[ 38.875443] audit: type=1800 audit(1568448049.464:30): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2490 res=0 [ 38.928326] audit: type=1800 audit(1568448049.474:31): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2469 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.78' (ECDSA) to the list of known hosts. 2019/09/14 08:00:59 fuzzer started syzkaller login: [ 48.699520] kauditd_printk_skb: 4 callbacks suppressed [ 48.699534] audit: type=1400 audit(1568448059.324:36): avc: denied { map } for pid=7717 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/09/14 08:01:01 dialing manager at 10.128.0.105:41983 2019/09/14 08:01:01 syscalls: 2482 2019/09/14 08:01:01 code coverage: enabled 2019/09/14 08:01:01 comparison tracing: enabled 2019/09/14 08:01:01 extra coverage: extra coverage is not supported by the kernel 2019/09/14 08:01:01 setuid sandbox: enabled 2019/09/14 08:01:01 namespace sandbox: enabled 2019/09/14 08:01:01 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/14 08:01:01 fault injection: enabled 2019/09/14 08:01:01 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/14 08:01:01 net packet injection: enabled 2019/09/14 08:01:01 net device setup: enabled 08:03:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhci\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$unix(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x30}, 0x0) [ 198.416324] audit: type=1400 audit(1568448209.044:37): avc: denied { map } for pid=7734 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14986 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 198.505563] IPVS: ftp: loaded support on port[0] = 21 08:03:29 executing program 1: inotify_init() syz_open_dev$adsp(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x80003) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r0, 0x0, 0x8000fffffffe) [ 198.636513] chnl_net:caif_netlink_parms(): no params data found [ 198.742619] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.756121] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.763810] device bridge_slave_0 entered promiscuous mode [ 198.796841] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.803303] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.810836] device bridge_slave_1 entered promiscuous mode [ 198.832514] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 198.834767] IPVS: ftp: loaded support on port[0] = 21 [ 198.847286] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 198.869882] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 198.879173] team0: Port device team_slave_0 added 08:03:29 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180), 0x4) [ 198.894835] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 198.904455] team0: Port device team_slave_1 added [ 198.918345] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 198.956273] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 199.028088] device hsr_slave_0 entered promiscuous mode 08:03:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/udp\x00') sendfile(r0, r1, 0x0, 0x8000) [ 199.076537] device hsr_slave_1 entered promiscuous mode [ 199.125785] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 199.132830] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 199.170857] IPVS: ftp: loaded support on port[0] = 21 [ 199.183731] IPVS: ftp: loaded support on port[0] = 21 [ 199.254682] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.261280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.268327] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.274712] bridge0: port 1(bridge_slave_0) entered forwarding state 08:03:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(r0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x8001141042, 0x0) ftruncate(r3, 0x2007fff) sendfile(0xffffffffffffffff, r3, 0x0, 0x8482) socket$inet6(0xa, 0x3, 0x3a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8482) mkdir(&(0x7f00000016c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) setxattr$security_smack_entry(&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)='security.SMACK64EXEC\x00', &(0x7f00000003c0)='bdevmd5sum\x00', 0xb, 0x2) [ 199.314914] chnl_net:caif_netlink_parms(): no params data found [ 199.543965] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.553995] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.561714] device bridge_slave_0 entered promiscuous mode [ 199.591953] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.599040] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.608640] device bridge_slave_1 entered promiscuous mode [ 199.631651] bond0: Enslaving bond_slave_0 as an active interface with an up link 08:03:30 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = gettid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r1) tkill(r1, 0x9) [ 199.643978] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 199.658872] chnl_net:caif_netlink_parms(): no params data found [ 199.671909] chnl_net:caif_netlink_parms(): no params data found [ 199.684097] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 199.691334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.700416] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.720689] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.729093] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 199.761352] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 199.780382] IPVS: ftp: loaded support on port[0] = 21 [ 199.787808] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 199.799247] team0: Port device team_slave_0 added [ 199.806563] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 199.809483] IPVS: ftp: loaded support on port[0] = 21 [ 199.815529] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 199.823960] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.852913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 199.859944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 199.868493] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 199.876758] team0: Port device team_slave_1 added [ 199.882207] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 199.891539] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 199.941802] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 200.008327] device hsr_slave_0 entered promiscuous mode [ 200.065646] device hsr_slave_1 entered promiscuous mode [ 200.127700] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 200.135002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.142974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.151093] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.157563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.165465] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.171828] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.180079] device bridge_slave_0 entered promiscuous mode [ 200.189247] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.196627] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.203654] device bridge_slave_1 entered promiscuous mode [ 200.210133] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.216694] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.223743] device bridge_slave_0 entered promiscuous mode [ 200.234334] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 200.243693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 200.260771] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.267583] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.274731] device bridge_slave_1 entered promiscuous mode [ 200.292902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.300805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.308691] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.315182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.347204] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 200.356122] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 200.368250] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 200.377937] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 200.394059] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 200.402564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.413522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 200.424550] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 200.447076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.457196] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 200.465815] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 200.473059] team0: Port device team_slave_0 added [ 200.479393] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 200.486880] team0: Port device team_slave_1 added [ 200.492108] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 200.499877] team0: Port device team_slave_0 added [ 200.505968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.513732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.521600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.530854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 200.539095] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 200.547155] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 200.554413] team0: Port device team_slave_1 added [ 200.560314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.568338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.583637] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 200.592666] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 200.600011] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 200.607868] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 200.617924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.625643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.638076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 200.728235] device hsr_slave_0 entered promiscuous mode [ 200.767469] device hsr_slave_1 entered promiscuous mode [ 200.805669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.813266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.827494] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 200.833565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.861348] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 200.869245] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 200.888517] chnl_net:caif_netlink_parms(): no params data found [ 200.949355] device hsr_slave_0 entered promiscuous mode [ 200.987922] device hsr_slave_1 entered promiscuous mode [ 201.074641] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 201.082059] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 201.112203] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 201.130814] chnl_net:caif_netlink_parms(): no params data found [ 201.144089] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.150993] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.158922] device bridge_slave_0 entered promiscuous mode [ 201.169908] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.176683] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.183622] device bridge_slave_1 entered promiscuous mode [ 201.210920] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 201.219288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.233613] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 201.242753] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 201.263072] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.272747] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 201.284500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.305048] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 201.328563] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.334993] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.342335] device bridge_slave_0 entered promiscuous mode [ 201.349930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.357663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.367547] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 201.373633] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.381956] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 201.389489] team0: Port device team_slave_0 added [ 201.407722] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.414100] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.421331] device bridge_slave_1 entered promiscuous mode [ 201.439543] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 201.446877] audit: type=1400 audit(1568448212.064:38): avc: denied { associate } for pid=7735 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 201.469650] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 201.483089] team0: Port device team_slave_1 added [ 201.488771] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 201.510956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.529548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.538795] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.545274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.557975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 201.565537] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 08:03:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2000000, 0x0) ioctl$BLKTRACESETUP(r0, 0x2275, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) getsockopt$inet_tcp_buf(r2, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) accept4$nfc_llcp(r2, 0x0, &(0x7f0000000000), 0x800) [ 201.590124] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 201.600207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.608067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.629980] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.641468] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.647923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.658970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 201.681622] 8021q: adding VLAN 0 to HW filter on device bond0 08:03:32 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$inet_tcp_buf(r1, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000002c0)="1c", 0x1, r2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$CAPI_GET_PROFILE(r3, 0xc0404309, &(0x7f0000000080)=0x5) [ 201.691149] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 201.710848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.722095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 201.768124] device hsr_slave_0 entered promiscuous mode [ 201.805816] device hsr_slave_1 entered promiscuous mode [ 201.857041] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 201.869852] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 201.884102] team0: Port device team_slave_0 added [ 201.890348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.900316] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 201.912111] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 201.919917] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 201.933084] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 201.942898] team0: Port device team_slave_1 added [ 201.963358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.972280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.986942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.996798] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 08:03:32 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x3}, 0x0, 0x400c, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_buf(r3, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x4, r1}) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") close(r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) getsockopt$inet_tcp_buf(r5, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={r7, @in={{0x2, 0x4e24}}, 0x0, 0x5}, &(0x7f0000000380)=0x90) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="01002300dea93c2ae302f8866d100626c22770354bd73b6befcb4985dbd94366cbc24657b9f3ddb59eb682ed14cbb0680900000000000000c702a67f955490fae9532b5e072d8318cc6d60a027868c1ac42d04b262a09b6792efba4dc9cbe48865a079acd905957920dacc02000000b8fef59ebdf44005dfa838ecfdb6f60bd7fe73a82ae56c35dfe92257e429b2feb138cf88a1dd4ecbd7c5f7494e5e5700f7318960296887f0fe86a61aa94e339e477b615fa347840100d189d02fade545a81f017c3698296a41b8a77fe849f971debca6a480c43573d7fddf7f147cf7bb1ce9eb8f7f0feec3fc170b42d6ef657bf3812c4048dc85a396043077e74e585e55a0d4cc8075d4f36db1419292a73d365edf119b3bc32e7b604b0ceb1c2245f6e721783d8145c6e8d36b4f29af2616c4caad2eadd27c05a7d8047944aeacfa77a584394135d69f34ba15ee10cb4d13841cb5ded8b20fa5617b256b884a8b7974f4836a48e69be4a801b57c842e6ba1ab90001ab36686e2414094f9621c076d2175aaef691e234ff500cac57a4b93c936ea32a71783d34a605824f3fd856e90a30211c684af13ffe45ab3b29d1d68e1bc2aae12ef4289e11419f3d10995bfc3bba44c2441ebbf5b2c0b65bc3d02d527fd4140850f1021e183f8d53d0dd8f4b98358deae6bd91334f86fd87597b93503c2f5dfd70ebf47", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={r9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={r9, @in={{0x2, 0x4e24}}, 0x0, 0x5}, &(0x7f0000000380)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0)={0x1, 0x8, 0x8000, 0x4, 0x2, 0x9, 0x6, 0x3ff, r9}, 0x20) [ 202.008106] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 202.017881] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 202.034823] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 202.042011] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 202.050553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.057713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.066900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.074512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.082242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.093669] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 202.103086] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 202.111950] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.119935] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 202.127464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.134591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.144398] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 202.151531] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.159949] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 202.181621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.189277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.200580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.213256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 202.267118] device hsr_slave_0 entered promiscuous mode [ 202.305562] device hsr_slave_1 entered promiscuous mode [ 202.366678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.374639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.382680] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.389117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.396009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.403783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.413369] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 202.422224] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 202.435579] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 202.443471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.451016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.459088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.467131] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.473520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.480994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.488834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.496567] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.502991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.512299] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 202.518927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.529037] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 202.538925] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 202.546872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 202.554393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.561947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.569991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.577669] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.584169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.591520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.613694] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 202.622078] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 202.640047] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 202.647512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.657337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 202.675376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 202.683176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.691685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.702093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.713251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 202.738447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 202.749128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.759014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.767047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.774796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.783005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.790403] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.800838] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 202.811035] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 202.824510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.833142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.841443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.850203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.860431] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 202.874431] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 202.894337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.902398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.910307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.918322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.929168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.941155] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 202.956118] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 202.966894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.974930] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 08:03:33 executing program 0: mkdir(0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0xa04}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000140), 0x8) [ 202.989833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.016069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.023715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 203.031780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.043556] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 203.045166] hrtimer: interrupt took 67208 ns [ 203.053019] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 203.063204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.108610] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 203.117811] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 203.123898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.144318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.153242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.163523] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 203.170801] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.183014] audit: type=1800 audit(1568448213.804:39): pid=7780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16520 res=0 08:03:33 executing program 1: inotify_init() syz_open_dev$adsp(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x80003) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r0, 0x0, 0x8000fffffffe) [ 203.188848] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 203.218420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.232951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.256418] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 203.268396] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 203.288922] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 203.295037] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.313007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.327827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.352101] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.358584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.374966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.384848] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 203.401126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 203.411675] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.423998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.445655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.467363] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.473809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.502525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.536497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.564510] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.570964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.610822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 203.643848] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 203.655656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.683972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 203.714049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 08:03:34 executing program 1: r0 = socket(0xa, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x66, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5, 0x7e3400) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) [ 203.734566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 203.768058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 08:03:34 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x393, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000000000000000, 0x10000003, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_config_ext, 0x8503eb719e25dc14}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) ioctl$int_out(r1, 0x5466, &(0x7f0000000000)) fstat(0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, {0x2, 0x4e24, @empty}, 0x7095d4ebcdb70dd6}) r2 = gettid() ptrace(0x11, r2) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r5 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000000080)={0x4, "9dca50784274d08abbb1fcd26d90a7ee5176258bac03b932ee94abb540d9629b"}) r6 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x4, 0x9bc6648ccb836afd) r7 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r7, 0x4054561e, &(0x7f0000000080)={0x4, "9dca50784274d08abbb1fcd26d90a7ee5176258bac03b932ee94abb540d9629b"}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="0a000000bbbd65412e04ad024a6a5bc49c0a6438feff46cd0229bd938e6d7fa93a8e128c06e358bd2a36abcfc40a0cb04ef133a3932604c32de6a299405107085c0cf2ae0289ecc9be2b0aa9f0867346a013791da050b42f63f8837215f87ed935ed0985857fd22832b32baad831ad9a6821b7f5645e2299a62fe5f9b1eb00c4527aa7ac71c1e60a8ca7023af41bd8ccaeb2ecf459c54fda262c781bf005dd5e9cb3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000380)=0x2c) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000440)={r8, 0x10000}, 0x8) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x10001, 0x8000}) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f00000002c0)={r9}) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000280)={0x7, 0x5476d3ed}) sendfile(r0, r3, 0x0, 0x102000002) syz_emit_ethernet(0x7e, &(0x7f0000002380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000700000000000019078ac7014bb000008000304907800000200010000ac14f5aa070000000000000000000000000200e0000002000100000000000000007f00000100000000ffffffff00000000e000000100000000ac141400"/116], 0x0) [ 203.788373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.809818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 08:03:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x58000, 0x91) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_buf(r3, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f00000001c0)=""/217, &(0x7f0000000100)=0xd9) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000300)={0xd85dd85e55caffe2, 0x1, [0x1, 0x32f6, 0x178, 0xffffffff, 0xfffffffffffffffe, 0x1, 0x0, 0xbc]}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x4000041}, 0x10) dup2(r0, r4) [ 203.849071] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.855525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.924595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 203.940951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.967159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 204.001893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.010529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.066006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.103788] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.142901] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 204.182844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 204.199219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.241156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.279561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.317466] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 204.328146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.339409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.353592] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 204.372776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.392599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.410970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.424086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 204.441103] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 204.459112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 08:03:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x58000, 0x91) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_buf(r3, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f00000001c0)=""/217, &(0x7f0000000100)=0xd9) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000300)={0xd85dd85e55caffe2, 0x1, [0x1, 0x32f6, 0x178, 0xffffffff, 0xfffffffffffffffe, 0x1, 0x0, 0xbc]}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x4000041}, 0x10) dup2(r0, r4) 08:03:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x58000, 0x91) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_buf(r3, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f00000001c0)=""/217, &(0x7f0000000100)=0xd9) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000300)={0xd85dd85e55caffe2, 0x1, [0x1, 0x32f6, 0x178, 0xffffffff, 0xfffffffffffffffe, 0x1, 0x0, 0xbc]}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x4000041}, 0x10) dup2(r0, r4) [ 204.484402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.522997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.567992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.597537] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 204.607049] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 204.613142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.660011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.677489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.704783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 204.776566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.784286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.829561] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 204.838591] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 204.844705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.870240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.923511] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 204.941389] 8021q: adding VLAN 0 to HW filter on device batadv0 08:03:36 executing program 4: r0 = fanotify_init(0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) fanotify_mark(r0, 0x1, 0x20, r1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TCSBRKP(0xffffffffffffffff, 0x8004550f, 0x0) 08:03:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x58000, 0x91) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_buf(r3, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f00000001c0)=""/217, &(0x7f0000000100)=0xd9) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cachefiles\x00', 0x400000, 0x0) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000300)={0xd85dd85e55caffe2, 0x1, [0x1, 0x32f6, 0x178, 0xffffffff, 0xfffffffffffffffe, 0x1, 0x0, 0xbc]}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x4000041}, 0x10) dup2(r0, r4) 08:03:36 executing program 2: accept(0xffffffffffffffff, &(0x7f0000000180)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x50) fstat(0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x101, 0x8, 0x80}, 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) quotactl(0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x40046109, &(0x7f0000000300)) 08:03:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$inet_tcp_buf(r1, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) r2 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000040)=r2, 0x12) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80102) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, &(0x7f0000000000)={0x2, 0x680ffff, 0x0, 0x0, 0x1000020000006, 0x7ff0bdbe}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r6) r7 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f00000002c0)=[0xee00, 0xee01]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)='#cpuset\x00'}, 0x30) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000400)={{0x5, r9, r10, 0x0, r11, 0x10, 0x7}, 0x0, 0xe, 0xffffffffffffffff, 0x3, r12}) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000380)={0xa0, 0xffffffffffffffda, 0x5, {{0x1, 0x2, 0x3, 0x100, 0x5, 0x86e, {0x5, 0xe2b, 0xffff, 0x9, 0x1000, 0x8, 0x1, 0x1ff, 0x0, 0x8000, 0xfffffffffffffffb, r6, r10, 0x9, 0x6}}, {0x0, 0x6}}}, 0xa0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000240)={0x0, 0x7, 0x101, 0x5, [], [], [], 0x81, 0x800, 0x4, 0x7, "0c051d16cae58ecaf29e9740d4b9895d"}) 08:03:36 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3ff, 0x80002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x50, r2, 0x31, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @empty}}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40140082}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x21}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80000000}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="f2f3e7006fffc39e0695a79919aea036"}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4082}, 0x4000004) r3 = socket$inet(0x2, 0x4000000000000803, 0x20000000005) bind$inet(r3, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000300)='team\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000598a180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c000100766574680000598a180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000340)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f00000004c0)=""/10, 0xa}, {&(0x7f0000000600)=""/243, 0xf3}, {&(0x7f0000000700)=""/184, 0xb8}, {&(0x7f0000000500)=""/35, 0x23}], 0x5, &(0x7f0000000540)=""/56, 0x38}, 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r15, r15) recvmmsg(r15, &(0x7f0000003480)=[{{&(0x7f0000000900)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/193, 0xc1}, {&(0x7f0000000a80)=""/217, 0xd9}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x3, &(0x7f0000000c80)=""/127, 0x7f}, 0x9}, {{&(0x7f0000000d00)=@generic, 0x80, &(0x7f0000003180)=[{&(0x7f0000000d80)=""/160, 0xa0}, {&(0x7f0000000e40)=""/169, 0xa9}, {&(0x7f0000000f00)=""/228, 0xe4}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/94, 0x5e}, {&(0x7f0000003080)=""/255, 0xff}], 0x7}, 0x4}, {{&(0x7f0000003200)=@x25, 0x80, &(0x7f0000003380)=[{&(0x7f0000003280)=""/242, 0xf2}], 0x1, &(0x7f00000033c0)=""/191, 0xbf}, 0x80000000}], 0x3, 0x10021, &(0x7f0000003540)={0x0, 0x1c9c380}) r17 = socket$nl_route(0x10, 0x3, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) r19 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r19, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r19, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r20, @ANYBLOB="0000000000000000280012000c000100766574680000598a180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r20, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x3900aa302c070262, &(0x7f0000003580)={@remote, 0x0}, &(0x7f00000035c0)=0x14) r22 = socket$nl_route(0x10, 0x3, 0x0) r23 = socket$netlink(0x10, 0x3, 0x0) r24 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r24, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r24, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r23, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r25, @ANYBLOB="0000000000000000280012000c000100766574680000598a180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r22, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r25, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) r26 = socket$inet6_tcp(0xa, 0x1, 0x0) r27 = dup2(r26, r26) getsockopt$inet_tcp_buf(r27, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) getsockopt$inet_pktinfo(r27, 0x0, 0x8, &(0x7f0000003640)={0x0, @remote, @initdev}, &(0x7f0000003680)=0xc) r29 = socket$nl_route(0x10, 0x3, 0x0) r30 = socket$netlink(0x10, 0x3, 0x0) r31 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r31, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r31, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r30, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r32, @ANYBLOB="0000000000000000280012000c000100766574680000598a180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r29, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) r33 = socket$nl_route(0x10, 0x3, 0x0) r34 = socket$netlink(0x10, 0x3, 0x0) r35 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r35, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r35, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r34, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r36, @ANYBLOB="0000000000000000280012000c000100766574680000598a180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r33, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) r37 = socket$inet6_tcp(0xa, 0x1, 0x0) r38 = dup2(r37, r37) getsockopt$inet_tcp_buf(r38, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) getsockopt$inet_mreqn(r38, 0x0, 0x10, &(0x7f0000003780)={@loopback, @empty, 0x0}, &(0x7f00000037c0)=0xc) r40 = socket$inet6_tcp(0xa, 0x1, 0x0) r41 = dup2(r40, r40) getsockopt$inet_tcp_buf(r41, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) ioctl$ifreq_SIOCGIFINDEX_team(r41, 0x8933, &(0x7f0000003d80)={'team0\x00', 0x0}) r43 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r43, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") r44 = socket$nl_route(0x10, 0x3, 0x0) r45 = socket$netlink(0x10, 0x3, 0x0) r46 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r46, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r46, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r45, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r47, @ANYBLOB="0000000000000000280012000c000100766574680000598a180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r44, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r47, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r43, 0x8933, &(0x7f0000003dc0)={'nr0\x00', r47}) r49 = socket$nl_route(0x10, 0x3, 0x0) r50 = socket$netlink(0x10, 0x3, 0x0) r51 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r51, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r51, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r50, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r52, @ANYBLOB="0000000000000000280012000c000100766574680000598a180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r49, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r52, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) r53 = socket$nl_route(0x10, 0x3, 0x0) r54 = socket$netlink(0x10, 0x3, 0x0) r55 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r55, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r55, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r54, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r56, @ANYBLOB="0000000000000000280012000c000100766574680000598a180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r53, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r56, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) getsockname$packet(r0, &(0x7f0000004000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004040)=0x14) r58 = socket$inet6_tcp(0xa, 0x1, 0x0) r59 = dup2(r58, r58) getsockopt$inet_tcp_buf(r59, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) getsockopt$inet6_IPV6_XFRM_POLICY(r59, 0x29, 0x23, &(0x7f0000004080)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000004180)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000004a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004a40)={&(0x7f00000041c0)={0x84c, r4, 0x800, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x44, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0xf0, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x134, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r25}, {0xb0, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r28}}}]}}, {{0x8, 0x1, r32}, {0x1ec, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r36}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfb7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1000000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r39}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}, {{0x8, 0x1, r42}, {0xc0, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x99}}, {0x8, 0x6, r48}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xfff}}}]}}, {{0x8, 0x1, r52}, {0xf0, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r56}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x80, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x100000001}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r57}}}]}}, {{0x8, 0x1, r60}, {0xbc, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8}}}]}}]}, 0x84c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendto$inet(r0, &(0x7f0000000240), 0x0, 0x40000c0, &(0x7f00000002c0)={0x2, 0x4e21, @multicast1}, 0x10) [ 206.057087] audit: type=1400 audit(1568448216.684:40): avc: denied { create } for pid=7851 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 08:03:36 executing program 1: syz_open_pts(0xffffffffffffffff, 0x40000) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60e3060000203afffe8000000000bbff0200000000000000000000000000018800907800000000fe8000000000000000000000000000aa1f0186d8f1880d83000000000000000000"], 0x0) [ 206.159251] audit: type=1400 audit(1568448216.704:41): avc: denied { write } for pid=7851 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 08:03:36 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clock_getres(0xfffffffffffffffa, &(0x7f0000000080)) [ 206.275976] audit: type=1400 audit(1568448216.704:42): avc: denied { read } for pid=7851 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 08:03:37 executing program 2: accept(0xffffffffffffffff, &(0x7f0000000180)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x50) fstat(0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x0, 0x101, 0x8, 0x80}, 0x8) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) quotactl(0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x40046109, &(0x7f0000000300)) [ 206.508593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7852 comm=syz-executor.5 08:03:37 executing program 2: r0 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.stat\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_buf(r3, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) setsockopt$inet6_dccp_int(r3, 0x21, 0x647c4b6cf5488240, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) [ 206.698896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7852 comm=syz-executor.5 [ 206.803277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7871 comm=syz-executor.5 [ 206.832767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7872 comm=syz-executor.5 08:03:37 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_buf(r3, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) r6 = getpgrp(0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r6, 0x0, 0xffffffffffffffff, 0x0) sched_setparam(r6, &(0x7f00000000c0)=0xe9) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/7, 0x7) getsockopt$inet_tcp_buf(r5, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24}}, 0x0, 0x5}, &(0x7f0000000380)=0x90) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@sndinfo={0x20, 0x84, 0x2, {0x9f4a, 0x2, 0xffffffffffffffe0, 0x9}}], 0x20, 0x6010}, 0x0) 08:03:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e20}, 0x80) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000200)=0x8000, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_buf(r3, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x9, 0x1a4940) ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000000)=0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f00000000c0)=r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) getsockopt$inet_tcp_buf(r6, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={r8, @in={{0x2, 0x4e24}}, 0x0, 0x5}, &(0x7f0000000380)=0x90) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) getsockopt$inet_tcp_buf(r10, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x66, &(0x7f0000000040)={r12}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={r12, @in={{0x2, 0x4e24}}, 0x0, 0x5}, &(0x7f0000000380)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f0000000600)={r12, @in={{0x2, 0x4e21, @local}}, [0x20, 0x0, 0x3, 0x7f, 0x8, 0x5, 0x3, 0x8, 0x80000001, 0x8, 0x9, 0x401, 0x5, 0x8, 0xaf]}, &(0x7f0000000700)=0x100) sendmsg$inet_sctp(r6, &(0x7f0000000800)={&(0x7f0000000480)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000580)="95f3c5cfa60a532b0c034591f2d067686145096e6a6adca2a208b7ad517ee2f25cee695316dea86579d09e6906a6270c3e777e5b5c", 0x35}], 0x1, &(0x7f0000000740)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @sndrcv={0x30, 0x84, 0x1, {0xffffffffffff3c51, 0x495a, 0x1, 0x8, 0xfffffffffffff72f, 0x1, 0x2, 0x7fff, r8}}, @authinfo={0x18, 0x84, 0x6, {0x20}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @sndinfo={0x20, 0x84, 0x2, {0x853, 0x1, 0x2, 0xff, r13}}], 0xa0, 0x800}, 0xd2b4bbb4c55f5aaa) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000002c0)="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") readlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000500)=""/95, 0x5f) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000400)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000480)}}], 0x6fdaec, 0x22, 0x0) 08:03:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38f37fdba04044ce7f91cc"], 0x0, 0xb}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000140)={r5, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 206.992762] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 207.046618] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 08:03:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) getsockopt$inet_tcp_buf(r2, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000080)) ioctl(r0, 0x7d, &(0x7f0000000040)="334aee9c63d60a798b61c1") openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x200, 0x0) connect$caif(r3, &(0x7f0000000240)=@util={0x25, "7ff58a4fbc41fec6f6886cf919551aa5"}, 0x18) r4 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x8, 0x400000) write$binfmt_misc(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='\t\x00z0'], 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_buf(r5, 0x6, 0xc, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) 08:03:37 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11df79053098cfe47bf070") socket$inet_udp(0x2, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0124fc0010000b400c000200053582c137153e37090001", 0x27}], 0x1}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x3ded5adb) splice(r1, 0x0, r3, 0x0, 0x20000001100a, 0xa) [ 207.455619] netlink: 'syz-executor.5': attribute type 2 has an invalid length. 08:03:38 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="85000000130000005d00000000000000950000000000000024110c0d8acb87aa020000006ff907209d0cd2232ced04ca623fca9412e0fa7f2a8f0b01e40c4af7c198a11e01fc171b8a1622ce9c9f6b2fb6afe39234c47b4510a7096ccc2d4d8be815000ec126a3924f4372c1944ff4900a199b6dc4bf698b3aaabef5f1ed3974e86d5961bf061172cf0e23ca2447ba570ce128ec5fc9495e73bb3e68b18b88dcaeca47ef6fef5a2203400b36b7abded06cc9149e49caf67fea004bda8c1cdba2bfd0de1e554abf7100000000000000000000000000000000001f6de2ffbb99c479ccaa0baa937106c4a2d0fa55e01a0e5f9f6aa32a47d5aad45c693833b070e3b8d829c5d87c11348f6abab38620f5d31f9cd9d392542aad76183a1d7a15486f87bef869ef9b7602b1d172945cb8d4fb610126fc3a1ca424e3b513a2143697186c9fb43876343355e6d33be76702f5037d1bad1c9f20f612b9039d6458e5798c6fc7986878790a477cc190"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0}, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) getsockopt$inet_tcp_buf(r2, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f00000001c0)=""/172) r3 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x183002) ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000280)={0x5, 0x6}) [ 207.765746] audit: type=1400 audit(1568448218.384:43): avc: denied { prog_load } for pid=7905 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 207.819009] audit: type=1400 audit(1568448218.434:44): avc: denied { prog_run } for pid=7905 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 08:03:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2}, 0x3c) userfaultfd(0x80000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10) [ 207.925587] audit: type=1400 audit(1568448218.554:45): avc: denied { map_create } for pid=7913 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 08:03:38 executing program 1: r0 = memfd_create(&(0x7f0000000080)='\vem1\xac#>\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14, 0x80000) recvfrom(r2, &(0x7f00000000c0)=""/66, 0x42, 0x100, &(0x7f0000000380)=@can={0x1d, r3}, 0x80) getsockopt$bt_hci(r1, 0x0, 0x2, 0x0, &(0x7f00000001c0)) [ 207.998151] audit: type=1400 audit(1568448218.624:46): avc: denied { map } for pid=7918 comm="syz-executor.1" path=2F6D656D66643A0B656D31AC233EFF202864656C6574656429 dev="tmpfs" ino=27373 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 08:03:38 executing program 1: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x6, 0x2000000000adb0) setsockopt$sock_int(r1, 0x1, 0x24, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x1c) listen(r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='(^\x00', 0xfffffffffffffffe) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) write$P9_RCREATE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) open(0x0, 0x80002, 0x912bebd9e1225fc8) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) gettid() timer_create(0x0, &(0x7f0000001ec0), &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_buf(r3, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) fcntl$getflags(r0, 0x3) getsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000000), &(0x7f0000000040)=0x4) open$dir(0x0, 0x27e, 0x0) 08:03:38 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="a78dbe0f30ea4bbf3d6bc22461b3f333bac109958e8fecf471bdf80aa53b6d67232d8ee66b1990bccaf9"]) dup3(r0, r1, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)=@known='security.capability\x00\xc9\xbd0\x12\x98>\x02\x15Y`\x19j*\x84X_\x19\xc1\xc8&\x17)\x82\xa8\xde\x1c\xccL\xdci\x87\xff\xc9q\\\xef\"\xce\xe4\xc6s\xd48\x8d^V\x04\xa0\xb88\xaf\xb3[\xd3R\xe4\xc9\xeed\x9aw\x12\b0\x9c\xa46\xbf\x91\x9f\xd9ck\xfa%_\xf4\xb3\x1f@\xf8\x8e\xcc\x9c-\x81!q\xc4\x12bO\f\x14/\xc5Oe\xf4\x929\xf2v\x86\xc1}H\x9e\x92]\xa1\x9b\xf3\x1e0\xecu\xcd\x92#yWf\x1c\xe8\xa1V\x84\x18\xe6\xd3\xd4(\x17O\x89\xa1\x1c\xc8!\xfb\xf6A\"\xa3okA\x1c', 0x0, 0x0) 08:03:38 executing program 1: clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futex(&(0x7f0000000080), 0x0, 0x1, &(0x7f0000001200)={r0, r1+10000000}, &(0x7f0000001240)=0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_buf(r3, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) accept$inet6(r3, &(0x7f0000000040), &(0x7f00000000c0)=0x1000002fb) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x2, &(0x7f0000000100)=0x0) io_submit(r4, 0x0, &(0x7f0000000440)) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x60) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0xae44, 0x9) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000004480)="ab550000288a00"/16, 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x0) r7 = accept$alg(r6, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000000600)=ANY=[], 0x100fb) recvmmsg(r7, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000200)=""/4096, 0xe}], 0x1}}], 0x1, 0x0, 0x0) io_pgetevents(r4, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0) 08:03:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11df79053098cfe47bf070") socket$inet_udp(0x2, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e0000003100050ad25a80648c6394fb0124fc0010000b400c000200053582c137153e37090001", 0x27}], 0x1}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x3ded5adb) splice(r1, 0x0, r3, 0x0, 0x20000001100a, 0xa) 08:03:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x400000000000005, 0x1, 0x7, 0x8000000001}, 0x2c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000240)=0x4) getsockopt$inet_tcp_buf(r2, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x7, 0x9, 0x7, 'queue0\x00', 0x1}) bpf$MAP_CREATE(0x2, &(0x7f00000000c0)={0x3, 0x0, 0x77fff4, 0x0, 0x820000, 0x0}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000080)}, 0x10) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e22, 0xffffffffffffffc0, @rand_addr="dc08dd86f416bafbf9f5d0bc098c4212", 0x6}, {0xa, 0x4e22, 0x0, @ipv4={[], [], @remote}, 0x7}, 0x8001, [0x40, 0x6, 0xfff, 0x6, 0x6, 0xfffffffffffffffc, 0x9, 0x94]}, 0x5c) socket$bt_rfcomm(0x1f, 0x2, 0x3) [ 208.354730] netlink: 'syz-executor.5': attribute type 2 has an invalid length. [ 208.386096] audit: type=1400 audit(1568448219.004:47): avc: denied { map_read map_write } for pid=7941 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 08:03:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@empty}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x2, 0x1, 0x3}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) timer_delete(0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x1}) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) 08:03:39 executing program 2: r0 = open(0x0, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'erspan0\x00', {0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x1, 0x1f}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x10c800) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) 08:03:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in6=@empty}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x2, 0x1, 0x3}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000380)={@multicast2, @local}, 0xc) timer_delete(0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x1}) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) 08:03:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="13dca5055e0bcfe47bf070") r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1) ftruncate(r1, 0x1) timer_create(0x3, 0x0, &(0x7f0000000480)=0x0) timer_settime(r2, 0x0, &(0x7f00000007c0)={{}, {0x77359400}}, 0x0) timer_gettime(r2, &(0x7f00000001c0)) timer_delete(r2) r3 = open(&(0x7f0000000180)='./bus\x00', 0x40000000141042, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x261c41eb}) 08:03:39 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20480, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @remote}, {0x2, 0x4e24, @remote}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xe, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000040)='veth0\x00', 0xffff, 0x6, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x5, 0x0) write(r1, &(0x7f0000c34fff), 0xc06f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) 08:03:39 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1000, 0x103402) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), 0x4) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001200)='/dev/vhost-net\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x0, 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) getsockopt$inet_tcp_buf(r3, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18, 0x0, 0x5, {0x100000001}}, 0x18) 08:03:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) getsockopt$inet_tcp_buf(r2, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) ioctl$RTC_AIE_OFF(r2, 0x7002) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f0000bfcffc), &(0x7f00000001c0)=0x4) 08:03:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000300)=""/4096) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='autofs\x00', 0x0, 0x0) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000100)={{0x3, 0x100, 0x1, 0x800, 0x7ff, 0x3}, 0x3}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffa, 0x40800) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={r5, @in={{0x2, 0x4e24}}, 0x0, 0x5}, &(0x7f0000000380)=0x90) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000140)={r5, 0x840a}, 0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f00000000c0)) 08:03:40 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x47ddab98}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) flistxattr(r0, &(0x7f0000000540)=""/4096, 0x1000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000dfa3422f88288ab4cf12dc0e7ea1a68d9a868d531bb248d1923ad3928f8e1b75a1ec17e7410f502cbec089b3d19d29d104d134f24e5fbb63b7794c5e852cbe7040a825b4e3da91d95fc45d08a5956b5594dbf4117dffbbd3a35da78995ca64269c842d05c24150d2d4274dcf3b4a6e0a96395823d88778141fd1cfc0cf4b5b3a806002bbc35bde03", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000480)={r3, @in={{0x2, 0x4e24}}, 0x0, 0x5}, &(0x7f0000000380)=0x90) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r3, 0x12000000000000}, 0x8) r4 = socket(0x1e, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) getsockopt$inet_tcp_buf(r6, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000471407000000e9f8bf89ef5b8c3b280e6214dff8124965ccbe750b80bdc17f732a0bab4f3c8da7d50f5efbf0a46e1088f939d364218408adc7c758a9ab88a7a8f0e5adb9280f736c571291f91a836bb74a02c3778694b1419dd090952d9270221b3b795f582a603aaf2f00db62bcf53c71fdf0fd06d2432b8430ee931ddd9757bf034efc278d0f29175aafb9e27650efb4903297baa91f06bce56864089918489a7335e7e7a14bb6a1827ec9c781b6882c2705390d74bf476acbb2b2a7ce80bb58a611645ca5015453d9725f0cfabed538cbdaa720d211998c215ce3472aede7ba9576e0c2919fc133e1d054afe52f00092129f3"], &(0x7f0000000100)=0xa) [ 209.479288] autofs4:pid:7975:autofs_fill_super: called with bogus options 08:03:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) getsockopt$inet_tcp_buf(r2, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) r3 = accept$unix(r2, 0x0, &(0x7f0000000080)) r4 = dup2(r0, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000000000)={0x90, 0x50, &(0x7f0000000100)="caa07a4bfae6a2add4d85142b9484a154f2b6b9fa5dbc7057556a080d4258e0b2846eb6091da5d59f15237f43eb967a60516329f9b4f51c89094783107f8ea430a889a3f24c8c1e9dae3ec2751c1706043e042720773921e34fa2500d8c4552fe2698e996f64636f254fd735e8331dc48f5802e7a5349ebdd24819566f30820967da65248e06c591081a25026ca34b0d849ad61a4d41100a90081dc09ea45b8040b69a2a965cbee14155f4cc7e3492e2ed4ff8f0dc3d8636d8", {0x1ff, 0x9, 0x39555659, 0x8, 0x1, 0x0, 0x11, 0x7}}) r5 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000001240)=""/4096) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000001c0)=""/4096, 0x1000, 0x14120, &(0x7f00000011c0)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) 08:03:40 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$inet_tcp_buf(r1, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) r2 = accept$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) getsockopt$inet6_int(r2, 0x29, 0x50, &(0x7f0000002240), &(0x7f0000000000)=0x4) 08:03:40 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x200) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000080)={0x6a, &(0x7f0000000240)="790307d26649a726babb55aba1bfb0ef65b9371acf32fdc1ac94756b60dc540f5ea31799ed24d918b61c935518100d33088f21f8c166ad9366b153e0bf32fb1b7843638aa2d48581de0d91e8e6f75becba99bf9c38af954bf5c63ddad2be2fdd02fe3877c8f155c3ad46"}) r1 = socket(0x11, 0x10, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$unix(r3, &(0x7f0000000180)="210000d9", 0xff25, 0x4008000, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0xd0000eb}, 0x6e) r4 = dup2(r2, r2) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000000)) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000200)) [ 209.700463] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! 08:03:40 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000800c5011, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000000), 0x4) getsockopt$inet_tcp_buf(r2, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) 08:03:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000000)="f30fc777000fc7bf00002e0fa10f0f6340b0c086aaa001baf80c66b8cc89ed8d66efbafc0c66b8f3ff000066ef0f01cb0f20d866b9800000c00f326635000400000f300f22d8f30f70c45d", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:03:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {}, {0x2, 0x0, @loopback}, {}, 0x2a1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) getsockopt$inet_tcp_buf(r2, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000080)={0x0, 0x180000}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f00000000c0)={r3}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, {}, {0x2, 0x0, @multicast2}, {}, 0xab852ebbeefbd631}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000100)=0x8001) 08:03:40 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x900) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x4008080, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") sendmmsg(r3, &(0x7f0000000100), 0x400000000000193, 0x20040082) 08:03:40 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7ff, 0x8000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x200000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x3000000000016) r2 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x21f, 0x161201) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) getsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) gettid() io_setup(0x8, &(0x7f0000000280)=0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001000000770000f200000000a6ff17b91c3b0d873722b41a1100008f2cd6cc62e13f10a5f31a26f4233e3ba1ff40e062a43f80b1baf272a416e63e58afdf284732bd1e1970000000009f313c4957c67a08676517ba1300000000858003ffffffffffffffff3e26b5ca26b5434dbd533925db8b54b33da7b9c7aefca1f9c49c6400000000000000000000000061e2448f23a7e40000000000d5a0a5c33d3cc0b2eeedde5233ac82d4f7de00c26cb542f13b5bc18adcfb59dfb5edff90d0a500a0fafa7af4fea59c878c765f6a084b83a0c37596366d369187f444"], 0x18}}], 0x1, 0x4048000) recvmmsg(r6, &(0x7f00000071c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002dbd7000fbdbdf250600000008000400060000000800050800000080380002000800036d326c5b0023bd00000800039ce1d50590cbdac0000300000008000e004e2400000800050000000000140001007f00000100000000000000000d0000000800040002000000080006000000000008000600f8ffffff"], 0x74}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) io_submit(r5, 0x1, &(0x7f0000000600)=[0x0]) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_NAME={0x1c, 0x1, @l2={'eth', 0x3a, 'lo\x15_\x85K\x8fQ\xbd\xae\x86\x95#\x81\x19xn\x99\x00'}}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r9, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x22b}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b0d2fcc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008880}, 0xca1175ec7fe40c2b) 08:03:41 executing program 1: unshare(0x0) socketpair$unix(0x1, 0x1000000002, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) fcntl$getown(0xffffffffffffffff, 0x9) sched_rr_get_interval(0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r3 = getegid() keyctl$chown(0x4, 0x0, 0x0, r3) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfff, 0x80) ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000040)=0x25) 08:03:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000000)="f30fc777000fc7bf00002e0fa10f0f6340b0c086aaa001baf80c66b8cc89ed8d66efbafc0c66b8f3ff000066ef0f01cb0f20d866b9800000c00f326635000400000f300f22d8f30f70c45d", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:03:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00191fffffffe6ffffffff010f00a2913c6de72eb2fcf021beebb09501b674ee32a831ea903fcd00eb1ee36912caafe4602cda8034182a34b13f3d98498357a051eb430aeb341300326d153b7342c1ba53303e50a208b23614066bf5ea2b7c0e59771c5ff8e21d46083132ab8229282ebf826e6a7dea73286157e053b431033434d2bf8a8a451ed1"], 0x14}}, 0x0) 08:03:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x24, 0x2, [@TCA_PIE_ALPHA={0x8}, @TCA_PIE_TARGET={0x8, 0x1, 0x2}, @TCA_PIE_ECN={0x8}, @TCA_PIE_LIMIT={0x8}]}}]}, 0x50}}, 0x0) 08:03:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000000)="f30fc777000fc7bf00002e0fa10f0f6340b0c086aaa001baf80c66b8cc89ed8d66efbafc0c66b8f3ff000066ef0f01cb0f20d866b9800000c00f326635000400000f300f22d8f30f70c45d", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:03:41 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) setresuid(0x0, r3, 0x0) 08:03:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) getsockopt$inet_tcp_buf(r2, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x4e0042, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000040)={0x1ff, 0x0, &(0x7f0000ffd000/0x1000)=nil}) ioperm(0x0, 0x728, 0x0) clone(0x2000000002800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x200000) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) r9 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x3e081de2, 0x80400) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000140)={0x3, 0x2e3, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback, 0x6}, {0xa, 0x400000000, 0x0, @empty}, r8}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r8}}, 0x10) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f00000000c0)={0x8, 0x120, 0xfa00, {0x0, {0x7, 0xffffffff, "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", 0xa9, 0x6, 0x7, 0x401, 0x400, 0x7f, 0x9}, r8}}, 0x128) 08:03:41 executing program 5: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, '\x00\x00\x00\x00\x03', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) [ 211.140806] encrypted_key: master key parameter '' is invalid [ 211.183198] encrypted_key: master key parameter '' is invalid 08:03:41 executing program 1: socket(0x10, 0x3, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b2b, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x1a7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/34, 0x22}, {&(0x7f0000000100)=""/5, 0x5}, {&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000240)=""/159, 0x9f}], 0x4, &(0x7f0000000340)}}, {{&(0x7f0000000380)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000400)=""/139, 0x8b}, {&(0x7f00000004c0)=""/183, 0xb7}, {&(0x7f0000000580)=""/127, 0x7f}], 0x3, &(0x7f0000000640)=""/120, 0x78}, 0x4}, {{&(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000880), 0x3}, 0x731}], 0x3, 0x2000, &(0x7f0000000980)={0x0, 0x989680}) getpeername$llc(r2, &(0x7f00000009c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x10) dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4), 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) r5 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_FIEMAP(r6, 0xc020660b, &(0x7f0000000a00)={0x7ff, 0x1, 0x5, 0x10001, 0x6, [{0x29b, 0x4, 0x3, 0x0, 0x0, 0x800}, {0x100000001, 0x7fff, 0x6, 0x0, 0x0, 0xf1bd2efcfb867e2d}, {0x7, 0x2, 0x8000000000, 0x0, 0x0, 0x3240}, {0x7, 0x80000000, 0xffff, 0x0, 0x0, 0x1200}, {0x2, 0xc54, 0x25, 0x0, 0x0, 0x1008}, {0x18000, 0x3, 0x2, 0x0, 0x0, 0xcd970644ff68eb08}]}) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000008c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {0x0, r8, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000740)={0x15, 0x110, 0xfa00, {r8, 0x3, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}, @ib={0x1b, 0x8, 0x28, {"261a7c72241f6a5b11ee9cce37d150ba"}, 0xffffffffffff3fad, 0x49}}}, 0x118) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) 08:03:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000000)="f30fc777000fc7bf00002e0fa10f0f6340b0c086aaa001baf80c66b8cc89ed8d66efbafc0c66b8f3ff000066ef0f01cb0f20d866b9800000c00f326635000400000f300f22d8f30f70c45d", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:03:41 executing program 5: socket$key(0xf, 0x3, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x258800, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x23) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000180)="11dca5055e0bcfe47bf070") sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000440)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x2cb, 0x400000000000) 08:03:41 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7ff, 0x8000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x200000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x3000000000016) r2 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x21f, 0x161201) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) getsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) gettid() io_setup(0x8, &(0x7f0000000280)=0x0) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001000000770000f200000000a6ff17b91c3b0d873722b41a1100008f2cd6cc62e13f10a5f31a26f4233e3ba1ff40e062a43f80b1baf272a416e63e58afdf284732bd1e1970000000009f313c4957c67a08676517ba1300000000858003ffffffffffffffff3e26b5ca26b5434dbd533925db8b54b33da7b9c7aefca1f9c49c6400000000000000000000000061e2448f23a7e40000000000d5a0a5c33d3cc0b2eeedde5233ac82d4f7de00c26cb542f13b5bc18adcfb59dfb5edff90d0a500a0fafa7af4fea59c878c765f6a084b83a0c37596366d369187f444"], 0x18}}], 0x1, 0x4048000) recvmmsg(r6, &(0x7f00000071c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002dbd7000fbdbdf250600000008000400060000000800050800000080380002000800036d326c5b0023bd00000800039ce1d50590cbdac0000300000008000e004e2400000800050000000000140001007f00000100000000000000000d0000000800040002000000080006000000000008000600f8ffffff"], 0x74}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) io_submit(r5, 0x1, &(0x7f0000000600)=[0x0]) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, [@TIPC_NLA_BEARER_NAME={0x1c, 0x1, @l2={'eth', 0x3a, 'lo\x15_\x85K\x8fQ\xbd\xae\x86\x95#\x81\x19xn\x99\x00'}}]}]}, 0x34}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r9, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x22b}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6b0d2fcc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008880}, 0xca1175ec7fe40c2b) 08:03:42 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="23000000280007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff", 0x23}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) getsockopt$inet_tcp_buf(r2, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000000)={0x3, 0x35315241, 0x3, @discrete={0x9, 0x20}}) 08:03:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002f00ff030000fdff0000000006000000080003002dac8fd6387635a30b03dfa39c87c4b3915802ceb3532490af70dd2bfeccce22f8944f5e4538f27f72eeada1d27ab119193eabeee8436ca93622dc3fec76df7038c8d28c32d92fb7f3e11c1f143761d0a971829e928af6378c68dc177b35790965e48e2e6717716c26c5c53ae426f8dedbd001f0afe26d14111809f6467ae3fa944419784421e3e47515b988e06bf623363784e902321f4ce8a80e11cb2696be79b3896a92186201ac2fb8c683", @ANYRES32], 0x1c}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x200, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xffff, 0x4000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000100)="baf80c66b870e2328a66efbafc0cb0beee0f01c90f01cabad004ed0f01dabaf80c66b8b863788066efbafc0c66ed0f9acb66b9800000c00f326635000100000f3066b97407000066b8b3bf000066ba000000000f3066b9b20a000066b85b46000066ba000000000f30", 0x69}], 0x1, 0x10, &(0x7f00000002c0), 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") fcntl$setsig(r3, 0xa, 0x24) [ 211.544961] Unknown ioctl -2126991741 08:03:42 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)={0x20, 0x2c, 0x5, 0x0, 0x0, {0x1801}, [@typed={0xc, 0x0, @u64=0x2}]}, 0x20}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x80002, 0x8000000010) sendmmsg$alg(r1, &(0x7f0000000080), 0x492492492492751, 0x0) get_thread_area(&(0x7f0000000000)={0x9, 0x1000, 0x4000, 0x22e, 0x1, 0x9, 0xff, 0x6, 0x100000001, 0x10001}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e21, 0x5, @remote, 0x2}, @in6={0xa, 0x4e23, 0x500, @empty, 0xf0cb}], 0x58) [ 211.573536] Unknown ioctl -2126991741 [ 211.626924] audit: type=1400 audit(1568448222.254:48): avc: denied { setopt } for pid=8083 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 08:03:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000000)="f30fc777000fc7bf00002e0fa10f0f6340b0c086aaa001baf80c66b8cc89ed8d66efbafc0c66b8f3ff000066ef0f01cb0f20d866b9800000c00f326635000400000f300f22d8f30f70c45d", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:03:42 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) 08:03:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r2, 0x541f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 211.788370] Enabling of bearer rejected, illegal name 08:03:42 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) 08:03:42 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 08:03:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000000)="f30fc777000fc7bf00002e0fa10f0f6340b0c086aaa001baf80c66b8cc89ed8d66efbafc0c66b8f3ff000066ef0f01cb0f20d866b9800000c00f326635000400000f300f22d8f30f70c45d", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:03:42 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) [ 212.061931] audit: type=1400 audit(1568448222.684:49): avc: denied { map } for pid=8105 comm="syz-executor.5" path="/selinux/status" dev="selinuxfs" ino=19 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1 08:03:42 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000002d00010000092566863bbfbcb9000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 08:03:42 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 08:03:42 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) 08:03:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d3, &(0x7f0000000000)={0x0, 0x0}) [ 212.389253] rdma_op 00000000cc622132 conn xmit_rdma (null) 08:03:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000000)="f30fc777000fc7bf00002e0fa10f0f6340b0c086aaa001baf80c66b8cc89ed8d66efbafc0c66b8f3ff000066ef0f01cb0f20d866b9800000c00f326635000400000f300f22d8f30f70c45d", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:03:43 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) 08:03:43 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1400000000000000000000000700009683020000"], 0x14}}], 0x1, 0x0) 08:03:43 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 08:03:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000001600)="11dca50d5e") mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_targets\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/\v\x1ev?capi20\x00', 0x80, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x33d, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0xfdec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30558, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x200000001, 0x2, 0x0, 0x0, 0x201, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x1}, 0x0) 08:03:43 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) 08:03:43 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) [ 212.817592] rdma_op 000000003b738cb4 conn xmit_rdma (null) 08:03:43 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) 08:03:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000000)="f30fc777000fc7bf00002e0fa10f0f6340b0c086aaa001baf80c66b8cc89ed8d66efbafc0c66b8f3ff000066ef0f01cb0f20d866b9800000c00f326635000400000f300f22d8f30f70c45d", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:03:43 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 08:03:43 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 08:03:43 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 213.053291] rdma_op 000000005f98e39b conn xmit_rdma (null) 08:03:43 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) [ 213.170520] rdma_op 0000000006c6199c conn xmit_rdma (null) 08:03:43 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) 08:03:43 executing program 3: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) [ 213.244573] rdma_op 00000000543f7ef9 conn xmit_rdma (null) 08:03:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000000)="f30fc777000fc7bf00002e0fa10f0f6340b0c086aaa001baf80c66b8cc89ed8d66efbafc0c66b8f3ff000066ef0f01cb0f20d866b9800000c00f326635000400000f300f22d8f30f70c45d", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:03:43 executing program 5: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7}}], 0x48}, 0x0) 08:03:44 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) [ 213.410235] rdma_op 0000000043c3a135 conn xmit_rdma (null) 08:03:44 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) connect$x25(r0, &(0x7f0000000080)={0x9, @remote={[], 0x1}}, 0x12) ioctl$SIOCX25SFACILITIES(r0, 0x89eb, &(0x7f0000000000)) [ 213.492902] rdma_op 0000000086bff998 conn xmit_rdma (null) 08:03:44 executing program 1: bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) 08:03:44 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20000000fb], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) write$binfmt_script(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="2321202e2f66696c653020776c616e30202f6465762f69090075742f6d6f7573ff23002069705f767469300020707070e5ce19bc1943e2ef64dbb2d837366b803023212d192b246e6f646576736563757269747973656ce6203776626f786e657430202f6465762f696e707574cfdc2f6d6f757365762f696e7075742f6d6f75736523000a6587f9b97755c34f"], 0x8d) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="ecee8b1483f4"}, 0x14) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x121000) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/null\x00', 0x201, 0x0) ioctl$TCFLSH(r7, 0x540b, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000480)) syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0xfcb, 0x80000) 08:03:44 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x444842, 0xba4c06ade3f29c49) r1 = open(&(0x7f0000000340)='./file0/file0\x00', 0x8040, 0x32) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000300)=0x41b) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r2 = socket$inet6(0xa, 0xffffffffffffffff, 0x1) r3 = fcntl$getown(r2, 0x9) ptrace$pokeuser(0x6, r3, 0x7fe, 0x2) ioctl(r1, 0x8912, &(0x7f00000008c0)="f59e131e79f154a7d8171700400892ac23a823df9a188cde74d4a3379c26e9b94a664c6d4b7c7f2f7c807f5604e9f25fa7138c150b99b2eee500086426593d107ca2923a9447ac9bbe11e112c02106e636c510c7cd19c23efc691bb6b74fd01ce3d482cc82596cb35afd36aab53f0becccd9467d6ed52e1f46871defe59a2bb2bd838b39bb55dc87db8add86369a9880766feed61cb6083493927e964c7e7ed0e3570d76e4752b53c92d6888ac12f003402ce08acab246541c36622e935c58d9b8cffb1735c98505cb6e1896445a7d74") remap_file_pages(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x1, 0x74f, 0x1000) r4 = socket$inet6(0xa, 0x3, 0x6) r5 = syz_open_procfs(r3, &(0x7f00000009c0)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd0\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7\x95\xaeV\x0f\x9e\xed\x13\xc6H\v\xb7\xd0g!`\x18\x0f\x99\xadD-\xc8{\xbc\xb2\xb9Y\xe2P\x9b\xec\x1e_\xb4\x01\xf1\x1e\xa8\xf8\xdf?#p-\xbd3\"L\xe5\x7f\nC\x00}\x0eb\xbc\xa4}\x93\x9a\t\xf4\xfa\xbew D\x00\xb0Z\xc0\x1a\xf9\x924\a\x1c4\xfa\xe4\xe2\x8e\xe8\x19\x00\x05\xb7\xd51)\b\xf2#[-\xbf\x7f\x10\x14vy\x86\x85\xa4W\r\xe8i\x95\xc9\xe6\xf8\a\xd8\xe2\xdf\xc8\x97\xa2\b{b\xca\x95u:\v\x97\b\r@g\x80\x8d_\x18y\xd1\x8d\xc1)U`\xb9\xe2\xd7\x88\xc2\xaf\xdc\xc1\xda\xcc\xca\x9a\v\xact8Z\x1c\x06\x1b\xdf\xb5\xc1\"\x05,Yw\vP\xcc\xfa\xf9\x9f<\xbd\x1c\x1a\xcb*\x06\xb7\xcd\x7f\xba\xadr\xbb/\"2p\xf8\b\x1e\x04\xac*\x88\xb0\xa7\xc6\xb4M\x97n\xdck\xd1\\\x9f\x9d\x1a4 Y\xac\xcb\xf9f\xcf>qd\vn:\x12\xc0\xdca\xfd\x8d\x9dL\x92\x17\x8fe\xd1\xaa$\x12\x02R\x96t?\x9a\x1a') sendfile(r4, r5, &(0x7f00000000c0)=0x202, 0x8) 08:03:44 executing program 1: bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) 08:03:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000000)="f30fc777000fc7bf00002e0fa10f0f6340b0c086aaa001baf80c66b8cc89ed8d66efbafc0c66b8f3ff000066ef0f01cb0f20d866b9800000c00f326635000400000f300f22d8f30f70c45d", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 213.835767] mmap: syz-executor.5 (8215) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 08:03:44 executing program 1: bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) 08:03:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000000)="f30fc777000fc7bf00002e0fa10f0f6340b0c086aaa001baf80c66b8cc89ed8d66efbafc0c66b8f3ff000066ef0f01cb0f20d866b9800000c00f326635000400000f300f22d8f30f70c45d", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:03:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000000)="f30fc777000fc7bf00002e0fa10f0f6340b0c086aaa001baf80c66b8cc89ed8d66efbafc0c66b8f3ff000066ef0f01cb0f20d866b9800000c00f326635000400000f300f22d8f30f70c45d", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockopt$inet_tcp_buf(r4, 0x6, 0x18, 0x0, &(0x7f0000000140)=0x28d) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:03:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000000)="f30fc777000fc7bf00002e0fa10f0f6340b0c086aaa001baf80c66b8cc89ed8d66efbafc0c66b8f3ff000066ef0f01cb0f20d866b9800000c00f326635000400000f300f22d8f30f70c45d", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:03:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000000)="f30fc777000fc7bf00002e0fa10f0f6340b0c086aaa001baf80c66b8cc89ed8d66efbafc0c66b8f3ff000066ef0f01cb0f20d866b9800000c00f326635000400000f300f22d8f30f70c45d", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:03:46 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) 08:03:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f00000002c0)="b959080000b868cd678dba000000000f300f01b00000000048b80c000000000000000f23d80f21f835800000a00f23f866440f3881bf10f64b3966b8c3008ee8b9800000c00f3235000400000f30c443895de000480fc7284a0fc72ca9c74424009d000000c7442402cd000000ff2c24", 0x70}], 0x1, 0x8, &(0x7f0000000080)=[@dstype3], 0x1) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000000)="f30fc777000fc7bf00002e0fa10f0f6340b0c086aaa001baf80c66b8cc89ed8d66efbafc0c66b8f3ff000066ef0f01cb0f20d866b9800000c00f326635000400000f300f22d8f30f70c45d", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000240)="11dca50d5e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:03:46 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x9c}, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x36}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) [ 318.975144] rcu: INFO: rcu_preempt self-detected stall on CPU [ 318.981330] rcu: 0-....: (1 GPs behind) idle=64a/1/0x4000000000000004 softirq=13291/13292 fqs=4719 [ 318.990905] rcu: (t=10500 jiffies g=8997 q=2014) [ 318.995931] NMI backtrace for cpu 0 [ 318.999569] CPU: 0 PID: 7721 Comm: syz-fuzzer Not tainted 4.19.72 #0 [ 319.006064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.015421] Call Trace: [ 319.018006] [ 319.020253] dump_stack+0x172/0x1f0 [ 319.023900] nmi_cpu_backtrace.cold+0x63/0xa4 [ 319.028471] ? lapic_can_unplug_cpu.cold+0x45/0x45 [ 319.033412] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 319.038699] arch_trigger_cpumask_backtrace+0x14/0x20 [ 319.043967] rcu_dump_cpu_stacks+0x189/0x1d5 [ 319.048424] rcu_check_callbacks.cold+0x5e3/0xd90 [ 319.053301] ? trace_hardirqs_off+0x62/0x220 [ 319.057754] update_process_times+0x32/0x80 [ 319.062216] tick_sched_handle+0xa2/0x190 [ 319.066377] tick_sched_timer+0x47/0x130 [ 319.070448] __hrtimer_run_queues+0x33b/0xdc0 [ 319.075098] ? tick_sched_do_timer+0x1b0/0x1b0 [ 319.079685] ? hrtimer_fixup_activate+0x30/0x30 [ 319.084420] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 319.089469] ? ktime_get_update_offsets_now+0x2d3/0x440 [ 319.095199] hrtimer_interrupt+0x314/0x770 [ 319.099465] smp_apic_timer_interrupt+0x111/0x550 [ 319.104318] apic_timer_interrupt+0xf/0x20 [ 319.108550] RIP: 0010:write_comp_data+0x68/0x70 [ 319.113221] Code: 00 00 4e 8d 14 dd 28 00 00 00 4d 39 d0 72 1b 49 83 c1 01 4a 89 7c 10 e0 4a 89 74 10 e8 4a 89 54 10 f0 4a 89 4c d8 20 4c 89 08 0f 1f 80 00 00 00 00 55 40 0f b6 d6 40 0f b6 f7 31 ff 48 89 e5 [ 319.132122] RSP: 0000:ffff8880ae807530 EFLAGS: 00000206 ORIG_RAX: ffffffffffffff13 [ 319.141238] RAX: 0000000000000501 RBX: ffff88808c9c22f8 RCX: ffffffff858e7de6 [ 319.148528] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000001 [ 319.155803] RBP: ffff8880ae807538 R08: ffff888097e44640 R09: 0000000000000005 [ 319.163077] R10: ffff888097e44f88 R11: 00000000199629a7 R12: dffffc0000000000 [ 319.170352] R13: ffff88808c9c2040 R14: 0000000000000001 R15: 0000000000000000 [ 319.177663] ? apic_timer_interrupt+0xa/0x20 [ 319.182167] ? hhf_dequeue+0x5b6/0xa00 [ 319.186070] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 319.191606] hhf_dequeue+0x5b6/0xa00 [ 319.195423] __qdisc_run+0x1e7/0x1960 [ 319.199297] __dev_queue_xmit+0x165c/0x2fe0 [ 319.203630] ? netdev_pick_tx+0x300/0x300 [ 319.207824] ? __lock_acquire+0x6ee/0x49c0 [ 319.212141] ? ip6t_do_table+0xdd1/0x1c90 [ 319.216991] ? ip6t_do_table+0xd7b/0x1c90 [ 319.221162] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 319.226783] ? check_preemption_disabled+0x48/0x290 [ 319.231802] dev_queue_xmit+0x18/0x20 [ 319.235591] ? dev_queue_xmit+0x18/0x20 [ 319.239658] neigh_direct_output+0x16/0x20 [ 319.243967] ip6_finish_output2+0xb7f/0x2550 [ 319.248386] ? ip6_forward_finish+0x4d0/0x4d0 [ 319.252879] ? lock_downgrade+0x810/0x810 [ 319.257095] ? kasan_check_read+0x11/0x20 [ 319.261370] ip6_finish_output+0x574/0xbe0 [ 319.265720] ? ip6_finish_output+0x574/0xbe0 [ 319.270149] ip6_output+0x235/0x7c0 [ 319.273799] ? ip6_finish_output+0xbe0/0xbe0 [ 319.278274] ? ip6_fragment+0x3770/0x3770 [ 319.282508] ndisc_send_skb+0xf3b/0x1460 [ 319.286573] ? nf_hook.constprop.0+0x560/0x560 [ 319.291165] ? memset+0x32/0x40 [ 319.294462] ndisc_send_rs+0x134/0x6d0 [ 319.298369] addrconf_rs_timer+0x30f/0x680 [ 319.302607] ? ipv6_get_lladdr+0x490/0x490 [ 319.306855] call_timer_fn+0x18d/0x720 [ 319.310760] ? ipv6_get_lladdr+0x490/0x490 [ 319.314992] ? process_timeout+0x40/0x40 [ 319.319047] ? run_timer_softirq+0x647/0x1700 [ 319.323549] ? trace_hardirqs_on+0x67/0x220 [ 319.327928] ? kasan_check_read+0x11/0x20 [ 319.332110] ? ipv6_get_lladdr+0x490/0x490 [ 319.336368] run_timer_softirq+0x652/0x1700 [ 319.340703] ? add_timer+0xbe0/0xbe0 [ 319.344493] ? kvm_clock_read+0x28/0x30 [ 319.348520] ? sched_clock+0x2e/0x50 [ 319.352258] __do_softirq+0x25c/0x921 [ 319.356079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 319.361618] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 319.367270] irq_exit+0x180/0x1d0 [ 319.370722] smp_apic_timer_interrupt+0x13b/0x550 [ 319.375562] apic_timer_interrupt+0xf/0x20 [ 319.379784] [ 319.382018] RIP: 0033:0x426cd4 [ 319.385209] Code: 00 00 e8 af 8d ff ff 8b 05 e1 8d 3d 01 83 f8 02 75 18 48 8b 44 24 60 48 89 04 24 e8 66 91 ff ff 48 8b 6c 24 70 48 83 c4 78 c3 <0f> b6 05 1b 8d 3d 01 84 c0 75 dd eb e9 31 c0 eb 26 48 89 44 24 50 [ 319.404192] RSP: 002b:000000c420149f38 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff13 [ 319.411892] RAX: 0000000000000001 RBX: 0000000000000002 RCX: 000000c420084480 [ 319.419162] RDX: 000000c420000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 319.426431] RBP: 000000c420149fa8 R08: 0000000000000000 R09: 0000000000000000 [ 319.434051] R10: 00000000009a9442 R11: 0000000000000004 R12: 0000000000000000 [ 319.441305] R13: 0000000000000000 R14: 000000c42002b2b0 R15: 0000000000000100 [ 319.455121] rcu: INFO: rcu_sched detected stalls on CPUs/tasks: [ 319.461234] rcu: 0-....: (10676 ticks this GP) idle=64a/1/0x4000000000000002 softirq=13051/13292 fqs=4712 [ 319.471110] rcu: (detected by 1, t=10534 jiffies, g=-963, q=2) [ 319.477182] Sending NMI from CPU 1 to CPUs 0: [ 319.482468] NMI backtrace for cpu 0 [ 319.482474] CPU: 0 PID: 7721 Comm: syz-fuzzer Not tainted 4.19.72 #0 [ 319.482480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.482484] RIP: 0010:hhf_dequeue+0x636/0xa00 [ 319.482494] Code: 48 c1 ea 03 42 80 3c 22 00 0f 85 7c 03 00 00 4d 89 3e e8 3d d8 dc fb 4d 8d b5 58 03 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 <0f> 85 4e 03 00 00 4d 8b bd 58 03 00 00 48 89 df 48 8b 55 c8 4c 89 [ 319.482498] RSP: 0000:ffff8880ae807548 EFLAGS: 00000246 [ 319.482505] RAX: 1ffff11011938473 RBX: ffff88808c9c22f8 RCX: ffffffff858e7de6 [ 319.482510] RDX: 0000000000000100 RSI: ffffffff858e7e53 RDI: ffff88808c9c2398 [ 319.482515] RBP: ffff8880ae807598 R08: ffff888097e44640 R09: 0000000000000005 [ 319.482520] R10: ffff888097e44f88 R11: 00000000199629a7 R12: dffffc0000000000 [ 319.482524] R13: ffff88808c9c2040 R14: ffff88808c9c2398 R15: ffff88808c9c2390 [ 319.482530] FS: 000000c42013a090(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 319.482534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.482539] CR2: 000000c440c35000 CR3: 00000000832bb000 CR4: 00000000001426f0 [ 319.482543] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 319.482548] DR3: 0000000000000480 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 319.482551] Call Trace: [ 319.482553] [ 319.482557] __qdisc_run+0x1e7/0x1960 [ 319.482560] __dev_queue_xmit+0x165c/0x2fe0 [ 319.482564] ? netdev_pick_tx+0x300/0x300 [ 319.482567] ? __lock_acquire+0x6ee/0x49c0 [ 319.482571] ? ip6t_do_table+0xdd1/0x1c90 [ 319.482574] ? ip6t_do_table+0xd7b/0x1c90 [ 319.482578] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 319.482582] ? check_preemption_disabled+0x48/0x290 [ 319.482586] dev_queue_xmit+0x18/0x20 [ 319.482589] ? dev_queue_xmit+0x18/0x20 [ 319.482592] neigh_direct_output+0x16/0x20 [ 319.482596] ip6_finish_output2+0xb7f/0x2550 [ 319.482599] ? ip6_forward_finish+0x4d0/0x4d0 [ 319.482603] ? lock_downgrade+0x810/0x810 [ 319.482606] ? kasan_check_read+0x11/0x20 [ 319.482610] ip6_finish_output+0x574/0xbe0 [ 319.482613] ? ip6_finish_output+0x574/0xbe0 [ 319.482616] ip6_output+0x235/0x7c0 [ 319.482620] ? ip6_finish_output+0xbe0/0xbe0 [ 319.482623] ? ip6_fragment+0x3770/0x3770 [ 319.482627] ndisc_send_skb+0xf3b/0x1460 [ 319.482630] ? nf_hook.constprop.0+0x560/0x560 [ 319.482633] ? memset+0x32/0x40 [ 319.482636] ndisc_send_rs+0x134/0x6d0 [ 319.482640] addrconf_rs_timer+0x30f/0x680 [ 319.482643] ? ipv6_get_lladdr+0x490/0x490 [ 319.482647] call_timer_fn+0x18d/0x720 [ 319.482650] ? ipv6_get_lladdr+0x490/0x490 [ 319.482654] ? process_timeout+0x40/0x40 [ 319.482657] ? run_timer_softirq+0x647/0x1700 [ 319.482661] ? trace_hardirqs_on+0x67/0x220 [ 319.482664] ? kasan_check_read+0x11/0x20 [ 319.482667] ? ipv6_get_lladdr+0x490/0x490 [ 319.482671] run_timer_softirq+0x652/0x1700 [ 319.482674] ? add_timer+0xbe0/0xbe0 [ 319.482677] ? kvm_clock_read+0x28/0x30 [ 319.482680] ? sched_clock+0x2e/0x50 [ 319.482683] __do_softirq+0x25c/0x921 [ 319.482686] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 319.482690] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 319.482693] irq_exit+0x180/0x1d0 [ 319.482696] smp_apic_timer_interrupt+0x13b/0x550 [ 319.482699] apic_timer_interrupt+0xf/0x20 [ 319.482701] [ 319.482704] RIP: 0033:0x426cd4 [ 319.482713] Code: 00 00 e8 af 8d ff ff 8b 05 e1 8d 3d 01 83 f8 02 75 18 48 8b 44 24 60 48 89 04 24 e8 66 91 ff ff 48 8b 6c 24 70 48 83 c4 78 c3 <0f> b6 05 1b 8d 3d 01 84 c0 75 dd eb e9 31 c0 eb 26 48 89 44 24 50 [ 319.482716] RSP: 002b:000000c420149f38 EFLAGS: 00000297 ORIG_RAX: ffffffffffffff13 [ 319.482724] RAX: 0000000000000001 RBX: 0000000000000002 RCX: 000000c420084480 [ 319.482728] RDX: 000000c420000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 319.482732] RBP: 000000c420149fa8 R08: 0000000000000000 R09: 0000000000000000 [ 319.482737] R10: 00000000009a9442 R11: 0000000000000004 R12: 0000000000000000 [ 319.482741] R13: 0000000000000000 R14: 000000c42002b2b0 R15: 0000000000000100