[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 82.594430] audit: type=1800 audit(1553685146.649:25): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 82.613725] audit: type=1800 audit(1553685146.659:26): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 82.634770] audit: type=1800 audit(1553685146.669:27): pid=10922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.246' (ECDSA) to the list of known hosts. 2019/03/27 11:12:42 fuzzer started 2019/03/27 11:12:48 dialing manager at 10.128.0.26:36449 2019/03/27 11:12:48 syscalls: 1 2019/03/27 11:12:48 code coverage: enabled 2019/03/27 11:12:48 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/27 11:12:48 extra coverage: extra coverage is not supported by the kernel 2019/03/27 11:12:48 setuid sandbox: enabled 2019/03/27 11:12:48 namespace sandbox: enabled 2019/03/27 11:12:48 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/27 11:12:48 fault injection: enabled 2019/03/27 11:12:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/27 11:12:48 net packet injection: enabled 2019/03/27 11:12:48 net device setup: enabled 11:15:35 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x0f\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000000a070"]}) syzkaller login: [ 272.583287] IPVS: ftp: loaded support on port[0] = 21 [ 272.735571] chnl_net:caif_netlink_parms(): no params data found [ 272.800779] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.807451] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.815719] device bridge_slave_0 entered promiscuous mode [ 272.825647] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.832198] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.840325] device bridge_slave_1 entered promiscuous mode [ 272.871280] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 272.882870] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 272.914704] team0: Port device team_slave_0 added [ 272.922850] team0: Port device team_slave_1 added [ 273.072793] device hsr_slave_0 entered promiscuous mode [ 273.103115] device hsr_slave_1 entered promiscuous mode [ 273.319828] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.326402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.333612] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.340177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.409182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.427985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.444067] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.454508] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.466503] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 273.483156] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.509056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.517772] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.524294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.532065] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.540147] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.546683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.587399] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 273.597500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.629720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.641529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.650890] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.659528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.668127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.678606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 273.686252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 11:15:37 executing program 0: sched_setaffinity(0x0, 0xffffffffffffff6b, &(0x7f0000000940)=0x5) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x8000, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000400)) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000040)={0x43, 0x9, 0x0, {0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x93f}}, 0x43) pwrite64(0xffffffffffffffff, &(0x7f0000000280)="300a1c61f13118cfb39ad0698be5dddd4bd1ca30289290b22de94d8a53d76b337f92afd49470251bd6cfe9fbdc2b9be1743734b9e27bc1bb289935a6", 0x3c, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r3 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r3) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) socket$packet(0x11, 0x2, 0x300) preadv(r2, &(0x7f00000017c0), 0x1fe, 0x400000000000) r4 = syz_open_dev$usbmon(0x0, 0x0, 0x200000) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0xd091, 0x1, 0x6, 0x3, 0x0, 0x4, 0x80002, 0x0, 0x3, 0x3, 0xf530, 0x1, 0x7, 0x8, 0x0, 0x8, 0x1ff, 0x3, 0x7, 0x100000001, 0x5, 0x3f, 0x58, 0x9, 0x3, 0x80000000, 0xffffffffffff0000, 0x8000, 0x3, 0x0, 0x200000000004, 0x64, 0x1, 0x0, 0x0, 0x40, 0x0, 0x9, 0x4, @perf_config_ext={0xc598, 0x40}, 0x800, 0x6, 0x1, 0x9, 0x8001, 0x9}, 0x0, 0x8, r1, 0x3) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) epoll_create1(0x80000) clone(0x10020000, 0x0, 0xfffffffffffffffe, &(0x7f0000000540), 0xffffffffffffffff) [ 273.992726] protocol 88fb is buggy, dev hsr_slave_0 [ 273.998244] protocol 88fb is buggy, dev hsr_slave_1 11:15:38 executing program 0: sched_setaffinity(0x0, 0xffffffffffffff6b, &(0x7f0000000940)=0x5) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000040)={0x43}, 0x43) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) 11:15:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) 11:15:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000340), 0x1000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'bond_slave_1\x00', @link_local}) 11:15:38 executing program 0: write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 11:15:38 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x392e880f) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x6685) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'team_slave_1\x00', 0x5}) 11:15:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x101034, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000000)) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="de8dba4e05a3e560b7fe095a945ba570a58cb8c5a1e275ed914b33d4b66c49da9185c8abab3365795208a53aee1678e110bfe9453d7acb027e9b", 0x3a) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0x20f], [0xc2]}) [ 274.627490] QAT: Invalid ioctl [ 274.631106] QAT: Invalid ioctl [ 274.637366] QAT: Invalid ioctl [ 274.640977] QAT: Invalid ioctl [ 274.733827] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 11:15:38 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000001700)='/dev/sequencer\x00', 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r1 = msgget$private(0x0, 0x20) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/69) 11:15:38 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x1000000000000, 0x0, 0xffffffbd}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, [], 0x0, 0xfffffffffffffffd}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x10000, 0x0) read$FUSE(r0, &(0x7f0000000100), 0x1000) [ 274.867681] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 274.878801] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 11:15:39 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @local}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100), 0xfffffffffffffefb) 11:15:39 executing program 0: unshare(0x20400) r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=@random={'osx.', 'fd'}, 0x0, 0x0, 0x2000) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x2) read$FUSE(r2, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 11:15:39 executing program 0: unshare(0x20400) r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=@random={'osx.', 'fd'}, 0x0, 0x0, 0x2000) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x2) read$FUSE(r2, 0x0, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 11:15:39 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, &(0x7f0000000100)=0x4) r1 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) write(r1, &(0x7f0000000080)="53000000059f5de1e52055f8498a326f937fdd1529cfb2d40836f08edb08e46092b66e0b153fa0c2043f54a09c41c69fdc57a0531342e6b1d5d9134c9e9adf43cc665c32af223d42438b416a0900991c88697ae700000000", 0x58) 11:15:39 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x8, 0x2}, 0x2) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200000, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x9, 0x9, 0xcf7a, 0x800000000000, 0x4, 0x7fff, 0x9, 0x1736e366, 0x2, 0x2, 0x0, 0x1, 0xffffffffffff5a3d, 0x1, 0x2, 0x101, 0x9, 0x1f, 0x20, 0x5, 0xfff, 0x142, 0x8, 0x7ff, 0x4967, 0x5, 0x8001, 0x3f, 0xffffffffffffff80, 0x2, 0x100000000, 0xfff]}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast2, @in6}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000300)={0xbf0000, 0xe6, 0x2, [], &(0x7f00000002c0)={0x9909ca, 0x2, [], @value64=0x52}}) flistxattr(r0, &(0x7f0000000340)=""/4096, 0x1000) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000001340)={0x6, @local}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000001380)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000013c0)={r2}) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001400), &(0x7f0000001440)=0x4) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000001480)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)}, &(0x7f00000015c0)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001600)={r3, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x2f, 0x7}, 0x90) mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x73, r1, 0x0) ioctl(r0, 0x1, &(0x7f00000016c0)="f0ea5a88") setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000001700)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001940)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001900)={0xffffffffffffffff}, 0x111, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000001980)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000001780)=[{0x2, 0x0, [0x148, 0x2, 0x5, 0x4, 0xffffffffffffff82, 0xffff, 0x5, 0x902e, 0x2, 0x6, 0x6, 0x4, 0x0, 0xffffffff00000000, 0x3, 0x400000000000000]}, {0x4, 0x0, [0x36f2, 0x2, 0x3, 0x8, 0x5, 0x7ff, 0x7f, 0x3, 0x0, 0x2a6, 0x1ff, 0x3f, 0x0, 0x9, 0x4, 0x4]}, {0x2b, 0x0, [0x81, 0x8001, 0x7, 0x0, 0x81, 0x800, 0x5b8, 0xc26d, 0x2, 0x3, 0x100, 0x7fff, 0xffffffff, 0x9, 0x0, 0x66a7d24f]}, {0x3, 0x0, [0x5, 0x40, 0x3, 0x2, 0x800, 0xfffffffffffffffc, 0x3, 0x2, 0x6, 0x1fda, 0x6, 0x20, 0xc6c, 0x20, 0xe13, 0x5]}, {0x10, 0x0, [0xfff, 0x200, 0x1, 0x1, 0x401, 0x1, 0x80000000, 0x1000, 0x5, 0x9, 0x1, 0x10, 0x9, 0x10000, 0x1]}], r4, 0x1, 0x1, 0x168}}, 0x20) io_setup(0x6, &(0x7f00000019c0)=0x0) io_cancel(r5, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000001a00)="4244cb0380f3811a4757d9b0c44145344478cd0f90ba4d0ede38ba08f032e9d362a767f4df", 0x25, 0x5, 0x0, 0x1, r1}, &(0x7f0000001a80)) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000001ac0)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000001b00)) r6 = semget(0x2, 0x2, 0x242) semctl$SEM_STAT(r6, 0x5, 0x12, &(0x7f0000001b80)=""/92) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000001c00)=""/102) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001c80)={0x9, 0x5, 0x4, 0x1, 0x100, 0x9, 0xd6f, 0x2, r3}, 0x20) 11:15:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000f12000)={0x400000010, 0x0, 0x0, 0x70a1}, 0xc) keyctl$session_to_parent(0x12) write$capi20_data(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000700878304000104000000000000bd009b8aa983f49f98e5deb759c5aab5730209f2e4618cb490951cfb95c40ac8eaac533f4d6ed6dd344b14c42190a3d5d6c69d2dd43e43efce1240da5f076e879fbca1dbafbf5f6fcaf187e276759a889a14bbb31b0a02f2d15811543aff34da7dc7b2730051d2be834a879cfcc169402e3fff070f378ef2e564716e89a0dbc627650bba1e5a107be640963c1d591b408b14e617ebd6c2ca8cc46a64be559afaa5b9d8eda432e0515963f65792d716fdd146762a86b605e3238670bfc9dee5"], 0xcf) r1 = dup(r0) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f00005c6000)=""/6, &(0x7f00001bb000)=0x3) 11:15:40 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400800, 0x0) getsockname(r0, &(0x7f0000000080)=@generic, &(0x7f0000000100)=0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff97}, [], {0x95, 0xa000000}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 11:15:40 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400800, 0x0) getsockname(r0, &(0x7f0000000080)=@generic, &(0x7f0000000100)=0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff97}, [], {0x95, 0xa000000}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 11:15:40 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x1a3562d27eae180d) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000080)={0x3e3, "0b250d7cd7637744c75bd20ebae9578348f0600c75128a324792f5b476186507", 0x0, 0x8, 0x4, 0x4, 0x4}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000002c0)={r0}) [ 276.529007] IPVS: ftp: loaded support on port[0] = 21 11:15:40 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x404000, 0x4) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x6, 0x800) ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000000100)={0x3, 0x7, 0x3, 0x94c, 0xfffffffffffffffa, 0x8000}) getsockopt$inet6_int(r1, 0x29, 0x1000000004b, &(0x7f0000000040), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000080)={0x0, @aes256}) close(r0) [ 276.714637] chnl_net:caif_netlink_parms(): no params data found 11:15:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_emit_ethernet(0x0, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x81, 0x80400) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="2600000058a75293cfc86494c401f5ead0c604e9f57748ce044402000000b86a6dcadfaa64ff5af3b7ee"], &(0x7f00000000c0)=0x2e) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e21, 0x80, @rand_addr="fa4e0e83ad8b9d59d4807dea66fbc21f", 0x5}}, 0x7, 0x3, 0x7, 0x76, 0x2}, &(0x7f00000001c0)=0x98) [ 276.785503] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.792196] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.800771] device bridge_slave_0 entered promiscuous mode [ 276.843261] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.849816] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.858262] device bridge_slave_1 entered promiscuous mode [ 276.899196] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 276.912960] bond0: Enslaving bond_slave_1 as an active interface with an up link 11:15:41 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) fcntl$setsig(r0, 0xa, 0x5) remap_file_pages(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) [ 276.943832] team0: Port device team_slave_0 added [ 276.953629] team0: Port device team_slave_1 added 11:15:41 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, {0x3015}}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000080)={0x3a, @remote, 0x4e20, 0x3, 'nq\x00', 0x0, 0xc8, 0x74}, 0x2c) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x5) ioctl$RTC_WIE_OFF(r1, 0x7010) [ 277.056716] device hsr_slave_0 entered promiscuous mode [ 277.074630] mmap: syz-executor.0 (11180) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 277.183815] device hsr_slave_1 entered promiscuous mode 11:15:41 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffde5, &(0x7f00000000c0), 0x10000180, 0x0, 0x0, 0xa00}, 0x0) [ 277.261327] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.268028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.275196] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.281680] bridge0: port 1(bridge_slave_0) entered forwarding state 11:15:41 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) unshare(0x20400) ioctl(r0, 0x4163, &(0x7f0000000080)) [ 277.477832] 8021q: adding VLAN 0 to HW filter on device bond0 11:15:41 executing program 0: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x1000000000b, 0x1, 0x0, "0f34800ecf3997f7ab1d74a600"}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000180)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee01, 0xee00]) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r1, r2, r3) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key(&(0x7f0000000300)='.dead\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$negate(0xd, r4, 0x2, r5) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x81, 0x1, 0x2, "3701e8bef9c79cab335f8ba6f94820d6b9e110501f8e6c6717b317f3f3ceeaa2", 0x38414261}) [ 277.526858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.544815] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.560419] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.582801] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 277.615129] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.639801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.648251] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.654845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.716212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.724627] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.731088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.740226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.749417] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.767579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.775552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.783884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.814818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.823248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.833308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.864756] 8021q: adding VLAN 0 to HW filter on device batadv0 11:15:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7fffffff, 0x40) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000000c0)="137d0dada8413335ab4e9fbb903169ea71b404ed1804e5ad0a4c2d4bac91937b9c314480155d7f4c9c548f0b74adc4efce3e1d0451b44e423dd75bb79216f71e0204cb3d3e13dde7d7793ac21161d12477488ddaef395b02936314a7eb91435615479501e43b32305e6c906c3b610131b09ba8", 0x73) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local, @empty}, 0xc) getsockopt$IPT_SO_GET_INFO(r3, 0x6, 0xb, 0x0, &(0x7f00000001c0)) dup3(r0, r2, 0x0) 11:15:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x20011, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) unlink(&(0x7f00000000c0)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0]}}], 0x0, 0x10000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="08631040"], 0x0, 0x0, 0x0}) [ 278.322269] binder: 11205:11206 BC_INCREFS_DONE u0000000000000000 no match 11:15:42 executing program 0: modify_ldt$write2(0x11, &(0x7f0000000040)={0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000), 0x10) r0 = shmget$private(0x0, 0x1000, 0x78001000, &(0x7f0000ffc000/0x1000)=nil) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@empty}}, &(0x7f0000000340)=0xe8) r5 = getgid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) capget(&(0x7f0000000480)={0x399f1336, r6}, &(0x7f00000004c0)={0x2, 0x8000, 0x2, 0xb3f6, 0xa6, 0x1}) gettid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000400)={{0x6, r1, r3, r4, r5, 0x1, 0x1}, 0x3, 0x3fe00000000000, 0x8001, 0x814, r6, r2}) [ 278.375642] binder: send failed reply for transaction 2 to 11205:11206 [ 278.383653] binder: undelivered TRANSACTION_COMPLETE [ 278.388919] binder: undelivered TRANSACTION_ERROR: 29189 11:15:42 executing program 1: perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000480)=0x3a) r3 = dup(r1) setsockopt$inet6_tcp_int(r1, 0x6, 0x400000000000000a, &(0x7f0000000000)=0x81, 0x4) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000140)={0x6c, "967b6f99ebef5527024b11f6b8b8be5fe287afff8773d1ddcbff79f8b0c8026c2c1f2f1ddea16fb7d78f03a7a8b81ec1ce31d80abc0b9094f709ec108e858e07d3766964fd949860342cabb5c3c10145bc111195cd7ec0393ef0392da0b2a48c66e17e4fb2acc32dc14d85e0"}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) getresuid(&(0x7f00000003c0), &(0x7f0000000380), &(0x7f0000001380)) perf_event_open(&(0x7f00000012c0)={0x5, 0x70, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) times(&(0x7f0000000100)) ftruncate(r4, 0x7fff) ioprio_set$pid(0x1, r0, 0x1) sendfile(r3, r4, 0x0, 0x8000fffffffe) tkill(r0, 0x1000000000016) 11:15:42 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0xd7c0992cb1051482, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@initdev, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000540)=0xe8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="c4000000ae47eb7f3c05e43ace166b46ce1430b0b8b5758e159e4fbb41ec4f2a631b0e75a3b0da36c74edea21cbe93c3b960898b53045e60d87a81fbbd5a192e154eda21d6c79c51717b3c374e0abdf3cfab91ada12e20d4cbd0d71abf893233dc3ad9633031c58f20d92f59ebf107d10e5b849bfbee13be82b202cce8fa0af3301c3eec694802f404823b2b1e8b08a5ade257efc1f65fe522dfb2eec62a79940c163c00e6342207997e5ed97f7cc9df1b48adbb8cc2c13ab10cc3e13d5fbd4d2344d394169bf04ad9e07c7ccd3d34ccbb3a55d227fc"], &(0x7f0000000300)=0x2) setsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f0000000200)=0x5, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e20, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}}, 0x5, 0xcc3}, &(0x7f0000000400)=0x90) r2 = socket$inet(0x2, 0x100000000805, 0x0) listen(r2, 0x200000003d) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000580)=0x101) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0)=0x8042d0, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x9, @empty, 0x800}}, 0x1f, 0x601e}, &(0x7f0000000100)=0x90) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r3, &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000745ffc), &(0x7f0000b96000)=0x4) [ 278.615982] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:15:42 executing program 1: setxattr$trusted_overlay_opaque(&(0x7f0000000280)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x357, 0x2) r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x80000001, 0x40, 0x2, 0x8, 0x7, 0x401, 0x9, 0x7ff, 0x0}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000580)={r1, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000000800)=0x84) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000001c0), 0xfffffffffffffe11) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[]}}, 0x0) sendmsg$key(r2, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x1de}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x889, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$media(&(0x7f0000000640)='/dev/media#\x00', 0x3, 0x101000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000680)) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xffffffffffffffff, 0x6, @empty, 0x1}, 0xf6) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000480)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21}, 0x1, 0x2, 0x2, 0x1}}, 0x26) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f00000003c0)='bridge_slave_0\x00') setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x1, 0x800000000000000a}, {}, {0x0, 0x0, 0x1000000000000002}, 0x0, 0x0, 0xfffffffffffffffd}, {{@in=@multicast1, 0x0, 0x2b}, 0x2, @in, 0x0, 0x4}}, 0xe8) mkdir(&(0x7f0000000540)='./file0\x00', 0x8) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f00000006c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000440)=0x0) ptrace$setregset(0x4205, r9, 0x0, &(0x7f0000000500)={&(0x7f0000000700)="de039aada02a443a58c4f879e0af89e403215e3ef763960ab61337ccc2574c5d3633220c69732ed3c0f2d52385229c8dfcc3646edc867644254492f3e12d1f2a95d62b7469073520dfc41f00d2181489b10e011e0d7f35bc5fb00bc14fa7d9d0766b19b225208f0de49e1a28af6698e753d408c53b248c8c7e7692da56a8be87fd9bc11ff1e7378c3a7f9d0ef53d875b3c802ebbd2391d4636e43cde944beef3aeb52cf8e4acebaffec1cb79b0a1bc757b746ffc65bc793fc2d9fef914df81eded8352d3fd0ec7aa892bf139a02731859c42d955bc81fc65a2ad6bd239f277128a4899f911dc5fa09a5c2b", 0xeb}) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r8, &(0x7f0000000300)={0x2c, 0x0, r7, 0xfffffffffffffffd}, 0x10) [ 278.730201] sctp: [Deprecated]: syz-executor.0 (pid 11220) Use of int in maxseg socket option. [ 278.730201] Use struct sctp_assoc_value instead [ 278.759064] sctp: [Deprecated]: syz-executor.0 (pid 11229) Use of int in maxseg socket option. [ 278.759064] Use struct sctp_assoc_value instead 11:15:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2}) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000100)="f53eddcbebe5714914", 0x9}], 0x1) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x310eb803, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0)=[{{&(0x7f00000038c0)=@isdn, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003940)=""/73, 0x49}, {&(0x7f00000039c0)=""/213, 0xd5}, {&(0x7f0000003ac0)=""/147, 0x93}, {&(0x7f0000003b80)=""/108, 0x6c}, {&(0x7f0000003c00)=""/230, 0xe6}, {&(0x7f0000003d00)=""/30, 0x1e}, {&(0x7f0000003d40)=""/220, 0xdc}, {&(0x7f0000003e40)=""/147, 0x93}, {&(0x7f0000003f00)}], 0x9, &(0x7f0000004000)=""/153, 0x99}, 0x7}, {{&(0x7f00000040c0)=@pppol2tpv3in6, 0x80, &(0x7f0000004200)=[{&(0x7f0000004140)=""/151, 0x97}], 0x1, &(0x7f0000004240)=""/31, 0x1f}, 0x5}, {{&(0x7f0000004280)=@l2, 0x80, &(0x7f0000004400)=[{&(0x7f0000004300)=""/32, 0x20}, {&(0x7f0000004340)=""/132, 0x84}], 0x2, &(0x7f0000004440)=""/154, 0x9a}, 0x4}, {{&(0x7f0000004500)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000045c0)=[{&(0x7f0000004580)=""/60, 0x3c}], 0x1, &(0x7f0000004600)=""/80, 0x50}}, {{&(0x7f0000004680)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004700)=""/177, 0xb1}, {&(0x7f00000047c0)=""/34, 0x22}, {&(0x7f0000004800)=""/150, 0x96}, {&(0x7f00000048c0)=""/46, 0x2e}, {&(0x7f0000004900)=""/155, 0x9b}, {&(0x7f00000049c0)=""/234, 0xea}, {&(0x7f0000004ac0)=""/198, 0xc6}, {&(0x7f0000004bc0)=""/217, 0xd9}], 0x8, &(0x7f0000004d40)=""/157, 0x9d}, 0xffffffffffffff01}, {{&(0x7f0000004e00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000005000)=[{&(0x7f0000004e80)=""/225, 0xe1}, {&(0x7f0000004f80)=""/48, 0x30}, {&(0x7f0000004fc0)=""/59, 0x3b}], 0x3, &(0x7f0000005040)=""/210, 0xd2}}, {{&(0x7f0000005140)=@tipc=@name, 0x80, &(0x7f0000005400)=[{&(0x7f00000051c0)=""/135, 0x87}, {&(0x7f0000005280)=""/132, 0x84}, {&(0x7f0000005340)=""/175, 0xaf}], 0x3}, 0x10001}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000005440)=""/50, 0x32}, {&(0x7f0000005480)=""/83, 0x53}, {&(0x7f0000005500)=""/2, 0x2}, {&(0x7f0000005540)=""/4096, 0x1000}, {&(0x7f0000006540)=""/27, 0x1b}], 0x5, &(0x7f0000006600)=""/183, 0xb7}, 0x5}], 0x8, 0x2000, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000068c0)={@remote, @remote, @local, 0x78, 0xfe2, 0x80, 0x500, 0x3ff, 0x28, r4}) [ 278.917362] hrtimer: interrupt took 35468 ns 11:15:43 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f00000004c0)='/dev/input/mice\x00', 0x0, 0x80) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000500)={0x2f, 0x3, 0x0, {0x5, 0xe, 0x0, 'nodevnodevGPL,'}}, 0x2f) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x4, {0x2, @raw_data="37eff2653430a431c64fbfa30c2a38dac2bfec391e57a058488681818c09f696cb927986149d147e5bdb188052955e73dbf46d0c32aeefcf9e6d9c6dfa4d837c7d89baad901a0c27dadb0b9776316a2c36b33646115376e3602346de9a65e5d812ecf6eeb88f247ed31abc084429e7d6a0f8935c808ac4a805487b5567ebe45005271260780a78abcf70deaff66bccb36c3d9fb3c831a9e576ad07f3ce722003c54f90a4dfba0e81095ad2f4c1089003cdd592bb47b86b4224fee36fbe35865d14833c4094de11b3"}}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r3 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0xff, 0x101000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x7, 0x7ff}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=r4, &(0x7f0000000480)=0x4) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x24, r2, 0x2, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x40800) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp}) 11:15:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xedX#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000080)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\x03\x00\x00\x00\xbe\x1d\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\b\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\t\x00\x00\x009\fV\x1b|A\xf8\\\xda#NP\x1c\x9d\x93#V\x9f\"v\x19n{\xb1\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') lseek(r0, 0x6445fbc2, 0x405) sendfile(r1, r1, 0x0, 0x8000) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x0, 0x3, 0x1ff}}, 0x30) 11:15:43 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) epoll_pwait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x8, &(0x7f00000000c0)={0x6}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="286fcfd3e8ee2379b2ef464a00000010000100000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001a0004000200"], 0x28}}, 0x0) 11:15:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8006, &(0x7f0000000b40)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x80000001b, &(0x7f0000000000)=0x10ce, 0x4) sendmmsg(r0, &(0x7f000000b1c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000012c0)="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", 0x5ad}], 0x1}}], 0x1, 0x0) 11:15:43 executing program 0: mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x53, 0xffffffffffffffff, 0x80000000) 11:15:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) sendmsg$inet_sctp(r1, &(0x7f0000002540)={&(0x7f0000000180)=@in={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000002440)=[{&(0x7f00000001c0)="f66605f8e3890e1a84ecc4ea0bd90a2229ded4305b", 0x15}, {&(0x7f0000000200)="e1a9af1e5887fa444b9217ddd4af168d03b2cf990315f6fbc9ce48e64971e1b90ece909f8436828fdda20f25ede504491b055d2912d5d4422c7b1d81559e56ccf7b7ed24e11829bfe1ef184012c078a9c2fd206ae2b9644aff3ec39ab219c057150baa10a35ae0982acac05c32e8c6b6c0", 0x71}, {&(0x7f0000000300)="ec11934b42643fd92944c3f9d73fc63afa", 0x11}, {&(0x7f0000000340)="93a465e0e8935be1a6920e8f50aba00bf1057352eb6552bc096656355697a62f546853ae3f7d5e51485b21797b2988411a3dacfa908dc01210699d48e9d2a4bf87a974e08109c45e8ed5b39cb6332b99c1680e83e05311af5d596c049d9e", 0x5e}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f00000003c0)="ace70962f0e0a257202ac8e39b991f2291ad1d62e9f1b9d5fbd5f54f3f045605052040f2292400497a793dec8b68541fcebcdc2f05", 0x35}], 0x6, &(0x7f00000024c0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x50, 0x4004000}, 0x40000) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2a0d, 0x40) getpeername$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendto$packet(r2, &(0x7f0000000440)="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", 0x1000, 0x81, &(0x7f0000000140)={0x11, 0x1e, r3, 0x1, 0x100, 0x6, @random="4ef8bb94619f"}, 0x14) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r6, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03, 0x1, 0x40000020]}) 11:15:43 executing program 0: r0 = socket$inet(0x2, 0x2000000080002, 0x0) r1 = socket(0x10, 0x80003, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x1d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x250) r2 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x2000) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000100)={0x54a7500f, "318ecab77264906f48f6cf76093bb6c19bbddb31b1115998f9ad38671731aab4", 0x1, 0x1}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200007c0], 0x2, 0x0, &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bc\x00', 's\x01\x000\x00\x00\x02\x00\x00\x00\xff\xff\x00', 'vcan0\x00', 'vlan0\x00', @broadcast, [], @empty, [], 0xa0, 0xa0, 0x118, [@cpu={'cpu\x00', 0x8}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "2ce719c99cffcbf4d7e80e410bb5007c6981466b6431c7e6b129fcead3f149b589996102627779dc3b23bf8250fc3acd9e8be08a4bbab9be219f504cae3a7e4d"}}}}]}, {0x0, '\x00', 0x1, 0xfffffdfffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x220) 11:15:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000619ff3)='/dev/snd/seq\x00', 0x0, 0x80001) r1 = epoll_create1(0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0x721}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r3, 0x7}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x624, 0x30, 0x1ff, 0x3d6}, &(0x7f00000000c0)=0x18) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000180)={0x7, 0x3f}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={r4, 0x40, 0x7ff}, &(0x7f0000000140)=0x8) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000380)=0xffff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000004}) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x8) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000280)={{0x6, 0x2, 0x43, 0x8, 0x4, 0x9}, 0xd22e}) epoll_pwait(r1, &(0x7f00004a2ff4)=[{}], 0x1, 0x0, 0x0, 0x0) [ 279.797818] ebtables: ebtables: counters copy to user failed while replacing table [ 279.867888] ebtables: ebtables: counters copy to user failed while replacing table 11:15:43 executing program 1: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ifb0\x00', {0x2, 0x4e24, @multicast2}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettfilter={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, {}, {}, {0x0, 0xf}}}, 0x24}}, 0x0) 11:15:44 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) get_thread_area(&(0x7f0000000080)={0x1e6, 0x20101800, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x2, 0x8, 0x1, 0x1000}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8), 0x0) 11:15:44 executing program 1: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bcsf0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000000)={'bond0\x00\x00\x00@G\xd0\x06\x00\x04\x00', @ifru_names='bond_slave_1\x00\x00\x03/'}) 11:15:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) setsockopt$inet6_opts(r0, 0x29, 0x1008000000036, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f00000000c0)=0x4, 0x123) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000069c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) [ 280.204047] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 280.233599] bond0: Error: Device is in use and cannot be enslaved 11:15:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00000002c0), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000200fe8000000000000000000000008fc9a0ce000100ff8e80000000010800080000040000"], 0x1}}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x101000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x400}}, 0x3, 0x401, 0x3ff, 0x3, 0xffff}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r2, 0x401, 0x6a}, &(0x7f0000000240)=0xc) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001c00)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000001d00)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d40)={'team0\x00', r3}) 11:15:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x2f) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) r2 = dup(r0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd1]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) 11:15:44 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x10d, 0x10, &(0x7f0000013ff4)={@remote, @loopback}, 0xc) 11:15:44 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000900ff8), &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) utime(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500)) r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x70, 0x400, 0x71f, 0x1000, 0x9, 0x0, 0xfffffffffffffffc, 0x4, 0x2, 0x0, 0x800, 0x2, 0x20, 0x3ff, 0xb8, 0xff, 0x80, 0x83, 0x5, 0x8539, 0x3f, 0x4, 0xc106, 0x5, 0x4, 0x20f, 0x400, 0x772, 0x20, 0x100000000, 0x5, 0x2, 0x6, 0x0, 0x7, 0xffff, 0x3f, 0x0, 0xffffffff00000, 0x4, @perf_config_ext={0x6, 0xffff}, 0x180, 0x81, 0x5eae, 0x6, 0xfffffffffffffffc, 0x3, 0x4c}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x4) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1) 11:15:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000002c0)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2}, 0x20) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='net/sockstat\x00') ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000000)={0x1f, 0x6}) pread64(r2, &(0x7f0000000040)=""/113, 0x71, 0x3c) 11:15:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$rds(0x15, 0x5, 0x0) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000380)={0x0, 0x0, 0x3, 0x0, [], [{0x3ff, 0x7fffffff, 0xf74, 0xfffffffffffff3a2, 0x2}, {0x100000000, 0x3, 0xa3, 0x2, 0x8000, 0x851}], [[], [], []]}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000500", @ANYRES16=r2, @ANYBLOB="3109000000000000000001000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x20000010) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) 11:15:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0xfffffffffffffffe, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1) r1 = semget$private(0x0, 0x3, 0x500) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x2, @rand_addr="e067bc5943c02996bc8499eb4dbcd31e", 0x3}}, 0x5, 0x5, 0x800, 0x401, 0x10}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e21, 0x10000, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x800}}}, &(0x7f0000000240)=0x84) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f0000000000)=0x5) r3 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x5, 0x0) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f00000002c0)=""/167) 11:15:44 executing program 1: r0 = userfaultfd(0x800) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xfffffffffffffffc}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r2, &(0x7f00000001c0)=0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000040)={0x7fff, 0xfffffffffffffffb}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0xfffffffffffffffb) 11:15:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xff, 0x1) ioctl$TIOCEXCL(r2, 0x540c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x82, 0x0, [0x40000071]}) 11:15:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) 11:15:45 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000040c0), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x2, {0x7, 0x1c, 0x0, 0x0, 0x67f13f3f}}, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0xb0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000140)=0x1, 0x4) 11:15:45 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000013000)) tee(r0, r0, 0x2, 0x4) getpeername(r0, &(0x7f00000003c0)=@can={0x1d, 0x0}, &(0x7f0000000440)=0x80) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000480)={@remote, 0x16, r1}) 11:15:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000040)=0x3ff, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000540)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000680)=0xe8) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000780)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000880)=0xe8) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000980)={{}, {0x1, 0x1}, [{0x2, 0x0, r1}, {0x2, 0x4, r3}, {0x2, 0x0, r4}, {0x2, 0x7, r5}, {0x2, 0x2, r6}, {0x2, 0x1, r8}, {0x2, 0x2, r9}, {0x2, 0x0, r10}], {0x4, 0x3}, [{0x8, 0x7, r11}, {0x8, 0x1, r12}], {0x10, 0x4}}, 0x74, 0x3) write$FUSE_BMAP(r0, &(0x7f0000000a00)={0x18, 0xfffffffffffffff5, 0x2, {0x4}}, 0x18) getpgid(r2) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000a40)) bind$inet(r0, &(0x7f0000000a80)={0x2, 0x4e22, @local}, 0x10) mknod(&(0x7f0000000ac0)='./file0\x00', 0x4, 0x4) bind(r0, &(0x7f0000000b00)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @remote}}, 0x80) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000c40)={@mcast2, 0x80, r7}) recvfrom$unix(r0, &(0x7f0000000c80)=""/64, 0x40, 0x21, &(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000d40)={0x3}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000dc0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000d80)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000e00)={0x7, 0x8, 0xfa00, {r13, 0xd0f0}}, 0x10) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000e40)={0x0, 0x0, [], {0x0, @bt={0x5, 0x9, 0x1, 0x2, 0xe000, 0x7, 0x400, 0x440, 0x6, 0x6, 0x4, 0x9, 0x7fff, 0x1, 0x10, 0x4}}}) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000f00)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000f40)={0x0, 0x8000, 0x0, 0x0, 0x7ff}, &(0x7f0000000f80)=0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000fc0)={r14, @in={{0x2, 0x4e21, @rand_addr=0x3ff}}, [0x9, 0x100, 0xfffffffffffffff7, 0x9, 0x80, 0x7fffffff, 0x2, 0x6, 0x3, 0x7fff, 0x1, 0x100, 0x7, 0x1c00000000000000, 0x800]}, &(0x7f00000010c0)=0x100) 11:15:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000080)) ioctl(r0, 0x101000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) ioctl$FS_IOC_FSGETXATTR(r2, 0x8108551b, &(0x7f0000000780)) 11:15:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) unshare(0x8000400) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="8123000000c8a28e5050411b11c38fc9b62ecc4bca43ef1c9705369f21b32cb93c7f6c910a50b259d48d2878000000000000000000000000090000000000000000000000000000"]) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) 11:15:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x10004, 0x1, 0x80000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x1000000077, 0x0, [0x4b564d03, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:15:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ppoll(&(0x7f0000000200)=[{r1, 0x8000}, {0xffffffffffffffff, 0x2000}, {r1, 0x302a}, {r0, 0x25a}, {r1, 0x2}, {}], 0x6, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f0000000380), 0x8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40000, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f00000003c0)=0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000280)={{}, 0x0, 0x0, 'id0\x00', 'timer1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\xea\x04\xccI\xad\x8fQ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fc8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="fc0000004800071fab092504090007000aab6000000000000000e293210001c000000000000000000002ffff00000000008656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00000100d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e080fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a46", 0xb3) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)) openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x20600) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x3001) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 282.304123] IPVS: ftp: loaded support on port[0] = 21 11:15:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x400000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpid() ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000080)={{0x7, @addr=0x6}, 0x8, 0xa0}) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000200)={0x7, 0x4, 0x0, [{0x2, 0x9, 0x5, 0x0, 0x2dae, 0x86}, {0x5, 0x6, 0x6, 0x6, 0x5, 0x100000001, 0x7f}, {0x3, 0xff, 0x18, 0xae, 0x7, 0x5a7, 0x9}, {0x0, 0x8000, 0x4, 0x9, 0xffff, 0x750d, 0x1}]}) ioctl$VHOST_GET_FEATURES(r1, 0xc0044dff, &(0x7f00000026c0)) [ 282.513552] chnl_net:caif_netlink_parms(): no params data found 11:15:46 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x820200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x10) socket$inet6(0xa, 0x3, 0x0) clone(0x3102401ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000240)={'veth0_to_bond\x00', 0x9}) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x20002a6, 0x6, 0x4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = request_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000400)='&\'nodevcpuset\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000440)={r2, 0x9, 0xfffffffffffffc01}, &(0x7f0000000480)=ANY=[@ANYBLOB="656e633d706b63733120686173683d67686173682d67656e6572696300000000000000000000000000000000000000000000000000000000000000ff0f000000000000000000000000000000000000"], &(0x7f0000000500)="58bfb8dee07bc2c1bf58f7f1c9ddaecf40cebdd7d37c25d933fa96c6a682653a2b464b19968948166917de5d8c10013c5959e1de3df4c6d2c787fd680577086e01fbd931ab1a9d0fbf818da89032789be4f8c1324ca25277c2f7f76c5d461b9fe35bf07fa9c6401905ee21a3784f4f989c741bcb09cd12cb3874b9975a0951611cf6e490eae30adc12f1b9e06766405e7c8c033d48be116c91297ea7e0a69d2ec98b670e13135d2a37fbc99111e3bfc25c18e360913f78fab72816f97954df502fb02ad6db4cce3b11bbac4e62c28e1668845e3fba068fb2bd88dec2be2a60e12dea5dde82ad", &(0x7f0000000600)="334cf9636aa44084db282404b36cd74804efc179879cbe6366be26bc5beb6dea93385c1d9bcdc4a7464e61c0601e30236ef742eccb29d7a7004a8948f02b") setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000280), 0x1c) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x3, 0x800000000000000, 0x1, 0x2, 0x7fff, 0x5, 0x39, 0xe2, 0x10000, 0x20, 0x2, 0x6, 0xf76b, 0x4, 0x5, 0x10}}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm], 0xff8cf) bind(r1, &(0x7f0000000380)=@ethernet={0x307, @broadcast}, 0x54) fanotify_init(0x40, 0x8800) [ 282.604289] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.610808] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.632772] device bridge_slave_0 entered promiscuous mode [ 282.652072] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.658599] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.666975] device bridge_slave_1 entered promiscuous mode [ 282.758009] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 282.792846] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 282.835510] team0: Port device team_slave_0 added [ 282.844148] team0: Port device team_slave_1 added [ 282.978082] device hsr_slave_0 entered promiscuous mode [ 283.014032] device hsr_slave_1 entered promiscuous mode [ 283.064420] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.070940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.078151] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.084713] bridge0: port 1(bridge_slave_0) entered forwarding state 11:15:47 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'mo:,\x00\x00\x81\x80\x00\x00\xfa\xff\xdf\xf7\x00', 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4100, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7) [ 283.235940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.261889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.280112] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.289345] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.311243] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 11:15:47 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x7, 0x5, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x265, &(0x7f000000cf3d)=""/195}, 0x48) getsockname(0xffffffffffffff9c, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0x80}, 0x4) [ 283.351352] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.389390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.397757] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.404397] bridge0: port 1(bridge_slave_0) entered forwarding state 11:15:47 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x2000, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x100, 0x4) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0x400, 0x1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x330, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000002c0)) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 283.469069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.477401] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.484019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.493706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 283.527334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.537381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.572208] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 283.580464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 283.589410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 283.597988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 283.606261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.614787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 283.623561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.636399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 11:15:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@getstat={0xe0, 0x15, 0x401, 0x70bd28, 0x0, {{'drbg_nopr_hmac_sha256\x00'}}}, 0xe0}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x39, "798459c763e012b676328cb1585554a7c88ffb5de58c3dd37aaf60dbcb4ef5fcb26a4896051cd1df80871fa036d3434f88747dbaa0b86104b2"}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000040)=0xfffffffffffffff7, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000280)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000300)={{r5, r6+10000000}}, &(0x7f0000000340)) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fde000/0x18000)=nil, 0x0, 0xffffff12, 0x0, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000580)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000480)={r2, 0x8001, 0x30, 0x6, 0xe5}, &(0x7f00000004c0)=0x18) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000500)={0xffff, 0x0, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000540)={r8, 0x52e}) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000800)=0x3001) write$P9_RRENAME(r3, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) ioctl$KVM_RUN(r7, 0xae80, 0x0) 11:15:47 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000907031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xffffffffffffff91, 0x10001) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)) [ 283.689831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.845990] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.867348] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 11:15:48 executing program 2: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2e81) r1 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x3, 0x200000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r2, @in={{0x2, 0x4e24, @multicast1}}}, &(0x7f00000001c0)=0x84) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) getpid() r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f00000006c0)='clear_refs\x00\xb0Ix\xe6\fK\xa3/\xd7\xb9IqK\xcb\xe8\fW\xafYt|a\xa3\x16\x19\xcb\xaf\xea\x03O[k\xb1S2\x86\v\x9f\x14\xc6T\xd1\x01$\x84\xf5\xc9\xd8\xed\xca\xd2\xf0s\xe0\xcaPx\xfcd\xd3\x8d\x1e){\x9df\xa7\x14R\xb9,\xaegV\x96!n\b\xf2\x1e\x87\xb8\xb5M\xa0\xd1\xb5\xf3\xb4\xd6\xf8\xca\xf3J\x15\xed+,\x98\xfc\xbfX\x12\x97\xb3\x1b\xea\xfa\xff\xb7gx\xa1\x96\xad\x93\xaa=-z\x06r\b\'kSr\xecW\xc2\xee\xc1`a2:6\xfe\x8d\xc7\x16\xae!\xc1\xd2\xc2Z\x97\xb4\xf5I\xa39\xe1\xc6~\xc8\xf0cv\x86\xfb\x81\x19\x92\xbd\x01\x1a\xe4\xc8)\x1f\xc5\xd4;K\x9d\xc6\xb6Z\x04q\x98A3\xf0\x9f\x9cg\xcc\xaf^|\xbf\xf7P$8\x96\xe8\xd7\xd6\x04~i\xeb!\xabE\xb7A\x95\xbc\xd0\x11M!n\x16\xfa\xa4\"\xe1Z\x97V\bh\xed\xbdLQ\xd2\xa5\xf6\x0f\x90@\xee\xd9\x95\x8a\xf3{6\x84G\x0fs\x98\xab\xaa\x9b\xc9\xe1kau\xbeu\xf2\xab\x1f\xba_\xce\xed\xf5-9\t\xd3&/\b\xd8\xb3\xff\xd3\xedk\x92\xa5;\x1b\xaa\x9c_\xb5\xad\xf5\xa6') r5 = syz_open_procfs(0x0, &(0x7f0000000440)='statm\x00') write$eventfd(r4, &(0x7f0000000200)=0x5, 0x8) sendfile(r4, r5, 0x0, 0x1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000000)=0x3, 0x4) 11:15:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008183ad5de087185082cf0124b0eba06ec400002339a00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000008300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 11:15:48 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='.:\x01\x80roup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, ':,mory'}]}, 0x8) 11:15:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x20202, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x200000000000000f) 11:15:48 executing program 1: prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = dup(r0) bind$vsock_dgram(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0xfffffffffffffc28) 11:15:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000009400)={&(0x7f0000008fc0), 0xc, &(0x7f00000093c0)={&(0x7f0000009000)=@newspdinfo={0x24, 0x24, 0x201, 0x0, 0x0, 0x0, [@ipv6_hthresh={0x8}, @ipv4_hthresh={0x8}]}, 0x24}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x280000, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x4, 0x1, 0x566}) 11:15:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000180)=0x55) pread64(r0, &(0x7f00000001c0)=""/4096, 0x1000, 0x0) 11:15:48 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x7, 0x4fffc) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x400000015, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x401, 0x1b) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x0, 0x0, 0x103, 0x0, {0x13, 0x4, 0xa8a, 0x8}}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d80)=@nat={'nat\x00', 0x19, 0x4, 0x4d0, [0x20000800, 0x0, 0x0, 0x20000a48, 0x20000a78], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}, 0x548) [ 284.559142] kernel msg: ebtables bug: please report to author: Valid hook without chain 11:15:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0xaf58, 0x8, 0x9, 0x8001, 0x80, 0x800, 0x8b, {0x0, @in6={{0xa, 0x4e20, 0x4, @mcast1, 0x7}}, 0x6, 0x0, 0x8fc, 0x6, 0x1}}, &(0x7f0000000180)=0xb0) r2 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000200)={0x3, 0x0, [{}, {}, {}]}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000280)={r1, @in={{0x2, 0x4e20, @broadcast}}}, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x3, 0x28}, 0x98) 11:15:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x2}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r1) fstat(r1, &(0x7f0000000100)) 11:15:49 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0xee2245c43eb57858, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={'caif0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x5, 0x0) unshare(0x4000000) ioctl$int_in(r1, 0xc0000800005016, &(0x7f0000000180)) setsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f0000000080)="67d94a8dc7d4e61ca965b2adf94f6ecc0fde82b2547a4f9ef3e8dc9afcb88c5ca31ea58e42293d8aa0da4638a92eeb805ca7fc45c7c690e6dc85f2999029c48d8bc81e1cd32b67f205fbdefd72df45a5adec11b22b2203fdf6ba62c6ff715f61b9b17006802f45e4ca7f9d3848db4b3557cc95de2091f7844093b95937e3a61aea3c0fb46d64ae500f2a3714fae78fab9af16350c1da555756d68a47633af0849fedc64b06c6793140d7fc861b596affca4d3a73cd17452636c868371ca5ec8dd5abc97624788e5b029e8be3", 0xcc) 11:15:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000008f00)={'tunl0\x00B\xb5\xab*\x00\x00\x00\xee\x00'}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x0, 0x0, @pic={0x0, 0x9ceb}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)={0x1, 0x0, @pic={0x0, 0x7fd0, 0x0, 0xfffffffffffff801, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bc}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:15:49 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x800100000003) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000400)={0x100000001, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000140)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}]}, 0x110) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x79, @remote, 0x8000}, 0x1c) [ 285.253359] kvm: pic: single mode not supported [ 285.257109] kvm: pic: level sensitive irq not supported [ 285.282157] kvm: pic: level sensitive irq not supported 11:15:49 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x37c1, 0x80001) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@rand_addr="2cf35099a91b66c62f22ab09c0b660c9", @mcast2, @remote, 0x2, 0xff, 0x1f, 0x400, 0x1000, 0x2000000, r1}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4000004e23, @multicast1}, 0x16b) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x2ec, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='vxcan1\x00\x00\x00\xf8\xff\xff\xff\x00', 0x28) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xa) sendto(r2, &(0x7f0000000040)='\x00', 0x1, 0x0, 0x0, 0x0) 11:15:49 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x10000000000007) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x101000, 0x0) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000005}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xdf5f}}, 0xe8) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f0000000080)={0x0, 0x0, {0x6, 0x3d80000, 0x10000, 0x1}}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 11:15:49 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c12a41d88b070") perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 11:15:49 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000040)=0x9) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x6, {0x1000}}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_GET_FEATURES(r0, 0x80044dff, &(0x7f0000000080)) 11:15:49 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000400)=0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_getrule={0x20, 0x22, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2}}, 0x20}}, 0x0) 11:15:49 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20001, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) dup3(r0, r1, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x72}, &(0x7f00000000c0), &(0x7f0000000240)) 11:15:50 executing program 0: r0 = socket$inet6(0xa, 0x20fffffffffffffd, 0x1000000000000000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@mcast2}, 0x3, @in6=@loopback, 0x0, 0x1}}, 0xe8) 11:15:50 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x9, 0x200040) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff93}, {0xffffff90}}) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000400)={@dev, @initdev, 0x0}, &(0x7f0000000440)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000640)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000b00)={0x0, @empty, @dev}, &(0x7f0000000b40)=0xc) getsockname$packet(r0, &(0x7f0000008d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000008d80)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000008dc0)={0x0, @loopback, @dev}, &(0x7f0000008e00)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000000a140)={0x0, @initdev, @local}, &(0x7f000000a180)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f000000a4c0)={{{@in6=@ipv4={[], [], @dev}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f000000a5c0)=0xe8) getpeername$packet(r0, &(0x7f000000a600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f000000a640)=0x14) getsockname$packet(r0, &(0x7f000000a680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f000000a6c0)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000aa00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f000000a9c0)={&(0x7f000000a700)={0x2bc, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x160, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xcd0b}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xb4, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x960b}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) 11:15:50 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x150) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getdents(r2, &(0x7f0000000180)=""/147, 0x93) r4 = dup(r0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000080)={'security\x00'}, &(0x7f0000000100)=0x54) r5 = socket$unix(0x1, 0x5, 0x0) connect(r5, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f0000000240)={0xfffffffffffffffe, 0x1, 'client1\x00', 0x1, "71d4a83c8b52731a", "e9251f9073267e622043203ecdca2f960c2faa93207b62f55e2f55ca85317630", 0xfff, 0x4}) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 11:15:50 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f00000000c0)=r0, 0x4) recvmsg(r1, &(0x7f0000002b40)={0x0, 0x0, 0x0}, 0x20) sendmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000040)='gretap0\x00') 11:15:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) bind$can_raw(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r3, &(0x7f0000000140)=[{{}, 0x1, 0x46, 0x200000000000002}], 0xfe12) 11:15:50 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) sendfile(r0, r0, &(0x7f0000000000), 0x5) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x0) sendmsg$unix(r1, &(0x7f0000000d00)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000340)="8e", 0x1}], 0x1, &(0x7f0000000bc0)}, 0x8000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x7}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)={0x1}) 11:15:50 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) unshare(0x24020400) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000180)={[0x5, 0x7ff, 0x7fff, 0xe93a, 0x6, 0x11, 0x1ff, 0x100000000, 0x8, 0x30, 0x7ff, 0x8001, 0x100, 0x2, 0x21, 0x5], 0x100000, 0x2}) tee(r0, r0, 0x9, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000240)={0x6, 0x91}) write$P9_RREAD(r0, &(0x7f0000000080)={0xd4, 0x75, 0x2, {0xc9, "2796e218e4fbe7a2005318cd8f8d0e7f7e15b6a7e39c998e53c587575d7c9c537ab9472450d42d2f2ef5bd90f425f479c4f7c1e25dd3f968506550d626449545659346a1ebe2e85a723a6eb94b85dbdeb6f6d83e6fc249bd5db464dfaf7e9a8b6b84aad752d0be368c87c4b31bcdf44e07c86fc1fdc56c475cf6134d940955cf6739adf8e5dcd257bb1d2d610d0553fe25c9bcccc328e7c87a7f97e128706c7078dd6ee2856600589c8127ae66769af16a051d18be45d5ad260a72698050672f88091ec719ff74c028"}}, 0xd4) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0xfffffffffffffffc, 0x6f63, 0x5, 0xfc6c, 0x7, 0x4}) 11:15:50 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000080)={0x7, 0x5}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000007, 0x15012, r1, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000005000/0x2000)=nil) 11:15:50 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'rmd256\x00'}, 0x33e) r1 = accept4(r0, 0x0, 0x0, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x1) sendfile(r1, r2, 0x0, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@gettfilter={0x34, 0x2e, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, r3, {0x9}, {0xb, 0x5}, {0x1, 0xf}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x8001}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x44040) 11:15:50 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40200) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r1, 0x9, 0x9, [0x4, 0x6, 0x80, 0x34, 0x379, 0xc9, 0x5, 0x81, 0x1]}, &(0x7f0000000140)=0x1a) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x0, @empty}}) 11:15:50 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)=[0x8001]) r0 = semget$private(0x0, 0x3, 0x80) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000100)=""/219) 11:15:50 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000050d, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$RTC_EPOCH_READ(r0, 0xc0287c02, &(0x7f0000000040)) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x70, r1, 0x500, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5716}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc228062}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc4, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc000000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe07f}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x727}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x24004810) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000440)={r0, r0}) 11:15:51 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x5, {0x3, 0x3, 0x2, 0x6, 0x7, 0x100, {0x6, 0x100, 0x6, 0x7, 0x7ff, 0x8, 0x6, 0x3, 0x100000000, 0x7, 0x4, r4, r5, 0x7fffffff, 0x2}}}, 0x90) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 11:15:51 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffc, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x53, r0, 0x80000000) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x280a00}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="00012bbd7000fbdbdf250e0000004400020008000100ffffffff04000400040004000800010005000000040004000800020004000000040004000800020003000000080002004c5e00000800020003000000240002000400040008000100ffff0000080002000200000004000400080002001f00e74300004400020004000400080002000100000008000100ec00000008000100ffffffff080001000600000004000400080001000000008008000100000000000800020005000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4000010}, 0x20044811) 11:15:51 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0xc0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}, {0x2, 0x0, 0xfffffffffffffffd, @rand_addr="857e5951d64da10c6c030c6d8dfb9dc2"}, r1}}, 0xfffffe7e) fcntl$setpipe(r0, 0x407, 0x3) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r1, 0x0, 0x2, 0x4}}, 0x20) 11:15:51 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = creat(&(0x7f0000000140)='./file1\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4003ff) writev(r1, &(0x7f00000024c0)=[{&(0x7f0000000000)="03", 0x1}], 0x1) lseek(r1, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, 0x0, 0x4ce855dd) getsockopt$inet_int(r0, 0x10d, 0xa7, &(0x7f0000000140), &(0x7f0000000040)=0x4) 11:15:51 executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40000, 0x0) sendto$rxrpc(r1, &(0x7f00000000c0)="651963003eac89d27cfe7365c6a4f8553d604897c9842cdaec5f4d7ae895096ebea3fe103def7ec4cc474874653e918ba1b1be", 0x33, 0x4000, &(0x7f0000000100)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f0000000000)=@in, 0x80, 0x0}}], 0x1, 0x0) recvmsg$kcm(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000140)=""/232, 0xe8}, {&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f00000002c0)=""/16, 0x10}, {&(0x7f0000000300)=""/142, 0x8e}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x7, &(0x7f0000001580)=""/31, 0x1f}, 0x40002040) nanosleep(&(0x7f0000001600)={0x77359400}, &(0x7f0000001640)) 11:15:51 executing program 1: process_vm_writev(0x0, &(0x7f0000000e80)=[{&(0x7f0000000980)=""/10, 0xa}, {&(0x7f0000000bc0)=""/231, 0xe7}, {&(0x7f0000000b00)=""/20, 0x55}, {&(0x7f0000000cc0)=""/163, 0xa3}, {&(0x7f0000000dc0)=""/163, 0xa3}], 0x5, &(0x7f0000000f80)=[{&(0x7f0000000f00)=""/125, 0x7d}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000740)=""/25, 0x19}, {&(0x7f0000002240)=""/167, 0xa7}, {&(0x7f0000000880)=""/8, 0x8}], 0x3, 0x0) r1 = fcntl$getown(r0, 0x9) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r1) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a00)=""/224, 0xe0}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000900)=""/124, 0x7c}], 0x2, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x9cb}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0)={r2}, 0x8) 11:15:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400001, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000280)={0x0, 0xa0, 0x6c3}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsetxattr$security_ima(r1, &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="05011200400000080099525c371a7daf6748eae8edd96e61f67b629113ccad197f16df31dce5ea013db88fbf7c3bb941f2b1d114a8f965d80b070bc2d2dae0ec5c3eb5a11388a3c858a9c75af6bff963de0271abbf77274cf44fbdee181e6e06c078c875bf6e42a260984007604a8d47cc00dbc445425afd6244e5219a56bdae01d500000000000000000000000000000000000000000000000000"], 0xa3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @loopback, 0x1, 0x1, 'lblcr\x00', 0x0, 0x80000001, 0xfffffffffffffffd}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @broadcast, 0x0, 0x200000001, 'ovf\n3\xff\xff\xff\x00\x00\x00\x04\x00'}, 0x2c) 11:15:51 executing program 0: unshare(0x20400) r0 = socket$can_raw(0x1d, 0x3, 0x1) accept4(r0, &(0x7f00000008c0)=@nl=@proc, &(0x7f0000000940)=0x80, 0x80800) socket$vsock_dgram(0x28, 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, 0x1c9c380}, 0x0) 11:15:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) r1 = dup2(r0, r0) write$UHID_CREATE(r1, &(0x7f0000000080)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/120, 0x78, 0x3, 0x3ff, 0x2, 0x1000, 0x2}, 0x120) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000240)=ANY=[@ANYBLOB="060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000460e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) write$cgroup_pid(r1, &(0x7f0000000200)=r2, 0x12) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, 0x0, 0x0) 11:15:52 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000001440)=""/156) fcntl$setown(r0, 0x8, r1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0x1000, "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"}, &(0x7f0000000100)=0x1008) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r2, 0x6}, 0x8) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/74, 0xffffffe6}], 0x1) 11:15:52 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xfffffffffffffff7, 0x7f) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0xfffffffffffffffe) 11:15:52 executing program 1: syz_emit_ethernet(0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="7edc928057628f89a797290710894da01dbc"], 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vfio/vfio\x00', 0x10000, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000600)={@local, @dev}, &(0x7f0000000640)=0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0xd, 0x401, 0x3d37aebd}) 11:15:52 executing program 0: write(0xffffffffffffffff, &(0x7f0000000180)="8a", 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000f4dff4), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0100002100010000000000001c000000000000000000000000ffffe0000001fe800000000000000000000000000000000000000000000002000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=0x0], 0x4}, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) alarm(0x2) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000480)) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000240)={0x4, 0x7, 0x4, 0x70000, {}, {0x2, 0xc, 0x0, 0xac, 0xc98, 0x9, "d895edf1"}, 0x5211, 0x7, @planes=&(0x7f0000000080)={0x0, 0x8, @userptr=0x4, 0x4}, 0x4}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x108, r2, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1e}]}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x262}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xc}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x108}}, 0x8050) 11:15:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x400) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x1}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x4401, 0x0) 11:15:52 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x1, 0x0) read(r0, 0x0, 0xffcf) 11:15:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000680)={0xa, 0x400000000000000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipmr_getroute={0x1c, 0x1a, 0x525, 0x0, 0x0, {0xa000000, 0x0, 0x0, 0x0, 0xf0ffff}}, 0x1c}}, 0x0) recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cachefiles\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x101, 0x4}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000440)={r2, @in={{0x2, 0x4e24, @rand_addr=0x400}}, 0x8, 0x4, 0x6, 0xfffffffffffffff7, 0xfab}, &(0x7f00000003c0)=0x98) r3 = semget(0x2, 0x20000, 0x80) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x3) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000540)={0x9, @output={0x1000, 0x1, {0x9, 0x6}, 0xa4d8, 0x7ff}}) semctl$GETZCNT(r3, 0x5, 0xf, &(0x7f0000000000)=""/210) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000640)={0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}]}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200000, 0x0) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f0000000200)={0x84, 0x6, 0x1}) [ 285.309919] kvm: pic: single mode not supported [ 288.567038] *** Guest State *** [ 288.575321] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 288.585193] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 288.596792] CR3 = 0x0000000000000000 [ 288.600560] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 288.607301] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 288.613948] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 288.619982] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 288.627493] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 288.634309] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 288.642579] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 288.650604] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 288.658771] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 288.666916] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 288.675083] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 288.683192] GDTR: limit=0x00000000, base=0x0000000000000000 [ 288.691228] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 288.699408] IDTR: limit=0x00000000, base=0x0000000000000000 [ 288.707723] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 288.715889] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 288.722557] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 288.730059] Interruptibility = 00000000 ActivityState = 00000000 [ 288.736489] *** Host State *** [ 288.739743] RIP = 0xffffffff812ff9c0 RSP = 0xffff88807c33f340 [ 288.745994] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 288.755862] FSBase=00007f116ec3e700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000 11:15:52 executing program 0: r0 = socket(0x10, 0x803, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001fc0)=""/148, 0x94}, {&(0x7f0000000000)=""/5, 0x5}, {&(0x7f0000002080)=""/204, 0xcc}, {&(0x7f0000002180)=""/223, 0xdf}], 0x4, &(0x7f0000002340)=""/110, 0x6e}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0x81}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/186, 0xdb}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000d00)=""/226, 0xe2}], 0x10000000000001bd, &(0x7f0000002180), 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x70001, 0x0) accept$alg(r1, 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f00000000c0)={0x6, 0x5, 0x100, 0x5, 0x5}) process_vm_writev(0x0, &(0x7f00000006c0)=[{&(0x7f0000000a40)=""/178, 0xb2}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x6, 0x4) 11:15:52 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00005d1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200, 0x0) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x20080) getsockopt$inet6_tcp_int(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000001280)='net/rt_cache\x00') read$FUSE(r2, &(0x7f0000000140), 0xfffffefa) [ 288.763856] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 288.769807] CR0=0000000080050033 CR3=000000007decc000 CR4=00000000001426f0 [ 288.777023] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0 [ 288.783839] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 288.789942] *** Control State *** [ 288.793589] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 288.800291] EntryControls=0000d1ff ExitControls=002fefff [ 288.805924] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 288.812988] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 288.819696] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 288.826570] reason=80000021 qualification=0000000000000000 [ 288.833128] IDTVectoring: info=00000000 errcode=00000000 [ 288.838622] TSC Offset = 0xffffff5fd881c91a [ 288.843139] EPT pointer = 0x0000000045e2101e 11:15:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) socket$isdn_base(0x22, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) modify_ldt$read(0x0, &(0x7f0000000000)=""/237, 0xfffffffffffffe99) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x1) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000300)={0x18, 0x0, {0x4, @dev={[], 0xc}}}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x8400, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="b93c085c86c1490d5f9ef9ec63ff2d38ba49d5d5ed8382909308126a59085cb818", 0x21) ioctl$VIDIOC_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, [], @raw_data=[0x5, 0x8, 0x1f, 0xffffffffffff8001, 0x2, 0x1, 0x9c51, 0x5, 0x1, 0xd91, 0x3f, 0x7fffffff, 0x2, 0x20, 0x9, 0x6, 0x6, 0xa5, 0x1, 0x8, 0xfffffffffffffff8, 0xfc08, 0x4, 0x9, 0x9, 0xa8ba, 0x2, 0x40, 0x9, 0x0, 0x7, 0x400]}) 11:15:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x400) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x1}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x4401, 0x0) 11:15:53 executing program 0: openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) time(&(0x7f0000000140)) [ 289.134112] *** Guest State *** [ 289.137563] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 289.146801] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 289.155819] CR3 = 0x0000000000000000 [ 289.159679] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 289.166400] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 289.173079] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 289.179186] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 289.185357] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 289.185386] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 289.185416] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 289.185463] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 289.185494] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 289.185527] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 289.185559] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 289.185591] GDTR: limit=0x00000000, base=0x0000000000000000 [ 289.216726] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 289.257924] IDTR: limit=0x00000000, base=0x0000000000000000 [ 289.266051] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 289.274161] EFER = 0x0000000000000000 PAT = 0x0007040600070406 11:15:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0xc200) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0x10000, 0x4) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x100000001}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000180)=0xf860) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r3}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$PPPOEIOCDFWD(r4, 0xb101, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x6c, &(0x7f0000000140)={r3}, &(0x7f000095c000)=0xa5) [ 289.280611] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 289.288202] Interruptibility = 00000000 ActivityState = 00000000 [ 289.294553] *** Host State *** [ 289.297787] RIP = 0xffffffff812ff9c0 RSP = 0xffff88807f61f340 [ 289.303887] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 289.310339] FSBase=00007f116ec3e700 GSBase=ffff88812fc00000 TRBase=fffffe0000003000 [ 289.318279] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 289.324313] CR0=0000000080050033 CR3=000000007e467000 CR4=00000000001426f0 11:15:53 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f00000000c0)) socket$inet(0x10, 0x3, 0xc) [ 289.331376] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff8ae015f0 [ 289.338235] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 289.344411] *** Control State *** [ 289.347905] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 289.354688] EntryControls=0000d1ff ExitControls=002fefff [ 289.360187] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 289.367244] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 289.374043] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 289.381489] reason=80000021 qualification=0000000000000000 [ 289.391014] IDTVectoring: info=00000000 errcode=00000000 [ 289.397341] TSC Offset = 0xffffff5f89858473 [ 289.401710] EPT pointer = 0x000000007e13601e 11:15:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xf, &(0x7f00000000c0)=[@in={0x2, 0x0, @local={0xac, 0x2c0, 0xffffffffffffffff}}]}, &(0x7f0000000100)=0x702) shutdown(r0, 0x2000000000000002) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="00c4ffff4bb0"], 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f0000000340)=@md5={0x1, "5be364e7173750f105d1c4724a905b5c"}, 0x11, 0x1) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000200)={0x8, 0x120, 0xfa00, {0x2, {0x9, 0x6, "7e17f7be9033895fac4de8e85b13f7957c503bf01f1a365a8c60b8ae4ea55c5a4dde020f7b296e5b47ac81b783b746a0a80ce5efcf50b8541da95fad6272798124e8e3a8f92bcc64e9dc8aff8937e67fdcb913ea9bcccfbcf100c03e336d655c5ea2c4ab249e29351b774f03ceef48602d64a5de3e57e6d646d59907068b7dc6820d6adfee52b805f4e02de1494c3fcc851440b4a6f8af35e0fc37664d02d4cfc5a59dcfd8fb0cac960f34456c97b9c32fd591c868e43852dfcc9e1c890b002ef3d2a89d953a7890f0c080ddd0a2980417936e8c1f418e5fbc12e69e4aafe052d48ba25180497eb05f6bba5af229632abd4524d147f7b2b49fa2c0b6c59bd111", 0xf1, 0xffffffff80000001, 0x0, 0x7fff, 0x80000000, 0x2f2, 0x1, 0x1}, r2}}, 0x128) r3 = dup3(r0, r0, 0x80000) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000140)=0x1, 0x4) 11:15:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x400) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x1}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x4401, 0x0) 11:15:53 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x6, 0x10000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f121b123f3188b070") ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x20363159, 0x1}) [ 289.723471] *** Guest State *** [ 289.726950] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 289.736043] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 289.745009] CR3 = 0x0000000000000000 [ 289.748863] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 289.755507] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 289.762158] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 289.769497] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 289.775754] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 289.782566] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 289.790599] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 289.798752] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 289.806878] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 289.815020] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 289.823143] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 289.831172] GDTR: limit=0x00000000, base=0x0000000000000000 [ 289.839341] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 289.847895] IDTR: limit=0x00000000, base=0x0000000000000000 [ 289.856070] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 289.864184] EFER = 0x0000000000000000 PAT = 0x0007040600070406 11:15:53 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x3, 0x0, [{}, {}, {}]}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000004}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x300, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/4096, 0x1000) writev(r0, &(0x7f0000002500)=[{&(0x7f0000001200)="38aacf9c8965db24d5b55a99307002b63bb0ea47095ef9deab21ed9c69b00d61cc2183783f93479f10c07228bc216e24f8db370a60d10e92957255dc400dc636ab5f34decadedc695e7f057b621c838f9018c452d91419f2dce501bca604849e45e8f77a4bfb3c87df5a4adf9177c5b130f130599d5f15da2906449669785576de9f20ea174a127940d602d6e6427b662e44d7029d625f2df27e0da2a2fade1d046c9cf20f6fa47eb2d2e2d085dbbc1bea56c8afb458b739016322786735da05e9ba593183e86167774ec2621650ed7fb676ff1d318fa666b097f7f094635c3dd49160", 0xe3}, {&(0x7f0000001300)="e73741525a6d3d4c181cb73aa9008c0a0ce49fb3958ae480d0e46d99593cde63b6868cd9409ae4ae42f5d877f81d36acb1c1ce16fc8d3e9d54098ae769d713a134dfba9e61a1dd8a5fa95235c266ffd481b1c5f4741328", 0x57}, {&(0x7f0000001380)="029e058480ee79a34c87a6c1c6241ba3003f66bb4817072ef2052799a2f31f60394205bda05deb817b1a585fbba471eab62900b8b5f65a166e6e129466de7d98e5c7e60f4bca13f3893d34bfb47635340d445370644dd179124bdb92fe018306c5d822a9d0d4008e0661f3b00b64b7bae4822f11c3b5de08ce0412085555930286d81bbc29380e41d959035ea1b046ea00abd6de1bb9c5a0b8c9efeccf4490ebc1a98e5dc4d0df275776813694efa73678", 0xb1}, {&(0x7f0000001440)="12fe22975d3dd9c4d41f1086e6498693a1edd4dffecafaf17a81f6dd5fe8d28ef7d8b44cef92b766c8cf993f75e31c32a3b37f402e47d882a35c4667412b4cd6dadbea3ab926b7a74a1ba7eae5103348997187753d1fc7", 0x57}, {&(0x7f00000014c0)="1853e41fe5f086a79471b5e1ae91da7208544ecfdcf021233cdde44d9f5709a4aa5a1123890f1c9a3c96a268b7c210c8063e", 0x32}, {&(0x7f0000001500)="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", 0x1000}], 0x6) recvfrom(r0, &(0x7f0000002580)=""/183, 0xb7, 0x40000000, &(0x7f0000002640)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x80) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x4) write$P9_RSYMLINK(r0, &(0x7f00000026c0)={0x14, 0x11, 0x2, {0x23, 0x0, 0x6}}, 0x14) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x3) clock_getres(0x1, &(0x7f0000002700)) write$P9_RRENAMEAT(r0, &(0x7f0000002740)={0x7, 0x4b, 0x1}, 0x7) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000002780)={0x0, 0x7ff}, &(0x7f00000027c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000002800)={r2, @in={{0x2, 0x4e21, @local}}, [0x800, 0x8, 0x6, 0x1, 0x4, 0x400, 0x1, 0x1, 0x4, 0x896, 0x1, 0x4, 0xffffffff, 0x7ff, 0xfffffffffffffffe]}, &(0x7f0000002900)=0x100) fcntl$setsig(r0, 0xa, 0x3) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0xa40120}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x34, r1, 0x31c, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x4109, 0x0, {0x18, 0x18, {0x200, @bearer=@l2={'ib', 0x3a, 'netdevsim0\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040004) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000002a40), &(0x7f0000002a80)=0x4) r3 = semget$private(0x0, 0x0, 0x2) clock_gettime(0x0, &(0x7f0000002b00)={0x0, 0x0}) semtimedop(r3, &(0x7f0000002ac0)=[{0x3, 0x5, 0x1800}, {0x7, 0x1000, 0x800}, {0x3, 0x2, 0x1800}, {0x0, 0x0, 0x1000}, {0x2, 0x2}, {0x1, 0xfff, 0x1800}], 0x6, &(0x7f0000002b40)={r4, r5+30000000}) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000002b80)={0x100000001}) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000002bc0)) mq_timedreceive(r0, &(0x7f0000002c00)=""/210, 0xd2, 0x3, &(0x7f0000002d00)={0x0, 0x989680}) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000002d40)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000002d80)={0x20000000}) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000002e00)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000002ec0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x18, r6, 0x402, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040010}, 0x20000040) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000002f00)) rt_sigprocmask(0x0, &(0x7f0000003000)={0xab}, 0x0, 0x8) 11:15:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, 0x0, 0x0, &(0x7f0000000e00)=""/241, 0xf1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, &(0x7f0000000d00), 0x0, &(0x7f0000000a40)=""/129, 0x195}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000d00)=""/226, 0xe2}], 0x2, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x400, 0x6, 0x800, 0xca, 0x1ebd}, &(0x7f00000006c0)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000bc0)={r1, @in6={{0xa, 0x4e21, 0x7, @ipv4={[], [], @loopback}, 0x9}}, 0x80000001}, 0x90) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000300)={'icmp\x00'}, &(0x7f0000000780)=0x1e) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f00000007c0)=""/198, 0xc6}, {&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000d00)=""/77, 0x4d}, {&(0x7f0000000d80)=""/111, 0x6f}, {&(0x7f0000000a00)=""/26, 0x1a}], 0x6, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 289.870645] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 289.878296] Interruptibility = 00000000 ActivityState = 00000000 [ 289.884646] *** Host State *** [ 289.887907] RIP = 0xffffffff812ff9c0 RSP = 0xffff88807f61f340 [ 289.894212] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 289.900776] FSBase=00007f116ec3e700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000 [ 289.909810] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000 [ 289.915951] CR0=0000000080050033 CR3=000000007c01c000 CR4=00000000001426e0 [ 289.923129] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0 [ 289.929850] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 289.936063] *** Control State *** [ 289.939561] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 289.946375] EntryControls=0000d1ff ExitControls=002fefff [ 289.952069] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 289.960967] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 289.967925] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 289.974654] reason=80000021 qualification=0000000000000000 [ 289.981027] IDTVectoring: info=00000000 errcode=00000000 [ 289.986730] TSC Offset = 0xffffff5f38c49864 [ 289.991103] EPT pointer = 0x000000007e6cc01e 11:15:54 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)=0x7) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000080)={0x3, 0x5, {0x54, 0x6, 0x3, {0x7, 0x7d}, {0x9, 0x4}, @cond=[{0x9, 0x81, 0x7, 0x7fff, 0x7fff, 0x2}, {0x4, 0xffffffff, 0x71b, 0x9614, 0x40, 0x3}]}, {0x57, 0x5, 0x4, {0xfffffffffffffff8, 0x4}, {0x0, 0xfffffffffffffffc}, @const={0x8000, {0x3c, 0x3, 0x8, 0x80000001}}}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') sendfile(r2, r3, 0x0, 0x1) 11:15:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x400) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x1}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x28}) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x4401, 0x0) [ 290.336215] *** Guest State *** [ 290.339732] CR0: actual=0x0000000000000020, shadow=0x0000000000000000, gh_mask=fffffffffffffff7 [ 290.350399] CR4: actual=0x0000000000002068, shadow=0x0000000000000028, gh_mask=ffffffffffffe871 [ 290.359624] CR3 = 0x0000000000000000 [ 290.363462] PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 290.370030] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 290.376742] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 11:15:54 executing program 0: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400) accept$packet(0xffffffffffffff9c, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={r1, @rand_addr=0x1, @loopback}, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0x1000, 0xff, 0x200, 0x6}) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x5) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801007d", @ANYRES16=r2, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x800) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000001c0)='./file0\x00') [ 290.382862] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 290.388915] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 290.395817] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 290.403954] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 290.412086] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 290.420221] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 290.428440] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 290.436608] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 290.444820] GDTR: limit=0x00000000, base=0x0000000000000000 [ 290.452943] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 290.461027] IDTR: limit=0x00000000, base=0x0000000000000000 [ 290.469240] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 290.477395] EFER = 0x0000000000000000 PAT = 0x0007040600070406 11:15:54 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r0, r1, 0x4, 0x3}, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x224000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000080)=0x1ff) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x103ff, 0x2, 0x1000, 0x1000, &(0x7f00000cd000/0x1000)=nil}) sync_file_range(r2, 0x0, 0x0, 0x2) [ 290.483972] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 290.491500] Interruptibility = 00000000 ActivityState = 00000000 [ 290.497886] *** Host State *** [ 290.501140] RIP = 0xffffffff812ff9c0 RSP = 0xffff88804321f340 [ 290.507634] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 290.514189] FSBase=00007f116ec3e700 GSBase=ffff88812fd00000 TRBase=fffffe000003d000 [ 290.522148] GDTBase=fffffe000003b000 IDTBase=fffffe0000000000 [ 290.528273] CR0=0000000080050033 CR3=0000000045331000 CR4=00000000001426e0 [ 290.535485] Sysenter RSP=fffffe000003c200 CS:RIP=0010:ffffffff8ae015f0 [ 290.542288] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 290.548377] *** Control State *** [ 290.551865] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 290.558714] EntryControls=0000d1ff ExitControls=002fefff [ 290.564321] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 290.571575] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 290.578439] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 290.585201] reason=80000021 qualification=0000000000000000 [ 290.591589] IDTVectoring: info=00000000 errcode=00000000 [ 290.597392] TSC Offset = 0xffffff5ee486c028 [ 290.601785] EPT pointer = 0x000000003e82701e 11:15:54 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cachefiles\x00', 0x900, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xf, &(0x7f0000000600)="2eaef27a0ccc6c9451ced98aff1801c6b5785f9da3d78adc9041c7a425456a", 0x1f) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000002d00)=""/4096, 0x1000}, 0x0) r1 = socket$kcm(0xa, 0x3, 0x11) sendmsg(r1, &(0x7f0000000280)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1302}}, 0x80, &(0x7f00000000c0), 0x2fe, &(0x7f0000000440)}, 0x0) recvmsg(r1, &(0x7f0000002cc0)={&(0x7f00000002c0)=@nl, 0x80, &(0x7f0000002b80)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1, &(0x7f0000002c40)=""/97, 0x61}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x20, @ipv4={[], [], @remote}, 0x3}, @in6={0xa, 0x4e22, 0x6, @loopback, 0x7fffffff}], 0x38) 11:15:54 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'syz_tun\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) utimes(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x7530}}) creat(&(0x7f0000000080)='./file0\x00', 0x100) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'sit0\x00'}}, 0x1e) dup3(r1, r0, 0x0) 11:15:54 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/32, 0x20}, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000002180)=""/223, 0x1f4}], 0x1}, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000a00)=""/224, 0xe0}], 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000006c0)=@hci, 0x80, 0x0, 0x128, &(0x7f00000024c0)=""/129, 0x261}, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000c80)=[{&(0x7f0000000b00)=""/39, 0x27}, {&(0x7f0000000bc0)=""/139, 0x8b}], 0x2, &(0x7f0000000e40)=[{&(0x7f0000000cc0)=""/243, 0xf3}, {&(0x7f0000000dc0)=""/51, 0x33}], 0x2, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) 11:15:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000700bae2c8d64cebe3cd6346"], 0x18}}], 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1f, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x810) [ 291.008355] IPVS: ftp: loaded support on port[0] = 21 11:15:55 executing program 2: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000180)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xe00, 0x0) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000080)=0x8) 11:15:55 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = getpgrp(0x0) r2 = getpgid(0x0) kcmp(r1, r2, 0x6, r0, r0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="e1b3b60c47744d4db700000000000000b5", 0x11) [ 291.359789] chnl_net:caif_netlink_parms(): no params data found [ 291.377961] Unknown ioctl -2147202744 [ 291.498758] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.505593] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.514045] device bridge_slave_0 entered promiscuous mode [ 291.572768] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.579530] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.587997] device bridge_slave_1 entered promiscuous mode [ 291.680694] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 291.701821] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 291.778302] team0: Port device team_slave_0 added [ 291.796860] team0: Port device team_slave_1 added [ 291.898185] device hsr_slave_0 entered promiscuous mode [ 291.933588] device hsr_slave_1 entered promiscuous mode [ 291.991853] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.998422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.005647] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.012369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.085696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.107920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.119478] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.128604] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.143456] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 292.164182] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.197038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.205280] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.211826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.219740] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.228300] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.234880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.266988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.277692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.290879] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.299295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.313083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.321403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.344584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.377979] 8021q: adding VLAN 0 to HW filter on device batadv0 11:15:56 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40400, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 11:15:56 executing program 2: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x1) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x54) r1 = socket(0x840000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x2711, 0x0, &(0x7f000033bffc)) 11:15:56 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000001c0)={'bcsf0\x00', 0x80000000}) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x5, 0x100000001, 0x7fff, 0x1, 0x80000000}, 0x14) r1 = socket$inet6(0x10, 0x4, 0xbdd) write$FUSE_POLL(r0, &(0x7f0000000180)={0x18, 0x0, 0x5, {0x5}}, 0x18) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000200)=0x63, 0x2) sendmsg(r1, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000002000)=[{&(0x7f0000000340)="5500000018007fafb72d1cb2a4a280930206f00000a84309c026236925000500030001b0f0ff56039848a3c728f1c46b7b31afdc1338d54400009b84136ef7e69183de448daa7227c43ab822005c2f2f3e9a48b030", 0x55}], 0x0, &(0x7f0000004000)}, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/29) r2 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x112810, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={r2}) 11:15:56 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r0, 0x0, &(0x7f0000000180), 0x800) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x7fffffff) connect$unix(r1, &(0x7f0000000040)=@abs, 0x8a) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) 11:15:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getegid() ioctl(r0, 0x1000008910, &(0x7f0000000000)="0adc1f123c12a41d88b070") fdatasync(r0) r1 = dup2(r0, r0) write$FUSE_LSEEK(r1, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, 0x6, {0xffffffffffffffe1}}, 0x18) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x201) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200010}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002d055f5edfed08b4ff782d000000000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x20040010) 11:15:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x40000000003, 0x300) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x1ff, 0xe0, 0xffffffffffff33ad, 0x100, 0xffffffffffff9b24, 0xffffffffffff0001}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000002180)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="286e6a8d6980"}, 0x14) r4 = dup2(r1, r1) sendto$inet6(r4, &(0x7f0000000180)="020400000300603900382b8a5b5aa242b90516da4d23a3bb09f82632e33715d26206cd6b80a7699507938207", 0x2c, 0x0, 0x0, 0x0) 11:15:56 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x1002000000, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x24200, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000080)={0x33, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x14, 0x8000, 0x21}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x800454dd, 0xa07003) 11:15:56 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x10021, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4040) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x113, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @loopback, 0x54b}, r3}}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_CTRL(r0, 0xc0445624, &(0x7f0000000100)={0x40980818}) 11:15:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10002, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0)=0x6, &(0x7f0000000100)=0x1) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000000080), 0xc, &(0x7f00008a7000)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000004080501ff0280fffdfffe2e0a0000000c00030001006a007d0a00010c000200170022ff02f10000"], 0x2c}}, 0x0) 11:15:57 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x10001, 0x88000) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0)=0x1, 0x4) 11:15:57 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETOFFLOAD(r1, 0x800454d3, 0x70a000) socket$nl_netfilter(0x10, 0x3, 0xc) 11:15:57 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x1010c0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f0000000080)=@routing={0x2c, 0x6, 0x0, 0x10001, 0x0, [@ipv4={[], [], @loopback}, @ipv4={[], [], @multicast2}, @empty]}, 0x38) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r4, 0x88, 0xb, &(0x7f0000013ff4)={@remote, @dev}, 0xc) close(r4) dup3(r2, r3, 0x0) [ 293.238650] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 293.246427] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 11:15:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fremovexattr(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="01010000000000004e"]) 11:15:57 executing program 2: futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r1) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000016) 11:15:57 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) r3 = socket(0x840000000002, 0x3, 0xff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x103800, 0x0) dup2(r3, r0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='ip6_vti0\x00 \x00', 0xfd7a) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @initdev}, 0x10) sendto$inet(r1, &(0x7f00000000c0), 0x30, 0x0, 0x0, 0xc9) 11:15:57 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x80) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x13) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x800000200000003) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0xbe4b886a59f282a4, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x96c) ioctl$TCFLSH(r1, 0x541b, 0x70a000) 11:15:57 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000300)='..', &(0x7f00000003c0)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 11:15:57 executing program 0: syz_emit_ethernet(0x300606, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300003, 0xffffff3b, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4888], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00') ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f00000000c0)) 11:15:58 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_matches\x00') ioctl$RTC_UIE_ON(r1, 0x7003) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x20000) ioctl$CAPI_NCCI_GETUNIT(r2, 0x80044327, &(0x7f0000000040)=0xfff) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000180)={{0x5, 0x0, 0x7, 0x1b, '\x00', 0x7ff}, 0x0, [0x8, 0x0, 0x1, 0x7a, 0x2, 0x9, 0x4, 0x80, 0xffffffffffffffff, 0x6, 0x8, 0x149, 0x3, 0x6, 0x8, 0x0, 0x2, 0x0, 0x100000001, 0x5, 0x2, 0x8, 0x2, 0x43, 0x1, 0x10000, 0x1f, 0x4, 0x1, 0x7, 0x7fffffff, 0x2fd1, 0xffffffffffff21a7, 0x4, 0x0, 0x2, 0x6dc8, 0xfffffffffffffffa, 0x1, 0xcd, 0x280000000000000, 0x7, 0x0, 0x254, 0x9, 0x80000001, 0x81, 0x952, 0x7, 0x3, 0xdb, 0x20, 0x401, 0x8, 0x9a, 0x3, 0x4d, 0x101, 0x3, 0x1fffffffe00000, 0x323, 0x3, 0x0, 0x3f, 0x5, 0x80000001, 0x7, 0x6, 0x6597, 0x1000, 0x5326, 0x1, 0x6, 0x401, 0x7, 0x7, 0x6, 0x3ff, 0x9, 0x7, 0x400, 0x11, 0x2, 0xffff, 0x9, 0xffffffff, 0x80000001, 0x6, 0x1, 0x5, 0x81, 0x3, 0x400, 0x8001, 0x9, 0x316, 0x0, 0x0, 0x9, 0x4, 0xbb, 0x9, 0x0, 0x400, 0x7f, 0x0, 0x4, 0x2, 0x100, 0x6, 0x9, 0xd3, 0x3, 0x6, 0xa3, 0x7fff, 0x400, 0xfff, 0x9, 0xde, 0x24, 0x8000, 0xffffffffffffffff, 0xfca5, 0xded, 0x6a29e313, 0x10000], {0x0, 0x989680}}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000740)={&(0x7f0000000100), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r3, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0x4102, 0x0, {0x18, 0x13, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}}, [""]}, 0x34}}, 0x4004) setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0), 0x4) 11:15:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x1) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r4 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'batadv0\x00'}, 0x18) splice(r1, 0x0, r4, 0x0, 0x10005, 0x5) 11:15:58 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000580)={0x0, 0x5}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="e3314e70512c"], 0xa) 11:15:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3, 0x101000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x6c, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x4, @rand_addr="b352b50c0c6a1d5f074b4478f8eaf539", 0x80000001}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000380)={r3, 0x9}, 0x8) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000003c0)={r3, 0x6}, 0x8) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000180)={0x0, @aes128, 0x1, "18006838b3b3c4ba"}) 11:15:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="010000002cb8fe1080ceb124e5a12ebf5e588fd82348", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={r1}, 0x8) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x80000, 0x0) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f00000001c0)) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'os2.', '\x00'}) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000080)={0xfff, "7043cb6720d92291c6e4dc97b1f26a53b5a349708a3db77fc66b714d24e99b0d", 0x1, 0x1}) 11:15:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="00ade96ff3038248cacf529035164d3163ac0fbd93fa0719ff3bff39cd065738ad15d03bb6a3993ee4aea7cb0565d7e2fb2d") r1 = semget$private(0x0, 0x3, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000080)={{}, 0x8, 0x0, 0xda}) 11:15:58 executing program 0: capset(&(0x7f0000000b40)={0x20080522}, &(0x7f00000000c0)={0x3ff, 0xfffffffffffffffc}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0x8, @raw_data="40bd1e4535d2d22f5f65a25f8737ac78fff724ceb5202a9bd95d40bdfa8929cdc4aaa7b40efbb4e4ead0e6058a3d1aaaad00af125880d21279f98f1d8b0cf29254bbda3dbd5247dd2b6c2b0c3452ac56aeb3a3cfecdc0870a3900ab034762cabd15218e03009a179979d189845caeeda78f22eaf96bf6d7265fe311f97980b98816ef48e085feb70a69aaaeeaff54d9c0528f00e91c91dc1c98ec270131b7b0d9eca7669962903436ff684d0402503c87f9897b9519304abb498dcab7dd787954cefb6fbf14542c8"}) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 11:15:58 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000300), 0x8) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001900)={'hsr0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000001980)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000001a80)={&(0x7f0000001940)={0x1d, r4}, 0x10, &(0x7f0000001a40)={&(0x7f00000019c0)={0x7, 0x400, 0x100, {r5, r6/1000+10000}, {0x77359400}, {0x4, 0x8d, 0x7ff, 0x38}, 0x1, @canfd={{0x2, 0x100000001, 0x449, 0x3f}, 0x13, 0x1, 0x0, 0x0, "f676faaa43e685eece7b9846f3a285b94a945c5c8bc631869d51c7cb65ef1a5f1eb8882cb844e5332be7c9861aebd75d0647c3e687ffbc8ccbc920fbb9b95cb9"}}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x2400c800) close(r0) close(r0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 11:15:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x9, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000140)) r2 = dup2(r0, r0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000001c0)=@srh, 0xfffffffffffffe96) init_module(&(0x7f0000000100)='selinux\x00', 0x8, &(0x7f0000000180)='\xe0\x00') ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'ip_vti0\x00', 0x200}) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) getsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, &(0x7f00000000c0)) 11:15:58 executing program 0: unshare(0x20400) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x0) preadv(r0, 0x0, 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/cuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001040)=ANY=[@ANYBLOB="2b000000030000001f0c00e60c00000004000000000000000a000000000000002f6465762f637573650000"], 0x2b) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) read$FUSE(r1, &(0x7f0000000040), 0x1000) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xfffffffffffffffe, 0x2}, 0x10) fanotify_init(0x11, 0x80000) 11:15:58 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000240)=',\x00') ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x3, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000140), 0x8) close(r4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$poke(0x5, r5, &(0x7f00000000c0), 0x5) close(r0) 11:15:59 executing program 0: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ffdafd4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c3ec668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4887a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b06000000264586d2779088006d5f9be82b00f10287031623f73470264cc5897f18f357aad6deb3883da88ae2266664933785a3ce72bb224a441437ea93c217", 0xc0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) socketpair$unix(0x1, 0x1002, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r0, r1}, &(0x7f0000000800)=""/240, 0xf0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x14000, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80082000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00250c00000008000600c900000008000600040000000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11:15:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x1ff, 0x2, 0x7000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x4) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000200)={0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000300)={0x1, 0x8}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x100, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) getpriority(0x1, r5) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000180)=0x14) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f6ff702d33acf5bd082d0df1c7335401fe0a82deb18d22bee1546b2b5b30923137c3d3f2ccd34fa7b1e36eec0acae67485a272e867a1701ef4c0bdec1075a98f2207f939f6e44098365b82d5e775fa50be45827d646c106214f2f0dbe5c92491287aefd958afe774cbd60496277c26a450bc45413c5b1a250afb05259932feb6f37904403c4025720d7e357425d6921d6297ccaf1c21542b2bfec261d5d7ed9d2dd4d76850fb886a884f5d02800"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f00000003c0)) ioctl$KVM_NMI(r3, 0xae9a) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000280)=@req={0x28, &(0x7f0000000240)={'bpq0\x00', @ifru_ivalue=0x1}}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000340)={'veth0_to_bridge\x00', 0x600}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:15:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f9f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) fanotify_init(0x0, 0x181002) 11:15:59 executing program 1: futex(0x0, 0x83, 0x0, 0x0, 0xfffffffffffffffd, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x12000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @ib={0x1b, 0x9b14, 0x9, {"7a30dc92ff028cfe1bb45421c445fe7f"}, 0x5, 0x4, 0x887}}}, 0x90) 11:15:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xd4800, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0xc00000000000) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f00000000c0)={0x22, 0x10, &(0x7f0000000040)="9d56f8facbe5f9f80e4db8a2cb1a02451f8fe4983ad4c1ca92320ab6449a687b9993e7e5a1b8c523c521a980ab8daa7b959bf77b600e3fb7dde635205e33d573b7d927b428d90461aaf88978fe1b729e2c2f6ea36936ec636544156bb4d06a2e93c8ca986564d53346374ea85a6dd6bc", {0x0, 0x10001, 0x20385655, 0x7, 0xa604, 0xfffffffffffffff9, 0xf, 0x4}}) keyctl$dh_compute(0x17, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000001640)={&(0x7f00000015c0)={'speck128(-\x00'}}) 11:15:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) listen(r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x20, 0x90000) sendto$isdn(r1, &(0x7f0000000080)={0xbce, 0xa56a, "8749d198a9530fd0039d968449f3abc0db70f9fd0a55225f3c59cdd4cfa59c54ff819b"}, 0x2b, 0x800, &(0x7f00000000c0)={0x22, 0x7, 0x7fffffff, 0x3}, 0x6) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 11:15:59 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000200)='*^{ppp1cpuset)security:\x00', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)=""/97, &(0x7f00000000c0)=0x61) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ftruncate(r1, 0x1000000) read(r1, &(0x7f0000000000)=""/48, 0xfffffe18) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x1fffffd, 0x8011, r0, 0x0) 11:15:59 executing program 3: shmget(0x2, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) r0 = socket$netlink(0x10, 0x3, 0x100008000000004) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x9, 0x2) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000100)={0x2}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067f0200ff810040010000000058000b4824ca945f64009400050028845a01000000000000008000f0fffeffe809000000fff5dd00000010000100070c10000000000001400000", 0x58}], 0x1) [ 295.653034] could not allocate digest TFM handle speck128(- 11:15:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/anycast6\x00') creat(&(0x7f0000000000)='./file0\x00', 0x84) lseek(r0, 0x20408005, 0x0) 11:16:00 executing program 3: r0 = socket$packet(0x11, 0xfffffffffffffffc, 0x300) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000000140)=0xff10) 11:16:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x3, 0x103, 0x2, {0x1, 0x100000001, 0xa8, 0x5}}) 11:16:00 executing program 2: mkdir(&(0x7f00000000c0)='./file1\x00', 0x9) mount(0x0, &(0x7f0000000240)='./file0/../file0\x00', &(0x7f00000002c0)='gfs2\x00', 0x0, 0x0) 11:16:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setrlimit(0x9, &(0x7f0000000200)={0x9, 0x200000000}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x121040) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r3}}, 0xc) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 11:16:00 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xeffffffffffffffb, 0xfffffffffffffffc) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)="dd4e15a1638a193bc01ae74abb0557") 11:16:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x3, 0x103, 0x2, {0x1, 0x100000001, 0xa8, 0x5}}) 11:16:00 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001e00)={0x14, 0x1d, 0x400000000000109, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket(0x10, 0x80002, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 11:16:00 executing program 2: syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f00000004c0), 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000003c0), 0x3d9, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$inet_int(r0, 0x0, 0x40000000000c8, &(0x7f0000000140), 0x4) fchmod(r0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 11:16:00 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8002, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000040)=@xdp, 0x80, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000140)=""/23, 0x17}, {&(0x7f0000000180)=""/249, 0xf9}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000340)=""/213, 0xd5}, {&(0x7f0000000440)=""/18, 0x12}], 0x7}, 0x40002002) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = userfaultfd(0x0) fstat(r2, &(0x7f0000000540)) 11:16:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x3, 0x103, 0x2, {0x1, 0x100000001, 0xa8, 0x5}}) 11:16:00 executing program 3: socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x6, 0x2000000000000004, &(0x7f0000013ff4)={@local}, 0xc) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 11:16:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x3, 0x103, 0x2, {0x1, 0x100000001, 0xa8, 0x5}}) 11:16:00 executing program 2: r0 = request_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='!&%eth1self&(cgroupbdevlosystem\x00', 0xfffffffffffffff8) r1 = request_key(&(0x7f0000000440)='.r\xc5\xb7ue\x00\x00\x00\x00\xc5\v\xe7\xcc\xfc9\x95\xd0\x83\xbf\xef\x97C\xf79_\x8dG\xf6\xd9z5\x18\xf9\xdf\x80\x9a\x99z\r\x9f\b\x15O\xa38~\x18\xda\x9f\x96\x1d\xc6q\x80\x06\\\xear\x8dt.\xfa\xb0\x04\x00\x00\x00\x83\xee\x11{\xc1\x8far%(\xe3\a\x13\x97', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f00000003c0)='!&%eth1self&(cgroupbdevlosystem\x00', r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4040, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x5) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$search(0xa, r3, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000200)={0x8, 0x8, 0x0, 0xfff, 0x2, 0x6}) 11:16:00 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000300)=0xd354) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffff9c, 0x10, &(0x7f0000000400)={&(0x7f0000000340)=""/133, 0x85, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r2, 0x4) r3 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0xb47c, 0x80000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0xe0, "8ac52632b754f615b99d6573c79fd0c33e1b2edd72bad5d5a4fffb1dd8f236d118eba88970b9922cd1f88fb7921c60b3729722a53c4345210ea441b2414ebbc373279524c1cb88921f8d2d7867fd02d9dd8e79a81bef49c0132d054765a090b2d35de4142ff6112a75bc1f345f3d14ba746de129000a82d1a98540f3915886f241343aedadf61216294126d03aa4798a9ddeb0bd42a47196887902c464f94d00fafeda01cd23e69862088f3ef673fc08704dacccb55642fe19056af21e2a9259c901fdadac5faee38965ca3a892cfb0a2ec39de92410e87a723738b777d67612"}, &(0x7f0000000280)=0xe8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)={r4, 0x1, 0x3, [0xfffffffffffff801, 0x5, 0xf5]}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'rose0\x00', r1}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @link_local}, 0x10) 11:16:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0000e500") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000000b07031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000100), &(0x7f0000000140)=0x8) 11:16:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x117, 0x8}}, 0x20) 11:16:01 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001700)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@local}}, 0xe8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x101000, 0x0) [ 297.187133] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 297.195217] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.265467] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 297.273320] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 11:16:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x117, 0x8}}, 0x20) 11:16:01 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) getrlimit(0x0, &(0x7f0000002ff2)) pkey_mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x5, 0xffffffffffffffff) select(0x40, &(0x7f0000000fc0)={0x20}, &(0x7f0000000180), &(0x7f00000000c0), &(0x7f0000003000)={0x77359400}) 11:16:01 executing program 0: r0 = socket$inet6(0xa, 0x7, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x2}, 0x7) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) listen(r0, 0x5) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r1) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000240)=""/169, &(0x7f0000000300)=0xa9) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r3}, 0x8) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) 11:16:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100), 0x117, 0x8}}, 0x20) 11:16:01 executing program 2: r0 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x200, 0x800000002009) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x7) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000000)={0x1, 0x8000000000000, 0x0, 0x4}) r1 = socket$pptp(0x18, 0x1, 0x2) dup2(r1, r0) 11:16:01 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @raw_data=[0x9, 0x4, 0x0, 0x401, 0x6, 0x3f, 0x5, 0x81, 0x4, 0xffff, 0x9, 0x9, 0xfff, 0x80000001, 0x1, 0xfffffffffffffffb, 0xfffffffffffffffc, 0x9, 0x9, 0x3603585, 0x1, 0x9, 0x3f, 0xfffffffffffffffd, 0x400, 0x7, 0x401, 0x3, 0x1, 0xff, 0x28, 0x33ca1d3d]}) close(r1) r4 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2) pipe(&(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000001, 0x24010, r4, 0x0) splice(r5, 0x0, r1, 0x0, 0x8, 0x0) sendto$isdn(r6, &(0x7f00000000c0)={0x800, 0x8, "e07054f0e400f38fcfb4afb478a9eeb9c38980ed6dca0f892620d3507880391c527db977016de81891aa840703dbf995d09204a324fe24a9ac40588b75ca3154c007886b170fe25ca1a7b5afa558ed812c762b4565c6cd076448ded18ebb811c3b4bef98d4e265d3b3dba997c559dda36ea785ebfaea19d46c79e36f0220a262a6c8be987514f0cc3d5dbfae9e9e47ad5503f5c7983a0d73ef7dae3c7cdac3bcdc27f6e7818dd1e428aa3085238fe0be827c1966a44934d4b22735c7f74fc99fde75feebc82a5645a453e060ef0849793a96fe3f10c0e8a0167ddca5efd099e697b4a250f5519035e8c91ae1e5b06dd64c609bcf716e59"}, 0xff, 0x40000, &(0x7f0000000000)={0x22, 0x7fffffff, 0x1ff, 0x1, 0x80}, 0x6) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000300)={0xfffffffffffffbff, 0x9, 0xfffffffffffffff9, 0x6, 0x78d8}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000380)='/dev/uhid\x00', 0x2, 0x0) close(r5) vmsplice(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)='-', 0x1}], 0x1, 0x0) 11:16:01 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4a0040, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x800}, 0x7) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x300, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4) r2 = fcntl$getown(r0, 0x9) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f00000001c0)=""/4096) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000011c0)={0x400, 0x7}) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000001200)={0xfffffffffffffff8, 0x1, 0x2, 0x8}) read(r0, &(0x7f0000001240)=""/234, 0xea) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000001340)) write$UHID_INPUT2(r0, &(0x7f0000001400)={0xc, 0x16, "03843b0a86881e200c50e941f84a05129b1451b38b44"}, 0x1c) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000001440)) fsetxattr$security_evm(r0, &(0x7f0000001480)='security.evm\x00', &(0x7f00000014c0)=@v2={0x7, 0x0, 0xf, 0x7, 0x1b, "b8c8cb5c00203b16a80c6ba7f0cc8719169a160b8b2289c7e34125"}, 0x25, 0x2) prctl$PR_SET_ENDIAN(0x14, 0x1) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000001500)) mq_notify(r0, &(0x7f0000001540)={0x0, 0x9, 0x4, @tid=r2}) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000001580), &(0x7f00000015c0)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001640)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001600)={0xffffffffffffffff}, 0x106, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000001680)={0xf, 0x8, 0xfa00, {r4, 0xc}}, 0x10) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000016c0)=0x6b590fdd8417626e, 0x4) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000001700)=0x5, 0x4) getdents64(r0, &(0x7f0000001740)=""/48, 0x30) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000001780)={'ip6gre0\x00', 0x400}) io_setup(0x2, &(0x7f00000017c0)=0x0) io_cancel(r5, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x7, 0x1f, r3, &(0x7f0000001800)="b552b23bc49dd4db781a3567de0c6a62", 0x10, 0x101, 0x0, 0x2, r0}, &(0x7f0000001880)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000018c0)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000019c0)={0x7f, 0x9, 0xe394, 'queue1\x00', 0x2}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000001a80)=0x100, 0x4) 11:16:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, 0xffffffffffffffff, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:01 executing program 0: r0 = open(&(0x7f00000005c0)='./file0\x00', 0x40, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000600)={0x3, 0x7, 0x9, 0x3, 0x7, 0x1ff, 0x80000001, 0x0, 0x7f, 0x6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000780)={'syz1', "70219280643051534d585361c2985f782865a36af4bb29066b2e98278633bbe48ed3c6451e9b351df9a4f2b2802cd09cab334f109ad6970ef547efa77e71dfb2629934aa21ff3cd1dd5a3de95bace6b33b50bcbcb18836973488b57b29d41bbd2d8539c647b063161ad5210dd50e99f372585b9ff68bcca403a096b139c7044902c177c1b1db8b79d8c1251c6786767e53220f5d10d52edbf92dffeff65381059c0a69c96eeaa255e44e7afb34e94808872347b049eaf00ebba4904769c31a9bc99721"}, 0xc7) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x356) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000640)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000000c0)={0x3, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e24, @loopback}}}, 0x108) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000580)={0x0}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000004c0)={r4, 0x2}) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000480)=0x6) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x108) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0400000000000000ff0f0000000000000100000000000000db0a0000000000008000000000000000000000e3ff000000008000000000000090000040000000c66100000000"]) 11:16:02 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) write$eventfd(r0, &(0x7f0000000440)=0x7, 0x8) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f00000000c0)={@rand_addr, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_getaddr={0x28, 0x16, 0x102, 0x70bd29, 0x25dfdbfe, {0x2, 0x18, 0x6, 0xff, r1}, [@IFA_ADDRESS={0x8, 0x1, @multicast1}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4040045) unshare(0x20400) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000480)={0x0, 0x88, "ab37d9ac061b1ecac5f648702a1f8659bd165c7d9eb912f2d5513ac50ab2ea108521613729ae569a0289ef6a96923b547a10a1b988fb8e6ed2dcac7b26e035048495aa9d1ef6ef3625f03a282a3333dbdce829bb51018beb2ea744681a2cb4913371d1e87b876073ebd20557c7b59f0e705fd67e82fe2c89c6c413c7eca171174e91f04bdaf12dff"}, &(0x7f0000000540)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000580)={r2, @in6={{0xa, 0x4e20, 0x800, @mcast1, 0xfffffffffffffffc}}, 0x8000, 0xfffffffffffffffe}, 0x90) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000280)=0x0) write$cgroup_pid(r0, &(0x7f00000002c0)=r3, 0x12) r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0x80089203, &(0x7f00000006c0)) inotify_init1(0x80800) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000300)={0xffffffff, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e21, @local}}}, 0x108) 11:16:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, 0xffffffffffffffff, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:02 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil) ioctl$VHOST_GET_FEATURES(r0, 0x80044d76, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x3, 0x4, {"b3f7fab3d3070831b3cbecb240b78fc5"}, 0x5, 0x9}}}, 0x90) 11:16:02 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_gettime(0x1000000000000005, &(0x7f00000000c0)) socket(0x1, 0x7, 0x2) 11:16:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, 0xffffffffffffffff, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:02 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$l2tp(0x18, 0x1, 0x1) r4 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0x73ad, 0x8000) openat(r4, &(0x7f00000004c0)='./file0\x00', 0x2, 0x1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x600000, 0x0) write$P9_RREMOVE(r5, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) epoll_create(0x3f1e) r6 = add_key(&(0x7f0000000200)='id_resolver\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)="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", 0xfb, 0xfffffffffffffffe) r7 = add_key(&(0x7f0000000380)='cifs.spnego\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)="19b8db17d17bc1995400b93433eb7db978b8552d95e213bdcdcc2c42c8ba8e4f67e96b915048a80cde63cacc9eff73", 0x2f, 0xfffffffffffffffd) keyctl$link(0x8, r6, r7) fadvise64(r5, 0x0, 0x610, 0x4) r8 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x292, 0x1, 0x2, 0x6, 0x0, 0x4, 0x1000, 0x4, 0x1000, 0x185a0, 0x7, 0x7f, 0x7, 0x8000, 0x0, 0x5, 0x7, 0x6c9, 0x2, 0x5, 0x100000000, 0x4, 0x200, 0x1, 0x49, 0x10001, 0x9bf, 0x401, 0x8, 0x11c, 0x7fffffff, 0xffffffffffffff80, 0x1f, 0x100000000, 0x2, 0x0, 0x0, 0x7d, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0xf020, 0x0, 0x3, 0x0, 0x3, 0x80000001, 0x3}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3) openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r0, 0x200}, {r1, 0x400}, {r2}, {r3, 0x220}, {r8, 0x5406}, {r8, 0x1000}], 0x6, 0x424) futex(0x0, 0x0, 0x0, &(0x7f00006f7000)={0xfffffffffffffffc, 0x100000000000000}, 0x0, 0x0) pipe2(&(0x7f0000000440), 0x84800) 11:16:02 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r1, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) 11:16:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1], 0x1f000}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @local, '0\x15\x8d\x00\x02\x00'}}, 0x14) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 298.868726] IPVS: ftp: loaded support on port[0] = 21 [ 299.160841] chnl_net:caif_netlink_parms(): no params data found [ 299.230589] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.237286] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.245668] device bridge_slave_0 entered promiscuous mode [ 299.256879] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.263517] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.271872] device bridge_slave_1 entered promiscuous mode [ 299.306295] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 299.320160] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 299.351161] team0: Port device team_slave_0 added [ 299.359594] team0: Port device team_slave_1 added [ 299.464405] device hsr_slave_0 entered promiscuous mode [ 299.515037] device hsr_slave_1 entered promiscuous mode [ 299.789834] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.796433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.803632] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.810720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.889252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.910174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.919678] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.932251] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.948710] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 299.970673] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.987863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.996521] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.003095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.020532] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.028945] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.035665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.065723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.095171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.104059] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.112984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.121143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.132205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 300.171295] 8021q: adding VLAN 0 to HW filter on device batadv0 11:16:04 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x50000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000004c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000007c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000580), r2, 0x2}}, 0x18) preadv(r0, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/37, 0x25}], 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600200000000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000008020000627c05000500000000000a00000000000000ff1700000000000000000000000001170000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000003, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) waitid(0x1, r3, &(0x7f0000000200), 0x80000000, &(0x7f0000000280)) r4 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x800) accept$inet(r4, &(0x7f0000000340), &(0x7f0000000380)=0x10) 11:16:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r1, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:04 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x1) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000040)=0x7f) socket(0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) wait4(0x0, 0x0, 0x0, 0x0) 11:16:04 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x42801, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$int_in(r0, 0x800000c004500a, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)) fstat(r1, &(0x7f0000000380)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, &(0x7f0000000500)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000600)={{{@in=@remote, @in6=@remote}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) getresuid(&(0x7f0000000800), 0x0, &(0x7f0000000100)) getgid() geteuid() getgroups(0x9, &(0x7f00000008c0)=[0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000900)={{{@in=@local}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, 0x0) getgid() stat(0x0, &(0x7f0000000a80)) getegid() ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f0000000240)={0xfff, 0x5, 0x2, @dev={[], 0xe}, 'gre0\x00'}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000b00), 0x0) write$vnet(r0, &(0x7f0000000140)={0x1, {0x0, 0x0, 0x0}}, 0x68) close(r0) 11:16:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') getdents64(r2, &(0x7f0000000000)=""/183, 0x9b) getdents64(r2, &(0x7f0000000df0)=""/528, 0x7f355eb8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 11:16:04 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) listen(r0, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000000)=""/255, 0x6}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x7}]}, 0x10) [ 300.695986] input: syz1 as /devices/virtual/input/input7 [ 300.734502] input: syz1 as /devices/virtual/input/input8 11:16:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r1, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:05 executing program 3: unshare(0x20400) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/amemthresh\x00\x9d~I\xc5\x87\"!\x82\x92\x96$\xea\x9et\x88\x94\xbd^#8\x91\x01\xd1|Q&t\x02\'zkm\xbbQ\xec|W\xfb\xcf`\xde`$#<\xec\x9eKl\xff\xe7B`\xfd\xec\x876\x9f,\xa1\xb4+\xc7\xe5\xd1\xc7L9\x18\x7f\x84\x12\xa9\x86\xaa\x03sm\x15,\x8d\xe8`\xe1\xa3\x00]\xef\x9b\x80\xe2\xb2\xa2\xe0Z\xee2*X\xfbqq\xbe\x19>\x02.\x84\xd42V\xda\x98\xe6\"k7\x9d\x10ZG\xf7Jc?B\xba\xbc\x82<\xfav$\xafRg\xfd\xe5oY\x7f\xcc\x93\xb9\x16\x04\xf0H\xfd\xaf\xec\xbc\x8a\f_\v\xfa\x05j\xbf\x02\xc4\xa9\xdd\xd5\xeb\x11\x10g\x8c\n\xf4\x16\x9b\x19p\x05\r\xda\x14\xfd\xb4\xc6\x94P\x91H\x8f0\xae\x9aF\xa1\x97\x1c!\xf3V\"\xe3\xccB\xd1T\xa8\x84T$\xd2F\xa7zL\xd7\xddR#}\xbdO\xa2H\x15A\x13\xe9jzg\xaa\x93\xb5o\\\x98\xf8\xaf\xc2\xbe\xa4\x12\x13\xca\xd8/\xf3\xb3v\x0fj\xd5\x86\xd9\xec\x98\x05p|\xed\xc6`\x1a\xff\xe1\x01\xaaS]_\x9e5C\x88k]U\x85L\xfa\x90\x0fl\xcf\xa3\xfe%)2\xb6.\xb5^\xb8\xee\x9ax\aQ\xfc\xdcqDt\xa3\x1d-\x85\x94\xc7,\xc9v4@\xf4ZS-', 0x2, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) r1 = syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000140)) 11:16:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x29, 0x5, 0x0) close(r1) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r2, &(0x7f0000002700)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @local, 0xd}, 0x80, &(0x7f0000001640)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1}, 0x45) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/\x00\x00\xb6\x97<[0@\xac\xa4R\xce{f\xe9\xbb\x8fyI\x90q\xe5?\xa8\xbc\xc1\n\x15\xc7cC\xce-\xb7\xbb>:\xf7\x92\x83x\xb5o/\xa9Q\xbdi\x15c\xebxd\x19\xb4\xe2^\xb5\xe4b\xcc\xa9\xee\xeb4\xe7\xf5\xfc\xa6\xce(67G\x18E\xe2\xa1\xbaP]\xf6\xae\x98a\x06\xd1o!\xd8\xe7hU\x9a\x8d\xd3\xeaQ\xc1y+2!\x89\xc8\xfc\rWP\xd1\x9d\x8b\xbf\xb1\xe6I\xb9\x19\xfb\x02\xbb\xe2\x04\xee\x8b\xe4\xe8\xb7&GV\xfdd\x11\x9cO\xe2\xafykv\x06L:X\xfd\xefn\xd0Se\x89\xa2J-\xdb\xb8C\xb2\x8a\x9a\xae\xfcO\xf4\x85\x99\xb7gT\x9a\xbf\x05$!k\xd4\xb2\x1f^\xa5eB\xbd\x98\x99p\x14\xb1\xb7!{\x1de\xd8eP[\xc56\x95\x0eu\v,1?\xe3\x99\xe6g\xc9\x1d\a', 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r2) 11:16:05 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r1, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:05 executing program 2: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bc070") pipe(0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES16], 0xffffff1f) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0xffffffffffffff01, 0x8000) r3 = socket$inet6(0xa, 0x801, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x7, 0x15) r4 = dup(r3) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)=r4) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x7ffff, &(0x7f0000000080)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x21c, 0x0, 0x0, 0x0, 0xf42f, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xffffff83, 0xa, 0x0, 0x0, 0x0, 0x8906, 0xf0ffffffffffff}}}}}, &(0x7f0000000040)) setsockopt$packet_int(r6, 0x107, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x44) ftruncate(r5, 0x2007fff) sendfile(r4, r5, 0x0, 0x8000fffffffe) 11:16:05 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000580)='/dev/input/event#\x00', 0x800, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/16, 0x10}], 0x1) 11:16:05 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0x0, 0x4008000000000d4, 0x2, &(0x7f00000004c0)="9cb12a58d806fea88b98c12d974a701f983ab9016a73af1267f67ca2618d75744cdb3165b9beec6a5f02be4b22ce8b43297832420c3a33c615124c185c8f0e89a6d1ae14328b"}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) setxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f00000000c0)='devpts\x00', 0x7, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x2) write$FUSE_BMAP(r0, &(0x7f0000000200)={0x18, 0x0, 0x3, {0x4b59}}, 0x18) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) 11:16:05 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r1, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) [ 301.421522] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:16:05 executing program 0: clone(0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='oom_score\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/199, 0xc7}], 0x1) sendfile(r1, r0, 0x0, 0x20000000001) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) r3 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in6=@loopback, 0x4e22, 0x0, 0x4e24, 0x9, 0xa, 0xa0, 0x20, 0x3f, r2, r3}, {0x7, 0x44, 0x100000001, 0x10000, 0x100000001, 0xffffffff, 0x3, 0x400}, {0x8, 0xee, 0x3, 0x1}, 0x2000000000000, 0x6e6bb0, 0x1, 0x1, 0x0, 0x3}, {{@in=@multicast2, 0x4d4, 0x3c}, 0x2, @in6=@local, 0x3501, 0x2, 0x1, 0x24597e84, 0x4, 0xe7, 0x48}}, 0xe8) 11:16:05 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8014000000000084) pread64(r0, &(0x7f0000000000)=""/43, 0x2b, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0xc, &(0x7f0000000240)={0x0}, &(0x7f0000000040)=0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r1, 0x0, 0x9}, 0xc) 11:16:05 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r1, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:05 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x58000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x10000003ff, 0x2}, 'port0\x00', 0x1, 0x20000, 0x5d4b6c1b, 0x9, 0x4, 0x18000000000000, 0x10000100000001, 0x0, 0x6, 0x7}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0xfff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400, 0x0) syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x3, 0x4000000000004000) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000040)={0x0, 0x10000000000000, 0x0, [0x80040000], 0x0}) 11:16:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400000000080000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x800, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000add3d300", @ANYRES16=r5, @ANYBLOB="000527bd7000fddbdf2506000000180006000400020008000100010000000800010007000000c1339cc6bbd8073dbf15f76404c74c0243893c12556332df9ef3c0d851ee6b54517ccc8129ef6b2b0af3ff175ab025eea2a21cc535021c8ae949a5a230ef92130673d086aaa99cd9e3a0e7b99d9f71"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x881) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0x48, 0x0, 0x40000021], [0xc2]}) 11:16:06 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r1, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:06 executing program 2: ustat(0x800000000000e, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="24000000580007011dfffd940101830020200a000900000006000000000000000d00ff7e", 0x24}], 0x1}, 0x0) 11:16:06 executing program 4: r0 = userfaultfd(0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x2300, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000140)=0x107001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) pkey_mprotect(&(0x7f00002ff000/0xb000)=nil, 0xb000, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xe) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000000)=0x8000, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000216000/0x2000)=nil, 0x2000}, 0x1}) [ 302.049799] kvm [12095]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 [ 302.162506] kvm [12095]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 11:16:06 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r1, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) [ 302.218829] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 11:16:06 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000540)=""/110, 0x6e}], 0x1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40085400, 0x4e) 11:16:06 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x14}) ppoll(&(0x7f0000000700)=[{r1}], 0x1, &(0x7f0000000740)={0x0, 0x1c9c380}, 0x0, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5ee4, 0x280) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f00000000c0)={0x3ff, 0x3, 'client0\x00', 0xffffffff80000001, "5fc066010c4cb501", "3fdbbdac7209ce6a994a7d90fc2aae489e1266e672e54089ed625123e8da36e5", 0x5, 0x7}) 11:16:06 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = geteuid() ioprio_set$uid(0x3, r1, 0xba3) unshare(0x400) getrlimit(0x0, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffffffffffffffc1) creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x7) 11:16:06 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r1, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x2080, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x2a}, 0x200}}, 0x1338, 0x20, 0x3f, 0xa68, 0x1}, &(0x7f0000000340)=0x98) futex(0x0, 0x84, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x9510}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={r4, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) 11:16:06 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$dupfd(r0, 0x406, r1) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="f83b31453c322a650f8b83c3472819c9a68d2f658f8bb9e52f43d1c2991ba9", 0x1f}, {&(0x7f0000000080)="d6ed0a304bb37762139ccb0ffdcfc4ca11ab205e272466cabfea93095bf1c1f4792e667a81487ce860bf5a8547a68a5fbf35443939e628583f6db68b76f7d874e737d8b97701f6817a2c071ea4083fe886fd77d374b9541c8a63432fe1418d11d7dfe91ee51ef6286d06", 0x6a}], 0x2, 0x4) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) 11:16:06 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) close(r1) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x4, 0x3f, 0x6}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, 0x4) 11:16:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:07 executing program 4: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x3, &(0x7f00000000c0)=0x4) r1 = syz_open_dev$video(&(0x7f0000000880)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000040)={0x0, 0xc, 0x4, 0x0, {0x0, 0x7530}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e81e8e51"}, 0x0, 0x0, @userptr, 0x4}) 11:16:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:07 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) fcntl$notify(r0, 0x402, 0x20) r1 = socket$inet(0x10, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x5, 0xa0f9, 0x1f, 0xfffffffffffffff9}) r2 = pkey_alloc(0x0, 0x3) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, r2) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) 11:16:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) prctl$PR_SET_SECUREBITS(0x1c, 0x29) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x13, 0x0, [0x10001, 0xfffffffffffffffb, 0x2, 0xaf, 0x0, 0x200, 0xfffffffffffffff9, 0x0, 0x200, 0x2, 0x8, 0x1, 0x40, 0xfffffffffffffffb, 0x7, 0x6]}, {0x25, 0x0, [0x2, 0x5, 0x0, 0x5, 0x0, 0x3, 0x40, 0xfffffffffffff0dd, 0x909, 0x4, 0x2, 0xfffffffffffffffe, 0x7ff, 0x7, 0x7a, 0xfffffffffffffffe]}, {0xa, 0x0, [0xfc2, 0x2b5a8994, 0x1ff, 0x1, 0xffffffff, 0x0, 0x7ab0, 0x7, 0x90, 0x2941, 0x9, 0x2, 0x6, 0xd5, 0x1, 0x100000000]}, {0x1e, 0x0, [0x8, 0x7, 0x9, 0xfff, 0x20, 0x827, 0xff, 0xeb, 0x7f98, 0x91, 0x68fb, 0xc6d2, 0x4, 0x2, 0x3, 0x7fffffff]}], r1, 0x1, 0x1, 0x120}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r1}}, 0x10) [ 303.214877] ucma_write: process 73 (syz-executor.3) changed security contexts after opening file descriptor, this is not allowed. 11:16:07 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000300)={0x4, 0x8}, 0xfffffe74) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xff) write$P9_RGETLOCK(r0, 0x0, 0x340) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x6724) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x48000, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x2, 0x4) 11:16:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x121102, 0x0) io_setup(0x3, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000140)="10000000040000000000000000000000", 0x10}]) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200080, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f00000000c0)) 11:16:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:07 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x8001, 0x189282) ioctl$NBD_DO_IT(r1, 0xab03) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000002a0007301dfffd946fa2830020200a000a000000741d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x5, 0xff, 0x7, 0x6f1, 0x4}, 0x14) 11:16:07 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f00000001c0)=""/95) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {0x0, r1}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x30) 11:16:07 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000180)={0x25, 0x3, 0x0, {0x0, 0x4, 0x0, 'eth0'}}, 0x25) 11:16:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:07 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x802) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='.nodev-ppp1em1\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0x7fff, 0x4) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000180)) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) syz_open_pts(r0, 0x2400) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x0) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x7, &(0x7f0000ffb000/0x3000)=nil, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x40}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r4, 0x0, 0x2, r4}) ioctl$TIOCSCTTY(r0, 0x540e, 0x7) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x8) 11:16:07 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./bus\x00', 0x0, 0x18}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) 11:16:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2c7c579a7ae9c96d5cc9ad926a3eea1cf89515d52fc4300c0d33f21c491f50289b7a492cc0c90f234201a5c6f9b830f910b1902ed60d51ad019c73fc9065aa2c519f654874b01f87db4a280700a2c2532e9d54e219c95f0000", 0x59}], 0x1}, 0xc100) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="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", 0x257}], 0x1}, 0x8000) syz_emit_ethernet(0x216, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000000000000000008009f00001c000000000000907809000000ffffffff00000000000890f1581dd01cf55b4f41e759d9e8c82d78b4f7f2327d6e7dcf7798063e45e6b260d6f3998ff3fb61eefa5e94f5a89cc93717c6781253ca2b48c5cde541300de988"], 0x0) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="d09a0e63c9476288b671afdbd53a5994e137381f62021d1951b627b8dda57a5d17d744648c81c5703ed8146ab1b0171f89091b1dd3238d03dbb686df460963245dedf2973ee555af99499e44ad420dbf65fd46fbc99a1274429e2d5783751815828ec8cb3553110cca66460215353d19f6d8bbd8fb264eddea60b18e16c31aa5e200000491634ac2fd10e2cd30bcd7fede24263a7fff16e53ea293f3551b7147c33a44ea437fb1515c3e8d4f162fdebf8ebe11ae6fcd9372c8d8f19556ae091fe94215ae9434da412f6fa4cb6561e5f78ff9707844ee5d573fb294437722d9a06dfa61748c32c73d759933a8dd344c947d3efdbe90d0eb049df5fbb0c19f6785264b619c530d97395d44b04f7e2a280d658c7871ad373b792678c49227999651ef3b2ee1bc2b8f3035db376e8e09aa3837233c8713065a8ad131d24f6c42a3220d0e07c3d3e95d59a5dd10c09716b5f874ecf53aadfa5050ff40f2c3c4a629b6445e5836100afff5a8977583653b40ca316f8f11416e5c1bd5499636ddae25fc4970b37209cf5c0bf8e432160c258d14223baa52798e09858645773dd97e68a95310da713cff077b06000000d4f145e9199c126a7f235e5674a3c7f5c7129ac7c1a3319590249b6d34ef6c3d8b94c6fc7cdcbddb053243053f7bc1f230d3bc7dfc4359e33992d0a3946b914a093287a76ac4a249b5b86cc75476466e409553355fefab75e9268a8751ffc9481fcff1f49c475699595b315e2147ee038b7291600c6b1cf7c8f24d587b9464a67e5ccec17820e711b98f4f7d5053642068a3fff704c3fe26ba862b53e2622d6e8b4a4c815fb2ea90ef63e141209dd292fdf886ee3e64b90f47ce22661c7a21f7bc10df0248079b7be17284eb54e5ab5bde9c6857b3cb184586049e7741b2d8b5b1a19e99e1834a25959155720c1c0ef84d7b3c42e1ba282847d476cef0228b1422aba08e5f3c1cd279bbd1c5303c2e9c16a0da4f88f770fca118b09e92b51a33970e32ade003000000", 0x2d5}], 0x1}, 0x0) [ 303.925989] kauditd_printk_skb: 3 callbacks suppressed [ 303.926023] audit: type=1804 audit(1553685367.979:31): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/25/file0/bus" dev="ramfs" ino=30609 res=1 [ 303.952927] audit: type=1804 audit(1553685367.979:32): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/newroot/25/file0/bus" dev="ramfs" ino=30609 res=1 11:16:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:08 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000004500)=[{{0x0, 0xffffff7f, 0x0}}], 0x1fe, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x40000000000011b, 0x40000002, 0x0) [ 304.165506] audit: type=1804 audit(1553685368.029:33): pid=12201 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/newroot/25/file0/file0/bus" dev="ramfs" ino=31093 res=1 [ 304.187369] audit: type=1804 audit(1553685368.029:34): pid=12201 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/newroot/25/file0/file0/bus" dev="ramfs" ino=31093 res=1 11:16:10 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$FUSE(r0, 0x0, 0x0) 11:16:10 executing program 3: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x10000000000003f, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x200, 0x34324d59}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)={0x2, 0x0, [{0x0, 0x4e, &(0x7f0000000100)=""/78}, {0xf002, 0xc8, &(0x7f0000000180)=""/200}]}) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1505, 0x103a40) 11:16:10 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x7c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0xf7, r1, 0x1, 0x0, 0x6, @broadcast}, 0xfffffffffffffd96) getdents64(0xffffffffffffffff, &(0x7f0000000180)=""/157, 0x9d) write$binfmt_aout(r0, 0x0, 0x0) 11:16:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff}) syz_open_pts(r1, 0x100) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[], 0xffa8) 11:16:10 executing program 5: pkey_alloc(0x0, 0x2) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10202, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000080)) sendto(r0, &(0x7f0000000140)="736c139d6bff66b048314c50e0c3db84842701657fdd96e5b93d0124f333f5920410eb0b9ab9a66ae3d3e38e66dc8fa7879f0e7384e90f409a2dc094f38be6733dafb411e10216e328dd26c20e71a96c", 0x50, 0x20000000, &(0x7f00000001c0)=@generic={0xf, "fee8fc505e287116e834ce8fbdf731c91a720379a8e0ebb228be37b90eb86eafaddd12a450145ab08409ef654ffa56e1f7900eef8f38f4e3f2dce04f489ead1ff66d754066c8af369966a0c40daaadce82b5bb327c8b8fb41403c05da4f2acffd15c448c9d85ebf171d3dafb7d31813f7f2888b56ca0e0eb9f9fcf617ded"}, 0x80) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000240)=0x3) r1 = geteuid() r2 = getuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f00000007c0)=[0x0, 0xee01, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff]) getgroups(0x6, &(0x7f0000000800)=[0x0, 0xee01, 0xee00, 0xee01, 0xee00, 0xee00]) fstat(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000008c0)='.\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000980)={{}, {0x1, 0x5}, [{0x2, 0x4, r1}, {0x2, 0x1, r2}, {0x2, 0x7, r3}, {0x2, 0x5, r4}, {0x2, 0x1, r5}, {0x2, 0x5, r6}, {0x2, 0x3, r7}, {0x2, 0x1, r8}], {0x4, 0x2}, [{0x8, 0x2, r9}, {0x8, 0x3, r10}, {0x8, 0x1, r11}, {0x8, 0x6, r12}], {0x10, 0x6}, {0x20, 0x2}}, 0x84, 0x2) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) pivot_root(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='./file0\x00') bind$tipc(r0, 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/dlm-monitor\x00', 0x2000, 0x0) mq_unlink(&(0x7f0000000b00)='cpuseteth1self^)GPL\'selfmime_type\x00') sendto(r0, &(0x7f0000000b40)="70d2fc2df3353a13b14be831369afa137ca31f29ca7a01e4f11ad19385a73968dc1e0d6f8d4cd9d51ead3135baba2a9319ea35ca6d7428117f73de59578aeecdfed4bcf61828648bc6889a5e45699a78934663a67eed04f01513ac543c9fdf34967dd0728a638942a7014a519337f2e34d80bb793dab8485f5dd4ac935e37c6bd08fce6bc2fc3c2c1e0e339f017e5af80efa6beadc894d5979808621c02771145acda224a08c7084065723b62d2be7f2219b3620c2aef7b9e0716022e99f2f0d85f599989ed855a0ea7ee773849bb9cbe46d9bcbbb32c2ecd15cb66d91df993d85", 0xe1, 0x4, &(0x7f0000000c40)=@ethernet={0x307, @dev={[], 0x23}}, 0x80) sendto(r0, 0xfffffffffffffffd, 0x0, 0x800, &(0x7f0000000cc0)=@generic={0xa, "a8b98b9f88b9b74846ca2ca075cf80ec6e1e52713998a210374728b9d538a2de68f03ebc253196d958c726dca83a3546aae94e6c622df67d82dced9d5806a0062175f84b01cbc795ca2ba87372a7fd2ed6915c4872cac9f7791904a59d6dca9c7d37db97114731bed8092ce295e9a8c0148f6ba76edb733ac888b93471e7"}, 0x80) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000d40)={0x3, 0x3f}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000d80)={0x0, 0x0, 0x103, 0x1, {0x6f9edc01, 0x4, 0x5, 0x1}}) r13 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r13, 0x0) 11:16:10 executing program 3: 11:16:10 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={0x0}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) [ 306.752228] protocol 88fb is buggy, dev hsr_slave_0 [ 306.757638] protocol 88fb is buggy, dev hsr_slave_1 11:16:11 executing program 2: 11:16:11 executing program 4: 11:16:11 executing program 3: 11:16:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={0x0}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000240)=@nfc={0x27, 0x1}, 0x80, 0x0}}], 0x1, 0x0) 11:16:11 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000000c0)=""/246) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x9, &(0x7f0000000340)={0x0, 0x0}) accept$packet(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 11:16:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0xffffd}) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:16:11 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r0, 0x0) 11:16:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={0x0}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) [ 307.521024] IPVS: ftp: loaded support on port[0] = 21 [ 307.840317] chnl_net:caif_netlink_parms(): no params data found [ 307.937129] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.944024] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.952491] device bridge_slave_0 entered promiscuous mode [ 307.962164] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.968677] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.977697] device bridge_slave_1 entered promiscuous mode [ 308.013749] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 308.029866] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 308.063242] team0: Port device team_slave_0 added [ 308.072866] team0: Port device team_slave_1 added [ 308.146656] device hsr_slave_0 entered promiscuous mode [ 308.212664] device hsr_slave_1 entered promiscuous mode [ 308.289253] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.295832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.302966] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.309513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.369853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.385798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 308.395014] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.403366] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.412315] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 308.427362] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.440133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.448871] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.455529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.470683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.479598] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.486350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.510709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.525678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 308.533977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 308.553156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 308.565301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 308.577874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 308.603868] 8021q: adding VLAN 0 to HW filter on device batadv0 11:16:12 executing program 5: syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') 11:16:12 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f00000003c0)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$P9_RWRITE(r1, &(0x7f0000000480)={0xb}, 0xfd8d) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'veth0_to_team\x00', 0x3ff}) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendfile(r0, 0xffffffffffffffff, 0x0, 0x9) getgroups(0x4, &(0x7f0000000900)=[0x0, 0xee01, 0x0, 0xffffffffffffffff]) ioctl$TIOCGSID(r1, 0x5429, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ac0), &(0x7f0000000b00)=0xc) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, &(0x7f00000000c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000340)) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) tkill(0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ftruncate(r2, 0x2007fff) sendfile(r1, r2, 0x0, 0x8000fffffffe) 11:16:12 executing program 0: 11:16:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x0, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:12 executing program 4: 11:16:12 executing program 2: [ 308.775931] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 11:16:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd}) 11:16:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x0, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:12 executing program 0: sched_setaffinity(0x0, 0xffffffffffffff6b, &(0x7f0000000940)=0x5) openat$urandom(0xffffffffffffff9c, 0x0, 0x8000, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000180)) r0 = getpid() fstat(0xffffffffffffff9c, &(0x7f0000000340)) lstat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', 0x0, &(0x7f0000000200)='fuseblk\x00', 0x0, 0x0) sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x3000}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@mss, @timestamp, @sack_perm], 0x3) 11:16:13 executing program 4: sched_setaffinity(0x0, 0xffffffffffffff6b, &(0x7f0000000940)=0x5) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x8000, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000400)) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000180)) r1 = getpid() fstat(0xffffffffffffff9c, &(0x7f0000000340)) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000880)) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuseblk\x00', 0x0, 0x0) sched_setattr(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 11:16:13 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x8000, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000400)) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000180)=0x40) fstat(0xffffffffffffff9c, 0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000880)) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuseblk\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000580), 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)='y\x00', 0x2, 0xffffffffffffffff) request_key(&(0x7f0000000300)='encrypted\x00', 0x0, &(0x7f0000000700)='+em0ppp1!security/\x00', 0xfffffffffffffffc) 11:16:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x0, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:13 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x1, 0x0) lstat(&(0x7f0000000480)='./file0/file0/file0\x00', &(0x7f0000000400)) lstat(0x0, &(0x7f0000001740)) getgid() syz_open_pts(r2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000240)={0x0, @aes256}) write$sndseq(r1, &(0x7f0000000580)=[{0x3f, 0x0, 0x8001, 0x6, @tick=0x9, {0x0, 0x5}, {0x100000001, 0xff}, @raw32={[0x7fff, 0x5]}}, {0x5, 0x75c2, 0x7, 0x10001, @time={0x77359400}, {0x10001, 0x9}, {0x0, 0x20}, @ext={0x0, 0x0}}, {0x4, 0x6, 0x1000, 0x81, @time={0x77359400}, {0x0, 0xdec}, {0x8, 0x80000000}, @result={0xfffffffffffffbff, 0x7}}], 0x90) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/current\x00', 0x2, 0x0) getpeername$unix(r3, &(0x7f0000000000), &(0x7f00000000c0)=0x6e) sync() 11:16:14 executing program 3: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0xffffffe5) fallocate(r0, 0x3, 0x0, 0x8001) 11:16:14 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) 11:16:14 executing program 5: socketpair(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r3 = memfd_create(&(0x7f00000001c0)='erspan0\x00', 0x0) pwritev(r3, &(0x7f0000000480)=[{&(0x7f00000004c0)="2b01", 0x2}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x2000006) 11:16:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) 11:16:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)) 11:16:14 executing program 0: sched_setaffinity(0x0, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x8000, 0x0) fstat(0xffffffffffffff9c, 0x0) lstat(0x0, &(0x7f0000000880)) mount$fuseblk(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 11:16:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) dup3(r0, r1, 0x0) 11:16:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x19b, &(0x7f00000bfff0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 11:16:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r3 = memfd_create(&(0x7f00000001c0)='erspan0\x00', 0x0) pwritev(r3, 0x0, 0x0, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x2000006) 11:16:14 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) 11:16:15 executing program 3: clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 11:16:15 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) r3 = memfd_create(0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x2000006) 11:16:15 executing program 0: socketpair(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) r3 = memfd_create(0x0, 0x0) pwritev(r3, &(0x7f0000000480)=[{&(0x7f00000004c0)="2b01", 0x2}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x2000006) 11:16:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:15 executing program 2: clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240)) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 11:16:15 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x0, 0x100003f00}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11:16:15 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x7) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000002c0)={0x7fffffff, 0x3}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0xa99, 0x4) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x404000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(r2) 11:16:15 executing program 2: clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240)) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 11:16:15 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) dup3(r0, r1, 0x0) 11:16:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) dup3(r0, r1, 0x0) 11:16:15 executing program 2: clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240)) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 11:16:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x800) 11:16:15 executing program 5: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x0, 0x100003f00}, 0x2c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) wait4(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r0, 0x0) 11:16:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='oom_adj\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000100)={0xb}, 0xb) 11:16:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000008700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[{0x18, 0x1, 0x100000001, "f97666af"}], 0x18}}], 0x1, 0x20000000) 11:16:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:15 executing program 2: clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240)) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 11:16:16 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x7) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000002c0)={0x7fffffff, 0x3}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0xa99, 0x4) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x404000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) close(r2) 11:16:16 executing program 4: openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x100000000014b03e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000240)) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x14', 0xffffffffffffffff, 0x4c00000000006800}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) 11:16:16 executing program 0: syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x0, 0x200001) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x540e, &(0x7f00000000c0)=0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:16:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:16 executing program 4: syz_execute_func(&(0x7f0000000000)="3666440f50f564ff0941c39442c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, 0x0) 11:16:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000100)={0x0, 0x189, &(0x7f00000000c0)={0x0}}, 0x0) 11:16:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) write$P9_RATTACH(r3, 0x0, 0x0) 11:16:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}]}, 0x140}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 11:16:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x2a) clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(0x0, 0x1040, 0x0) r1 = creat(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) dup2(r0, r1) execve(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 11:16:16 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$selinux_attr(r0, 0x0, 0xfffffc65) 11:16:16 executing program 5: syz_execute_func(&(0x7f0000000140)="3666440f50f564ff0941c366440f56c9c4c27d794e000de2acf347aac442019dccd319") r0 = semget$private(0x0, 0x3, 0x0) semctl$GETPID(r0, 0x3, 0xb, 0x0) 11:16:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}]}, 0x140}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:16 executing program 4: clone(0x2502001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) 11:16:17 executing program 2: syz_execute_func(&(0x7f0000000340)="3666440f50f564ff0941c30f0f441e04a4c4c27d794e0066420fe2e33e0f1110c442019dcc6f") r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 11:16:17 executing program 0: syz_execute_func(&(0x7f0000000140)="3666440f50f564ff0941c366440f56c9c4c27d794e000de2acf347aac442019dccd319") r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) 11:16:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x5, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) 11:16:17 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccf6d36f") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) futex(&(0x7f0000000540), 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000000)="cb772580", 0x4) 11:16:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}]}, 0x140}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'\x00\xacs\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x2) 11:16:17 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x2c}}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) 11:16:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000/0x2000)=nil}) 11:16:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2fffffffc}, 0xc) r2 = dup3(r0, r1, 0x0) getsockname$inet6(r2, 0x0, &(0x7f0000000040)) 11:16:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x148, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10}]}, 0x148}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:17 executing program 5: unshare(0x28020400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) [ 313.535330] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 11:16:17 executing program 2: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file1\x00', 0xc042, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0x18f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x81) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 11:16:17 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x148, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10}]}, 0x148}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5) 11:16:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_genetlink_get_family_id$tipc2(0x0) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 11:16:18 executing program 3: ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 11:16:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x148, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_val={0x10}]}, 0x148}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:18 executing program 5: pipe(&(0x7f0000000600)) 11:16:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x0, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 11:16:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:18 executing program 2: r0 = socket$kcm(0x10, 0x100000002, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="230000001e0081aee4050c00000f00fe070101000000000063dac37b7403242189c609", 0x23}], 0x1}, 0x0) 11:16:18 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$peek(0xffffffffffffffff, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x1, 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RRENAMEAT(r0, 0x0, 0x0) 11:16:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) [ 314.526617] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. 11:16:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) poll(&(0x7f0000000300)=[{}, {}], 0x2, 0x9) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000240)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@broadcast, @in=@dev}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0xd56, 0x0) 11:16:18 executing program 2: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000380)=ANY=[@ANYBLOB='b'], 0x1) write(r0, &(0x7f0000000200)="4aaa", 0x2) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 11:16:18 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x220200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6) r2 = socket$inet6(0xa, 0x3, 0x7) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x2200, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000002640)=@assoc_value, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000002d40)=ANY=[@ANYBLOB="0a000200ac9f602c"], 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000006ac0)={0x0, 0xca}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socketpair(0x9, 0x0, 0xfffffffffffffffb, &(0x7f00000001c0)) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 11:16:18 executing program 5: openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x2000000, 0x0, [0x9c00]}}, 0xfef5) 11:16:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:18 executing program 3: pkey_free(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000018100)={&(0x7f0000017740)={0x58, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000000)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) 11:16:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x102000c) dup2(r0, 0xffffffffffffffff) 11:16:19 executing program 2: close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x7) write$cgroup_pid(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000a40)={'veth0_to_be\x00'}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)) 11:16:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x108, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x108}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:19 executing program 3: r0 = socket(0x1, 0x1, 0x0) stat(0x0, 0x0) r1 = gettid() prctl$PR_GET_FPEMU(0x9, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) setpriority(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, 0x0) tkill(r1, 0x1000000000016) 11:16:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x108, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x108}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:19 executing program 0: eventfd(0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getrandom(0x0, 0x0, 0x1) 11:16:19 executing program 2: r0 = gettid() openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x400000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) prctl$PR_CAPBSET_READ(0x17, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) tkill(r0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000140)={0x4, 0x8b, "a558ef57570aea63115b2411e997206c0f51d348472a8ddc6aa94935322ff652688f647cdb9bb0b168fe2cb0b5671b4fffbd32b66eb8dd9bf2a7b1ea2ad3520870bbe1878e09ee768ef83ca0431ef1852d4889d943cd09464b1b907cd2953d0f07c73d965cfd430c859d113f3034f0fe9dae58d6d21b08035e52325eebcd8ba70ee76d4014f59807b4f834"}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) tkill(r0, 0x1000000000016) 11:16:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x108, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x108}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 11:16:20 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x0) sendto(0xffffffffffffffff, 0x0, 0xfffffffffffffd4d, 0x0, 0x0, 0x0) close(r0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) socketpair$unix(0x1, 0x10000000000001, 0x0, &(0x7f0000000100)) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) 11:16:20 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, 0x0, &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'vxcan1\x00', 'vgkh0_to_bond\x00', 'lo\x00\x00\x00\x00\x00\b\x00', 'bond0\x00', @local, [], @local, [], 0x98, 0x98, 0xe0, [@state={'state\x00', 0x4}]}}, @common=@log={'log\x00', 0x24, {{0x0, "3ad0afa678774815b478c690e48ad49f65d4c02d27eb40f747704fbd0510"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8) 11:16:20 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000000)) pselect6(0x3cd, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f0000000080), 0x8}) 11:16:20 executing program 5: getcwd(&(0x7f0000000000)=""/60, 0x3c) 11:16:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(0x0, 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) [ 316.085153] kernel msg: ebtables bug: please report to author: Wrong len argument [ 316.113957] input: syz1 as /devices/virtual/input/input9 [ 316.137706] kernel msg: ebtables bug: please report to author: Wrong len argument 11:16:20 executing program 0: r0 = epoll_create(0x8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) seccomp(0x0, 0x0, 0x0) r1 = dup(r0) openat$cgroup_int(r1, &(0x7f00000000c0)='memory.swap.max\x00', 0x2, 0x0) fsetxattr$security_smack_entry(0xffffffffffffffff, 0x0, &(0x7f0000000640)='\x00', 0x1, 0x0) epoll_pwait(r1, &(0x7f0000000800)=[{}, {}], 0x2, 0x5, 0x0, 0x0) 11:16:20 executing program 5: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) [ 316.200718] input: syz1 as /devices/virtual/input/input10 11:16:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(0x0, 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) [ 316.331079] audit: type=1326 audit(1553685380.379:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12704 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45b06a code=0x0 11:16:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000380)=[@acquire, @transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) 11:16:20 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000700)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x104) 11:16:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) syz_execute_func(&(0x7f00000001c0)="3666440f50f564ff0941c341abc4c27d794e0066ec448ea68ea688766d0000d319f3450f2b7c8def6f") setsockopt$inet_tcp_buf(r1, 0x6, 0x0, 0x0, 0x0) 11:16:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(0x0, 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) [ 316.498113] binder: 12714:12716 got transaction to context manager from process owning it [ 316.506865] binder: 12714:12716 transaction failed 29201/-22, size 0-0 line 2887 11:16:20 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0xfffffea6) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) prctl$PR_GET_TSC(0x19, 0x0) r2 = accept(r1, 0x0, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) stat(0x0, 0x0) dup3(r1, r2, 0x0) [ 316.620186] binder: BINDER_SET_CONTEXT_MGR already set [ 316.627879] binder: 12714:12716 ioctl 40046207 0 returned -16 11:16:20 executing program 4: syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) ioctl$int_out(0xffffffffffffffff, 0x0, 0x0) r0 = semget$private(0x0, 0x4, 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$GETPID(r0, 0x1, 0xb, &(0x7f0000000440)=""/43) prctl$PR_SET_THP_DISABLE(0x29, 0x0) [ 316.660695] binder_alloc: 12714: binder_alloc_buf, no vma [ 316.666664] binder: 12714:12725 transaction failed 29189/-3, size 0-0 line 3035 [ 316.696964] binder: undelivered TRANSACTION_ERROR: 29201 11:16:20 executing program 3: clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setrlimit(0x4000000007, &(0x7f00000001c0)) socket$packet(0x11, 0x3, 0x300) r0 = getpid() mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace(0x10, r0) [ 316.715335] binder: undelivered TRANSACTION_ERROR: 29189 11:16:20 executing program 2: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') rmdir(&(0x7f0000000600)='./file0\x00') 11:16:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:21 executing program 0: mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') rmdir(&(0x7f0000000200)='./file0\x00') 11:16:21 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) epoll_create1(0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000005e80), 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 11:16:21 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000040)=0x10, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") dup3(r0, r1, 0x0) 11:16:21 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/152, 0x205}], 0x1, 0x0) 11:16:21 executing program 2: prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x4000)=nil) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000480)='./file0\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) fchown(r0, r1, r2) lstat(&(0x7f00000001c0)='./bus\x00', 0x0) rmdir(&(0x7f0000000200)='./file0\x00') chown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000440)) sched_setscheduler(0x0, 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00') syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, 0x0, 0x20000080) r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r5, &(0x7f0000000000)=0x3, 0x376416aa) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0) 11:16:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) [ 317.123407] audit: type=1326 audit(1553685381.179:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=12704 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45b06a code=0x0 11:16:21 executing program 0: 11:16:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:21 executing program 3: 11:16:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="050000000000000000000040050000a90000000000fa0000000000400003000001"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x480}]}) 11:16:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) capset(0x0, &(0x7f00000000c0)={0x0, 0x8}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x60, &(0x7f0000000080)={0x0, @empty, 0x0, 0x0, 'none\x00', 0x0, 0x0, 0x100003f00}, 0x2c) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2c) wait4(0x0, 0x0, 0x0, 0x0) 11:16:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:21 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r0, r1, 0x0) 11:16:22 executing program 5: 11:16:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "83d98e", 0x3, 0x11, 0x0, @remote, @ipv4={[], [], @multicast1}, {[], @icmpv6=@ni}}}}}, 0x0) 11:16:22 executing program 4: 11:16:22 executing program 3: 11:16:22 executing program 2: 11:16:22 executing program 3: 11:16:22 executing program 4: 11:16:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) r1 = dup(r0) syz_execute_func(&(0x7f0000000100)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd319366f") clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, 0x0) clock_settime(0x0, 0x0) 11:16:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:22 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) io_setup(0x1f, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, 0x0}]) 11:16:22 executing program 2: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000002c0)=""/11, 0x18f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)) r1 = creat(&(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x81) dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) 11:16:22 executing program 4: r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) getpid() ptrace$pokeuser(0x6, 0x0, 0x388, 0x0) write$binfmt_script(r0, &(0x7f0000001400)={'#! ', './file0/file0', [{0x20, 'bdev){Hem1}selinux'}]}, 0x24) fallocate(r0, 0x0, 0x0, 0x8001) 11:16:22 executing program 3: 11:16:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, 0xffffffffffffffff, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:22 executing program 0: 11:16:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r0, &(0x7f0000000340), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f00000001c0)="3666440f50f564ff0941c3c401f82ebd92823dcfc4c27d794e00660fa041d288766d0000d319f3450f2b7c8def6f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x0, 0x0, 0x0) 11:16:22 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x7, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000280)={0x0, 0x100000001}) 11:16:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000943ffc)=0xa35) read(r0, &(0x7f00003fefff)=""/1, 0x1) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) timer_create(0xfffffffffffffffb, &(0x7f0000000780)={0x0, 0x12}, &(0x7f0000044000)) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3c) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x1, 0xfffffffffffffff8) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)) r4 = dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x16) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e20, @local}}, 0x0, 0xffffffffffff7fff, 0x7, "dbe058ec9b88b34a2668bedc978a6a9c55d078c453534ab3c3dd2b3ec18283c40d2d0a268fa36e2ca7f41f6d5d5783a8f4610cb313189d4707310861d08017879610c3f73ea5e2c6e73f2bd73becafee"}, 0xd8) write$eventfd(r4, &(0x7f00000000c0)=0x1, 0x8) 11:16:22 executing program 0: clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000002ac0)='/dev/audio\x00', 0x10000, 0x0) tkill(r0, 0xb) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x20000000, 0xf9}) creat(&(0x7f0000000000)='./file0\x00', 0x5) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 11:16:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, 0xffffffffffffffff, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:23 executing program 2: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000200)={0x7}, 0x7) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141046, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000101}) fallocate(r2, 0x0, 0x0, 0x3f) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x2}) 11:16:23 executing program 3: socket$nl_route(0x10, 0x3, 0x0) io_setup(0x7, &(0x7f00000003c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000ac0)=[&(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) 11:16:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, 0xffffffffffffffff, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r1 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x5000) shmdt(r1) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 11:16:23 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x5e0) r1 = socket$unix(0x1, 0x1, 0x0) pwritev(0xffffffffffffffff, 0x0, 0xdf2d868ebc366481, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x1d) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) listen(r1, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r2 = accept(r1, 0x0, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1a3e) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="21115f99bb66d6bfe1e9fd02dd459b28", 0x10) 11:16:23 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1) 11:16:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000580)=@newsa={0x150, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x22}, @replay_val={0x10}]}, 0x150}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x4, r2, 0x3c, 0x0, @ib={0x1b, 0x7fff, 0x7, {"55ad87c2edbb60e114fa3a52cfe98c74"}, 0x6, 0x400, 0x4}}}, 0xa0) 11:16:23 executing program 0: getpid() fstat(0xffffffffffffff9c, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 11:16:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00\x00\x00\x05\x00\x00\x10\x00', 0x802}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x1000030a) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000180)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) r2 = socket$inet6(0xa, 0x2, 0x0) dup2(r2, r1) [ 319.691172] ================================================================== [ 319.698697] BUG: KMSAN: uninit-value in memcmp+0x117/0x180 [ 319.704419] CPU: 1 PID: 268 Comm: kworker/1:1 Not tainted 5.0.0+ #17 [ 319.710934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.720320] Workqueue: ipv6_addrconf addrconf_dad_work [ 319.725620] Call Trace: [ 319.728236] dump_stack+0x173/0x1d0 [ 319.731978] kmsan_report+0x131/0x2a0 [ 319.735813] __msan_warning+0x7a/0xf0 [ 319.739774] memcmp+0x117/0x180 [ 319.743088] __dev_mc_add+0x1f9/0x8c0 [ 319.746919] dev_mc_add+0x6d/0x80 [ 319.750398] igmp6_group_added+0x2d4/0xad0 [ 319.754757] __ipv6_dev_mc_inc+0xdc7/0xfa0 [ 319.759125] ipv6_dev_mc_inc+0x70/0x80 [ 319.763300] addrconf_dad_work+0x50c/0x26e0 [ 319.767659] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 319.772966] ? ipv6_get_saddr_eval+0x1440/0x1440 [ 319.777844] process_one_work+0x1607/0x2010 [ 319.782213] worker_thread+0x111c/0x2460 [ 319.786319] kthread+0x4a1/0x4e0 [ 319.789707] ? process_one_work+0x2010/0x2010 [ 319.794228] ? schedule_tail+0x1b2/0x410 [ 319.798402] ? kthread_blkcg+0xf0/0xf0 [ 319.802402] ret_from_fork+0x35/0x40 [ 319.806144] [ 319.807774] Local variable description: ----buf@igmp6_group_added [ 319.814005] Variable was created at: [ 319.817745] igmp6_group_added+0x57/0xad0 [ 319.821913] __ipv6_dev_mc_inc+0xdc7/0xfa0 [ 319.826153] ================================================================== [ 319.833606] Disabling lock debugging due to kernel taint [ 319.839067] Kernel panic - not syncing: panic_on_warn set ... [ 319.844979] CPU: 1 PID: 268 Comm: kworker/1:1 Tainted: G B 5.0.0+ #17 [ 319.852956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.862360] Workqueue: ipv6_addrconf addrconf_dad_work [ 319.867654] Call Trace: [ 319.870359] dump_stack+0x173/0x1d0 [ 319.874009] panic+0x3d1/0xb01 [ 319.877336] kmsan_report+0x29a/0x2a0 [ 319.881156] __msan_warning+0x7a/0xf0 [ 319.884978] memcmp+0x117/0x180 [ 319.888280] __dev_mc_add+0x1f9/0x8c0 [ 319.892197] dev_mc_add+0x6d/0x80 [ 319.895670] igmp6_group_added+0x2d4/0xad0 [ 319.899938] __ipv6_dev_mc_inc+0xdc7/0xfa0 [ 319.904222] ipv6_dev_mc_inc+0x70/0x80 [ 319.908138] addrconf_dad_work+0x50c/0x26e0 [ 319.912494] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 319.917887] ? ipv6_get_saddr_eval+0x1440/0x1440 [ 319.922668] process_one_work+0x1607/0x2010 [ 319.927031] worker_thread+0x111c/0x2460 [ 319.931315] kthread+0x4a1/0x4e0 [ 319.934731] ? process_one_work+0x2010/0x2010 [ 319.939507] ? schedule_tail+0x1b2/0x410 [ 319.943592] ? kthread_blkcg+0xf0/0xf0 [ 319.947502] ret_from_fork+0x35/0x40 [ 319.952241] Kernel Offset: disabled [ 319.956108] Rebooting in 86400 seconds..