0x6, 0x60000}, {0xffffffffffffffff, 0x9, 0x86, 0x81, 0x1, 0x6, 0xdabc}, {0x8, 0x7, 0xc6, 0x92, 0x2, 0x2, 0x1000}, {0x9, 0x20000000, 0x3, 0x2, 0x5, 0x5, 0x200}]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000340)=0xc) 10:37:36 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x20, 0x101002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$evdev(r0, &(0x7f00006f7fe8)=[{{0x0, 0x2710}, 0x1, 0xb8, 0x400000002}], 0x2a4) 10:37:36 executing program 0: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1e, 0x0, 0x0) r0 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={"ffffff"}, &(0x7f0000000340)="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", 0x4c9, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000005340)=""/4096, 0x1000) [ 2924.334694] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! 10:37:36 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) semget(0x2, 0x0, 0x460) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r2 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000025000000000005000000000000000000200000000000"], 0x1c) sendfile(r2, r2, &(0x7f0000001000), 0xffff) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) 10:37:36 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000440)) [ 2924.523674] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 10:37:36 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$netlink(0x10, 0x3, 0x8000000000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)='?', 0x1}], 0x1) writev(r1, &(0x7f00007af000)=[{&(0x7f0000000080)="480000001500190c20ffff7fffffff5602113b850e1de0974881000000fe58a2bc4a03049164643e89720000de213ee23ff9f510040041feff5aff2b0000000000e7069a00000000", 0x48}], 0x1) [ 2924.651015] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2924.691918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:37:37 executing program 0: request_key(&(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0xfffffffffffffffc) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xdeb, 0x80000) epoll_create(0xff) [ 2924.782952] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2924.860735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2924.914687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2924.932354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2924.953783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1.: link becomes ready [ 2925.001686] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2925.008690] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 2925.015726] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2925.022747] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2925.561777] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2925.568814] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! 10:37:38 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) close(r0) syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x0, 0x107001) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, r4) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000003c0)={0x2, 0x5, 0x0, [{0x3f, 0xffffffff80000001, 0x8, 0x2, 0x0, 0x20, 0x10001}, {0x25aaf378, 0x3f, 0xe93, 0x8, 0x4000000000000, 0x6, 0x60000}, {0xffffffffffffffff, 0x9, 0x86, 0x81, 0x1, 0x6, 0xdabc}, {0x8, 0x7, 0xc6, 0x92, 0x2, 0x2, 0x1000}, {0x9, 0x20000000, 0x3, 0x2, 0x5, 0x5, 0x200}]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000340)=0xc) 10:37:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000289fa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001f3a)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000040)) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$cont(0xffffffffffffffff, r2, 0x7e, 0x2) getegid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r6 = socket$nl_route(0x10, 0x3, 0x0) pread64(r5, &(0x7f0000000340)=""/39, 0x27, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) dup2(r4, r5) 10:37:38 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000800)='/dev/video#\x00', 0xacb, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000240)={0x0, 0x7, 0x2, {0x1, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x8000, 0x2000000000000002, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x15182c}}}) 10:37:38 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80001, 0x0) splice(r0, 0x0, r1, &(0x7f00000002c0), 0x400000000003, 0x0) 10:37:38 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) semget(0x2, 0x0, 0x460) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r2 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000025000000000005000000000000000000200000000000"], 0x1c) sendfile(r2, r2, &(0x7f0000001000), 0xffff) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) 10:37:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) semget(0x2, 0x0, 0x460) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r2 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000025000000000005000000000000000000200000000000"], 0x1c) sendfile(r2, r2, &(0x7f0000001000), 0xffff) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) [ 2925.851693] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 2925.931858] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! 10:37:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x200007fe, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0xb) r1 = dup2(r0, r0) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x4, 0x6000) r2 = msgget(0xffffffffffffffff, 0x2a0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f00000006c0)=0xe8) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f00000007c0)={0xa0, 0x19, 0x1, {0xa08, {0xb, 0x3}, 0x3, r3, r4, 0x4e, 0x20, 0x9, 0x6, 0xffffffffffffff96, 0x3, 0x0, 0x101, 0x3, 0x6, 0x7, 0x6, 0xba0, 0x0, 0x401}}, 0xa0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480)) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000340)=""/35) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="ffb449bb81010400000000000007a88a13831eda53"], 0x1}}, 0x44801) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000580)={0x0, 0x4}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000008c0)={r5, @in={{0x2, 0x2, @empty}}, 0x4, 0xfff, 0x9, 0x463a, 0x8}, 0x98) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0x0, 0xc0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000300)={r6, 0x40}, &(0x7f0000000440)=0x8) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0xe, 0x0, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffff, 0x0, 0x2}, 0x14) 10:37:38 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='security.evm\x00', &(0x7f0000000180)="03", 0x1, 0x0) [ 2926.117523] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2926.222054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 10:37:38 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85715070") r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x0, &(0x7f0000016fe0)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) timerfd_settime(r1, 0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f00000001c0)) [ 2926.295427] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:37:38 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) close(r0) syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x0, 0x107001) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, r4) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000003c0)={0x2, 0x5, 0x0, [{0x3f, 0xffffffff80000001, 0x8, 0x2, 0x0, 0x20, 0x10001}, {0x25aaf378, 0x3f, 0xe93, 0x8, 0x4000000000000, 0x6, 0x60000}, {0xffffffffffffffff, 0x9, 0x86, 0x81, 0x1, 0x6, 0xdabc}, {0x8, 0x7, 0xc6, 0x92, 0x2, 0x2, 0x1000}, {0x9, 0x20000000, 0x3, 0x2, 0x5, 0x5, 0x200}]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000340)=0xc) [ 2926.400371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 10:37:38 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x8}]}, 0x0}, 0x48) [ 2926.491877] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2926.503998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2926.519241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2926.528235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2926.548400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1.: link becomes ready [ 2926.583553] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 2926.590583] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2926.597624] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2926.606546] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2926.695184] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2926.702452] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2926.759987] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 10:37:39 executing program 3: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000040), 0x2) close(r0) syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x0, 0x107001) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, r4) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000003c0)={0x2, 0x5, 0x0, [{0x3f, 0xffffffff80000001, 0x8, 0x2, 0x0, 0x20, 0x10001}, {0x25aaf378, 0x3f, 0xe93, 0x8, 0x4000000000000, 0x6, 0x60000}, {0xffffffffffffffff, 0x9, 0x86, 0x81, 0x1, 0x6, 0xdabc}, {0x8, 0x7, 0xc6, 0x92, 0x2, 0x2, 0x1000}, {0x9, 0x20000000, 0x3, 0x2, 0x5, 0x5, 0x200}]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000340)=0xc) 10:37:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_submit(r1, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140), 0x700000000000}]) [ 2926.971697] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 2927.451701] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2927.458912] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 2927.531684] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 10:37:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) semget(0x2, 0x0, 0x460) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r2 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000025000000000005000000000000000000200000000000"], 0x1c) sendfile(r2, r2, &(0x7f0000001000), 0xffff) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) 10:37:39 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 10:37:39 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) semget(0x2, 0x0, 0x460) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r2 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000025000000000005000000000000000000200000000000"], 0x1c) sendfile(r2, r2, &(0x7f0000001000), 0xffff) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) 10:37:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r1 = open(&(0x7f0000000000)='./file0\x00', 0x20141042, 0x0) close(r1) [ 2927.674612] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 10:37:39 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x100000) [ 2927.718696] device lo left promiscuous mode 10:37:40 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000b80)={0x18, 0x2d, 0x1, 0x0, 0x0, {0x4}, [@generic="90"]}, 0x18}}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000800)) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x3, 0x6ee1afef0fa0b3bf) sendmsg$nl_crypto(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@delrng={0x10, 0x14, 0x8, 0x70bd29, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xb13, 0x0, 0x5, 0x8}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 10:37:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000000c0)={0xffff, 0x4, 0x9}) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000001c0)={0x2, @output={0x1000, 0x1, {0x70c, 0x7}, 0x80000001}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) [ 2927.767416] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:37:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000000c0)={0xffff, 0x4, 0x9}) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000001c0)={0x2, @output={0x1000, 0x1, {0x70c, 0x7}, 0x80000001}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) [ 2928.044447] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2928.054815] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 10:37:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000000c0)={0xffff, 0x4, 0x9}) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000001c0)={0x2, @output={0x1000, 0x1, {0x70c, 0x7}, 0x80000001}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) 10:37:40 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) [ 2928.374600] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 2928.437593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 2928.483734] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! 10:37:40 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000000c0)={0xffff, 0x4, 0x9}) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000001c0)={0x2, @output={0x1000, 0x1, {0x70c, 0x7}, 0x80000001}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) [ 2928.580509] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:37:40 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000b80)={0x18, 0x2d, 0x1, 0x0, 0x0, {0x4}, [@generic="90"]}, 0x18}}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000800)) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x3, 0x6ee1afef0fa0b3bf) sendmsg$nl_crypto(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@delrng={0x10, 0x14, 0x8, 0x70bd29, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xb13, 0x0, 0x5, 0x8}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2928.751691] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2928.758787] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2928.774168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 2928.931771] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! 10:37:41 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) semget(0x2, 0x0, 0x460) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r2 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000025000000000005000000000000000000200000000000"], 0x1c) sendfile(r2, r2, &(0x7f0000001000), 0xffff) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) [ 2929.101724] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 10:37:41 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 10:37:41 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) semget(0x2, 0x0, 0x460) bind$alg(r0, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r2 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) write(r2, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000025000000000005000000000000000000200000000000"], 0x1c) sendfile(r2, r2, &(0x7f0000001000), 0xffff) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) 10:37:41 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000b80)={0x18, 0x2d, 0x1, 0x0, 0x0, {0x4}, [@generic="90"]}, 0x18}}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000800)) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x3, 0x6ee1afef0fa0b3bf) sendmsg$nl_crypto(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@delrng={0x10, 0x14, 0x8, 0x70bd29, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xb13, 0x0, 0x5, 0x8}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 10:37:41 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000b80)={0x18, 0x2d, 0x1, 0x0, 0x0, {0x4}, [@generic="90"]}, 0x18}}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000800)) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x3, 0x6ee1afef0fa0b3bf) sendmsg$nl_crypto(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@delrng={0x10, 0x14, 0x8, 0x70bd29, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xb13, 0x0, 0x5, 0x8}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 10:37:41 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) [ 2929.734935] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 2929.913089] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2930.171800] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2930.181705] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! 10:37:42 executing program 0: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000b80)={0x18, 0x2d, 0x1, 0x0, 0x0, {0x4}, [@generic="90"]}, 0x18}}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000800)) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x3, 0x6ee1afef0fa0b3bf) sendmsg$nl_crypto(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@delrng={0x10, 0x14, 0x8, 0x70bd29, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xb13, 0x0, 0x5, 0x8}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) [ 2930.484887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 2930.551779] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 10:37:42 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 10:37:42 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000b80)={0x18, 0x2d, 0x1, 0x0, 0x0, {0x4}, [@generic="90"]}, 0x18}}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000800)) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x3, 0x6ee1afef0fa0b3bf) sendmsg$nl_crypto(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@delrng={0x10, 0x14, 0x8, 0x70bd29, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xb13, 0x0, 0x5, 0x8}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 10:37:43 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 10:37:43 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) 10:37:43 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 10:37:43 executing program 0: pipe(&(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x990, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f00000015c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000180)='"', 0x1}]) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x8000000002, 0x0) splice(r0, 0x0, r1, 0x0, 0x200, 0x0) [ 2931.213008] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! 10:37:44 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 10:37:44 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x4, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 10:37:44 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x4b51010000000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000b80)={0x18, 0x2d, 0x1, 0x0, 0x0, {0x4}, [@generic="90"]}, 0x18}}, 0x0) r2 = accept$alg(r0, 0x0, 0x0) r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000800)) sendmmsg$alg(r2, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000000)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0x1000}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x3, 0x6ee1afef0fa0b3bf) sendmsg$nl_crypto(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@delrng={0x10, 0x14, 0x8, 0x70bd29, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xb13, 0x0, 0x5, 0x8}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 10:37:44 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 10:37:44 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) 10:37:44 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0xb611, 0x104}, 0xffffffffffffff70) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) [ 2931.870308] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 10:37:44 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) [ 2931.987352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 10:37:44 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = memfd_create(&(0x7f0000000100)='\x00', 0x4) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000280)) socket(0x1e, 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000500)={{0x0, 0xffffffffffffffc1}, {0x5, 0x7f}, 0x2, 0x2, 0xfffffffffffffffe}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000380)={0x10001, "468f177474ef0c1ee091b76f9212e1c7a2c35f9cc96ea909a71f672413cb2a30", 0x0, 0x0, 0x8, 0x9, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000300)={0x0, 0xefcf}, &(0x7f0000000340)=0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000080)={&(0x7f00000002c0)={0xfffffffffffffffe}, 0x8}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/202, 0xca}, {0x0}], 0x2, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 10:37:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') fchdir(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)="2e2f6367726f75702f00797a3000bbd3c2830f2a102ed2060bdc00ca0afc0a0ab40400005d8ec474c281f5f1a6d118bc38d1a31d6c7a9aa66f072682cf09de0cb8bef55a1a530a3d2cee9ed82516a500ca71b2d0426b9ecd1e2567f55fc232021cb7b1dc618056acf431027a552b2b37cf5317c9194789fbfbfec9159de60772992222334c67e84ec1", 0x1ff) [ 2932.131700] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2932.138748] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 10:37:44 executing program 3: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xffffffea) r2 = epoll_create(0xe29f) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r1) 10:37:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [], [], [0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) [ 2932.300012] input: syz1 as /devices/virtual/input/input142 [ 2932.342369] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. [ 2932.362154] input: syz1 as /devices/virtual/input/input143 10:37:44 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) [ 2932.663765] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2932.811739] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2933.007377] syz-executor0 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), nodemask=(null), order=0, oom_score_adj=0 [ 2933.023559] syz-executor0 cpuset=syz0 mems_allowed=0 [ 2933.054362] CPU: 1 PID: 17767 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #371 [ 2933.061750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2933.071111] Call Trace: [ 2933.073717] dump_stack+0x244/0x39d [ 2933.077378] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2933.082597] dump_header+0x27b/0xf72 [ 2933.086366] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2933.091920] ? check_preemption_disabled+0x48/0x280 [ 2933.096953] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2933.102515] ? pagefault_out_of_memory+0x197/0x197 [ 2933.107463] ? debug_smp_processor_id+0x1c/0x20 [ 2933.112149] ? perf_trace_lock+0x14d/0x7a0 [ 2933.116394] ? debug_smp_processor_id+0x1c/0x20 [ 2933.121082] ? perf_trace_lock_acquire+0x15b/0x800 [ 2933.126043] ? lock_is_held_type+0x210/0x210 [ 2933.130966] ? perf_trace_lock+0x7a0/0x7a0 [ 2933.135242] ? debug_smp_processor_id+0x1c/0x20 [ 2933.139928] ? perf_trace_lock+0x14d/0x7a0 [ 2933.144183] ? zap_class+0x640/0x640 [ 2933.147916] ? print_usage_bug+0xc0/0xc0 [ 2933.152050] ? lock_is_held_type+0x210/0x210 [ 2933.156492] ? perf_trace_lock+0x7a0/0x7a0 [ 2933.160761] ? find_held_lock+0x36/0x1c0 [ 2933.164854] ? mark_held_locks+0xc7/0x130 [ 2933.169023] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2933.174142] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2933.179272] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2933.183872] ? trace_hardirqs_on+0xbd/0x310 [ 2933.188205] ? kasan_check_read+0x11/0x20 [ 2933.192383] ? ___ratelimit+0x3b4/0x672 [ 2933.196377] ? trace_hardirqs_off_caller+0x310/0x310 [ 2933.201502] ? trace_hardirqs_on+0x310/0x310 [ 2933.205935] ? lock_downgrade+0x900/0x900 [ 2933.210113] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2933.215247] ? ___ratelimit+0x3b9/0x672 [ 2933.219255] ? idr_get_free+0xf70/0xf70 [ 2933.223257] ? _raw_spin_unlock_irq+0x27/0x80 [ 2933.227770] ? _raw_spin_unlock_irq+0x27/0x80 [ 2933.232346] oom_kill_process.cold.27+0x10/0x903 [ 2933.237120] ? _raw_spin_unlock_irq+0x27/0x80 [ 2933.241629] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2933.246254] ? oom_evaluate_task+0x540/0x540 [ 2933.250687] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2933.256258] ? cgroup_procs_next+0x70/0x70 [ 2933.260529] ? _raw_spin_unlock_irq+0x60/0x80 [ 2933.265055] ? oom_badness+0xaa0/0xaa0 [ 2933.268960] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2933.273755] ? mem_cgroup_iter_break+0x30/0x30 [ 2933.278371] ? mark_held_locks+0xc7/0x130 [ 2933.282535] out_of_memory+0xa84/0x1430 [ 2933.286519] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2933.291109] ? kasan_check_read+0x11/0x20 [ 2933.295277] ? oom_killer_disable+0x3a0/0x3a0 [ 2933.299817] mem_cgroup_out_of_memory+0x15e/0x210 [ 2933.304679] ? memory_oom_group_write+0x160/0x160 [ 2933.309539] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2933.314404] ? page_counter_try_charge+0x1c1/0x220 [ 2933.319347] try_charge+0xda9/0x1700 [ 2933.323082] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2933.327763] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2933.332699] ? kasan_check_read+0x11/0x20 [ 2933.336866] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2933.342149] ? rcu_softirq_qs+0x20/0x20 [ 2933.346144] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2933.351690] ? debug_smp_processor_id+0x1c/0x20 [ 2933.356363] ? perf_trace_lock+0x14d/0x7a0 [ 2933.360605] ? lock_page_memcg+0x350/0x350 [ 2933.364853] ? lock_acquire+0x1ed/0x520 [ 2933.368833] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2933.374204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2933.379761] ? check_preemption_disabled+0x48/0x280 [ 2933.384800] memcg_kmem_charge_memcg+0x7c/0x120 [ 2933.389474] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2933.393991] memcg_kmem_charge+0x149/0x350 [ 2933.398246] __alloc_pages_nodemask+0x75e/0xea0 [ 2933.402941] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 2933.407972] ? perf_trace_sched_process_exec+0x860/0x860 [ 2933.413454] ? kasan_check_write+0x14/0x20 [ 2933.417693] ? copyin+0xb7/0x100 [ 2933.421071] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2933.426106] ? copy_page_from_iter+0x541/0x8f0 [ 2933.430754] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2933.436334] alloc_pages_current+0x173/0x350 [ 2933.440781] pipe_write+0x910/0xec0 [ 2933.444435] __vfs_write+0x6b8/0x9f0 [ 2933.448159] ? kernel_read+0x120/0x120 [ 2933.452055] ? apparmor_path_rmdir+0x30/0x30 [ 2933.456468] ? trace_hardirqs_off_caller+0x310/0x310 [ 2933.461582] ? lock_release+0xa00/0xa00 [ 2933.465589] ? apparmor_file_permission+0x24/0x30 [ 2933.470465] ? rw_verify_area+0x118/0x360 [ 2933.474640] vfs_write+0x1fc/0x560 [ 2933.478199] ksys_write+0x101/0x260 [ 2933.481845] ? __ia32_sys_read+0xb0/0xb0 [ 2933.485913] ? trace_hardirqs_off_caller+0x310/0x310 [ 2933.491049] __x64_sys_write+0x73/0xb0 [ 2933.494945] do_syscall_64+0x1b9/0x820 [ 2933.498838] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2933.504213] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2933.509151] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2933.513997] ? trace_hardirqs_on_caller+0x310/0x310 [ 2933.519019] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2933.524041] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2933.529071] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2933.533934] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2933.539144] RIP: 0033:0x457679 [ 2933.542374] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2933.561282] RSP: 002b:00007f9b6905ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2933.568993] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457679 [ 2933.576279] RDX: 000000010000014c RSI: 0000000020000340 RDI: 0000000000000006 [ 2933.583552] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2933.590852] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9b6905f6d4 [ 2933.598135] R13: 00000000004c2db5 R14: 00000000004da348 R15: 00000000ffffffff [ 2933.751740] Task in /syz0 killed as a result of limit of /syz0 [ 2933.759149] memory: usage 307200kB, limit 307200kB, failcnt 1330 [ 2933.772477] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2933.786442] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2933.800084] Memory cgroup stats for /syz0: cache:264KB rss:269916KB rss_huge:249856KB shmem:172KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:28KB active_anon:270128KB inactive_file:4KB active_file:0KB unevictable:28KB [ 2933.846403] Memory cgroup out of memory: Kill process 17765 (syz-executor0) score 128 or sacrifice child [ 2934.006415] Killed process 17765 (syz-executor0) total-vm:70868kB, anon-rss:6500kB, file-rss:32768kB, shmem-rss:0kB 10:37:46 executing program 4: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) 10:37:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)={0x20, 0x0, 0x10000001, 0x800000001, 0x0, 0x0, {0x2}, [@nested={0xc, 0x2, [@typed={0x8, 0x1, @ipv4=@multicast2}]}]}, 0x20}}, 0x0) 10:37:46 executing program 2: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 10:37:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000240)={0x0, @aes128, 0x0, "9f821cb522602d76"}) clock_gettime(0x0, &(0x7f0000000300)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000880)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @rand_addr=0xffffffff}}}, 0x118) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000340)={0x4, 0x5, 0x7, 0x40, 'syz0\x00', 0x4}) pkey_alloc(0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r2, 0xc, 0x3ac4fcca1db8937d}, 0x14) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000003fdfaab8712fc0b6783d402d98f2bf77e558926d51c2905d2fc4c41c6d52dce5987d38570fc705b1af0519332f576ca3ae777f2e56bce711c10004972513a54d8f3e677d"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000100)={0x1, 0x10, &(0x7f0000000780), {0x7c4, 0x3, 0x32344d59, 0x7, 0x0, 0x8, 0xb}}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) mlock(&(0x7f0000fe6000/0x4000)=nil, 0x4000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000580), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000640)) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendto$inet(r4, &(0x7f0000000280)="a4255b9792e3822627c72401453c60f249552cac0eb9542deea672cbc1374a3aeb00c8f3cd75b7d04478caf9f14ef383978fe5fff1ffd20d9a1645b348bb30", 0x3f, 0x4091, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}) clone(0x200000, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000380)=0x100000000, 0x4) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000100000000000000000000000000000000000000000000000000000000000000000000024000000000000000000"]) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000000004005, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x4}, 0x68) [ 2934.058629] oom_reaper: reaped process 17765 (syz-executor0), now anon-rss:0kB, file-rss:32064kB, shmem-rss:0kB 10:37:46 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = memfd_create(&(0x7f0000000100)='\x00', 0x4) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000280)) socket(0x1e, 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000500)={{0x0, 0xffffffffffffffc1}, {0x5, 0x7f}, 0x2, 0x2, 0xfffffffffffffffe}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000380)={0x10001, "468f177474ef0c1ee091b76f9212e1c7a2c35f9cc96ea909a71f672413cb2a30", 0x0, 0x0, 0x8, 0x9, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000300)={0x0, 0xefcf}, &(0x7f0000000340)=0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000080)={&(0x7f00000002c0)={0xfffffffffffffffe}, 0x8}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/202, 0xca}, {0x0}], 0x2, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 10:37:46 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) r2 = dup2(r1, r1) write$P9_RMKNOD(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 2934.139607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor1'. [ 2934.166332] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 10:37:46 executing program 1: clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='#9'], 0x2) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 2934.301108] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2934.411674] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2934.441729] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2934.454287] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! 10:37:46 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) r2 = dup2(r1, r1) write$P9_RMKNOD(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 2934.574357] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2934.684946] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 10:37:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000240)=@setlink={0x24, 0x13, 0x21, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) 10:37:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000a80)) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280)) listen(r1, 0x4) r3 = getpgrp(0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2, r3}) r4 = dup2(r1, r1) socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000600)=0x74) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={0x0, 0x9, 0x5171, 0x1, 0xffffffffffffffff, 0x8, 0x2, 0x1, {0x0, @in={{0x2, 0x4e20}}, 0x5, 0x7, 0xff, 0x9565, 0x9}}, &(0x7f0000000740)=0xb0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB="00faa0696b6a8d0eb02e59c19e4700000000005f6145dc1b142ab231c7339bb87beac06e592191"], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000002b40)={0x0, 0x3c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e20, 0x9, @empty, 0x5}, @in={0x2, 0x4e22}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000002b80)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002bc0)={0x0, 0x6}, &(0x7f0000002c00)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000034c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x8f3, 0x7}, &(0x7f0000003580)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000003a00)={r6, 0x2b, "fdcef11d3b1bee399f5d36437cfa59f9b99f0ff5131b57b65226bd49a6998931585e82365eb67b2f1ac729"}, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000003b00)=[{&(0x7f0000003680)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000003940)="f2d6ec35a9d5f1321ea5720cb9ae9ac9d75d4f7896486379d6431e3119ed432012707f113cd9b0275fb8384e2a16b54f1f3dd711b4775d4332970d61ea82ee0339a2bd92929bf6ebfe", 0x49}], 0x1, 0x0, 0x0, 0x81}], 0x1, 0x400c840) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) pipe2(&(0x7f0000000140), 0x800) sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="36c8943c28671b7f9c795e5cbe8623677d49880feaf567b54731815da75d796dbaa16b5d61608fb99643587a8536108b644572fa441593839b5ea0207851478e017ae78c92e5d1f05beca550650c5ae19ffcacf193332742c25879e8850300000000000000580dc8a540398dc50e1388c8b391f904d1aa31148f9621476885aa"], 0x80) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)=0x1) dup3(r0, r7, 0x80000) [ 2934.832487] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! 10:37:47 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) r2 = dup2(r1, r1) write$P9_RMKNOD(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 2935.051918] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2935.058917] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! 10:37:47 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = memfd_create(&(0x7f0000000100)='\x00', 0x4) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000280)) socket(0x1e, 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000500)={{0x0, 0xffffffffffffffc1}, {0x5, 0x7f}, 0x2, 0x2, 0xfffffffffffffffe}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000380)={0x10001, "468f177474ef0c1ee091b76f9212e1c7a2c35f9cc96ea909a71f672413cb2a30", 0x0, 0x0, 0x8, 0x9, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000300)={0x0, 0xefcf}, &(0x7f0000000340)=0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000080)={&(0x7f00000002c0)={0xfffffffffffffffe}, 0x8}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/202, 0xca}, {0x0}], 0x2, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 10:37:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000a80)) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280)) listen(r1, 0x4) r3 = getpgrp(0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2, r3}) r4 = dup2(r1, r1) socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000600)=0x74) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={0x0, 0x9, 0x5171, 0x1, 0xffffffffffffffff, 0x8, 0x2, 0x1, {0x0, @in={{0x2, 0x4e20}}, 0x5, 0x7, 0xff, 0x9565, 0x9}}, &(0x7f0000000740)=0xb0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB="00faa0696b6a8d0eb02e59c19e4700000000005f6145dc1b142ab231c7339bb87beac06e592191"], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000002b40)={0x0, 0x3c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e20, 0x9, @empty, 0x5}, @in={0x2, 0x4e22}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000002b80)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002bc0)={0x0, 0x6}, &(0x7f0000002c00)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000034c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x8f3, 0x7}, &(0x7f0000003580)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000003a00)={r6, 0x2b, "fdcef11d3b1bee399f5d36437cfa59f9b99f0ff5131b57b65226bd49a6998931585e82365eb67b2f1ac729"}, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000003b00)=[{&(0x7f0000003680)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000003940)="f2d6ec35a9d5f1321ea5720cb9ae9ac9d75d4f7896486379d6431e3119ed432012707f113cd9b0275fb8384e2a16b54f1f3dd711b4775d4332970d61ea82ee0339a2bd92929bf6ebfe", 0x49}], 0x1, 0x0, 0x0, 0x81}], 0x1, 0x400c840) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) pipe2(&(0x7f0000000140), 0x800) sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="36c8943c28671b7f9c795e5cbe8623677d49880feaf567b54731815da75d796dbaa16b5d61608fb99643587a8536108b644572fa441593839b5ea0207851478e017ae78c92e5d1f05beca550650c5ae19ffcacf193332742c25879e8850300000000000000580dc8a540398dc50e1388c8b391f904d1aa31148f9621476885aa"], 0x80) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)=0x1) dup3(r0, r7, 0x80000) 10:37:48 executing program 3: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0) write(r1, &(0x7f0000c34fff), 0xffffff0b) r2 = dup2(r1, r1) write$P9_RMKNOD(r2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) [ 2936.169711] syz-executor0 invoked oom-killer: gfp_mask=0x7200c2(GFP_HIGHUSER|__GFP_ACCOUNT), nodemask=(null), order=0, oom_score_adj=0 [ 2936.196252] syz-executor0 cpuset=syz0 mems_allowed=0 [ 2936.207434] CPU: 0 PID: 17839 Comm: syz-executor0 Not tainted 4.20.0-rc6+ #371 [ 2936.214810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2936.224167] Call Trace: [ 2936.226792] dump_stack+0x244/0x39d [ 2936.230446] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2936.235681] dump_header+0x27b/0xf72 [ 2936.239441] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2936.244993] ? check_preemption_disabled+0x48/0x280 [ 2936.250024] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2936.255582] ? pagefault_out_of_memory+0x197/0x197 [ 2936.260528] ? debug_smp_processor_id+0x1c/0x20 [ 2936.265219] ? perf_trace_lock+0x14d/0x7a0 [ 2936.269519] ? debug_smp_processor_id+0x1c/0x20 [ 2936.274205] ? perf_trace_lock_acquire+0x15b/0x800 [ 2936.279169] ? lock_is_held_type+0x210/0x210 [ 2936.283595] ? perf_trace_lock+0x7a0/0x7a0 [ 2936.287849] ? debug_smp_processor_id+0x1c/0x20 [ 2936.292529] ? perf_trace_lock+0x14d/0x7a0 [ 2936.296804] ? zap_class+0x640/0x640 [ 2936.300531] ? print_usage_bug+0xc0/0xc0 [ 2936.304609] ? lock_is_held_type+0x210/0x210 [ 2936.309083] ? perf_trace_lock+0x7a0/0x7a0 [ 2936.313361] ? find_held_lock+0x36/0x1c0 [ 2936.317453] ? mark_held_locks+0xc7/0x130 [ 2936.321626] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2936.326746] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2936.331868] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2936.336463] ? trace_hardirqs_on+0xbd/0x310 [ 2936.340831] ? kasan_check_read+0x11/0x20 [ 2936.345010] ? ___ratelimit+0x3b4/0x672 [ 2936.349030] ? trace_hardirqs_off_caller+0x310/0x310 [ 2936.354160] ? trace_hardirqs_on+0x310/0x310 [ 2936.358594] ? lock_downgrade+0x900/0x900 [ 2936.362760] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2936.367892] ? ___ratelimit+0x3b9/0x672 [ 2936.371891] ? idr_get_free+0xf70/0xf70 [ 2936.375893] ? _raw_spin_unlock_irq+0x27/0x80 [ 2936.380454] ? _raw_spin_unlock_irq+0x27/0x80 [ 2936.384985] oom_kill_process.cold.27+0x10/0x903 [ 2936.389774] ? _raw_spin_unlock_irq+0x27/0x80 [ 2936.394305] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2936.398916] ? oom_evaluate_task+0x540/0x540 [ 2936.403342] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2936.408929] ? cgroup_procs_next+0x70/0x70 [ 2936.413187] ? _raw_spin_unlock_irq+0x60/0x80 [ 2936.417705] ? oom_badness+0xaa0/0xaa0 [ 2936.421614] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2936.426399] ? mem_cgroup_iter_break+0x30/0x30 [ 2936.431019] ? mark_held_locks+0xc7/0x130 [ 2936.435201] out_of_memory+0xa84/0x1430 [ 2936.439237] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2936.443848] ? kasan_check_read+0x11/0x20 [ 2936.448017] ? oom_killer_disable+0x3a0/0x3a0 [ 2936.452555] mem_cgroup_out_of_memory+0x15e/0x210 [ 2936.457420] ? memory_oom_group_write+0x160/0x160 [ 2936.462287] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2936.467169] ? page_counter_try_charge+0x1c1/0x220 [ 2936.472118] try_charge+0xda9/0x1700 [ 2936.475884] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2936.480577] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2936.485516] ? kasan_check_read+0x11/0x20 [ 2936.489681] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2936.494975] ? rcu_softirq_qs+0x20/0x20 [ 2936.498985] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2936.504536] ? debug_smp_processor_id+0x1c/0x20 [ 2936.509246] ? perf_trace_lock+0x14d/0x7a0 [ 2936.513506] ? lock_page_memcg+0x350/0x350 [ 2936.513544] ? lock_acquire+0x1ed/0x520 [ 2936.513563] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2936.513585] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2936.532665] ? check_preemption_disabled+0x48/0x280 [ 2936.537711] memcg_kmem_charge_memcg+0x7c/0x120 [ 2936.542394] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2936.546920] memcg_kmem_charge+0x149/0x350 [ 2936.551176] __alloc_pages_nodemask+0x75e/0xea0 [ 2936.555873] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 2936.560928] ? perf_trace_sched_process_exec+0x860/0x860 [ 2936.566405] ? kasan_check_write+0x14/0x20 [ 2936.570654] ? copyin+0xb7/0x100 [ 2936.574044] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2936.579080] ? copy_page_from_iter+0x541/0x8f0 [ 2936.583720] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2936.589288] alloc_pages_current+0x173/0x350 [ 2936.593718] pipe_write+0x910/0xec0 [ 2936.597380] __vfs_write+0x6b8/0x9f0 [ 2936.601117] ? kernel_read+0x120/0x120 [ 2936.605024] ? apparmor_path_rmdir+0x30/0x30 [ 2936.609450] ? trace_hardirqs_off_caller+0x310/0x310 [ 2936.614568] ? lock_release+0xa00/0xa00 [ 2936.618570] ? apparmor_file_permission+0x24/0x30 [ 2936.623435] ? rw_verify_area+0x118/0x360 [ 2936.627602] vfs_write+0x1fc/0x560 [ 2936.631165] ksys_write+0x101/0x260 [ 2936.634811] ? __ia32_sys_read+0xb0/0xb0 [ 2936.638888] ? trace_hardirqs_off_caller+0x310/0x310 [ 2936.644018] __x64_sys_write+0x73/0xb0 [ 2936.647921] do_syscall_64+0x1b9/0x820 [ 2936.651817] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2936.657196] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2936.662151] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2936.667010] ? trace_hardirqs_on_caller+0x310/0x310 [ 2936.672079] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 2936.677110] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2936.682148] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2936.687008] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2936.692202] RIP: 0033:0x457679 [ 2936.695424] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2936.714331] RSP: 002b:00007f9b6905ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2936.722059] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457679 [ 2936.729385] RDX: 000000010000014c RSI: 0000000020000340 RDI: 0000000000000006 [ 2936.736659] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2936.743935] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9b6905f6d4 [ 2936.751213] R13: 00000000004c2db5 R14: 00000000004da348 R15: 00000000ffffffff [ 2936.761992] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 2936.790493] Task in /syz0 killed as a result of limit of /syz0 [ 2936.821882] memory: usage 307200kB, limit 307200kB, failcnt 1383 [ 2936.838118] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2936.850945] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2936.861376] Memory cgroup stats for /syz0: cache:264KB rss:270228KB rss_huge:249856KB shmem:172KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:28KB active_anon:270368KB inactive_file:4KB active_file:0KB unevictable:28KB [ 2936.891102] Memory cgroup out of memory: Kill process 17838 (syz-executor0) score 129 or sacrifice child [ 2936.906189] Killed process 17838 (syz-executor0) total-vm:70472kB, anon-rss:6764kB, file-rss:32768kB, shmem-rss:0kB [ 2936.927475] oom_reaper: reaped process 17838 (syz-executor0), now anon-rss:0kB, file-rss:32000kB, shmem-rss:0kB 10:37:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000a80)) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280)) listen(r1, 0x4) r3 = getpgrp(0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2, r3}) r4 = dup2(r1, r1) socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000600)=0x74) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={0x0, 0x9, 0x5171, 0x1, 0xffffffffffffffff, 0x8, 0x2, 0x1, {0x0, @in={{0x2, 0x4e20}}, 0x5, 0x7, 0xff, 0x9565, 0x9}}, &(0x7f0000000740)=0xb0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB="00faa0696b6a8d0eb02e59c19e4700000000005f6145dc1b142ab231c7339bb87beac06e592191"], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000002b40)={0x0, 0x3c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e20, 0x9, @empty, 0x5}, @in={0x2, 0x4e22}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000002b80)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002bc0)={0x0, 0x6}, &(0x7f0000002c00)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000034c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x8f3, 0x7}, &(0x7f0000003580)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000003a00)={r6, 0x2b, "fdcef11d3b1bee399f5d36437cfa59f9b99f0ff5131b57b65226bd49a6998931585e82365eb67b2f1ac729"}, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000003b00)=[{&(0x7f0000003680)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000003940)="f2d6ec35a9d5f1321ea5720cb9ae9ac9d75d4f7896486379d6431e3119ed432012707f113cd9b0275fb8384e2a16b54f1f3dd711b4775d4332970d61ea82ee0339a2bd92929bf6ebfe", 0x49}], 0x1, 0x0, 0x0, 0x81}], 0x1, 0x400c840) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) pipe2(&(0x7f0000000140), 0x800) sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="36c8943c28671b7f9c795e5cbe8623677d49880feaf567b54731815da75d796dbaa16b5d61608fb99643587a8536108b644572fa441593839b5ea0207851478e017ae78c92e5d1f05beca550650c5ae19ffcacf193332742c25879e8850300000000000000580dc8a540398dc50e1388c8b391f904d1aa31148f9621476885aa"], 0x80) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)=0x1) dup3(r0, r7, 0x80000) 10:37:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000a80)) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280)) listen(r1, 0x4) r3 = getpgrp(0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2, r3}) r4 = dup2(r1, r1) socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000600)=0x74) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={0x0, 0x9, 0x5171, 0x1, 0xffffffffffffffff, 0x8, 0x2, 0x1, {0x0, @in={{0x2, 0x4e20}}, 0x5, 0x7, 0xff, 0x9565, 0x9}}, &(0x7f0000000740)=0xb0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB="00faa0696b6a8d0eb02e59c19e4700000000005f6145dc1b142ab231c7339bb87beac06e592191"], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000002b40)={0x0, 0x3c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e20, 0x9, @empty, 0x5}, @in={0x2, 0x4e22}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000002b80)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002bc0)={0x0, 0x6}, &(0x7f0000002c00)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000034c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x8f3, 0x7}, &(0x7f0000003580)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000003a00)={r6, 0x2b, "fdcef11d3b1bee399f5d36437cfa59f9b99f0ff5131b57b65226bd49a6998931585e82365eb67b2f1ac729"}, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000003b00)=[{&(0x7f0000003680)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000003940)="f2d6ec35a9d5f1321ea5720cb9ae9ac9d75d4f7896486379d6431e3119ed432012707f113cd9b0275fb8384e2a16b54f1f3dd711b4775d4332970d61ea82ee0339a2bd92929bf6ebfe", 0x49}], 0x1, 0x0, 0x0, 0x81}], 0x1, 0x400c840) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) pipe2(&(0x7f0000000140), 0x800) sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="36c8943c28671b7f9c795e5cbe8623677d49880feaf567b54731815da75d796dbaa16b5d61608fb99643587a8536108b644572fa441593839b5ea0207851478e017ae78c92e5d1f05beca550650c5ae19ffcacf193332742c25879e8850300000000000000580dc8a540398dc50e1388c8b391f904d1aa31148f9621476885aa"], 0x80) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)=0x1) dup3(r0, r7, 0x80000) 10:37:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000240)={0x0, @aes128, 0x0, "9f821cb522602d76"}) clock_gettime(0x0, &(0x7f0000000300)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000880)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @rand_addr=0xffffffff}}}, 0x118) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000340)={0x4, 0x5, 0x7, 0x40, 'syz0\x00', 0x4}) pkey_alloc(0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r2, 0xc, 0x3ac4fcca1db8937d}, 0x14) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000003fdfaab8712fc0b6783d402d98f2bf77e558926d51c2905d2fc4c41c6d52dce5987d38570fc705b1af0519332f576ca3ae777f2e56bce711c10004972513a54d8f3e677d"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000100)={0x1, 0x10, &(0x7f0000000780), {0x7c4, 0x3, 0x32344d59, 0x7, 0x0, 0x8, 0xb}}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) mlock(&(0x7f0000fe6000/0x4000)=nil, 0x4000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000580), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000640)) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendto$inet(r4, &(0x7f0000000280)="a4255b9792e3822627c72401453c60f249552cac0eb9542deea672cbc1374a3aeb00c8f3cd75b7d04478caf9f14ef383978fe5fff1ffd20d9a1645b348bb30", 0x3f, 0x4091, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}) clone(0x200000, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000380)=0x100000000, 0x4) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000100000000000000000000000000000000000000000000000000000000000000000000024000000000000000000"]) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000000004005, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x4}, 0x68) 10:37:49 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 10:37:49 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0xb, 0x32, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140, 0xffffdd86]}, @local={0xfe, 0x80, [0xd]}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 10:37:49 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = memfd_create(&(0x7f0000000100)='\x00', 0x4) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000280)) socket(0x1e, 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000500)={{0x0, 0xffffffffffffffc1}, {0x5, 0x7f}, 0x2, 0x2, 0xfffffffffffffffe}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000380)={0x10001, "468f177474ef0c1ee091b76f9212e1c7a2c35f9cc96ea909a71f672413cb2a30", 0x0, 0x0, 0x8, 0x9, 0x8}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000300)={0x0, 0xefcf}, &(0x7f0000000340)=0x8) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000080)={&(0x7f00000002c0)={0xfffffffffffffffe}, 0x8}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/202, 0xca}, {0x0}], 0x2, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 2937.329012] syz-executor5 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 2937.412918] syz-executor5 cpuset=syz5 mems_allowed=0 [ 2937.432555] CPU: 0 PID: 17859 Comm: syz-executor5 Not tainted 4.20.0-rc6+ #371 [ 2937.439934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2937.449294] Call Trace: [ 2937.451931] dump_stack+0x244/0x39d [ 2937.455577] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2937.460793] dump_header+0x27b/0xf72 [ 2937.464529] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2937.470099] ? check_preemption_disabled+0x48/0x280 [ 2937.475141] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2937.480708] ? pagefault_out_of_memory+0x197/0x197 [ 2937.485649] ? debug_smp_processor_id+0x1c/0x20 [ 2937.490336] ? perf_trace_lock+0x14d/0x7a0 [ 2937.494590] ? debug_smp_processor_id+0x1c/0x20 [ 2937.499281] ? perf_trace_lock_acquire+0x15b/0x800 [ 2937.504238] ? lock_is_held_type+0x210/0x210 [ 2937.508680] ? perf_trace_lock+0x7a0/0x7a0 [ 2937.512950] ? debug_smp_processor_id+0x1c/0x20 [ 2937.517651] ? perf_trace_lock+0x14d/0x7a0 [ 2937.521901] ? zap_class+0x640/0x640 [ 2937.525646] ? print_usage_bug+0xc0/0xc0 [ 2937.529735] ? lock_is_held_type+0x210/0x210 [ 2937.534190] ? perf_trace_lock+0x7a0/0x7a0 [ 2937.538449] ? find_held_lock+0x36/0x1c0 [ 2937.542540] ? mark_held_locks+0xc7/0x130 [ 2937.546721] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2937.551834] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2937.556984] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2937.561579] ? trace_hardirqs_on+0xbd/0x310 [ 2937.565911] ? kasan_check_read+0x11/0x20 [ 2937.570068] ? ___ratelimit+0x3b4/0x672 [ 2937.574057] ? trace_hardirqs_off_caller+0x310/0x310 [ 2937.579193] ? trace_hardirqs_on+0x310/0x310 [ 2937.583663] ? lock_downgrade+0x900/0x900 [ 2937.587832] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2937.592952] ? ___ratelimit+0x3b9/0x672 [ 2937.596940] ? idr_get_free+0xf70/0xf70 [ 2937.600919] ? _raw_spin_unlock_irq+0x27/0x80 [ 2937.605469] ? _raw_spin_unlock_irq+0x27/0x80 [ 2937.609990] oom_kill_process.cold.27+0x10/0x903 [ 2937.614765] ? _raw_spin_unlock_irq+0x27/0x80 [ 2937.619324] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2937.623935] ? oom_evaluate_task+0x540/0x540 [ 2937.628357] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2937.633917] ? cgroup_procs_next+0x70/0x70 [ 2937.638171] ? _raw_spin_unlock_irq+0x60/0x80 [ 2937.642678] ? oom_badness+0xaa0/0xaa0 [ 2937.646582] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2937.651372] ? mem_cgroup_iter_break+0x30/0x30 [ 2937.655987] ? mark_held_locks+0xc7/0x130 [ 2937.660159] out_of_memory+0xa84/0x1430 [ 2937.664148] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2937.668758] ? kasan_check_read+0x11/0x20 [ 2937.672942] ? oom_killer_disable+0x3a0/0x3a0 [ 2937.677476] mem_cgroup_out_of_memory+0x15e/0x210 [ 2937.682349] ? memory_oom_group_write+0x160/0x160 [ 2937.687202] ? mem_cgroup_try_charge+0x627/0xe20 [ 2937.691993] ? page_counter_try_charge+0x1c1/0x220 [ 2937.696936] try_charge+0xda9/0x1700 [ 2937.700687] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2937.705630] ? kasan_check_read+0x11/0x20 [ 2937.709804] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2937.714504] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2937.720064] ? lock_page_memcg+0x350/0x350 [ 2937.724322] ? lock_acquire+0x1ed/0x520 [ 2937.728314] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2937.733695] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2937.739269] ? check_preemption_disabled+0x48/0x280 [ 2937.744312] ? kasan_check_read+0x11/0x20 [ 2937.748483] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2937.753775] ? rcu_softirq_qs+0x20/0x20 [ 2937.757788] mem_cgroup_try_charge+0x627/0xe20 [ 2937.762388] ? __anon_vma_prepare+0x325/0x6c0 [ 2937.766905] ? mem_cgroup_protected+0xa60/0xa60 [ 2937.771596] ? up_write+0x7b/0x220 [ 2937.775155] ? down_write_nested+0x130/0x130 [ 2937.779610] ? __anon_vma_prepare+0x353/0x6c0 [ 2937.784140] ? anon_vma_fork+0x820/0x820 [ 2937.788212] ? mark_held_locks+0x130/0x130 [ 2937.792480] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2937.798047] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2937.802994] __handle_mm_fault+0x2854/0x5be0 [ 2937.807424] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2937.812286] ? lock_is_held_type+0x210/0x210 [ 2937.816714] ? perf_trace_lock+0x7a0/0x7a0 [ 2937.820994] ? perf_trace_lock+0x7a0/0x7a0 [ 2937.825268] ? lock_downgrade+0x900/0x900 [ 2937.829445] ? zap_class+0x640/0x640 [ 2937.833172] ? zap_class+0x640/0x640 [ 2937.836902] ? find_held_lock+0x36/0x1c0 [ 2937.840982] ? handle_mm_fault+0x42a/0xc70 [ 2937.845249] ? lock_downgrade+0x900/0x900 [ 2937.849417] ? check_preemption_disabled+0x48/0x280 [ 2937.854455] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2937.859399] ? kasan_check_read+0x11/0x20 [ 2937.863575] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2937.868884] ? rcu_softirq_qs+0x20/0x20 [ 2937.872890] ? trace_hardirqs_off_caller+0x310/0x310 [ 2937.878016] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2937.883582] ? sync_mm_rss+0x9a/0x1c0 [ 2937.887398] handle_mm_fault+0x54f/0xc70 [ 2937.891476] ? __handle_mm_fault+0x5be0/0x5be0 [ 2937.896078] ? find_vma+0x34/0x190 [ 2937.899650] __do_page_fault+0x5e8/0xe60 [ 2937.903739] ? trace_hardirqs_off+0xb8/0x310 [ 2937.908169] do_page_fault+0xf2/0x7e0 [ 2937.911984] ? vmalloc_sync_all+0x30/0x30 [ 2937.916144] ? error_entry+0x70/0xd0 [ 2937.919886] ? trace_hardirqs_off_caller+0xbb/0x310 [ 2937.924934] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2937.929878] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2937.934825] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2937.939683] ? trace_hardirqs_on_caller+0x310/0x310 [ 2937.944716] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2937.950206] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2937.955269] ? page_fault+0x8/0x30 [ 2937.958825] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2937.963690] ? page_fault+0x8/0x30 [ 2937.967262] page_fault+0x1e/0x30 [ 2937.970728] RIP: 0033:0x40ed8f [ 2937.973935] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 2937.992873] RSP: 002b:0000000000a3fb10 EFLAGS: 00010206 [ 2937.998743] RAX: 00007f4e4aa68000 RBX: 0000000000020000 RCX: 00000000004576ca [ 2938.006020] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 10:37:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000a80)) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280)) listen(r1, 0x4) r3 = getpgrp(0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2, r3}) r4 = dup2(r1, r1) socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000600)=0x74) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={0x0, 0x9, 0x5171, 0x1, 0xffffffffffffffff, 0x8, 0x2, 0x1, {0x0, @in={{0x2, 0x4e20}}, 0x5, 0x7, 0xff, 0x9565, 0x9}}, &(0x7f0000000740)=0xb0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB="00faa0696b6a8d0eb02e59c19e4700000000005f6145dc1b142ab231c7339bb87beac06e592191"], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000002b40)={0x0, 0x3c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e20, 0x9, @empty, 0x5}, @in={0x2, 0x4e22}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000002b80)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002bc0)={0x0, 0x6}, &(0x7f0000002c00)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000034c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x8f3, 0x7}, &(0x7f0000003580)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000003a00)={r6, 0x2b, "fdcef11d3b1bee399f5d36437cfa59f9b99f0ff5131b57b65226bd49a6998931585e82365eb67b2f1ac729"}, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000003b00)=[{&(0x7f0000003680)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000003940)="f2d6ec35a9d5f1321ea5720cb9ae9ac9d75d4f7896486379d6431e3119ed432012707f113cd9b0275fb8384e2a16b54f1f3dd711b4775d4332970d61ea82ee0339a2bd92929bf6ebfe", 0x49}], 0x1, 0x0, 0x0, 0x81}], 0x1, 0x400c840) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) pipe2(&(0x7f0000000140), 0x800) sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="36c8943c28671b7f9c795e5cbe8623677d49880feaf567b54731815da75d796dbaa16b5d61608fb99643587a8536108b644572fa441593839b5ea0207851478e017ae78c92e5d1f05beca550650c5ae19ffcacf193332742c25879e8850300000000000000580dc8a540398dc50e1388c8b391f904d1aa31148f9621476885aa"], 0x80) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)=0x1) dup3(r0, r7, 0x80000) 10:37:50 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 10:37:50 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000a80)) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280)) listen(r1, 0x4) r3 = getpgrp(0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2, r3}) r4 = dup2(r1, r1) socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000600)=0x74) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={0x0, 0x9, 0x5171, 0x1, 0xffffffffffffffff, 0x8, 0x2, 0x1, {0x0, @in={{0x2, 0x4e20}}, 0x5, 0x7, 0xff, 0x9565, 0x9}}, &(0x7f0000000740)=0xb0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB="00faa0696b6a8d0eb02e59c19e4700000000005f6145dc1b142ab231c7339bb87beac06e592191"], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000002b40)={0x0, 0x3c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e20, 0x9, @empty, 0x5}, @in={0x2, 0x4e22}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000002b80)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002bc0)={0x0, 0x6}, &(0x7f0000002c00)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000034c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x8f3, 0x7}, &(0x7f0000003580)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000003a00)={r6, 0x2b, "fdcef11d3b1bee399f5d36437cfa59f9b99f0ff5131b57b65226bd49a6998931585e82365eb67b2f1ac729"}, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000003b00)=[{&(0x7f0000003680)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000003940)="f2d6ec35a9d5f1321ea5720cb9ae9ac9d75d4f7896486379d6431e3119ed432012707f113cd9b0275fb8384e2a16b54f1f3dd711b4775d4332970d61ea82ee0339a2bd92929bf6ebfe", 0x49}], 0x1, 0x0, 0x0, 0x81}], 0x1, 0x400c840) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) pipe2(&(0x7f0000000140), 0x800) sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="36c8943c28671b7f9c795e5cbe8623677d49880feaf567b54731815da75d796dbaa16b5d61608fb99643587a8536108b644572fa441593839b5ea0207851478e017ae78c92e5d1f05beca550650c5ae19ffcacf193332742c25879e8850300000000000000580dc8a540398dc50e1388c8b391f904d1aa31148f9621476885aa"], 0x80) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)=0x1) dup3(r0, r7, 0x80000) [ 2938.013301] RBP: 0000000000a3fbf0 R08: ffffffffffffffff R09: 0000000000000000 [ 2938.020584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a3fcd0 [ 2938.027860] R13: 00007f4e4aa88700 R14: 000000000072bfac R15: 000000000072bfac 10:37:50 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) get_mempolicy(0x0, 0x0, 0x90, &(0x7f0000548000/0x2000)=nil, 0x3) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 10:37:50 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000a80)) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280)) listen(r1, 0x4) r3 = getpgrp(0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2, r3}) r4 = dup2(r1, r1) socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000600)=0x74) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)='/dev/amidi#\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000680)={0x0, 0x9, 0x5171, 0x1, 0xffffffffffffffff, 0x8, 0x2, 0x1, {0x0, @in={{0x2, 0x4e20}}, 0x5, 0x7, 0xff, 0x9565, 0x9}}, &(0x7f0000000740)=0xb0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000380)=ANY=[@ANYBLOB="00faa0696b6a8d0eb02e59c19e4700000000005f6145dc1b142ab231c7339bb87beac06e592191"], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000002b40)={0x0, 0x3c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e20, 0x9, @empty, 0x5}, @in={0x2, 0x4e22}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000002b80)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000002bc0)={0x0, 0x6}, &(0x7f0000002c00)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000034c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x8f3, 0x7}, &(0x7f0000003580)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000003a00)={r6, 0x2b, "fdcef11d3b1bee399f5d36437cfa59f9b99f0ff5131b57b65226bd49a6998931585e82365eb67b2f1ac729"}, 0x0) sendmmsg$inet_sctp(r4, &(0x7f0000003b00)=[{&(0x7f0000003680)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f00000039c0)=[{&(0x7f0000003940)="f2d6ec35a9d5f1321ea5720cb9ae9ac9d75d4f7896486379d6431e3119ed432012707f113cd9b0275fb8384e2a16b54f1f3dd711b4775d4332970d61ea82ee0339a2bd92929bf6ebfe", 0x49}], 0x1, 0x0, 0x0, 0x81}], 0x1, 0x400c840) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) pipe2(&(0x7f0000000140), 0x800) sendto$inet6(r5, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="36c8943c28671b7f9c795e5cbe8623677d49880feaf567b54731815da75d796dbaa16b5d61608fb99643587a8536108b644572fa441593839b5ea0207851478e017ae78c92e5d1f05beca550650c5ae19ffcacf193332742c25879e8850300000000000000580dc8a540398dc50e1388c8b391f904d1aa31148f9621476885aa"], 0x80) r7 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)=0x1) dup3(r0, r7, 0x80000) 10:37:50 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0xb, 0x32, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140, 0xffffdd86]}, @local={0xfe, 0x80, [0xd]}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 10:37:50 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0xb, 0x32, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140, 0xffffdd86]}, @local={0xfe, 0x80, [0xd]}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 10:37:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x1, 0x4) r1 = dup2(r0, r0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x6, @remote}, 0x1c) [ 2938.634335] Task in /syz5 killed as a result of limit of /syz5 [ 2938.640376] memory: usage 307168kB, limit 307200kB, failcnt 1627 [ 2938.659449] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2938.681366] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2938.690569] Memory cgroup stats for /syz5: cache:40KB rss:264768KB rss_huge:241664KB shmem:0KB mapped_file:0KB dirty:0KB writeback:132KB swap:0KB inactive_anon:16KB active_anon:264712KB inactive_file:0KB active_file:0KB unevictable:20KB [ 2938.740074] Memory cgroup out of memory: Kill process 17859 (syz-executor5) score 1113 or sacrifice child [ 2938.759196] Killed process 17859 (syz-executor5) total-vm:70472kB, anon-rss:4248kB, file-rss:33624kB, shmem-rss:0kB [ 2938.838355] oom_reaper: reaped process 17859 (syz-executor5), now anon-rss:8kB, file-rss:32792kB, shmem-rss:0kB [ 2938.945615] syz-executor5 invoked oom-killer: gfp_mask=0x7000c0(GFP_KERNEL_ACCOUNT), nodemask=(null), order=0, oom_score_adj=1000 [ 2938.960098] syz-executor5 cpuset=syz5 mems_allowed=0 [ 2938.966972] CPU: 1 PID: 17860 Comm: syz-executor5 Not tainted 4.20.0-rc6+ #371 [ 2938.974362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2938.983718] Call Trace: [ 2938.986339] dump_stack+0x244/0x39d [ 2938.989986] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2938.995203] dump_header+0x27b/0xf72 [ 2938.999285] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2939.003889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2939.009439] ? check_preemption_disabled+0x48/0x280 [ 2939.014469] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2939.020022] ? pagefault_out_of_memory+0x197/0x197 [ 2939.024967] ? print_usage_bug+0xc0/0xc0 [ 2939.029041] ? perf_trace_lock+0x14d/0x7a0 [ 2939.033288] ? debug_smp_processor_id+0x1c/0x20 [ 2939.037983] ? perf_trace_lock_acquire+0x15b/0x800 [ 2939.042944] ? lock_is_held_type+0x210/0x210 [ 2939.047365] ? perf_trace_lock+0x7a0/0x7a0 [ 2939.051627] ? print_usage_bug+0xc0/0xc0 [ 2939.055710] ? mark_held_locks+0xc7/0x130 [ 2939.059888] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2939.064659] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2939.069433] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2939.074029] ? retint_kernel+0x2d/0x2d [ 2939.077930] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2939.082881] ? mark_held_locks+0xc7/0x130 [ 2939.087044] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2939.091817] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2939.096409] ? retint_kernel+0x2d/0x2d [ 2939.100310] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2939.105259] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2939.110027] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2939.115497] ? retint_kernel+0x2d/0x2d [ 2939.119435] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2939.124210] ? retint_kernel+0x2d/0x2d [ 2939.128167] oom_kill_process.cold.27+0x10/0x903 [ 2939.132939] ? mark_held_locks+0xc7/0x130 [ 2939.137102] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2939.141871] ? oom_evaluate_task+0x540/0x540 [ 2939.146305] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2939.151251] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2939.156021] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2939.161482] ? _raw_spin_unlock_irq+0x60/0x80 [ 2939.166019] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2939.170794] ? retint_kernel+0x2d/0x2d [ 2939.174715] out_of_memory+0xa84/0x1430 [ 2939.178726] ? oom_killer_disable+0x3a0/0x3a0 [ 2939.183265] ? _raw_spin_unlock_irqrestore+0xaf/0xd0 [ 2939.188402] mem_cgroup_out_of_memory+0x15e/0x210 [ 2939.193280] ? memory_oom_group_write+0x160/0x160 [ 2939.198132] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2939.202993] ? page_counter_try_charge+0x1c1/0x220 [ 2939.207940] try_charge+0xda9/0x1700 [ 2939.211683] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2939.216365] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2939.221315] ? kasan_check_read+0x11/0x20 [ 2939.225472] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2939.230765] ? rcu_softirq_qs+0x20/0x20 [ 2939.234777] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2939.240325] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2939.245789] ? lock_page_memcg+0x350/0x350 [ 2939.250047] ? lock_acquire+0x1ed/0x520 [ 2939.254033] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2939.259412] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2939.264962] ? check_preemption_disabled+0x48/0x280 [ 2939.270019] memcg_kmem_charge_memcg+0x7c/0x120 [ 2939.274712] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2939.279245] memcg_kmem_charge+0x149/0x350 [ 2939.283527] __alloc_pages_nodemask+0x75e/0xea0 [ 2939.288229] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2939.292887] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 2939.297935] ? zap_class+0x640/0x640 [ 2939.301691] ? retint_kernel+0x2d/0x2d [ 2939.305604] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2939.311165] alloc_pages_current+0x173/0x350 [ 2939.315590] __get_free_pages+0xc/0x40 [ 2939.319488] mmu_topup_memory_caches+0x217/0x470 [ 2939.324331] ? kvm_inject_realmode_interrupt+0x260/0x260 [ 2939.329808] kvm_mmu_load+0x21/0x1290 [ 2939.333648] kvm_arch_vcpu_ioctl_run+0x2889/0x7320 [ 2939.338585] ? perf_trace_lock+0x14d/0x7a0 [ 2939.342830] ? perf_trace_lock_acquire+0x15b/0x800 [ 2939.347789] ? kvm_arch_vcpu_runnable+0x710/0x710 [ 2939.352640] ? zap_class+0x640/0x640 [ 2939.356367] ? mark_held_locks+0xc7/0x130 [ 2939.360541] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2939.365133] ? retint_kernel+0x2d/0x2d [ 2939.369057] ? find_held_lock+0x36/0x1c0 [ 2939.373175] ? get_task_pid+0x1ea/0x3b0 [ 2939.377178] ? lock_downgrade+0x900/0x900 [ 2939.381336] ? check_preemption_disabled+0x48/0x280 [ 2939.386370] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2939.391307] ? kasan_check_read+0x11/0x20 [ 2939.395463] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2939.400753] ? rcu_softirq_qs+0x20/0x20 [ 2939.404765] ? get_task_pid+0x211/0x3b0 [ 2939.408785] ? find_get_pid+0x270/0x270 [ 2939.412786] ? mark_held_locks+0x130/0x130 [ 2939.417042] kvm_vcpu_ioctl+0x5c8/0x1150 [ 2939.421115] ? kvm_vcpu_ioctl+0x5c8/0x1150 [ 2939.425369] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 2939.431093] ? find_held_lock+0x36/0x1c0 [ 2939.435177] ? __fget+0x4aa/0x740 [ 2939.438662] ? check_preemption_disabled+0x48/0x280 [ 2939.443698] ? kasan_check_read+0x11/0x20 [ 2939.447870] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2939.453155] ? rcu_softirq_qs+0x20/0x20 [ 2939.457159] ? __fget+0x4d1/0x740 [ 2939.460646] ? ksys_dup3+0x680/0x680 [ 2939.464382] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2939.469151] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2939.473934] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 2939.479659] do_vfs_ioctl+0x1de/0x1790 [ 2939.483578] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2939.489038] ? __fget_light+0xd0/0x430 [ 2939.492940] ? ioctl_preallocate+0x300/0x300 [ 2939.497366] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2939.502144] ? retint_kernel+0x2d/0x2d [ 2939.506066] ? ksys_ioctl+0x3e/0xd0 [ 2939.509704] ? ksys_ioctl+0x48/0xd0 [ 2939.513353] ? security_file_ioctl+0x94/0xc0 [ 2939.517796] ksys_ioctl+0xa9/0xd0 [ 2939.521270] __x64_sys_ioctl+0x73/0xb0 [ 2939.525176] do_syscall_64+0x1b9/0x820 [ 2939.529073] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2939.534457] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2939.539416] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2939.544296] ? trace_hardirqs_on_caller+0x310/0x310 [ 2939.549360] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2939.554395] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2939.559270] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2939.564485] RIP: 0033:0x457679 [ 2939.567693] Code: Bad RIP value. [ 2939.571063] RSP: 002b:00007f4e4aaa8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2939.578806] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457679 [ 2939.586081] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 2939.593356] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2939.600642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4e4aaa96d4 [ 2939.607927] R13: 00000000004c0525 R14: 00000000004d15a0 R15: 00000000ffffffff [ 2939.623903] Task in /syz5 killed as a result of limit of /syz5 [ 2939.630340] memory: usage 304988kB, limit 307200kB, failcnt 1627 [ 2939.651631] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2939.658574] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2939.671808] Memory cgroup stats for /syz5: cache:40KB rss:262584KB rss_huge:239616KB shmem:0KB mapped_file:0KB dirty:0KB writeback:132KB swap:0KB inactive_anon:16KB active_anon:262568KB inactive_file:0KB active_file:0KB unevictable:20KB [ 2939.701898] Memory cgroup out of memory: Kill process 6729 (syz-executor5) score 1106 or sacrifice child [ 2939.722239] Killed process 6729 (syz-executor5) total-vm:70340kB, anon-rss:2200kB, file-rss:33636kB, shmem-rss:0kB [ 2939.742174] oom_reaper: reaped process 6729 (syz-executor5), now anon-rss:0kB, file-rss:32804kB, shmem-rss:0kB 10:37:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000240)={0x0, @aes128, 0x0, "9f821cb522602d76"}) clock_gettime(0x0, &(0x7f0000000300)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000880)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @rand_addr=0xffffffff}}}, 0x118) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000340)={0x4, 0x5, 0x7, 0x40, 'syz0\x00', 0x4}) pkey_alloc(0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r2, 0xc, 0x3ac4fcca1db8937d}, 0x14) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000003fdfaab8712fc0b6783d402d98f2bf77e558926d51c2905d2fc4c41c6d52dce5987d38570fc705b1af0519332f576ca3ae777f2e56bce711c10004972513a54d8f3e677d"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000100)={0x1, 0x10, &(0x7f0000000780), {0x7c4, 0x3, 0x32344d59, 0x7, 0x0, 0x8, 0xb}}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) mlock(&(0x7f0000fe6000/0x4000)=nil, 0x4000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000580), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000640)) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendto$inet(r4, &(0x7f0000000280)="a4255b9792e3822627c72401453c60f249552cac0eb9542deea672cbc1374a3aeb00c8f3cd75b7d04478caf9f14ef383978fe5fff1ffd20d9a1645b348bb30", 0x3f, 0x4091, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}) clone(0x200000, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000380)=0x100000000, 0x4) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000100000000000000000000000000000000000000000000000000000000000000000000024000000000000000000"]) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000000004005, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x4}, 0x68) 10:37:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlock(&(0x7f0000006000/0x2000)=nil, 0x2000) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000005000/0x3000)=nil) 10:37:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={"7365637572690003be000000220000000000e04373c800"}, &(0x7f00000000c0)=0x54) 10:37:52 executing program 4: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0xb, 0x32, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140, 0xffffdd86]}, @local={0xfe, 0x80, [0xd]}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 10:37:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) get_mempolicy(0x0, 0x0, 0x90, &(0x7f0000548000/0x2000)=nil, 0x3) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 10:37:52 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 10:37:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) get_mempolicy(0x0, 0x0, 0x90, &(0x7f0000548000/0x2000)=nil, 0x3) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 10:37:52 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000004c0)={0x3fa9234f1d2f6a2, 0x0, &(0x7f0000000380)}) 10:37:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f000000d379)={&(0x7f0000000300)={0x18, 0x14, 0x1, 0x0, 0x0, {0x1e}, [@nested={0x4}]}, 0x18}}, 0x0) 10:37:52 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x80) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) getpgrp(0x0) capget(0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x400032, 0xffffffffffffffff, 0x0) ioctl(r1, 0x81204101, &(0x7f0000000040)) 10:37:52 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) get_mempolicy(0x0, 0x0, 0x90, &(0x7f0000548000/0x2000)=nil, 0x3) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 10:37:52 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:37:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000240)={0x0, @aes128, 0x0, "9f821cb522602d76"}) clock_gettime(0x0, &(0x7f0000000300)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000880)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @rand_addr=0xffffffff}}}, 0x118) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000340)={0x4, 0x5, 0x7, 0x40, 'syz0\x00', 0x4}) pkey_alloc(0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r2, 0xc, 0x3ac4fcca1db8937d}, 0x14) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000003fdfaab8712fc0b6783d402d98f2bf77e558926d51c2905d2fc4c41c6d52dce5987d38570fc705b1af0519332f576ca3ae777f2e56bce711c10004972513a54d8f3e677d"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000100)={0x1, 0x10, &(0x7f0000000780), {0x7c4, 0x3, 0x32344d59, 0x7, 0x0, 0x8, 0xb}}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) mlock(&(0x7f0000fe6000/0x4000)=nil, 0x4000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000580), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000640)) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendto$inet(r4, &(0x7f0000000280)="a4255b9792e3822627c72401453c60f249552cac0eb9542deea672cbc1374a3aeb00c8f3cd75b7d04478caf9f14ef383978fe5fff1ffd20d9a1645b348bb30", 0x3f, 0x4091, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}}) clone(0x200000, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000380)=0x100000000, 0x4) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000100000000000000000000000000000000000000000000000000000000000000000000024000000000000000000"]) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000000004005, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x4}, 0x68) 10:37:53 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)}, 0x0) 10:37:53 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2) ioctl(r0, 0xffffffffffffffc0, &(0x7f0000000000)) 10:37:53 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x4004510f, &(0x7f0000000140)) 10:37:53 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000140)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000000)={0xbf, @time={0x0, 0x1c9c380}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc05c5340, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) 10:37:53 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)}, 0x0) 10:37:53 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYBLOB="00001a0000"], &(0x7f00000002c0)=0x1) pkey_alloc(0x0, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) getrandom(&(0x7f0000000540)=""/69, 0x45, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') socket$l2tp(0x18, 0x1, 0x1) 10:37:53 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)}, 0x0) 10:37:53 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYBLOB="00001a0000"], &(0x7f00000002c0)=0x1) pkey_alloc(0x0, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) getrandom(&(0x7f0000000540)=""/69, 0x45, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') socket$l2tp(0x18, 0x1, 0x1) 10:37:53 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x4e3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) ioctl(r0, 0xffffffffbfffbfa5, &(0x7f0000000000)) 10:37:53 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)}, 0x0) 10:37:53 executing program 4: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYBLOB="00001a0000"], &(0x7f00000002c0)=0x1) pkey_alloc(0x0, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) getrandom(&(0x7f0000000540)=""/69, 0x45, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') socket$l2tp(0x18, 0x1, 0x1) 10:37:54 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 10:37:54 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYBLOB="00001a0000"], &(0x7f00000002c0)=0x1) pkey_alloc(0x0, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) getrandom(&(0x7f0000000540)=""/69, 0x45, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') socket$l2tp(0x18, 0x1, 0x1) 10:37:54 executing program 1: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f0000d80f80)=@generic={0x1e, "0101000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cd184a"}, 0x17) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x1e, 0x5, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f00000001c0)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, 0x0}, 0x0) 10:37:54 executing program 4: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYBLOB="00001a0000"], &(0x7f00000002c0)=0x1) pkey_alloc(0x0, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) getrandom(&(0x7f0000000540)=""/69, 0x45, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') socket$l2tp(0x18, 0x1, 0x1) 10:37:54 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x2) ioctl$UI_SET_SWBIT(r0, 0xc0105512, 0x730001) 10:37:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f00000002c0)) r3 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000540)) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) 10:37:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000080)=0x5, 0x4) 10:37:54 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback}, 0x10) pselect6(0x40, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000200)={0x9}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739fef, 0x120, 0x0, 0x4f) 10:37:54 executing program 0: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYBLOB="00001a0000"], &(0x7f00000002c0)=0x1) pkey_alloc(0x0, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) getrandom(&(0x7f0000000540)=""/69, 0x45, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') socket$l2tp(0x18, 0x1, 0x1) 10:37:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000034) 10:37:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000080)=0x5, 0x4) 10:37:54 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = dup3(r2, r1, 0x80000) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000080)) epoll_wait(r3, &(0x7f0000000000)=[{}, {}], 0x2, 0x2) fcntl$setstatus(r0, 0x4, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='pagemap\x00') fcntl$setstatus(r4, 0x4, 0x2000) sendfile(r4, r5, &(0x7f0000000140), 0x20010000) request_key(&(0x7f0000000540)='trusted\x00', &(0x7f0000000580), &(0x7f00000005c0)="74086e750000000000000000008c00", 0xffffffffffffffff) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000180)=[0xae, 0x4]) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000040)) 10:37:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000034) 10:37:54 executing program 4: perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYBLOB="00001a0000"], &(0x7f00000002c0)=0x1) pkey_alloc(0x0, 0x2) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={[], [], @dev}}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") fsetxattr(r0, &(0x7f0000000280)=@known='user.syz\x00', &(0x7f00000002c0)='\x00', 0x398, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f00000001c0)=0x10) getrandom(&(0x7f0000000540)=""/69, 0x45, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='user.syz\x00') socket$l2tp(0x18, 0x1, 0x1) 10:37:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000080)=0x5, 0x4) 10:37:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000034) 10:37:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000080)=0x5, 0x4) 10:37:55 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = dup3(r2, r1, 0x80000) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000080)) epoll_wait(r3, &(0x7f0000000000)=[{}, {}], 0x2, 0x2) fcntl$setstatus(r0, 0x4, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='pagemap\x00') fcntl$setstatus(r4, 0x4, 0x2000) sendfile(r4, r5, &(0x7f0000000140), 0x20010000) request_key(&(0x7f0000000540)='trusted\x00', &(0x7f0000000580), &(0x7f00000005c0)="74086e750000000000000000008c00", 0xffffffffffffffff) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000180)=[0xae, 0x4]) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000040)) 10:37:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f00000002c0)) r3 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000540)) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) 10:37:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000002400)=@bridge_getneigh={0x20, 0x1e, 0x601}, 0x20}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480), 0x1000000000000034) 10:37:55 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020f00001000000000000000000000000800120000000100000000000000000006000002000000000000000000000200e0004001000000000000000000b2d40000030000008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000200c7"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x40000000000011d, 0x0) 10:37:55 executing program 3: clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000140)=0x7, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x88d9, @loopback={0x0, 0x3}}, 0x1c) 10:37:55 executing program 4: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f010008"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x375, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000280), &(0x7f0000000440)=0x40) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(0xffffffffffffffff, 0x40045731, &(0x7f0000000140)=0x1f1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000480)={0x70000004}) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f00000004c0)={'filter\x00', 0x1c, "8a988db291509e23a5dd9622a6041301392a33405b4369ab0eaf4813"}, &(0x7f00000006c0)=0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={0xd00}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@mss], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) futex(&(0x7f000000cffc), 0x800000000003, 0x0, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) 10:37:55 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x12, &(0x7f000059dffc), &(0x7f0000000000)=0x4) 10:37:55 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020f00001000000000000000000000000800120000000100000000000000000006000002000000000000000000000200e0004001000000000000000000b2d40000030000008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000200c7"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x40000000000011d, 0x0) 10:37:55 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = dup3(r2, r1, 0x80000) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000080)) epoll_wait(r3, &(0x7f0000000000)=[{}, {}], 0x2, 0x2) fcntl$setstatus(r0, 0x4, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='pagemap\x00') fcntl$setstatus(r4, 0x4, 0x2000) sendfile(r4, r5, &(0x7f0000000140), 0x20010000) request_key(&(0x7f0000000540)='trusted\x00', &(0x7f0000000580), &(0x7f00000005c0)="74086e750000000000000000008c00", 0xffffffffffffffff) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000180)=[0xae, 0x4]) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000040)) 10:37:55 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020f00001000000000000000000000000800120000000100000000000000000006000002000000000000000000000200e0004001000000000000000000b2d40000030000008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000200c7"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x40000000000011d, 0x0) 10:37:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote, 0x7ff}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 10:37:55 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020f00001000000000000000000000000800120000000100000000000000000006000002000000000000000000000200e0004001000000000000000000b2d40000030000008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000200c7"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x40000000000011d, 0x0) 10:37:55 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote, 0x7ff}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 10:37:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f00000002c0)) r3 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000540)) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) 10:37:56 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fdatasync(r0) ioprio_get$uid(0x3, 0x0) 10:37:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote, 0x7ff}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 10:37:56 executing program 3: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x2c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) geteuid() sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x3300000000000000, &(0x7f00000009c0), 0x1cb, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0) 10:37:56 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000240007041dfffd946fa2830020200a000a00000000008568f1ffffff0400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) 10:37:56 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = dup3(r2, r1, 0x80000) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000080)) epoll_wait(r3, &(0x7f0000000000)=[{}, {}], 0x2, 0x2) fcntl$setstatus(r0, 0x4, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, 0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='pagemap\x00') fcntl$setstatus(r4, 0x4, 0x2000) sendfile(r4, r5, &(0x7f0000000140), 0x20010000) request_key(&(0x7f0000000540)='trusted\x00', &(0x7f0000000580), &(0x7f00000005c0)="74086e750000000000000000008c00", 0xffffffffffffffff) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000180)=[0xae, 0x4]) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000000040)) 10:37:56 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @remote, 0x7ff}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) 10:37:56 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) read(r0, &(0x7f0000000340)=""/223, 0xc1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r1, &(0x7f0000465f8e)=""/114, 0x72) 10:37:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f00000002c0)) r3 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x0, 0x8010000000000084) bind$inet6(r4, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000540)) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) memfd_create(&(0x7f0000000140)="6367726f7570320075b536e08f97e10c4289e296462f3c8fc6a418228027bf4d75931e238b41cf55afcf7dd2284567ed5a738f3382aae6349e10336adf686499eb1d9379eb28", 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000200)=0x8) 10:37:56 executing program 1: getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000001c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000, 0x0, 0xf000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, 0x29, 0x1, 0x0, 0x0, {0x1}, [@nested={0x18, 0x0, [@typed={0x4109, 0x0, @ipv6=@ipv4={[0x0, 0x0, 0x0, 0x18], [], @remote}}]}]}, 0x2c}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/193, &(0x7f0000000300)=0xc1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 10:37:57 executing program 1: getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000001c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000, 0x0, 0xf000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, 0x29, 0x1, 0x0, 0x0, {0x1}, [@nested={0x18, 0x0, [@typed={0x4109, 0x0, @ipv6=@ipv4={[0x0, 0x0, 0x0, 0x18], [], @remote}}]}]}, 0x2c}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/193, &(0x7f0000000300)=0xc1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 10:37:57 executing program 3: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x2c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) geteuid() sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x3300000000000000, &(0x7f00000009c0), 0x1cb, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0) [ 2944.848353] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 10:37:57 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) clone(0x2902001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x3ff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)) 10:37:57 executing program 0: r0 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x894a, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)}) 10:37:57 executing program 1: getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000001c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000, 0x0, 0xf000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, 0x29, 0x1, 0x0, 0x0, {0x1}, [@nested={0x18, 0x0, [@typed={0x4109, 0x0, @ipv6=@ipv4={[0x0, 0x0, 0x0, 0x18], [], @remote}}]}]}, 0x2c}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/193, &(0x7f0000000300)=0xc1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 10:37:57 executing program 0: seccomp(0x1, 0x0, &(0x7f0000001980)={0x1, &(0x7f0000000580)=[{0x6}]}) [ 2945.389322] audit: type=1326 audit(1544611077.629:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18153 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4da code=0x0 10:37:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 10:37:57 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f000062fff8)={0x0, 0x2000000001}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080), 0x8) 10:37:57 executing program 1: getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000001c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000, 0x0, 0xf000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, 0x29, 0x1, 0x0, 0x0, {0x1}, [@nested={0x18, 0x0, [@typed={0x4109, 0x0, @ipv6=@ipv4={[0x0, 0x0, 0x0, 0x18], [], @remote}}]}]}, 0x2c}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000200)=""/193, &(0x7f0000000300)=0xc1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 10:37:57 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x5, 0x0, &(0x7f0000000000)) 10:37:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000f00)={&(0x7f0000000040), 0xc, &(0x7f0000000ec0)={&(0x7f0000000ac0)=@updpolicy={0xb8, 0x19, 0x201, 0x0, 0x0, {{@in6=@ipv4, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}}}, 0xb8}}, 0x0) 10:37:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a5c2d0240316285717070") mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc003, 0x0, 0x0, 0x0) 10:37:58 executing program 1: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x1c) r1 = syz_open_dev$dspn(&(0x7f0000001840)='/dev/dsp#\x00', 0x2, 0x1353c2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001880)={0x0, 0x8000000000007, 0x8}, &(0x7f00000018c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e20, 0xbb9, @loopback, 0x891a}}}, &(0x7f0000000580)=0x84) r3 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x3, @mcast1, 0xf1c}}, [0x0, 0x8, 0x0, 0x4, 0x0, 0x7, 0x0, 0x8, 0x0, 0x7, 0x2, 0x4, 0xffffffffffffff01]}, &(0x7f0000000200)=0x100) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000003c0)=0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0xa) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind(r3, &(0x7f00000005c0)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x4a11000}, 0x80) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) bind$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) bind$inet6(r3, &(0x7f00004c0000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) listen(r3, 0x0) r7 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @loopback}, &(0x7f0000000680)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001700)=ANY=[@ANYBLOB="f100000097c26235a70db31d06a27a115cb9bab34b39a4bc82bd707e9bc099927e872d6e500985a45ccf2aecf0e87a885ab1a325309353525467105b35e8ae5ffce9a40bfcc9a2b19be557533d259801a51d2eff904adb4cb89cd03210f9759b0db7f0252ad4dba198bebce83b5bbbbb00ba01809d84b52608fdd8d8476922f835f0470e9a36dfd27d87e194c2f64c657f21f8d56fccba2b724e306ddb38ebdd93b864760a41aad9baf10298ba23e342791972b9aa6f489df3243f1696270120ce4b6bf5c4ecbd09217bfc9f9607f0c4afbbc58f6f6a6726c2a46467d6328437cdd8f5b97678aef6de92e716db87cb8ce24a1de6d0"], 0x0) socket$pptp(0x18, 0x1, 0x2) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000006c0)={r8, 0x1, 0x6, @random="1affee8a9e42"}, 0x10) r9 = socket(0x20080000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'bond0\x00'}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) 10:37:58 executing program 3: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x2c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) geteuid() sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x3300000000000000, &(0x7f00000009c0), 0x1cb, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0) 10:37:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x0, [0x40000003], [0xc2]}) 10:37:58 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) recvmsg(r1, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl(r1, 0x4000008907, &(0x7f0000000000)) [ 2946.093431] audit: type=1326 audit(1544611078.339:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18153 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4da code=0x0 10:37:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x0, [0x40000003], [0xc2]}) 10:37:58 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r1, 0x4008af25, &(0x7f0000016c40)={'ip6gre0\x00'}) 10:37:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 10:37:58 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB='s']) lremovexattr(&(0x7f0000000780)='./file0\x00', &(0x7f0000000900)=@known='system.posix_acl_access\x00') read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) 10:37:58 executing program 1: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x1c) r1 = syz_open_dev$dspn(&(0x7f0000001840)='/dev/dsp#\x00', 0x2, 0x1353c2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001880)={0x0, 0x8000000000007, 0x8}, &(0x7f00000018c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e20, 0xbb9, @loopback, 0x891a}}}, &(0x7f0000000580)=0x84) r3 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x3, @mcast1, 0xf1c}}, [0x0, 0x8, 0x0, 0x4, 0x0, 0x7, 0x0, 0x8, 0x0, 0x7, 0x2, 0x4, 0xffffffffffffff01]}, &(0x7f0000000200)=0x100) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000003c0)=0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0xa) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind(r3, &(0x7f00000005c0)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x4a11000}, 0x80) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) bind$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) bind$inet6(r3, &(0x7f00004c0000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) listen(r3, 0x0) r7 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @loopback}, &(0x7f0000000680)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001700)=ANY=[@ANYBLOB="f100000097c26235a70db31d06a27a115cb9bab34b39a4bc82bd707e9bc099927e872d6e500985a45ccf2aecf0e87a885ab1a325309353525467105b35e8ae5ffce9a40bfcc9a2b19be557533d259801a51d2eff904adb4cb89cd03210f9759b0db7f0252ad4dba198bebce83b5bbbbb00ba01809d84b52608fdd8d8476922f835f0470e9a36dfd27d87e194c2f64c657f21f8d56fccba2b724e306ddb38ebdd93b864760a41aad9baf10298ba23e342791972b9aa6f489df3243f1696270120ce4b6bf5c4ecbd09217bfc9f9607f0c4afbbc58f6f6a6726c2a46467d6328437cdd8f5b97678aef6de92e716db87cb8ce24a1de6d0"], 0x0) socket$pptp(0x18, 0x1, 0x2) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000006c0)={r8, 0x1, 0x6, @random="1affee8a9e42"}, 0x10) r9 = socket(0x20080000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'bond0\x00'}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) 10:37:58 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x1fe, 0x4) ftruncate(r2, 0x80003) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e22}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}], 0x20) sendfile(r1, r2, &(0x7f00000000c0), 0x8000fffffffe) 10:37:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x0, [0x40000003], [0xc2]}) 10:37:58 executing program 3: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x2c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) geteuid() sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0x3300000000000000, &(0x7f00000009c0), 0x1cb, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0) 10:37:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000280)={0x77, 0x0, [0x40000003], [0xc2]}) 10:37:59 executing program 1: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x1c) r1 = syz_open_dev$dspn(&(0x7f0000001840)='/dev/dsp#\x00', 0x2, 0x1353c2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001880)={0x0, 0x8000000000007, 0x8}, &(0x7f00000018c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e20, 0xbb9, @loopback, 0x891a}}}, &(0x7f0000000580)=0x84) r3 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x3, @mcast1, 0xf1c}}, [0x0, 0x8, 0x0, 0x4, 0x0, 0x7, 0x0, 0x8, 0x0, 0x7, 0x2, 0x4, 0xffffffffffffff01]}, &(0x7f0000000200)=0x100) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000003c0)=0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0xa) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind(r3, &(0x7f00000005c0)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x4a11000}, 0x80) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) bind$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) bind$inet6(r3, &(0x7f00004c0000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) listen(r3, 0x0) r7 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @loopback}, &(0x7f0000000680)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001700)=ANY=[@ANYBLOB="f100000097c26235a70db31d06a27a115cb9bab34b39a4bc82bd707e9bc099927e872d6e500985a45ccf2aecf0e87a885ab1a325309353525467105b35e8ae5ffce9a40bfcc9a2b19be557533d259801a51d2eff904adb4cb89cd03210f9759b0db7f0252ad4dba198bebce83b5bbbbb00ba01809d84b52608fdd8d8476922f835f0470e9a36dfd27d87e194c2f64c657f21f8d56fccba2b724e306ddb38ebdd93b864760a41aad9baf10298ba23e342791972b9aa6f489df3243f1696270120ce4b6bf5c4ecbd09217bfc9f9607f0c4afbbc58f6f6a6726c2a46467d6328437cdd8f5b97678aef6de92e716db87cb8ce24a1de6d0"], 0x0) socket$pptp(0x18, 0x1, 0x2) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000006c0)={r8, 0x1, 0x6, @random="1affee8a9e42"}, 0x10) r9 = socket(0x20080000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'bond0\x00'}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) 10:37:59 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="960f33"]) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000000)="0f01c8f20f35ba2000b000ee0f2336360fc76df20f2054440f20c0663504000000440f22c064f3e10a660f3a63a63c6700baf80c66b8bd08428766efbafc0cb066ee", 0x42}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) preadv(r1, &(0x7f00000075c0)=[{&(0x7f0000006200)=""/220}, {&(0x7f0000000000)=""/90, 0xfffffec3}, {&(0x7f0000006300)=""/247}, {&(0x7f0000006400)=""/4096}, {&(0x7f0000007400)=""/204, 0x23}, {&(0x7f0000007500)=""/192}], 0x1000000000000112, 0x0) 10:37:59 executing program 1: r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x1c) r1 = syz_open_dev$dspn(&(0x7f0000001840)='/dev/dsp#\x00', 0x2, 0x1353c2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001880)={0x0, 0x8000000000007, 0x8}, &(0x7f00000018c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e20, 0xbb9, @loopback, 0x891a}}}, &(0x7f0000000580)=0x84) r3 = socket$inet6(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x3, @mcast1, 0xf1c}}, [0x0, 0x8, 0x0, 0x4, 0x0, 0x7, 0x0, 0x8, 0x0, 0x7, 0x2, 0x4, 0xffffffffffffff01]}, &(0x7f0000000200)=0x100) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000003c0)=0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0xa) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind(r3, &(0x7f00000005c0)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x4a11000}, 0x80) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host}, 0x10) bind$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) bind$inet6(r3, &(0x7f00004c0000)={0xa, 0x0, 0x0, @ipv4}, 0x1c) listen(r3, 0x0) r7 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @loopback}, &(0x7f0000000680)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001700)=ANY=[@ANYBLOB="f100000097c26235a70db31d06a27a115cb9bab34b39a4bc82bd707e9bc099927e872d6e500985a45ccf2aecf0e87a885ab1a325309353525467105b35e8ae5ffce9a40bfcc9a2b19be557533d259801a51d2eff904adb4cb89cd03210f9759b0db7f0252ad4dba198bebce83b5bbbbb00ba01809d84b52608fdd8d8476922f835f0470e9a36dfd27d87e194c2f64c657f21f8d56fccba2b724e306ddb38ebdd93b864760a41aad9baf10298ba23e342791972b9aa6f489df3243f1696270120ce4b6bf5c4ecbd09217bfc9f9607f0c4afbbc58f6f6a6726c2a46467d6328437cdd8f5b97678aef6de92e716db87cb8ce24a1de6d0"], 0x0) socket$pptp(0x18, 0x1, 0x2) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000006c0)={r8, 0x1, 0x6, @random="1affee8a9e42"}, 0x10) r9 = socket(0x20080000000000a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'bond0\x00'}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) 10:37:59 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x0) 10:37:59 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_delroute={0x28, 0x19, 0x701, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) 10:38:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 10:38:00 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20}, 0x10) dup2(r0, r1) 10:38:00 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) read(r2, &(0x7f0000000140)=""/87, 0x57) timerfd_settime(r2, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) tkill(r1, 0x1000000000016) 10:38:00 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000002000), 0x46d) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000000cc0), 0x24, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 10:38:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xfffffffffffffe94, &(0x7f0000000180)}, &(0x7f00000001c0)=0x163) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000180)={'gre@\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x5}) io_submit(r1, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001000)}]) 10:38:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, [0x100000000]}) 10:38:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f56ddd3d5261ad223871146af045fe0012ff00", 0x27) recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000006a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0) io_setup(0xfff, &(0x7f0000000180)) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "1bac511038b2a81a4e7dd7a01316d424"}, 0x11, 0x2) 10:38:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x200000000088) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "1bfc97", 0x8, 0x88, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) [ 2948.271908] device lo entered promiscuous mode 10:38:00 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000002000), 0x46d) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000000cc0), 0x24, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 10:38:00 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x5411, 0x0) [ 2948.376728] device lo left promiscuous mode 10:38:00 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000070607031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 10:38:00 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10000000000, 0x2000) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="d9a5fb7437bf0104009a7c94e763ad975d0000"], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2=0xe0000016}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x3f00, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r5 = socket(0x10, 0x20000000802, 0x0) write(r5, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x0, 0x3}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r6 = memfd_create(&(0x7f00000004c0)='/dev/video#\x00', 0xfffffffffffffffd) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xb, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="37000000000000002cdd00000000000004000000a7e327a8af5074e73171fb0dd7d44644784eb88a3fc7c835a0ee66d8bd3a098843d5cfcdf7e9628c232602481965705b205535b1879a62cb4c90a9a971fc84517845f55497"]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() [ 2948.514509] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 2948.566725] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 10:38:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000280)='\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0x0) execveat(r0, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 10:38:01 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) io_setup(0x8, &(0x7f0000000100)=0x0) r2 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'ip6tnl0\x00', 0x0}) socketpair$unix(0x1, 0x11000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r3}, 0x14) io_getevents(r1, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x2050, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140), 0x40030000000000}]) 10:38:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f56ddd3d5261ad223871146af045fe0012ff00", 0x27) recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000006a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0) io_setup(0xfff, &(0x7f0000000180)) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "1bac511038b2a81a4e7dd7a01316d424"}, 0x11, 0x2) 10:38:01 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000002000), 0x46d) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000000cc0), 0x24, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) 10:38:01 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10000000000, 0x2000) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="d9a5fb7437bf0104009a7c94e763ad975d0000"], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2=0xe0000016}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x3f00, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r5 = socket(0x10, 0x20000000802, 0x0) write(r5, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x0, 0x3}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r6 = memfd_create(&(0x7f00000004c0)='/dev/video#\x00', 0xfffffffffffffffd) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xb, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="37000000000000002cdd00000000000004000000a7e327a8af5074e73171fb0dd7d44644784eb88a3fc7c835a0ee66d8bd3a098843d5cfcdf7e9628c232602481965705b205535b1879a62cb4c90a9a971fc84517845f55497"]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() 10:38:01 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10000000000, 0x2000) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="d9a5fb7437bf0104009a7c94e763ad975d0000"], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2=0xe0000016}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x3f00, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r5 = socket(0x10, 0x20000000802, 0x0) write(r5, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x0, 0x3}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r6 = memfd_create(&(0x7f00000004c0)='/dev/video#\x00', 0xfffffffffffffffd) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xb, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="37000000000000002cdd00000000000004000000a7e327a8af5074e73171fb0dd7d44644784eb88a3fc7c835a0ee66d8bd3a098843d5cfcdf7e9628c232602481965705b205535b1879a62cb4c90a9a971fc84517845f55497"]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() [ 2949.134347] device lo entered promiscuous mode 10:38:01 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10000000000, 0x2000) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="d9a5fb7437bf0104009a7c94e763ad975d0000"], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2=0xe0000016}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x3f00, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r5 = socket(0x10, 0x20000000802, 0x0) write(r5, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x0, 0x3}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r6 = memfd_create(&(0x7f00000004c0)='/dev/video#\x00', 0xfffffffffffffffd) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xb, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="37000000000000002cdd00000000000004000000a7e327a8af5074e73171fb0dd7d44644784eb88a3fc7c835a0ee66d8bd3a098843d5cfcdf7e9628c232602481965705b205535b1879a62cb4c90a9a971fc84517845f55497"]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() 10:38:01 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10000000000, 0x2000) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="d9a5fb7437bf0104009a7c94e763ad975d0000"], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2=0xe0000016}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x3f00, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r5 = socket(0x10, 0x20000000802, 0x0) write(r5, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x0, 0x3}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r6 = memfd_create(&(0x7f00000004c0)='/dev/video#\x00', 0xfffffffffffffffd) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xb, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="37000000000000002cdd00000000000004000000a7e327a8af5074e73171fb0dd7d44644784eb88a3fc7c835a0ee66d8bd3a098843d5cfcdf7e9628c232602481965705b205535b1879a62cb4c90a9a971fc84517845f55497"]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() 10:38:01 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) read$FUSE(r0, &(0x7f0000002000), 0x46d) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000000cc0), 0x24, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) [ 2949.366340] device lo left promiscuous mode 10:38:01 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10000000000, 0x2000) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="d9a5fb7437bf0104009a7c94e763ad975d0000"], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2=0xe0000016}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x3f00, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r5 = socket(0x10, 0x20000000802, 0x0) write(r5, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x0, 0x3}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r6 = memfd_create(&(0x7f00000004c0)='/dev/video#\x00', 0xfffffffffffffffd) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xb, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="37000000000000002cdd00000000000004000000a7e327a8af5074e73171fb0dd7d44644784eb88a3fc7c835a0ee66d8bd3a098843d5cfcdf7e9628c232602481965705b205535b1879a62cb4c90a9a971fc84517845f55497"]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() 10:38:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f56ddd3d5261ad223871146af045fe0012ff00", 0x27) recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000006a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0) io_setup(0xfff, &(0x7f0000000180)) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "1bac511038b2a81a4e7dd7a01316d424"}, 0x11, 0x2) 10:38:01 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10000000000, 0x2000) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="d9a5fb7437bf0104009a7c94e763ad975d0000"], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2=0xe0000016}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x3f00, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r5 = socket(0x10, 0x20000000802, 0x0) write(r5, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x0, 0x3}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r6 = memfd_create(&(0x7f00000004c0)='/dev/video#\x00', 0xfffffffffffffffd) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xb, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="37000000000000002cdd00000000000004000000a7e327a8af5074e73171fb0dd7d44644784eb88a3fc7c835a0ee66d8bd3a098843d5cfcdf7e9628c232602481965705b205535b1879a62cb4c90a9a971fc84517845f55497"]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() [ 2949.703725] device lo entered promiscuous mode [ 2949.774484] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 2949.859693] device lo left promiscuous mode 10:38:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f56ddd3d5261ad223871146af045fe0012ff00", 0x27) recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000006a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0) io_setup(0xfff, &(0x7f0000000180)) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "1bac511038b2a81a4e7dd7a01316d424"}, 0x11, 0x2) 10:38:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f56ddd3d5261ad223871146af045fe0012ff00", 0x27) recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000006a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0) io_setup(0xfff, &(0x7f0000000180)) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "1bac511038b2a81a4e7dd7a01316d424"}, 0x11, 0x2) 10:38:02 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10000000000, 0x2000) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="d9a5fb7437bf0104009a7c94e763ad975d0000"], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2=0xe0000016}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x3f00, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r5 = socket(0x10, 0x20000000802, 0x0) write(r5, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x0, 0x3}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r6 = memfd_create(&(0x7f00000004c0)='/dev/video#\x00', 0xfffffffffffffffd) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xb, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="37000000000000002cdd00000000000004000000a7e327a8af5074e73171fb0dd7d44644784eb88a3fc7c835a0ee66d8bd3a098843d5cfcdf7e9628c232602481965705b205535b1879a62cb4c90a9a971fc84517845f55497"]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() 10:38:02 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10000000000, 0x2000) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="d9a5fb7437bf0104009a7c94e763ad975d0000"], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2=0xe0000016}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x3f00, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r5 = socket(0x10, 0x20000000802, 0x0) write(r5, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x0, 0x3}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r6 = memfd_create(&(0x7f00000004c0)='/dev/video#\x00', 0xfffffffffffffffd) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xb, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="37000000000000002cdd00000000000004000000a7e327a8af5074e73171fb0dd7d44644784eb88a3fc7c835a0ee66d8bd3a098843d5cfcdf7e9628c232602481965705b205535b1879a62cb4c90a9a971fc84517845f55497"]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() 10:38:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f56ddd3d5261ad223871146af045fe0012ff00", 0x27) recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000006a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0) io_setup(0xfff, &(0x7f0000000180)) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "1bac511038b2a81a4e7dd7a01316d424"}, 0x11, 0x2) 10:38:02 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) userfaultfd(0x80080080) [ 2950.253174] device lo entered promiscuous mode [ 2950.276476] device lo entered promiscuous mode 10:38:02 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x10000000000, 0x2000) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) mknod$loop(&(0x7f0000000640)='./file0\x00', 0x0, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x1) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="d9a5fb7437bf0104009a7c94e763ad975d0000"], 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x7f, 0x7, 0x7}, 0x8) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000080)={0x101, {0x2, 0x4e23, @multicast2=0xe0000016}, {0x2, 0x4e24}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x6, 0x9, 0x7, 0x3f00, &(0x7f0000000040)='ip_vti0\x00', 0x2, 0x7f, 0x5f6}) r5 = socket(0x10, 0x20000000802, 0x0) write(r5, &(0x7f0000000200)="240000001a0025f00018000400edfc0e8000000000000000000000000800020048050000", 0x24) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000015c0)='ip6_vti0\x00', 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000380)={0x0, 0x24, 0x0, 0x3}, 0x10) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r5, 0x28, 0x6, &(0x7f00000005c0), 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@dev}}}, &(0x7f0000000b00)=0xe8) r6 = memfd_create(&(0x7f00000004c0)='/dev/video#\x00', 0xfffffffffffffffd) setxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='/dev/loop#\x00', 0xb, 0x1) pwritev(0xffffffffffffffff, &(0x7f0000f50f90), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="37000000000000002cdd00000000000004000000a7e327a8af5074e73171fb0dd7d44644784eb88a3fc7c835a0ee66d8bd3a098843d5cfcdf7e9628c232602481965705b205535b1879a62cb4c90a9a971fc84517845f55497"]}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000680)={{{@in=@local, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000780)={{{@in=@multicast1, @in=@multicast2}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000880)={{{@in=@remote, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) getegid() 10:38:02 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000800)=@nat={'nat\x00', 0x19, 0x4, 0x0, [0x200001c0, 0x0, 0x0, 0x20000590, 0x200005c0], 0x0, 0x0, 0x0}, 0x668) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000a00)='lo.\x00', 0x2, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x1000000000000248) r3 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x5, 0x1) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000400)={0x6, "11dd303e1b2f45a0a9140c0098669cf51825f64e62601571947fd10bf0ade3d3", 0x0, 0x400, 0x0, 0x0, 0x4, 0x4, 0x3}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) getpgrp(0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000900)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e20, 0x0, @remote}}}, &(0x7f00000007c0)=0x84) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r2, 0x2) dup3(r4, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) socket$inet_udp(0x2, 0x2, 0x0) chroot(&(0x7f0000000340)='./file0\x00') name_to_handle_at(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="2800000000fcffd6ffd1301ed5047b98f1004d0000000000"], 0x0, 0xe64455e5a85b7897) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) [ 2950.433828] device lo left promiscuous mode [ 2950.510278] device lo left promiscuous mode 10:38:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f56ddd3d5261ad223871146af045fe0012ff00", 0x27) recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000006a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0) io_setup(0xfff, &(0x7f0000000180)) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "1bac511038b2a81a4e7dd7a01316d424"}, 0x11, 0x2) 10:38:02 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000001c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={"626f6e643000000000f98b00"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:38:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f56ddd3d5261ad223871146af045fe0012ff00", 0x27) recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000006a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0) io_setup(0xfff, &(0x7f0000000180)) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "1bac511038b2a81a4e7dd7a01316d424"}, 0x11, 0x2) [ 2950.737835] device lo entered promiscuous mode 10:38:03 executing program 2: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000600)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r0, r1}, &(0x7f00000002c0)=""/107, 0x6b, &(0x7f0000000180)={&(0x7f00000001c0)={'sha512\x00'}}) 10:38:03 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0x40045542, &(0x7f00000002c0)) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x200, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00005b6000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) close(r1) 10:38:03 executing program 2: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00006ee000)='/dev/rfkill\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) readv(r0, &(0x7f00001f2ff0)=[{&(0x7f0000001fb2)=""/1, 0x1}], 0x77) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) close(r1) 10:38:03 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000800)=@nat={'nat\x00', 0x19, 0x4, 0x0, [0x200001c0, 0x0, 0x0, 0x20000590, 0x200005c0], 0x0, 0x0, 0x0}, 0x668) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000a00)='lo.\x00', 0x2, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x1000000000000248) r3 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x5, 0x1) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000400)={0x6, "11dd303e1b2f45a0a9140c0098669cf51825f64e62601571947fd10bf0ade3d3", 0x0, 0x400, 0x0, 0x0, 0x4, 0x4, 0x3}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) getpgrp(0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000900)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e20, 0x0, @remote}}}, &(0x7f00000007c0)=0x84) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r2, 0x2) dup3(r4, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) socket$inet_udp(0x2, 0x2, 0x0) chroot(&(0x7f0000000340)='./file0\x00') name_to_handle_at(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="2800000000fcffd6ffd1301ed5047b98f1004d0000000000"], 0x0, 0xe64455e5a85b7897) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) [ 2950.991042] device lo left promiscuous mode [ 2951.001434] pit: kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 2951.040676] pit: kvm: requested 43580 ns i8254 timer period limited to 200000 ns [ 2951.056766] pit: kvm: requested 30171 ns i8254 timer period limited to 200000 ns [ 2951.079044] pit: kvm: requested 30171 ns i8254 timer period limited to 200000 ns 10:38:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f56ddd3d5261ad223871146af045fe0012ff00", 0x27) recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000006a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0) io_setup(0xfff, &(0x7f0000000180)) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "1bac511038b2a81a4e7dd7a01316d424"}, 0x11, 0x2) 10:38:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f56ddd3d5261ad223871146af045fe0012ff00", 0x27) recvmmsg(0xffffffffffffffff, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000006a00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0) io_setup(0xfff, &(0x7f0000000180)) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "1bac511038b2a81a4e7dd7a01316d424"}, 0x11, 0x2) [ 2951.250567] device lo entered promiscuous mode 10:38:03 executing program 2: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) 10:38:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4000000004002) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "21d3b5bae65176d4876999a4f014982c094b94ad6e6420d23efb600461a1b2da2511191cea713908079585c06ffa67b888073efc0f4960dcd4a68789615ae09f", "4762913a825ab771bfb947e88cc199e0d72ebf717bdbd373d6524bb95e981852"}) 10:38:03 executing program 2: msgsnd(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) [ 2951.465148] device lo left promiscuous mode 10:38:03 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000800)=@nat={'nat\x00', 0x19, 0x4, 0x0, [0x200001c0, 0x0, 0x0, 0x20000590, 0x200005c0], 0x0, 0x0, 0x0}, 0x668) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000a00)='lo.\x00', 0x2, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x1000000000000248) r3 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x5, 0x1) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000400)={0x6, "11dd303e1b2f45a0a9140c0098669cf51825f64e62601571947fd10bf0ade3d3", 0x0, 0x400, 0x0, 0x0, 0x4, 0x4, 0x3}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) getpgrp(0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000900)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e20, 0x0, @remote}}}, &(0x7f00000007c0)=0x84) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r2, 0x2) dup3(r4, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) socket$inet_udp(0x2, 0x2, 0x0) chroot(&(0x7f0000000340)='./file0\x00') name_to_handle_at(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="2800000000fcffd6ffd1301ed5047b98f1004d0000000000"], 0x0, 0xe64455e5a85b7897) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 10:38:03 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4000000004002) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "21d3b5bae65176d4876999a4f014982c094b94ad6e6420d23efb600461a1b2da2511191cea713908079585c06ffa67b888073efc0f4960dcd4a68789615ae09f", "4762913a825ab771bfb947e88cc199e0d72ebf717bdbd373d6524bb95e981852"}) 10:38:03 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) 10:38:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) 10:38:04 executing program 4: mkdir(0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000900)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000140)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@sg0='/dev/sg0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) 10:38:04 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x20020000) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) poll(0x0, 0x0, 0x400007f) setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340)='./file0\x00') 10:38:04 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4000000004002) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "21d3b5bae65176d4876999a4f014982c094b94ad6e6420d23efb600461a1b2da2511191cea713908079585c06ffa67b888073efc0f4960dcd4a68789615ae09f", "4762913a825ab771bfb947e88cc199e0d72ebf717bdbd373d6524bb95e981852"}) 10:38:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x101, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x5, 0x1a, [{0x4}]}]}, 0x28}}, 0x0) 10:38:04 executing program 5: rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8) r0 = memfd_create(&(0x7f0000000000)="2c9908871cde871334bd41ea5c8c6500", 0x4) fallocate(r0, 0x0, 0x0, 0x8000000000003) 10:38:04 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400000, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000800)=@nat={'nat\x00', 0x19, 0x4, 0x0, [0x200001c0, 0x0, 0x0, 0x20000590, 0x200005c0], 0x0, 0x0, 0x0}, 0x668) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000a00)='lo.\x00', 0x2, 0x0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0x443}], 0x1000000000000248) r3 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x5, 0x1) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000400)={0x6, "11dd303e1b2f45a0a9140c0098669cf51825f64e62601571947fd10bf0ade3d3", 0x0, 0x400, 0x0, 0x0, 0x4, 0x4, 0x3}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) getpgrp(0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000900)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e20, 0x0, @remote}}}, &(0x7f00000007c0)=0x84) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r2, 0x2) dup3(r4, r2, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) socket$inet_udp(0x2, 0x2, 0x0) chroot(&(0x7f0000000340)='./file0\x00') name_to_handle_at(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="2800000000fcffd6ffd1301ed5047b98f1004d0000000000"], 0x0, 0xe64455e5a85b7897) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 10:38:04 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmsg(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1}, 0x0) 10:38:04 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000180)={0x7, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 10:38:04 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4000000004002) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "21d3b5bae65176d4876999a4f014982c094b94ad6e6420d23efb600461a1b2da2511191cea713908079585c06ffa67b888073efc0f4960dcd4a68789615ae09f", "4762913a825ab771bfb947e88cc199e0d72ebf717bdbd373d6524bb95e981852"}) 10:38:04 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000003c0)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7ffff000) 10:38:04 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x7000000, 0xffffffffffffff27, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) write$P9_RFLUSH(r2, &(0x7f00000000c0)={0x7}, 0x7) 10:38:04 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) tkill(r0, 0x1004000000016) write(0xffffffffffffffff, 0x0, 0x0) [ 2952.331740] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 2952.338830] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! 10:38:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/8, &(0x7f0000000240)=0x8) 10:38:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) 10:38:05 executing program 4: mkdir(0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000900)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000140)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@sg0='/dev/sg0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) 10:38:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/8, &(0x7f0000000240)=0x8) 10:38:05 executing program 3: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, 0x0}) 10:38:05 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x808000000002, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) [ 2952.933930] binder: 18456:18457 got transaction to context manager from process owning it [ 2952.973087] binder: 18456:18457 transaction failed 29201/-22, size 0-0 line 2825 10:38:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000647000)='/dev/ptmx\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00001c2000)=0x1b) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) 10:38:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/8, &(0x7f0000000240)=0x8) 10:38:05 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) r6 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x61) inotify_init() ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, 0x0) ioctl$FICLONE(r3, 0x40049409, r2) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000140)=@fragment={0x0, 0x0, 0x5, 0x10001, 0x0, 0x800000000, 0x67}, 0x14b) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) memfd_create(&(0x7f0000000600)='\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(r7, 0x7fff) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 10:38:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) [ 2953.100711] binder: undelivered TRANSACTION_ERROR: 29201 10:38:05 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/8, &(0x7f0000000240)=0x8) 10:38:05 executing program 5: r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x160, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x15, 0x0, 0x0, "7465716c9d87f0ffffffffffffff00", 'syz_tu~\x00', 'ip6gre0\x00', 'vcan0\x00', @broadcast, [], @local, [], 0xa0, 0xa0, 0xd0, [@m802_3={'802_3\x00', 0x8}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1d8) 10:38:05 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) 10:38:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x87, 0x0, 0x0, 0x6, 0xce, 0x800, 0x6446, 0x3, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0x2}, &(0x7f0000000180)=0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', 0x8}, 0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002bc0)=ANY=[], &(0x7f0000002c80)) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000080)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000027c0)=[{&(0x7f0000002640)}], 0x1}, 0x800) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) close(r3) syz_open_dev$loop(&(0x7f0000001680)='/dev/loop#\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e5b000)={0x2, 0x2004e20}, 0x10) connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) openat$cgroup_int(r4, &(0x7f0000001600)='rdma.max\x00', 0x2, 0x0) r7 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f000031aff8)={r5, r6}) r8 = gettid() perf_event_open(0x0, r8, 0x3, r5, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000001500)=0x4) ftruncate(r6, 0x4) close(r7) close(r9) 10:38:06 executing program 4: mkdir(0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000900)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000140)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@sg0='/dev/sg0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) 10:38:06 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) r6 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x61) inotify_init() ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, 0x0) ioctl$FICLONE(r3, 0x40049409, r2) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000140)=@fragment={0x0, 0x0, 0x5, 0x10001, 0x0, 0x800000000, 0x67}, 0x14b) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) memfd_create(&(0x7f0000000600)='\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(r7, 0x7fff) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 10:38:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x7f) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) 10:38:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x87, 0x0, 0x0, 0x6, 0xce, 0x800, 0x6446, 0x3, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0x2}, &(0x7f0000000180)=0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', 0x8}, 0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002bc0)=ANY=[], &(0x7f0000002c80)) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000080)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000027c0)=[{&(0x7f0000002640)}], 0x1}, 0x800) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) close(r3) syz_open_dev$loop(&(0x7f0000001680)='/dev/loop#\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e5b000)={0x2, 0x2004e20}, 0x10) connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) openat$cgroup_int(r4, &(0x7f0000001600)='rdma.max\x00', 0x2, 0x0) r7 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f000031aff8)={r5, r6}) r8 = gettid() perf_event_open(0x0, r8, 0x3, r5, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000001500)=0x4) ftruncate(r6, 0x4) close(r7) close(r9) 10:38:06 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) 10:38:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x87, 0x0, 0x0, 0x6, 0xce, 0x800, 0x6446, 0x3, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0x2}, &(0x7f0000000180)=0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', 0x8}, 0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002bc0)=ANY=[], &(0x7f0000002c80)) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000080)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000027c0)=[{&(0x7f0000002640)}], 0x1}, 0x800) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) close(r3) syz_open_dev$loop(&(0x7f0000001680)='/dev/loop#\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e5b000)={0x2, 0x2004e20}, 0x10) connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) openat$cgroup_int(r4, &(0x7f0000001600)='rdma.max\x00', 0x2, 0x0) r7 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f000031aff8)={r5, r6}) r8 = gettid() perf_event_open(0x0, r8, 0x3, r5, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000001500)=0x4) ftruncate(r6, 0x4) close(r7) close(r9) 10:38:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='/S;~X\x00', 0x4) fallocate(r0, 0x3, 0x0, 0x2080000001) 10:38:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='/S;~X\x00', 0x4) fallocate(r0, 0x3, 0x0, 0x2080000001) 10:38:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x87, 0x0, 0x0, 0x6, 0xce, 0x800, 0x6446, 0x3, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0x2}, &(0x7f0000000180)=0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', 0x8}, 0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002bc0)=ANY=[], &(0x7f0000002c80)) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000080)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000027c0)=[{&(0x7f0000002640)}], 0x1}, 0x800) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) close(r3) syz_open_dev$loop(&(0x7f0000001680)='/dev/loop#\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e5b000)={0x2, 0x2004e20}, 0x10) connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) openat$cgroup_int(r4, &(0x7f0000001600)='rdma.max\x00', 0x2, 0x0) r7 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f000031aff8)={r5, r6}) r8 = gettid() perf_event_open(0x0, r8, 0x3, r5, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000001500)=0x4) ftruncate(r6, 0x4) close(r7) close(r9) 10:38:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='/S;~X\x00', 0x4) fallocate(r0, 0x3, 0x0, 0x2080000001) [ 2954.253034] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 2954.274606] syz-executor2 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 2954.309632] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2954.319384] CPU: 1 PID: 18526 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #371 [ 2954.326780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2954.336162] Call Trace: [ 2954.338795] dump_stack+0x244/0x39d [ 2954.342444] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2954.347700] dump_header+0x27b/0xf72 [ 2954.351434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2954.356992] ? check_preemption_disabled+0x48/0x280 [ 2954.362027] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2954.367585] ? pagefault_out_of_memory+0x197/0x197 [ 2954.372533] ? print_usage_bug+0xc0/0xc0 [ 2954.376611] ? perf_trace_lock+0x14d/0x7a0 [ 2954.380866] ? debug_smp_processor_id+0x1c/0x20 [ 2954.385548] ? perf_trace_lock_acquire+0x15b/0x800 [ 2954.390494] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2954.395451] ? lock_is_held_type+0x210/0x210 [ 2954.399882] ? perf_trace_lock+0x7a0/0x7a0 [ 2954.404147] ? debug_smp_processor_id+0x1c/0x20 10:38:06 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='/S;~X\x00', 0x4) fallocate(r0, 0x3, 0x0, 0x2080000001) [ 2954.408853] ? mark_held_locks+0xc7/0x130 [ 2954.413014] ? print_usage_bug+0xc0/0xc0 [ 2954.417108] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2954.421884] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2954.426484] ? retint_kernel+0x2d/0x2d [ 2954.430396] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2954.435361] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2954.440154] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2954.445658] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2954.450445] ? retint_kernel+0x2d/0x2d [ 2954.454366] ? _raw_spin_unlock_irqrestore+0xaf/0xd0 [ 2954.459493] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2954.464618] ? ___ratelimit+0x3b9/0x672 [ 2954.468612] ? idr_get_free+0xf70/0xf70 [ 2954.472622] oom_kill_process.cold.27+0x10/0x903 [ 2954.477415] ? _raw_spin_unlock_irq+0x56/0x80 [ 2954.481952] ? oom_evaluate_task+0x540/0x540 [ 2954.486382] ? cgroup_procs_next+0x70/0x70 [ 2954.490652] ? _raw_spin_unlock_irq+0x56/0x80 [ 2954.495162] ? _raw_spin_unlock_irq+0x60/0x80 [ 2954.499680] ? oom_badness+0xaa0/0xaa0 [ 2954.503586] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2954.508368] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 2954.513927] ? mem_cgroup_iter_break+0x30/0x30 [ 2954.518547] ? cgroup_file_notify+0x226/0x2f0 [ 2954.523072] out_of_memory+0xa84/0x1430 [ 2954.527062] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2954.531662] ? kasan_check_read+0x11/0x20 [ 2954.535832] ? oom_killer_disable+0x3a0/0x3a0 [ 2954.540373] mem_cgroup_out_of_memory+0x15e/0x210 [ 2954.545260] ? memory_oom_group_write+0x160/0x160 [ 2954.550117] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 2954.554989] ? page_counter_try_charge+0x1c1/0x220 [ 2954.559955] try_charge+0xda9/0x1700 [ 2954.563715] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2954.568419] ? rcu_pm_notify+0xc0/0xc0 [ 2954.572358] ? rcu_read_lock_sched_held+0x14f/0x180 [ 2954.577405] ? __alloc_pages_nodemask+0xb87/0xea0 [ 2954.582275] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2954.586880] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 2954.591953] memcg_kmem_charge_memcg+0x7c/0x120 [ 2954.596643] ? memcg_kmem_put_cache+0xb0/0xb0 [ 2954.601168] cache_grow_begin+0x43f/0x8c0 [ 2954.605335] ? do_raw_spin_unlock+0xa7/0x330 [ 2954.609785] fallback_alloc+0x204/0x2e0 [ 2954.613793] ____cache_alloc_node+0x1c7/0x1e0 [ 2954.618313] kmem_cache_alloc+0x1f8/0x730 [ 2954.622502] sk_prot_alloc+0x69/0x2e0 [ 2954.626322] sk_alloc+0x10d/0x1690 [ 2954.629890] ? sock_def_error_report+0x710/0x710 [ 2954.634671] ? find_held_lock+0x36/0x1c0 [ 2954.638769] ? new_inode_pseudo+0xc1/0x1a0 [ 2954.643025] ? lock_downgrade+0x900/0x900 [ 2954.647203] ? kasan_check_read+0x11/0x20 [ 2954.651374] ? do_raw_spin_unlock+0xa7/0x330 [ 2954.655799] ? do_raw_spin_trylock+0x270/0x270 [ 2954.660409] ? new_inode_pseudo+0x82/0x1a0 [ 2954.664665] ? _raw_spin_lock+0x12/0x40 [ 2954.668660] ? lc_stop+0x10/0x10 [ 2954.672059] ? _raw_spin_unlock+0x2c/0x50 [ 2954.676231] ? trace_event_raw_event_module_request+0x340/0x340 [ 2954.682326] ? check_preemption_disabled+0x48/0x280 [ 2954.687379] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2954.692947] ? get_next_ino+0x10b/0x180 [ 2954.696963] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 2954.701991] kcm_ioctl+0x7bc/0x18c0 [ 2954.705648] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2954.711221] ? debug_smp_processor_id+0x1c/0x20 [ 2954.715926] ? perf_trace_lock+0x14d/0x7a0 [ 2954.720188] ? kcm_unattach+0x15f0/0x15f0 [ 2954.724372] ? lock_is_held_type+0x210/0x210 [ 2954.728804] ? perf_trace_lock+0x7a0/0x7a0 [ 2954.733068] ? mark_held_locks+0x130/0x130 [ 2954.737326] ? zap_class+0x640/0x640 [ 2954.741070] ? do_futex+0x249/0x26d0 [ 2954.744814] ? do_page_fault+0xf2/0x7e0 [ 2954.748815] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2954.753604] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2954.759171] ? check_preemption_disabled+0x48/0x280 [ 2954.764215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2954.769796] ? find_held_lock+0x36/0x1c0 [ 2954.773883] sock_do_ioctl+0xeb/0x420 [ 2954.777707] ? compat_ifr_data_ioctl+0x170/0x170 [ 2954.782488] ? check_preemption_disabled+0x48/0x280 [ 2954.787543] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2954.792515] ? kasan_check_read+0x11/0x20 [ 2954.796700] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2954.802016] ? rcu_softirq_qs+0x20/0x20 [ 2954.806139] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 2954.811383] sock_ioctl+0x313/0x690 [ 2954.815049] ? dlci_ioctl_set+0x40/0x40 [ 2954.819058] ? ksys_dup3+0x680/0x680 [ 2954.822819] ? __might_fault+0x12b/0x1e0 [ 2954.826917] ? lock_downgrade+0x900/0x900 [ 2954.831105] ? lock_release+0xa00/0xa00 [ 2954.835106] ? perf_trace_sched_process_exec+0x860/0x860 [ 2954.840606] ? dlci_ioctl_set+0x40/0x40 [ 2954.844616] do_vfs_ioctl+0x1de/0x1790 [ 2954.848547] ? ioctl_preallocate+0x300/0x300 [ 2954.852991] ? __fget_light+0x2e9/0x430 [ 2954.857010] ? fget_raw+0x20/0x20 [ 2954.860490] ? _copy_to_user+0xc8/0x110 [ 2954.864503] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2954.870062] ? put_timespec64+0x10f/0x1b0 [ 2954.874236] ? nsecs_to_jiffies+0x30/0x30 [ 2954.878419] ? do_syscall_64+0x9a/0x820 [ 2954.882413] ? do_syscall_64+0x9a/0x820 [ 2954.886408] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2954.891008] ? security_file_ioctl+0x94/0xc0 [ 2954.895443] ksys_ioctl+0xa9/0xd0 [ 2954.898921] __x64_sys_ioctl+0x73/0xb0 [ 2954.902835] do_syscall_64+0x1b9/0x820 [ 2954.906738] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 2954.912137] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2954.917087] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2954.921956] ? trace_hardirqs_on_caller+0x310/0x310 [ 2954.927025] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2954.932114] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2954.937002] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2954.942209] RIP: 0033:0x457679 10:38:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x87, 0x0, 0x0, 0x6, 0xce, 0x800, 0x6446, 0x3, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0x2}, &(0x7f0000000180)=0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', 0x8}, 0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002bc0)=ANY=[], &(0x7f0000002c80)) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000080)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000027c0)=[{&(0x7f0000002640)}], 0x1}, 0x800) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) close(r3) syz_open_dev$loop(&(0x7f0000001680)='/dev/loop#\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e5b000)={0x2, 0x2004e20}, 0x10) connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) openat$cgroup_int(r4, &(0x7f0000001600)='rdma.max\x00', 0x2, 0x0) r7 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f000031aff8)={r5, r6}) r8 = gettid() perf_event_open(0x0, r8, 0x3, r5, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000001500)=0x4) ftruncate(r6, 0x4) close(r7) close(r9) [ 2954.945433] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2954.964357] RSP: 002b:00007fe78315fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2954.972129] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457679 [ 2954.979422] RDX: 00000000200003c0 RSI: 00000000000089e2 RDI: 0000000000000008 [ 2954.986719] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2954.994020] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe7831606d4 [ 2955.001800] R13: 00000000004c28fa R14: 00000000004d48a0 R15: 00000000ffffffff [ 2955.122505] Task in /syz2 killed as a result of limit of /syz2 [ 2955.131946] memory: usage 307080kB, limit 307200kB, failcnt 785 [ 2955.142441] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2955.154559] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2955.164761] Memory cgroup stats for /syz2: cache:0KB rss:275160KB rss_huge:256000KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:275232KB inactive_file:0KB active_file:0KB unevictable:16KB [ 2955.202106] Memory cgroup out of memory: Kill process 10825 (syz-executor2) score 1106 or sacrifice child [ 2955.223086] Killed process 10825 (syz-executor2) total-vm:70604kB, anon-rss:2212kB, file-rss:33480kB, shmem-rss:0kB 10:38:07 executing program 4: mkdir(0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000900)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000140)='./control/file0\x00') rename(&(0x7f00000003c0)='./control/file0\x00', &(0x7f0000000380)='./file0\x00') mknod(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@sg0='/dev/sg0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) close(r0) [ 2955.293073] syz-executor2 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 2955.348717] syz-executor2 cpuset=syz2 mems_allowed=0 [ 2955.367391] CPU: 1 PID: 18525 Comm: syz-executor2 Not tainted 4.20.0-rc6+ #371 [ 2955.374813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2955.384187] Call Trace: [ 2955.386836] dump_stack+0x244/0x39d [ 2955.390494] ? dump_stack_print_info.cold.1+0x20/0x20 [ 2955.395723] dump_header+0x27b/0xf72 [ 2955.399475] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2955.405041] ? check_preemption_disabled+0x48/0x280 [ 2955.410084] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2955.415647] ? pagefault_out_of_memory+0x197/0x197 [ 2955.420599] ? debug_smp_processor_id+0x1c/0x20 [ 2955.425291] ? perf_trace_lock+0x14d/0x7a0 [ 2955.429546] ? debug_smp_processor_id+0x1c/0x20 [ 2955.434254] ? perf_trace_lock_acquire+0x15b/0x800 [ 2955.439209] ? lock_is_held_type+0x210/0x210 [ 2955.443649] ? perf_trace_lock+0x7a0/0x7a0 [ 2955.447903] ? debug_smp_processor_id+0x1c/0x20 [ 2955.452596] ? perf_trace_lock+0x14d/0x7a0 [ 2955.456852] ? zap_class+0x640/0x640 [ 2955.460584] ? print_usage_bug+0xc0/0xc0 [ 2955.464674] ? lock_is_held_type+0x210/0x210 [ 2955.469110] ? perf_trace_lock+0x7a0/0x7a0 [ 2955.473374] ? find_held_lock+0x36/0x1c0 [ 2955.477465] ? mark_held_locks+0xc7/0x130 [ 2955.481632] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2955.486748] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2955.491877] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2955.496478] ? trace_hardirqs_on+0xbd/0x310 [ 2955.500824] ? kasan_check_read+0x11/0x20 [ 2955.504999] ? ___ratelimit+0x3b4/0x672 [ 2955.508994] ? trace_hardirqs_off_caller+0x310/0x310 [ 2955.514123] ? trace_hardirqs_on+0x310/0x310 [ 2955.518557] ? lock_downgrade+0x900/0x900 [ 2955.522774] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2955.527899] ? ___ratelimit+0x3b9/0x672 [ 2955.531941] ? idr_get_free+0xf70/0xf70 [ 2955.535943] ? _raw_spin_unlock_irq+0x27/0x80 [ 2955.540452] ? _raw_spin_unlock_irq+0x27/0x80 [ 2955.544972] oom_kill_process.cold.27+0x10/0x903 [ 2955.549741] ? _raw_spin_unlock_irq+0x27/0x80 [ 2955.554272] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2955.558896] ? oom_evaluate_task+0x540/0x540 [ 2955.563318] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2955.568874] ? cgroup_procs_next+0x70/0x70 [ 2955.573134] ? _raw_spin_unlock_irq+0x60/0x80 [ 2955.577645] ? oom_badness+0xaa0/0xaa0 [ 2955.581550] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 2955.586328] ? mem_cgroup_iter_break+0x30/0x30 [ 2955.590945] ? mark_held_locks+0xc7/0x130 [ 2955.595117] out_of_memory+0xa84/0x1430 [ 2955.599106] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2955.603705] ? kasan_check_read+0x11/0x20 [ 2955.607923] ? oom_killer_disable+0x3a0/0x3a0 [ 2955.612465] mem_cgroup_out_of_memory+0x15e/0x210 [ 2955.617358] ? memory_oom_group_write+0x160/0x160 [ 2955.622230] ? mem_cgroup_try_charge+0x627/0xe20 [ 2955.627045] ? page_counter_try_charge+0x1c1/0x220 [ 2955.632006] try_charge+0xda9/0x1700 [ 2955.635767] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2955.640727] ? kasan_check_read+0x11/0x20 [ 2955.645400] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 2955.650107] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 2955.655676] ? lock_page_memcg+0x350/0x350 [ 2955.659945] ? lock_acquire+0x1ed/0x520 [ 2955.663955] ? mem_cgroup_oom_control_write+0x100/0x100 [ 2955.669362] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2955.674948] ? check_preemption_disabled+0x48/0x280 [ 2955.680002] ? kasan_check_read+0x11/0x20 [ 2955.684214] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2955.689527] ? rcu_softirq_qs+0x20/0x20 [ 2955.693546] mem_cgroup_try_charge+0x627/0xe20 [ 2955.698145] ? __anon_vma_prepare+0x325/0x6c0 [ 2955.702663] ? mem_cgroup_protected+0xa60/0xa60 [ 2955.707366] ? up_write+0x7b/0x220 [ 2955.710920] ? down_write_nested+0x130/0x130 [ 2955.715361] ? __anon_vma_prepare+0x353/0x6c0 [ 2955.719874] ? anon_vma_fork+0x820/0x820 [ 2955.723947] ? mark_held_locks+0x130/0x130 [ 2955.728203] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2955.733783] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 2955.738731] __handle_mm_fault+0x2854/0x5be0 [ 2955.743175] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2955.748030] ? lock_is_held_type+0x210/0x210 [ 2955.752453] ? perf_trace_lock+0x7a0/0x7a0 [ 2955.756706] ? perf_trace_lock+0x7a0/0x7a0 [ 2955.760958] ? lock_downgrade+0x900/0x900 [ 2955.765129] ? zap_class+0x640/0x640 [ 2955.768854] ? zap_class+0x640/0x640 [ 2955.772592] ? find_held_lock+0x36/0x1c0 [ 2955.776687] ? handle_mm_fault+0x42a/0xc70 [ 2955.780946] ? lock_downgrade+0x900/0x900 [ 2955.785119] ? check_preemption_disabled+0x48/0x280 [ 2955.790164] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 2955.795107] ? kasan_check_read+0x11/0x20 [ 2955.799287] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2955.804588] ? rcu_softirq_qs+0x20/0x20 [ 2955.808578] ? trace_hardirqs_off_caller+0x310/0x310 [ 2955.813704] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2955.819269] ? check_preemption_disabled+0x48/0x280 [ 2955.824315] handle_mm_fault+0x54f/0xc70 [ 2955.828400] ? __handle_mm_fault+0x5be0/0x5be0 [ 2955.833039] ? find_vma+0x34/0x190 [ 2955.836603] __do_page_fault+0x5e8/0xe60 [ 2955.840691] ? trace_hardirqs_off+0xb8/0x310 [ 2955.845126] do_page_fault+0xf2/0x7e0 [ 2955.848944] ? vmalloc_sync_all+0x30/0x30 [ 2955.853105] ? error_entry+0x70/0xd0 [ 2955.856840] ? trace_hardirqs_off_caller+0xbb/0x310 [ 2955.861875] ? trace_hardirqs_on_caller+0xc0/0x310 [ 2955.866818] ? syscall_return_slowpath+0x5e0/0x5e0 [ 2955.871769] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2955.876625] ? trace_hardirqs_on_caller+0x310/0x310 [ 2955.881653] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 2955.887124] ? prepare_exit_to_usermode+0x291/0x3b0 [ 2955.892158] ? page_fault+0x8/0x30 [ 2955.895718] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2955.900587] ? page_fault+0x8/0x30 [ 2955.904164] page_fault+0x1e/0x30 [ 2955.907642] RIP: 0033:0x40ed8f [ 2955.910847] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 2955.929772] RSP: 002b:0000000000a3fb10 EFLAGS: 00010206 [ 2955.935152] RAX: 00007fe78311f000 RBX: 0000000000020000 RCX: 00000000004576ca [ 2955.942442] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 10:38:08 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) r6 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x61) inotify_init() ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, 0x0) ioctl$FICLONE(r3, 0x40049409, r2) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000140)=@fragment={0x0, 0x0, 0x5, 0x10001, 0x0, 0x800000000, 0x67}, 0x14b) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) memfd_create(&(0x7f0000000600)='\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(r7, 0x7fff) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 10:38:08 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat6\x00') socketpair$unix(0x1, 0x2000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0) [ 2955.949734] RBP: 0000000000a3fbf0 R08: ffffffffffffffff R09: 0000000000000000 [ 2955.957046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a3fcd0 [ 2955.964351] R13: 00007fe78313f700 R14: 000000000072bfac R15: 000000000072bfac [ 2956.091065] Task in /syz2 killed as a result of limit of /syz2 [ 2956.112858] memory: usage 304748kB, limit 307200kB, failcnt 785 [ 2956.120878] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2956.131792] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 2956.137965] Memory cgroup stats for /syz2: cache:0KB rss:273004KB rss_huge:253952KB shmem:0KB mapped_file:132KB dirty:0KB writeback:132KB swap:0KB inactive_anon:4KB active_anon:273052KB inactive_file:0KB active_file:0KB unevictable:16KB [ 2956.181566] Memory cgroup out of memory: Kill process 18447 (syz-executor2) score 1104 or sacrifice child [ 2956.191372] Killed process 18447 (syz-executor2) total-vm:70472kB, anon-rss:2204kB, file-rss:32832kB, shmem-rss:0kB [ 2956.205230] oom_reaper: reaped process 18447 (syz-executor2), now anon-rss:0kB, file-rss:32832kB, shmem-rss:0kB 10:38:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x87, 0x0, 0x0, 0x6, 0xce, 0x800, 0x6446, 0x3, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0x2}, &(0x7f0000000180)=0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', 0x8}, 0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002bc0)=ANY=[], &(0x7f0000002c80)) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000080)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000027c0)=[{&(0x7f0000002640)}], 0x1}, 0x800) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) close(r3) syz_open_dev$loop(&(0x7f0000001680)='/dev/loop#\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e5b000)={0x2, 0x2004e20}, 0x10) connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) openat$cgroup_int(r4, &(0x7f0000001600)='rdma.max\x00', 0x2, 0x0) r7 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f000031aff8)={r5, r6}) r8 = gettid() perf_event_open(0x0, r8, 0x3, r5, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000001500)=0x4) ftruncate(r6, 0x4) close(r7) close(r9) 10:38:08 executing program 5: r0 = memfd_create(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r1, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x70573b3d8ef82cfb, @time={0x77359400}}) 10:38:08 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffff84}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2"}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r0, 0x4) sendmsg$nl_route(r1, &(0x7f0000001d00)={0x0, 0x382, &(0x7f0000001cc0)={&(0x7f0000001c40)=@ipv6_getroute={0x1c, 0x1a, 0x101}, 0x1c}}, 0x0) 10:38:08 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) r6 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x61) inotify_init() ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, 0x0) ioctl$FICLONE(r3, 0x40049409, r2) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000140)=@fragment={0x0, 0x0, 0x5, 0x10001, 0x0, 0x800000000, 0x67}, 0x14b) mkdirat(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) r7 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) memfd_create(&(0x7f0000000600)='\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(r7, 0x7fff) sendfile(r6, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 10:38:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x200000805, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") sendfile(r2, r1, &(0x7f0000000100)=0x6, 0x10001) 10:38:08 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socket$inet6(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f00000000c0)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000480)) unshare(0x60000) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) r0 = creat(&(0x7f0000000080)='./control/file0\x00', 0x40020000000000) mount(&(0x7f00000003c0), &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000140)='sysv\x00', 0x1000, &(0x7f0000000240)) accept4$alg(r0, 0x0, 0x0, 0x80800) unlink(&(0x7f0000000200)='./control/file0\x00') epoll_create1(0x80000) close(0xffffffffffffffff) 10:38:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f00000002c0)}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x16) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0) 10:38:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x200000805, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") sendfile(r2, r1, &(0x7f0000000100)=0x6, 0x10001) 10:38:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 2956.489799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 10:38:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) unshare(0x8000400) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000040), 0x4) 10:38:08 executing program 3: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000244000)) socket$packet(0x11, 0x0, 0x300) 10:38:08 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x200000805, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") sendfile(r2, r1, &(0x7f0000000100)=0x6, 0x10001) 10:38:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x87, 0x0, 0x0, 0x6, 0xce, 0x800, 0x6446, 0x3, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0x2}, &(0x7f0000000180)=0x8) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', 0x8}, 0x18) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002bc0)=ANY=[], &(0x7f0000002c80)) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000080)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000027c0)=[{&(0x7f0000002640)}], 0x1}, 0x800) ioctl(r0, 0x8916, &(0x7f0000000000)) ioctl(r0, 0x8936, &(0x7f0000000000)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) close(r3) syz_open_dev$loop(&(0x7f0000001680)='/dev/loop#\x00', 0x0, 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000e5b000)={0x2, 0x2004e20}, 0x10) connect$inet(r5, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) openat$cgroup_int(r4, &(0x7f0000001600)='rdma.max\x00', 0x2, 0x0) r7 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f000031aff8)={r5, r6}) r8 = gettid() perf_event_open(0x0, r8, 0x3, r5, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000400), &(0x7f0000001500)=0x4) ftruncate(r6, 0x4) close(r7) close(r9) 10:38:08 executing program 1: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000008f00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003c00)=@pppol2tpv3={0x1e, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0}}], 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0x0) 10:38:09 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") syz_emit_ethernet(0x300628, &(0x7f0000000000)={@local, @empty=[0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x2, 0x2f, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 10:38:09 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x200000805, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") sendfile(r2, r1, &(0x7f0000000100)=0x6, 0x10001) 10:38:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000140)=0x1, 0x50) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280)) listen(r1, 0x4) r3 = getpgrp(0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x2, r3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0x74) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000780)=ANY=[@ANYBLOB="dfecffffff"], &(0x7f00000007c0)=0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000002b40)={0x0, 0x3c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e20, 0x9, @empty, 0x5}, @in={0x2, 0x4e22}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000002b80)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={r5, 0x6}, &(0x7f0000002c00)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000003440)={0x0, 0x7, 0x5, 0x4}, &(0x7f0000003480)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000034c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x8f3, 0x7}, &(0x7f0000003580)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000003a00)={0x0, 0x2b, "fdcef11d3b1bee399f5d36437cfa59f9b99f0ff5131b57b65226bd49a6998931585e82365eb67b2f1ac729"}, &(0x7f0000003a40)=0x33) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="4a6917b3d0265593621f6bb0bc8cf5679727ed34df20734ee0fe827650f2c82d9c72ab96b96b7631fd0588edf7188efd2963862bc14069e5af83e9b812fa85244437375aae763e46f5cee6199a77a4b3060108fbdacc58e4b9bb874bc05034a7ad5fd20236d9eeb87ee4627dd91c08743b0a2930dcedf8ce421654705a94cb30b9b958b6ad9f245e50de2964d0d7d90b13d939"], 0x93) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)=0x1) dup3(r0, 0xffffffffffffffff, 0x80000) 10:38:09 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") syz_emit_ethernet(0x300628, &(0x7f0000000000)={@local, @empty=[0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x2, 0x2f, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 10:38:09 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x10003}, 0x1c) 10:38:09 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6, 0x0, 0x6, 0x0, 0x0, 0x41}, 0x98) 10:38:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x549080) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_open_dev$sndtimer(&(0x7f00000007c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x0) getpgrp(0xffffffffffffffff) bind$rds(r2, &(0x7f00000003c0)={0x2, 0x44e25, @dev={0xac, 0x14, 0x14, 0x12}}, 0xfdb1) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000500)={0x0, 0x1}) syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x0, 0x2000024a001) r4 = memfd_create(&(0x7f0000000fc0)="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", 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000580)={0x80000005, 0x4, 0x800}) sendfile(r1, r3, &(0x7f00000ddff8), 0x102000002) 10:38:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x23c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000100)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000013) 10:38:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000140)=0x1, 0x50) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280)) listen(r1, 0x4) r3 = getpgrp(0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x2, r3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0x74) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000780)=ANY=[@ANYBLOB="dfecffffff"], &(0x7f00000007c0)=0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000002b40)={0x0, 0x3c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e20, 0x9, @empty, 0x5}, @in={0x2, 0x4e22}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000002b80)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={r5, 0x6}, &(0x7f0000002c00)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000003440)={0x0, 0x7, 0x5, 0x4}, &(0x7f0000003480)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000034c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x8f3, 0x7}, &(0x7f0000003580)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000003a00)={0x0, 0x2b, "fdcef11d3b1bee399f5d36437cfa59f9b99f0ff5131b57b65226bd49a6998931585e82365eb67b2f1ac729"}, &(0x7f0000003a40)=0x33) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="4a6917b3d0265593621f6bb0bc8cf5679727ed34df20734ee0fe827650f2c82d9c72ab96b96b7631fd0588edf7188efd2963862bc14069e5af83e9b812fa85244437375aae763e46f5cee6199a77a4b3060108fbdacc58e4b9bb874bc05034a7ad5fd20236d9eeb87ee4627dd91c08743b0a2930dcedf8ce421654705a94cb30b9b958b6ad9f245e50de2964d0d7d90b13d939"], 0x93) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)=0x1) dup3(r0, 0xffffffffffffffff, 0x80000) 10:38:09 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") syz_emit_ethernet(0x300628, &(0x7f0000000000)={@local, @empty=[0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x2, 0x2f, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 10:38:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ustat(0x22, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:38:09 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000200)='/dev/video#\x00', 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x400000000003) 10:38:09 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") syz_emit_ethernet(0x300628, &(0x7f0000000000)={@local, @empty=[0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x2, 0x2f, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 10:38:09 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x15}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 10:38:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb431fed148dcf"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10:38:10 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000140)=0x1, 0x50) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280)) listen(r1, 0x4) r3 = getpgrp(0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x2, r3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0x74) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000780)=ANY=[@ANYBLOB="dfecffffff"], &(0x7f00000007c0)=0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000002b40)={0x0, 0x3c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e20, 0x9, @empty, 0x5}, @in={0x2, 0x4e22}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000002b80)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={r5, 0x6}, &(0x7f0000002c00)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000003440)={0x0, 0x7, 0x5, 0x4}, &(0x7f0000003480)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000034c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x8f3, 0x7}, &(0x7f0000003580)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000003a00)={0x0, 0x2b, "fdcef11d3b1bee399f5d36437cfa59f9b99f0ff5131b57b65226bd49a6998931585e82365eb67b2f1ac729"}, &(0x7f0000003a40)=0x33) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="4a6917b3d0265593621f6bb0bc8cf5679727ed34df20734ee0fe827650f2c82d9c72ab96b96b7631fd0588edf7188efd2963862bc14069e5af83e9b812fa85244437375aae763e46f5cee6199a77a4b3060108fbdacc58e4b9bb874bc05034a7ad5fd20236d9eeb87ee4627dd91c08743b0a2930dcedf8ce421654705a94cb30b9b958b6ad9f245e50de2964d0d7d90b13d939"], 0x93) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)=0x1) dup3(r0, 0xffffffffffffffff, 0x80000) 10:38:10 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) write$eventfd(r1, &(0x7f00000000c0), 0x3c3) write$input_event(r1, &(0x7f0000000000)={{0x0, 0x7530}}, 0x2c1) 10:38:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x15}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 10:38:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x15}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 10:38:10 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000180)={0x1, 0x10, 0x3, {0x0}}, 0x18) 10:38:10 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) truncate(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) 10:38:10 executing program 5: syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/video37\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x27f}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 10:38:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x15}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 10:38:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x15}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 10:38:10 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000240), &(0x7f00000002c0)=0x14) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0), 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000140)=0x1, 0x50) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000280)) listen(r1, 0x4) r3 = getpgrp(0x0) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x1, 0x2, 0x2, r3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000100)=0x74) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000780)=ANY=[@ANYBLOB="dfecffffff"], &(0x7f00000007c0)=0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000002b40)={0x0, 0x3c, &(0x7f0000002ac0)=[@in6={0xa, 0x4e20, 0x9, @empty, 0x5}, @in={0x2, 0x4e22}, @in={0x2, 0x4e24, @multicast2}]}, &(0x7f0000002b80)=0x10) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={r5, 0x6}, &(0x7f0000002c00)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000003440)={0x0, 0x7, 0x5, 0x4}, &(0x7f0000003480)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000034c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x8f3, 0x7}, &(0x7f0000003580)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000003a00)={0x0, 0x2b, "fdcef11d3b1bee399f5d36437cfa59f9b99f0ff5131b57b65226bd49a6998931585e82365eb67b2f1ac729"}, &(0x7f0000003a40)=0x33) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="4a6917b3d0265593621f6bb0bc8cf5679727ed34df20734ee0fe827650f2c82d9c72ab96b96b7631fd0588edf7188efd2963862bc14069e5af83e9b812fa85244437375aae763e46f5cee6199a77a4b3060108fbdacc58e4b9bb874bc05034a7ad5fd20236d9eeb87ee4627dd91c08743b0a2930dcedf8ce421654705a94cb30b9b958b6ad9f245e50de2964d0d7d90b13d939"], 0x93) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], &(0x7f0000000340)=0x1) dup3(r0, 0xffffffffffffffff, 0x80000) 10:38:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xb9e0c937aa0068ee, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={0x0, 0xddb}, &(0x7f0000000380)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66660f3882811344bd85b87f7800000f23c80f21f8350000f0000f23f866ba2100b0faee0f01f70f20c035040000000f22c0360f00d6660f3801a7627a33460f234cb83e0000000f23d00f21f835100000020f23f866baa10066ed", 0x5b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f00000016c0)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)) read$FUSE(r4, &(0x7f00000006c0), 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) ustat(0x5, &(0x7f0000000140)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x0, 0x20000003, 0x0, 0x0) 10:38:10 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x15}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 10:38:10 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x400000001, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 10:38:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x15}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 10:38:10 executing program 5: syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/video37\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x27f}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 10:38:11 executing program 2: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) fcntl$addseals(r0, 0x409, 0x5) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000500)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setrlimit(0x0, &(0x7f00000003c0)={0x6, 0x6bac}) r4 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0xe000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @remote, 0xcd}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000300)={r5, 0x3b, "e829f9c06dc5c1affe9ba0281dbe5685af53f0d51bf77ee4a1bbb0b8341e947ed47969057a5d0fc0ed0ca69f4383ec37a55597f8a14f689f988ef3"}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r4) setsockopt$inet6_int(r1, 0x29, 0x39, &(0x7f0000000080)=0x5, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000000)) 10:38:11 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) memfd_create(&(0x7f0000000100)='\x00', 0x0) socket(0x1e, 0x4, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 10:38:11 executing program 5: syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/video37\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x27f}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 10:38:11 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x540b, 0x0) 10:38:11 executing program 2: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) fcntl$addseals(r0, 0x409, 0x5) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000500)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setrlimit(0x0, &(0x7f00000003c0)={0x6, 0x6bac}) r4 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0xe000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @remote, 0xcd}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000300)={r5, 0x3b, "e829f9c06dc5c1affe9ba0281dbe5685af53f0d51bf77ee4a1bbb0b8341e947ed47969057a5d0fc0ed0ca69f4383ec37a55597f8a14f689f988ef3"}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r4) setsockopt$inet6_int(r1, 0x29, 0x39, &(0x7f0000000080)=0x5, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000000)) 10:38:11 executing program 5: syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000680)='/dev/video37\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) pipe(&(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x27f}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 10:38:11 executing program 2: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) fcntl$addseals(r0, 0x409, 0x5) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000500)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setrlimit(0x0, &(0x7f00000003c0)={0x6, 0x6bac}) r4 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0xe000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @remote, 0xcd}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000300)={r5, 0x3b, "e829f9c06dc5c1affe9ba0281dbe5685af53f0d51bf77ee4a1bbb0b8341e947ed47969057a5d0fc0ed0ca69f4383ec37a55597f8a14f689f988ef3"}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r4) setsockopt$inet6_int(r1, 0x29, 0x39, &(0x7f0000000080)=0x5, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000000)) 10:38:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xb9e0c937aa0068ee, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={0x0, 0xddb}, &(0x7f0000000380)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66660f3882811344bd85b87f7800000f23c80f21f8350000f0000f23f866ba2100b0faee0f01f70f20c035040000000f22c0360f00d6660f3801a7627a33460f234cb83e0000000f23d00f21f835100000020f23f866baa10066ed", 0x5b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f00000016c0)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)) read$FUSE(r4, &(0x7f00000006c0), 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) ustat(0x5, &(0x7f0000000140)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x0, 0x20000003, 0x0, 0x0) 10:38:12 executing program 1: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) fcntl$addseals(r0, 0x409, 0x5) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000500)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setrlimit(0x0, &(0x7f00000003c0)={0x6, 0x6bac}) r4 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0xe000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @remote, 0xcd}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000300)={r5, 0x3b, "e829f9c06dc5c1affe9ba0281dbe5685af53f0d51bf77ee4a1bbb0b8341e947ed47969057a5d0fc0ed0ca69f4383ec37a55597f8a14f689f988ef3"}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r4) setsockopt$inet6_int(r1, 0x29, 0x39, &(0x7f0000000080)=0x5, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000000)) 10:38:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x400000001, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 10:38:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x4000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x18}}, &(0x7f0000000900)=""/225, 0x1a, 0xe1}, 0x20) accept4$alg(r0, 0x0, 0x0, 0x0) 10:38:12 executing program 2: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) fcntl$addseals(r0, 0x409, 0x5) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000500)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setrlimit(0x0, &(0x7f00000003c0)={0x6, 0x6bac}) r4 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0xe000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @remote, 0xcd}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000300)={r5, 0x3b, "e829f9c06dc5c1affe9ba0281dbe5685af53f0d51bf77ee4a1bbb0b8341e947ed47969057a5d0fc0ed0ca69f4383ec37a55597f8a14f689f988ef3"}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r4) setsockopt$inet6_int(r1, 0x29, 0x39, &(0x7f0000000080)=0x5, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000000)) 10:38:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="440b0efe", 0x4}) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$TCFLSH(r0, 0x5437, 0x0) 10:38:12 executing program 1: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) fcntl$addseals(r0, 0x409, 0x5) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000500)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setrlimit(0x0, &(0x7f00000003c0)={0x6, 0x6bac}) r4 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0xe000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @remote, 0xcd}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000300)={r5, 0x3b, "e829f9c06dc5c1affe9ba0281dbe5685af53f0d51bf77ee4a1bbb0b8341e947ed47969057a5d0fc0ed0ca69f4383ec37a55597f8a14f689f988ef3"}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r4) setsockopt$inet6_int(r1, 0x29, 0x39, &(0x7f0000000080)=0x5, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000000)) 10:38:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="440b0efe", 0x4}) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$TCFLSH(r0, 0x5437, 0x0) 10:38:12 executing program 2: unshare(0x24020400) unshare(0x20000000) 10:38:12 executing program 1: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) fcntl$addseals(r0, 0x409, 0x5) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000500)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setrlimit(0x0, &(0x7f00000003c0)={0x6, 0x6bac}) r4 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0xe000, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @remote, 0xcd}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000300)={r5, 0x3b, "e829f9c06dc5c1affe9ba0281dbe5685af53f0d51bf77ee4a1bbb0b8341e947ed47969057a5d0fc0ed0ca69f4383ec37a55597f8a14f689f988ef3"}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r4) setsockopt$inet6_int(r1, 0x29, 0x39, &(0x7f0000000080)=0x5, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000000)) 10:38:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x4000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x18}}, &(0x7f0000000900)=""/225, 0x1a, 0xe1}, 0x20) accept4$alg(r0, 0x0, 0x0, 0x0) 10:38:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="440b0efe", 0x4}) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$TCFLSH(r0, 0x5437, 0x0) 10:38:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xb9e0c937aa0068ee, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={0x0, 0xddb}, &(0x7f0000000380)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66660f3882811344bd85b87f7800000f23c80f21f8350000f0000f23f866ba2100b0faee0f01f70f20c035040000000f22c0360f00d6660f3801a7627a33460f234cb83e0000000f23d00f21f835100000020f23f866baa10066ed", 0x5b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f00000016c0)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)) read$FUSE(r4, &(0x7f00000006c0), 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) ustat(0x5, &(0x7f0000000140)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x0, 0x20000003, 0x0, 0x0) 10:38:12 executing program 2: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='tunl0\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 10:38:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x400000001, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 10:38:13 executing program 1: syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'bond0\x00', @ifru_flags=0x2001}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x14000, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @empty, 0x101}, 0x6) sendfile(r1, r1, 0x0, 0x34dc) 10:38:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x4000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x18}}, &(0x7f0000000900)=""/225, 0x1a, 0xe1}, 0x20) accept4$alg(r0, 0x0, 0x0, 0x0) 10:38:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r1 = getpid() ptrace$setregset(0x4205, 0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)="440b0efe", 0x4}) sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl$TCFLSH(r0, 0x5437, 0x0) 10:38:13 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net\x00') ioctl$int_out(r0, 0x5460, &(0x7f0000000200)) 10:38:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 10:38:13 executing program 1: syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'bond0\x00', @ifru_flags=0x2001}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x14000, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @empty, 0x101}, 0x6) sendfile(r1, r1, 0x0, 0x34dc) 10:38:13 executing program 3: syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'bond0\x00', @ifru_flags=0x2001}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x14000, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @empty, 0x101}, 0x6) sendfile(r1, r1, 0x0, 0x34dc) 10:38:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x4000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x18}}, &(0x7f0000000900)=""/225, 0x1a, 0xe1}, 0x20) accept4$alg(r0, 0x0, 0x0, 0x0) 10:38:13 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 10:38:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0xb9e0c937aa0068ee, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={0x0, 0xddb}, &(0x7f0000000380)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000540)="66660f3882811344bd85b87f7800000f23c80f21f8350000f0000f23f866ba2100b0faee0f01f70f20c035040000000f22c0360f00d6660f3801a7627a33460f234cb83e0000000f23d00f21f835100000020f23f866baa10066ed", 0x5b}], 0x1, 0x0, &(0x7f00000001c0), 0x0) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f00000016c0)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000680)}, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)) read$FUSE(r4, &(0x7f00000006c0), 0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) ustat(0x5, &(0x7f0000000140)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000200)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x0, 0x20000003, 0x0, 0x0) 10:38:14 executing program 1: syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'bond0\x00', @ifru_flags=0x2001}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x14000, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @empty, 0x101}, 0x6) sendfile(r1, r1, 0x0, 0x34dc) 10:38:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x400000001, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz0\x00'}) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 10:38:14 executing program 3: syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'bond0\x00', @ifru_flags=0x2001}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x14000, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @empty, 0x101}, 0x6) sendfile(r1, r1, 0x0, 0x34dc) 10:38:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 10:38:14 executing program 5: syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'bond0\x00', @ifru_flags=0x2001}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x14000, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @empty, 0x101}, 0x6) sendfile(r1, r1, 0x0, 0x34dc) 10:38:14 executing program 1: syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'bond0\x00', @ifru_flags=0x2001}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x14000, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @empty, 0x101}, 0x6) sendfile(r1, r1, 0x0, 0x34dc) 10:38:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 10:38:14 executing program 3: syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'bond0\x00', @ifru_flags=0x2001}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x14000, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @empty, 0x101}, 0x6) sendfile(r1, r1, 0x0, 0x34dc) 10:38:14 executing program 5: syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'bond0\x00', @ifru_flags=0x2001}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x14000, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @empty, 0x101}, 0x6) sendfile(r1, r1, 0x0, 0x34dc) 10:38:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01ab", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xbd}], 0x30}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000880)=""/44, 0x2c}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x2) 10:38:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='wlan0\x00', 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0xa07d, 0xa, 0x0, 0x0, 0x2f}, {0x4, 0x0, 0x0, 0x0, 0x1, 0x5, 0x5}, {0x0, 0x7, 0x8}, 0x8, 0x6e6bbc, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d3}, 0xa, @in6=@mcast2, 0x3503, 0x2, 0x1, 0x2, 0x0, 0x7}}, 0xe8) setsockopt$XDP_TX_RING(0xffffffffffffff9c, 0x11b, 0x3, &(0x7f0000000000)=0x29, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a0bcb98a3e1f46fd51b139d755efce9768b84ea75c2ff4b3c85caef374d126a56fa4743af7ef55c846bfe7dd16072d260ffddcc8a6d22e02f44d6a360524b86b51a4b58afca35f12201adb024bfb20fbd364e78a232fbef31595029f755740ab15e173dc73ba964a4189007c7c40db8fb4b64dd8ec4d366") ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) fcntl$setstatus(r1, 0x4, 0x4000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) ptrace$setopts(0x4206, r2, 0x4, 0x10000a) recvfrom(0xffffffffffffffff, &(0x7f0000000780)=""/89, 0x59, 0x40000001, &(0x7f0000000940)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80) sendfile(r0, r1, &(0x7f0000000040)=0xe00, 0x1080005023) 10:38:15 executing program 2: socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x3ffffffffffffffe, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000640)={0x0, 0x7, 0x3, 0x2}, &(0x7f0000000680)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000006c0)={r3, 0x81}, &(0x7f0000000700)=0x8) r5 = socket$inet6(0xa, 0x100000080005, 0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000000)={@mcast1}, &(0x7f0000000040)=0x20) recvfrom$inet6(r5, &(0x7f00000003c0)=""/185, 0xb9, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000800)="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", 0x1000, 0x0, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x10000000, @ipv4={[], [], @local}, 0x100000001}, 0xf) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x1) r6 = socket$inet6(0xa, 0x3, 0x3a) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000300)=0xbe, &(0x7f0000000340)=0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={r4, 0x3}, 0x8) socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000480)={0x1, 0xfffffffffffeffff, 0x5, 0x50}, 0x8) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000540)={{0xa, 0x4e24, 0x6f8, @mcast2, 0x1a}, {0xa, 0x4e20, 0x80000000, @mcast1, 0x65}, 0x10000, [0x4, 0x2bf4, 0x6, 0xa3a, 0xa5, 0xba26, 0x400, 0x1]}, 0x5c) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000001900)={{{@in=@multicast2, @in=@remote}}, {{@in6=@local}}}, &(0x7f0000000240)=0xe8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000005c0)={r8, 0x0, 0x9368, r1}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000004c0)={r4, 0x4}, &(0x7f0000000500)=0x8) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f00000000c0)={0x0, 0x3617}) setsockopt$inet6_int(r6, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x4e22, 0x1, @remote, 0xde27}, {0xa, 0x4e20, 0x100000001, @mcast1, 0x8000}, 0x0, [0x9, 0x1, 0x2, 0x630, 0x0, 0x9, 0x5, 0x2aec100000000000]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e22, 0x8, @ipv4={[], [], @broadcast}, 0x9}, {0xa, 0x4e22, 0x800, @mcast1, 0x5dfb}, 0x5, [0x400, 0x3, 0x3, 0x9, 0x8000, 0xdb4, 0x7, 0x3]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e21, 0xfe, @ipv4={[], [], @multicast1}, 0x9}, {0xa, 0x4e23, 0x10000000000007a, @mcast1, 0x4}, 0x2000005, [0x4, 0xb, 0x6, 0x3, 0x7, 0x6, 0x0, 0x2]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, {0xa, 0xffffffffffffffff, 0x0, @remote}, 0x0, [0x7, 0x0, 0x1ff, 0x0, 0x4]}, 0x5c) 10:38:15 executing program 5: syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8910, &(0x7f00000001c0)=@req={0x28, &(0x7f0000000180)={'bond0\x00', @ifru_flags=0x2001}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x14000, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @empty, 0x101}, 0x6) sendfile(r1, r1, 0x0, 0x34dc) 10:38:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='wlan0\x00', 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0xa07d, 0xa, 0x0, 0x0, 0x2f}, {0x4, 0x0, 0x0, 0x0, 0x1, 0x5, 0x5}, {0x0, 0x7, 0x8}, 0x8, 0x6e6bbc, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d3}, 0xa, @in6=@mcast2, 0x3503, 0x2, 0x1, 0x2, 0x0, 0x7}}, 0xe8) setsockopt$XDP_TX_RING(0xffffffffffffff9c, 0x11b, 0x3, &(0x7f0000000000)=0x29, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a0bcb98a3e1f46fd51b139d755efce9768b84ea75c2ff4b3c85caef374d126a56fa4743af7ef55c846bfe7dd16072d260ffddcc8a6d22e02f44d6a360524b86b51a4b58afca35f12201adb024bfb20fbd364e78a232fbef31595029f755740ab15e173dc73ba964a4189007c7c40db8fb4b64dd8ec4d366") ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) fcntl$setstatus(r1, 0x4, 0x4000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) ptrace$setopts(0x4206, r2, 0x4, 0x10000a) recvfrom(0xffffffffffffffff, &(0x7f0000000780)=""/89, 0x59, 0x40000001, &(0x7f0000000940)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80) sendfile(r0, r1, &(0x7f0000000040)=0xe00, 0x1080005023) 10:38:15 executing program 0: mmap(&(0x7f0000000000/0x3a6000)=nil, 0x3a6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000269fb8)={0x0, 0x3, &(0x7f00000affc8), &(0x7f000039cff6)='syzkaller\x00', 0x0, 0x1000, &(0x7f000039c000)=""/4096}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) sendfile(r1, r0, &(0x7f0000000180), 0x10013c93e) 10:38:15 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x1}, 0xc) close(r2) close(r1) 10:38:15 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x80, 0x0}, 0x20000054) listen(r0, 0x0) 10:38:15 executing program 2: lsetxattr$security_smack_transmute(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000500)='TRUE', 0x4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) setfsgid(0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x1, 0x0, [{0x0, 0x3, 0x0, [], 0x1ff}]}}) 10:38:15 executing program 1: creat(&(0x7f0000000180)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x8}}, 0x24, 0x0) 10:38:15 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1000000000000279, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='children\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000157, 0x0) 10:38:15 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') sendfile(r0, r0, &(0x7f00000000c0)=0x40000, 0x10) 10:38:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r1, &(0x7f00000001c0)=@hat={'permhat ', 0x0, 0x5e, ['\'&\x00', '/proc/thread-self/attr/current\x00']}, 0x3d) 10:38:15 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bind$packet(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @dev}, 0x10) close(r0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000280)) 10:38:15 executing program 0: setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) exit(0x0) 10:38:15 executing program 2: lsetxattr$security_smack_transmute(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000500)='TRUE', 0x4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) setfsgid(0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x1, 0x0, [{0x0, 0x3, 0x0, [], 0x1ff}]}}) 10:38:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='wlan0\x00', 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0xa07d, 0xa, 0x0, 0x0, 0x2f}, {0x4, 0x0, 0x0, 0x0, 0x1, 0x5, 0x5}, {0x0, 0x7, 0x8}, 0x8, 0x6e6bbc, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d3}, 0xa, @in6=@mcast2, 0x3503, 0x2, 0x1, 0x2, 0x0, 0x7}}, 0xe8) setsockopt$XDP_TX_RING(0xffffffffffffff9c, 0x11b, 0x3, &(0x7f0000000000)=0x29, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a0bcb98a3e1f46fd51b139d755efce9768b84ea75c2ff4b3c85caef374d126a56fa4743af7ef55c846bfe7dd16072d260ffddcc8a6d22e02f44d6a360524b86b51a4b58afca35f12201adb024bfb20fbd364e78a232fbef31595029f755740ab15e173dc73ba964a4189007c7c40db8fb4b64dd8ec4d366") ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) fcntl$setstatus(r1, 0x4, 0x4000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) ptrace$setopts(0x4206, r2, 0x4, 0x10000a) recvfrom(0xffffffffffffffff, &(0x7f0000000780)=""/89, 0x59, 0x40000001, &(0x7f0000000940)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80) sendfile(r0, r1, &(0x7f0000000040)=0xe00, 0x1080005023) 10:38:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d024031ae85717070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={"626f6e643000009e00", 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x205, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKMODE={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 2963.746945] bond0: cannot enslave bond to itself. 10:38:16 executing program 4: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r1) 10:38:16 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x1, 0x0) write$sndseq(r0, &(0x7f0000000140)=[{0x81, 0x4, 0x0, 0x0, @tick, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0xffffff1c) 10:38:16 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="840008000000000000bd7000ffffffff0000dffc0c00000000000000000000005b659a620700fc380c2dbfdc5e9f13e1a04810d464fbc3f4c1b4e2bf501fb1bb949869c2984d914d9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d7030df7f1969136edfd73294c0356675ffff00000000000000004ce56aa166b5040d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 10:38:16 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1) 10:38:16 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) 10:38:16 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000037c0)=[{&(0x7f0000000280)=""/67, 0x43}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/161, 0xa1}, {&(0x7f00000003c0)=""/48, 0x30}, {&(0x7f0000000400)=""/56, 0x38}, {&(0x7f0000000440)=""/101, 0x65}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x7, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)=0x0) ptrace$setregset(0x4205, r3, 0x0, &(0x7f0000003880)={&(0x7f0000003840)="005125aa7bdf0e0c90db5b76aeffa0ef983c48711c", 0x15}) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f00000006c0)=""/4096, &(0x7f0000000240)=0x1000) r4 = fcntl$dupfd(r2, 0x0, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)}}, 0x378) recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x2e, 0x0, 0x0) 10:38:16 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) 10:38:16 executing program 2: lsetxattr$security_smack_transmute(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000500)='TRUE', 0x4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) setfsgid(0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x1, 0x0, [{0x0, 0x3, 0x0, [], 0x1ff}]}}) 10:38:16 executing program 0: setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) exit(0x0) 10:38:16 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000037c0)=[{&(0x7f0000000280)=""/67, 0x43}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/161, 0xa1}, {&(0x7f00000003c0)=""/48, 0x30}, {&(0x7f0000000400)=""/56, 0x38}, {&(0x7f0000000440)=""/101, 0x65}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x7, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)=0x0) ptrace$setregset(0x4205, r3, 0x0, &(0x7f0000003880)={&(0x7f0000003840)="005125aa7bdf0e0c90db5b76aeffa0ef983c48711c", 0x15}) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f00000006c0)=""/4096, &(0x7f0000000240)=0x1000) r4 = fcntl$dupfd(r2, 0x0, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)}}, 0x378) recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x2e, 0x0, 0x0) 10:38:16 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000180)='wlan0\x00', 0x1) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0xa07d, 0xa, 0x0, 0x0, 0x2f}, {0x4, 0x0, 0x0, 0x0, 0x1, 0x5, 0x5}, {0x0, 0x7, 0x8}, 0x8, 0x6e6bbc, 0x1, 0x1, 0x3}, {{@in6=@remote, 0x4d3}, 0xa, @in6=@mcast2, 0x3503, 0x2, 0x1, 0x2, 0x0, 0x7}}, 0xe8) setsockopt$XDP_TX_RING(0xffffffffffffff9c, 0x11b, 0x3, &(0x7f0000000000)=0x29, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a0bcb98a3e1f46fd51b139d755efce9768b84ea75c2ff4b3c85caef374d126a56fa4743af7ef55c846bfe7dd16072d260ffddcc8a6d22e02f44d6a360524b86b51a4b58afca35f12201adb024bfb20fbd364e78a232fbef31595029f755740ab15e173dc73ba964a4189007c7c40db8fb4b64dd8ec4d366") ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) fcntl$setstatus(r1, 0x4, 0x4000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) ptrace$setopts(0x4206, r2, 0x4, 0x10000a) recvfrom(0xffffffffffffffff, &(0x7f0000000780)=""/89, 0x59, 0x40000001, &(0x7f0000000940)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80) sendfile(r0, r1, &(0x7f0000000040)=0xe00, 0x1080005023) 10:38:16 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) 10:38:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmmsg$alg(r1, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x759a}], 0x30}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x8000a0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/48, 0x7ffff000}, {&(0x7f00000000c0)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x3, 0x0, 0xffffff16}}], 0x26000, 0x0, &(0x7f0000008bc0)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 10:38:17 executing program 2: lsetxattr$security_smack_transmute(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000500)='TRUE', 0x4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000640)={"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"}) setfsgid(0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x1, 0x0, [{0x0, 0x3, 0x0, [], 0x1ff}]}}) 10:38:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0/file1/file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x0) 10:38:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000037c0)=[{&(0x7f0000000280)=""/67, 0x43}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/161, 0xa1}, {&(0x7f00000003c0)=""/48, 0x30}, {&(0x7f0000000400)=""/56, 0x38}, {&(0x7f0000000440)=""/101, 0x65}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x7, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)=0x0) ptrace$setregset(0x4205, r3, 0x0, &(0x7f0000003880)={&(0x7f0000003840)="005125aa7bdf0e0c90db5b76aeffa0ef983c48711c", 0x15}) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f00000006c0)=""/4096, &(0x7f0000000240)=0x1000) r4 = fcntl$dupfd(r2, 0x0, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)}}, 0x378) recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x2e, 0x0, 0x0) 10:38:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4000000000003, 0x1, 0xffffffffffffffff, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 10:38:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a15cdf0319fa22748f9a91c66b3", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) preadv(r0, &(0x7f00000037c0)=[{&(0x7f0000000280)=""/67, 0x43}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/161, 0xa1}, {&(0x7f00000003c0)=""/48, 0x30}, {&(0x7f0000000400)=""/56, 0x38}, {&(0x7f0000000440)=""/101, 0x65}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x7, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)=0x0) ptrace$setregset(0x4205, r3, 0x0, &(0x7f0000003880)={&(0x7f0000003840)="005125aa7bdf0e0c90db5b76aeffa0ef983c48711c", 0x15}) getsockopt$bt_hci(r1, 0x0, 0x1, &(0x7f00000006c0)=""/4096, &(0x7f0000000240)=0x1000) r4 = fcntl$dupfd(r2, 0x0, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)}}, 0x378) recvmmsg(r2, &(0x7f0000006880)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0xf}, {&(0x7f00000017c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000600)=""/154, 0x9a}}], 0x2e, 0x0, 0x0) 10:38:17 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000036) unshare(0x20400) fcntl$notify(r0, 0x402, 0x0) 10:38:17 executing program 0: setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) exit(0x0) 10:38:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x32}}) close(r2) close(r1) 10:38:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000036) unshare(0x20400) fcntl$notify(r0, 0x402, 0x0) 10:38:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000036) unshare(0x20400) fcntl$notify(r0, 0x402, 0x0) 10:38:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000440)={0x0, 0x0, @ioapic}) 10:38:18 executing program 1: msgget$private(0x0, 0x403) socket(0xf, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000500)=""/158, 0x9e, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000380)="0f070f20616426660fe855090f350f22e4c4e205a622f20f5a2666baf80cb8ccae358eef66bafc0cb872000000efb805000000b9000000000f01d9b9800000c00f3235000800000f30", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000c40)) 10:38:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="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", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000036) unshare(0x20400) fcntl$notify(r0, 0x402, 0x0) 10:38:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000036) unshare(0x20400) fcntl$notify(r0, 0x402, 0x0) 10:38:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmmsg$alg(r1, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x759a}], 0x30}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x8000a0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/48, 0x7ffff000}, {&(0x7f00000000c0)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x3, 0x0, 0xffffff16}}], 0x26000, 0x0, &(0x7f0000008bc0)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 10:38:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 10:38:18 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000036) unshare(0x20400) fcntl$notify(r0, 0x402, 0x0) 10:38:18 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000036) unshare(0x20400) fcntl$notify(r0, 0x402, 0x0) 10:38:18 executing program 0: setxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) exit(0x0) 10:38:18 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/userio\x00', 0x22001, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200)={0x2, 0xfffffffffffffffa}, 0x2) 10:38:18 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x1, 0x0, 0x0, {{}, 0x0, 0x400b, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 10:38:19 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) connect$inet(r3, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r3, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r3) tkill(r1, 0x16) [ 2966.720047] misc userio: No port type given on /dev/userio [ 2966.767258] misc userio: The device must be registered before sending interrupts 10:38:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0x24, &(0x7f0000000040), 0x4) close(r2) close(r1) 10:38:19 executing program 1: msgget$private(0x0, 0x403) socket(0xf, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000500)=""/158, 0x9e, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000380)="0f070f20616426660fe855090f350f22e4c4e205a622f20f5a2666baf80cb8ccae358eef66bafc0cb872000000efb805000000b9000000000f01d9b9800000c00f3235000800000f30", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000c40)) 10:38:19 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) connect$inet(r3, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r3, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r3) tkill(r1, 0x16) 10:38:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x3) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x7fffffff, 0x600) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, 0x100000001}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000580)={r2, 0x2, 0x30}, &(0x7f0000000680)=0xc) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x2, 0x8001, 0xbfa}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x19) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="30032cbd21a1ed6d4c7000fedbdf25020000003800e50008000600020000001400010000000000000000000000000000000000080006006784000008000b0000000000253e000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./file0\x00') mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x8010, r0, 0x0) ioprio_get$pid(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@mcast2, @in6=@remote}}, {{@in=@dev}}}, &(0x7f00000004c0)=0xe8) getegid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c80)={{{@in=@multicast1, @in=@local}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='fuse\x00', 0x40, &(0x7f0000000d80)=ANY=[@ANYBLOB]) r4 = dup2(r3, r0) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000740)) accept4$inet(r4, &(0x7f0000000800)={0x2, 0x0, @multicast2}, &(0x7f0000000840)=0x10, 0x800) r5 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) readlink(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=""/16, 0x10) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f00000000c0)={0x2, @broadcast, 0x4e23, 0x4, 'nq\x00', 0x2, 0x89, 0x16}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000009c0)={{0x0, @rand_addr=0x5, 0x4e23, 0x0, 'nq\x00', 0x30, 0x0, 0x13}, {@multicast2, 0x0, 0x10000, 0xde1}}, 0x44) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000001040)=""/4096) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)=[&(0x7f0000000b40)='ramfs\x00']) 10:38:19 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmmsg$alg(r1, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x759a}], 0x30}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x8000a0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/48, 0x7ffff000}, {&(0x7f00000000c0)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x3, 0x0, 0xffffff16}}], 0x26000, 0x0, &(0x7f0000008bc0)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 10:38:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x3) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x7fffffff, 0x600) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, 0x100000001}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000580)={r2, 0x2, 0x30}, &(0x7f0000000680)=0xc) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x2, 0x8001, 0xbfa}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x19) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="30032cbd21a1ed6d4c7000fedbdf25020000003800e50008000600020000001400010000000000000000000000000000000000080006006784000008000b0000000000253e000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./file0\x00') mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x8010, r0, 0x0) ioprio_get$pid(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@mcast2, @in6=@remote}}, {{@in=@dev}}}, &(0x7f00000004c0)=0xe8) getegid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c80)={{{@in=@multicast1, @in=@local}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='fuse\x00', 0x40, &(0x7f0000000d80)=ANY=[@ANYBLOB]) r4 = dup2(r3, r0) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000740)) accept4$inet(r4, &(0x7f0000000800)={0x2, 0x0, @multicast2}, &(0x7f0000000840)=0x10, 0x800) r5 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) readlink(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=""/16, 0x10) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f00000000c0)={0x2, @broadcast, 0x4e23, 0x4, 'nq\x00', 0x2, 0x89, 0x16}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000009c0)={{0x0, @rand_addr=0x5, 0x4e23, 0x0, 'nq\x00', 0x30, 0x0, 0x13}, {@multicast2, 0x0, 0x10000, 0xde1}}, 0x44) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000001040)=""/4096) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)=[&(0x7f0000000b40)='ramfs\x00']) 10:38:19 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) connect$inet(r3, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r3, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r3) tkill(r1, 0x16) 10:38:19 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x3) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x7fffffff, 0x600) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, 0x100000001}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000580)={r2, 0x2, 0x30}, &(0x7f0000000680)=0xc) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x2, 0x8001, 0xbfa}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x19) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="30032cbd21a1ed6d4c7000fedbdf25020000003800e50008000600020000001400010000000000000000000000000000000000080006006784000008000b0000000000253e000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./file0\x00') mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x8010, r0, 0x0) ioprio_get$pid(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@mcast2, @in6=@remote}}, {{@in=@dev}}}, &(0x7f00000004c0)=0xe8) getegid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c80)={{{@in=@multicast1, @in=@local}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='fuse\x00', 0x40, &(0x7f0000000d80)=ANY=[@ANYBLOB]) r4 = dup2(r3, r0) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000740)) accept4$inet(r4, &(0x7f0000000800)={0x2, 0x0, @multicast2}, &(0x7f0000000840)=0x10, 0x800) r5 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) readlink(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=""/16, 0x10) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f00000000c0)={0x2, @broadcast, 0x4e23, 0x4, 'nq\x00', 0x2, 0x89, 0x16}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000009c0)={{0x0, @rand_addr=0x5, 0x4e23, 0x0, 'nq\x00', 0x30, 0x0, 0x13}, {@multicast2, 0x0, 0x10000, 0xde1}}, 0x44) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000001040)=""/4096) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)=[&(0x7f0000000b40)='ramfs\x00']) 10:38:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x8, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x2, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x2, r2, 0x200000000000005}) 10:38:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2e, &(0x7f00000001c0)=0x94e, 0xae) 10:38:19 executing program 5: timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) connect$inet(r3, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r3, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r0, r3) tkill(r1, 0x16) 10:38:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000003, 0x3) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x7fffffff, 0x600) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, 0x100000001}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000580)={r2, 0x2, 0x30}, &(0x7f0000000680)=0xc) mount(&(0x7f00000004c0)=ANY=[], &(0x7f000000aff8)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000007c0)={0x0, 0x2, 0x8001, 0xbfa}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x19) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="30032cbd21a1ed6d4c7000fedbdf25020000003800e50008000600020000001400010000000000000000000000000000000000080006006784000008000b0000000000253e000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x84}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000540)='./file0\x00') mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x8010, r0, 0x0) ioprio_get$pid(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000b80)={{{@in6=@mcast2, @in6=@remote}}, {{@in=@dev}}}, &(0x7f00000004c0)=0xe8) getegid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c80)={{{@in=@multicast1, @in=@local}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='fuse\x00', 0x40, &(0x7f0000000d80)=ANY=[@ANYBLOB]) r4 = dup2(r3, r0) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f0000000740)) accept4$inet(r4, &(0x7f0000000800)={0x2, 0x0, @multicast2}, &(0x7f0000000840)=0x10, 0x800) r5 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) readlink(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=""/16, 0x10) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f00000000c0)={0x2, @broadcast, 0x4e23, 0x4, 'nq\x00', 0x2, 0x89, 0x16}, 0x2c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000009c0)={{0x0, @rand_addr=0x5, 0x4e23, 0x0, 'nq\x00', 0x30, 0x0, 0x13}, {@multicast2, 0x0, 0x10000, 0xde1}}, 0x44) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) ioctl$EVIOCGPHYS(r5, 0x80404507, &(0x7f0000001040)=""/4096) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380), &(0x7f0000000ac0)=[&(0x7f0000000b40)='ramfs\x00']) 10:38:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000147, 0x200000000000000) 10:38:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000400)=[@acquire_done], 0x0, 0x0, 0x0}) 10:38:20 executing program 1: msgget$private(0x0, 0x403) socket(0xf, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000500)=""/158, 0x9e, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000380)="0f070f20616426660fe855090f350f22e4c4e205a622f20f5a2666baf80cb8ccae358eef66bafc0cb872000000efb805000000b9000000000f01d9b9800000c00f3235000800000f30", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000c40)) 10:38:20 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f00003c1000), 0x0) [ 2968.045126] binder: 19104:19105 ioctl c018620b 0 returned -14 [ 2968.096949] binder_set_nice: 3 callbacks suppressed [ 2968.096956] binder: 19105 RLIMIT_NICE not set [ 2968.147289] binder_alloc: binder_alloc_mmap_handler: 19104 20001000-20004000 already mapped failed -16 [ 2968.191279] binder: 19104:19105 ioctl c018620b 0 returned -14 [ 2968.216031] binder: 19115 RLIMIT_NICE not set [ 2968.237266] binder: BINDER_SET_CONTEXT_MGR already set [ 2968.260654] binder: 19104:19105 ioctl 40046207 0 returned -16 [ 2968.261939] binder_alloc: 19104: binder_alloc_buf, no vma [ 2968.283563] binder: 19104:19105 Release 1 refcount change on invalid ref 1 ret -22 [ 2968.302108] binder: 19104:19120 BC_ACQUIRE_DONE u0000000000000000 no match [ 2968.320971] binder: release 19104:19115 transaction 404 out, still active [ 2968.331706] binder: send failed reply for transaction 404, target dead [ 2968.341882] binder: 19104:19115 transaction failed 29189/-3, size 24-8 line 2973 10:38:20 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmmsg$alg(r1, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x759a}], 0x30}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x8000a0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/48, 0x7ffff000}, {&(0x7f00000000c0)=""/120, 0x78}, {&(0x7f0000000300)=""/230, 0xe6}], 0x3, 0x0, 0xffffff16}}], 0x26000, 0x0, &(0x7f0000008bc0)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 10:38:20 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="eb280a1a75511eb82753cf3edb473d6a", 0x10) listen(r0, 0x0) close(r0) 10:38:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001b80)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(generic-gcm-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="430c7cd4733fb6dca71bcd1c438d6fd2e17f7c9dad04307cc1bf7ceaf5299fcd1c77e308", 0x24) 10:38:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0xf6) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1000000000013) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) 10:38:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000400)=[@acquire_done], 0x0, 0x0, 0x0}) [ 2968.693218] binder: 19126:19128 ioctl c018620b 0 returned -14 [ 2968.739147] binder: 19128 RLIMIT_NICE not set [ 2968.746124] kasan: CONFIG_KASAN_INLINE enabled [ 2968.751066] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 2968.780642] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 2968.786895] CPU: 0 PID: 16313 Comm: kworker/0:1 Not tainted 4.20.0-rc6+ #371 [ 2968.794087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2968.803507] Workqueue: events smc_tcp_listen_work [ 2968.808363] RIP: 0010:kernel_accept+0x5a/0x310 [ 2968.812947] Code: 48 c1 ea 03 80 3c 02 00 0f 85 4a 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5d 20 48 8d bb 50 03 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 14 02 00 00 48 8d 7b 10 0f b6 [ 2968.831840] RSP: 0018:ffff8881bdc775b0 EFLAGS: 00010206 [ 2968.837200] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff1103131d519 [ 2968.844470] RDX: 000000000000006a RSI: ffffffff8623a7bf RDI: 0000000000000350 [ 2968.851747] RBP: ffff8881bdc775e0 R08: ffff8881898ea8c8 R09: 0000000000000006 [ 2968.859016] R10: 0000000000000000 R11: ffff8881898ea000 R12: ffff8881bdc77690 [ 2968.866286] R13: ffff8880a633fac0 R14: 0000000000000000 R15: ffff8881ba9c9578 [ 2968.873560] FS: 0000000000000000(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000 [ 2968.881785] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2968.887663] CR2: 0000001b2f323000 CR3: 00000001d2e7d000 CR4: 00000000001426f0 [ 2968.894927] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2968.902219] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2968.909495] Call Trace: [ 2968.912088] smc_tcp_listen_work+0x218/0x11c0 [ 2968.916590] ? smc_ioctl+0x1270/0x1270 [ 2968.920501] ? __lock_is_held+0xb5/0x140 [ 2968.924577] process_one_work+0xc90/0x1c40 [ 2968.928813] ? mark_held_locks+0x130/0x130 [ 2968.933069] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 2968.937734] ? __switch_to_asm+0x40/0x70 [ 2968.941791] ? __switch_to_asm+0x34/0x70 [ 2968.945853] ? __switch_to_asm+0x40/0x70 [ 2968.949914] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2968.955457] ? check_preemption_disabled+0x48/0x280 [ 2968.960468] ? __switch_to_asm+0x34/0x70 [ 2968.964537] ? debug_smp_processor_id+0x1c/0x20 [ 2968.969208] ? perf_trace_lock_acquire+0x15b/0x800 [ 2968.974164] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2968.978751] ? lock_downgrade+0x900/0x900 [ 2968.982905] ? zap_class+0x640/0x640 [ 2968.986616] ? zap_class+0x640/0x640 [ 2968.990346] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2968.995131] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2969.000322] ? lock_acquire+0x1ed/0x520 [ 2969.004311] ? worker_thread+0x3e0/0x1390 [ 2969.008465] ? kasan_check_read+0x11/0x20 [ 2969.012613] ? do_raw_spin_lock+0x14f/0x350 [ 2969.016930] ? kasan_check_read+0x11/0x20 [ 2969.021075] ? rwlock_bug.part.2+0x90/0x90 [ 2969.025309] ? trace_hardirqs_on+0x310/0x310 [ 2969.029727] worker_thread+0x17f/0x1390 [ 2969.033699] ? debug_smp_processor_id+0x1c/0x20 [ 2969.038369] ? debug_smp_processor_id+0x1c/0x20 [ 2969.043035] ? __switch_to_asm+0x34/0x70 [ 2969.047097] ? process_one_work+0x1c40/0x1c40 [ 2969.051597] ? zap_class+0x640/0x640 [ 2969.055330] ? find_held_lock+0x36/0x1c0 [ 2969.059407] ? __kthread_parkme+0xce/0x1a0 [ 2969.063644] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2969.068759] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 2969.073865] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 2969.078447] ? trace_hardirqs_on+0xbd/0x310 [ 2969.082830] ? kasan_check_read+0x11/0x20 [ 2969.086997] ? __kthread_parkme+0xce/0x1a0 [ 2969.091233] ? trace_hardirqs_off_caller+0x310/0x310 [ 2969.096349] ? trace_hardirqs_off_caller+0x310/0x310 [ 2969.101458] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 2969.106564] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2969.112119] ? __kthread_parkme+0xfb/0x1a0 [ 2969.116360] ? process_one_work+0x1c40/0x1c40 [ 2969.120872] kthread+0x35a/0x440 [ 2969.124236] ? kthread_stop+0x900/0x900 [ 2969.128225] ret_from_fork+0x3a/0x50 10:38:21 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="eb280a1a75511eb82753cf3edb473d6a", 0x10) listen(r0, 0x0) close(r0) [ 2969.131954] Modules linked in: [ 2969.140321] binder: release 19126:19139 transaction 409 out, still active [ 2969.147708] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2969.165282] kobject: 'kvm' (00000000e0f60ff0): kobject_uevent_env 10:38:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000400)=[@acquire_done], 0x0, 0x0, 0x0}) [ 2969.194489] kobject: 'kvm' (00000000e0f60ff0): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2969.212204] binder: send failed reply for transaction 409, target dead [ 2969.228652] kobject: 'loop0' (000000009a7f2bf0): kobject_uevent_env 10:38:21 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="eb280a1a75511eb82753cf3edb473d6a", 0x10) listen(r0, 0x0) close(r0) 10:38:21 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)='+'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000004c0)=[@release={0x40046306, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000400)=[@acquire_done], 0x0, 0x0, 0x0}) [ 2969.239949] kobject: 'loop0' (000000009a7f2bf0): fill_kobj_path: path = '/devices/virtual/block/loop0' 10:38:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001b80)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(generic-gcm-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="430c7cd4733fb6dca71bcd1c438d6fd2e17f7c9dad04307cc1bf7ceaf5299fcd1c77e308", 0x24) [ 2969.328265] binder: 19148:19149 ioctl c018620b 0 returned -14 [ 2969.331849] binder: 19154:19155 ioctl c018620b 0 returned -14 [ 2969.346683] binder: 19149 RLIMIT_NICE not set [ 2969.376193] binder: 19155 RLIMIT_NICE not set [ 2969.395163] binder: release 19148:19159 transaction 413 out, still active [ 2969.422063] binder: BINDER_SET_CONTEXT_MGR already set [ 2969.427363] binder: 19154:19160 ioctl 40046207 0 returned -16 [ 2969.443844] binder: send failed reply for transaction 413, target dead [ 2969.453415] kobject: 'loop0' (000000009a7f2bf0): kobject_uevent_env [ 2969.458020] binder: 19154:19160 transaction failed 29189/-22, size 24-8 line 2834 [ 2969.461145] kobject: 'loop0' (000000009a7f2bf0): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 2969.480529] binder: 19154:19160 Release 1 refcount change on invalid ref 1 ret -22 [ 2969.502581] binder: 19154:19160 BC_ACQUIRE_DONE u0000000000000000 no match [ 2969.569481] ---[ end trace e38389530f37d725 ]--- [ 2969.576316] kobject: 'kvm' (00000000e0f60ff0): kobject_uevent_env [ 2969.576801] RIP: 0010:kernel_accept+0x5a/0x310 [ 2969.590455] kobject: 'kvm' (00000000e0f60ff0): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 2969.590770] Code: 48 c1 ea 03 80 3c 02 00 0f 85 4a 02 00 00 48 b8 00 00 00 00 00 fc ff df 49 8b 5d 20 48 8d bb 50 03 00 00 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 14 02 00 00 48 8d 7b 10 0f b6 [ 2969.631275] RSP: 0018:ffff8881bdc775b0 EFLAGS: 00010206 [ 2969.640333] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff1103131d519 [ 2969.651243] RDX: 000000000000006a RSI: ffffffff8623a7bf RDI: 0000000000000350 [ 2969.662211] RBP: ffff8881bdc775e0 R08: ffff8881898ea8c8 R09: 0000000000000006 [ 2969.673120] R10: 0000000000000000 R11: ffff8881898ea000 R12: ffff8881bdc77690 [ 2969.684041] R13: ffff8880a633fac0 R14: 0000000000000000 R15: ffff8881ba9c9578 [ 2969.695950] FS: 0000000000000000(0000) GS:ffff8881dae00000(0000) knlGS:0000000000000000 [ 2969.707844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2969.717459] CR2: 00007fa0bcf26000 CR3: 00000001d2e7d000 CR4: 00000000001426f0 [ 2969.729511] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2969.740408] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2969.751419] Kernel panic - not syncing: Fatal exception [ 2969.757809] Kernel Offset: disabled [ 2969.761434] Rebooting in 86400 seconds..