[ 56.357282] audit: type=1800 audit(1539108426.393:27): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 57.902709] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 60.052056] random: sshd: uninitialized urandom read (32 bytes read) [ 60.753606] random: sshd: uninitialized urandom read (32 bytes read) [ 63.133114] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.4' (ECDSA) to the list of known hosts. [ 68.875781] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/09 18:07:20 fuzzer started [ 73.690745] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/09 18:07:26 dialing manager at 10.128.0.26:44001 2018/10/09 18:07:26 syscalls: 1 2018/10/09 18:07:26 code coverage: enabled 2018/10/09 18:07:26 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/09 18:07:26 setuid sandbox: enabled 2018/10/09 18:07:26 namespace sandbox: enabled 2018/10/09 18:07:26 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/09 18:07:26 fault injection: enabled 2018/10/09 18:07:26 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/09 18:07:26 net packed injection: enabled 2018/10/09 18:07:26 net device setup: enabled [ 78.898013] random: crng init done 18:09:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0405519, &(0x7f0000001000)) [ 190.426284] IPVS: ftp: loaded support on port[0] = 21 [ 192.837803] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.844413] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.853092] device bridge_slave_0 entered promiscuous mode [ 193.013209] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.019667] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.028309] device bridge_slave_1 entered promiscuous mode [ 193.174045] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 193.318750] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 18:09:23 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400), 0x0) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000880)="6e9ee8630f8b0ab06df4e884ff9b7707c22dc082ad48de3ba284dc39e025a98f", 0x20) recvmmsg(r1, &(0x7f0000005d00)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/223, 0x200004df}], 0x1, &(0x7f0000000500)=""/198, 0xc6}}], 0x1, 0x0, &(0x7f0000005ec0)) [ 193.758158] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 194.029544] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 194.340783] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 194.348055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 194.539357] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 194.546508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 194.599963] IPVS: ftp: loaded support on port[0] = 21 [ 195.273394] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 195.281528] team0: Port device team_slave_0 added [ 195.586977] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 195.595336] team0: Port device team_slave_1 added [ 195.826687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 195.834098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.843186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 196.135069] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 196.142133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 196.151309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.370012] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 196.377751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 196.386887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 196.629356] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 196.637106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 196.646406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.458562] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.465450] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.474122] device bridge_slave_0 entered promiscuous mode [ 198.690280] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.697040] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.705634] device bridge_slave_1 entered promiscuous mode [ 198.848776] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 199.068275] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 199.271081] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.277883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.285205] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.291712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.300902] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 199.307668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 18:09:29 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000280)=@assoc_value, 0x8) [ 199.893709] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 200.200331] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 200.495797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 200.503101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.528199] IPVS: ftp: loaded support on port[0] = 21 [ 200.715519] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 200.722902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.651136] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 201.659304] team0: Port device team_slave_0 added [ 201.859957] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 201.868333] team0: Port device team_slave_1 added [ 202.180651] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 202.189570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.198808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.478708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 202.486251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.495477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.771000] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 202.778803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.787967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.137502] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 203.145758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.155003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.535218] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.541842] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.550454] device bridge_slave_0 entered promiscuous mode [ 205.837191] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.843912] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.853012] device bridge_slave_1 entered promiscuous mode [ 206.119697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 206.320405] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.327062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.334141] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.340656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.349869] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 206.446358] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 207.063111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.287696] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 207.604865] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 207.840041] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 207.849559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.088427] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 208.095644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 18:09:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xff) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) [ 209.167003] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 209.175513] team0: Port device team_slave_0 added [ 209.346150] IPVS: ftp: loaded support on port[0] = 21 [ 209.568848] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 209.577299] team0: Port device team_slave_1 added [ 209.876749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 209.884122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.893162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.307337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 210.314760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.323772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.747838] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 210.755688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 210.764894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.132939] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 211.141175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.151097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.224581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.668267] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 215.027230] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 215.033763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.041727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.207138] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.213697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.220633] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.227206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.236125] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 215.300759] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.307310] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.315895] device bridge_slave_0 entered promiscuous mode [ 215.563795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 215.638359] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.644978] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.653686] device bridge_slave_1 entered promiscuous mode [ 216.006236] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 216.385743] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.414826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 217.420393] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.744332] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.083175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 218.090246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.479790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 218.487016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 18:09:49 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4002) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) [ 219.730592] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 219.738774] team0: Port device team_slave_0 added [ 220.178922] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 220.187183] team0: Port device team_slave_1 added [ 220.441393] IPVS: ftp: loaded support on port[0] = 21 [ 220.718712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 220.725967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.734963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.133274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 221.142056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.151121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.510075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.626216] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 221.644568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.653744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.051230] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 222.059039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.068361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.168238] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 224.804040] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 224.810387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.818547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 226.224822] 8021q: adding VLAN 0 to HW filter on device team0 18:09:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8937, &(0x7f0000000080)={'bond0\x00', r1}) 18:09:56 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x102d}, 0xbc68bc6a5833c2c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x20001}, [@ldst={0x4, 0x18d1fb, 0x5, 0x1d1}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x1cc35f]}, 0x48) [ 227.005496] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.011971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.019008] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.025567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.034150] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready 18:09:57 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x102d}, 0xbc68bc6a5833c2c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x20001}, [@ldst={0x4, 0x18d1fb, 0x5, 0x1d1}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [0x1cc35f]}, 0x48) 18:09:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000005, 0x0, &(0x7f0000000240)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4000000000400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000100)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000100)}) [ 227.614185] binder: 6899:6902 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 227.646393] binder: 6899:6903 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 227.862579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.930569] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.937134] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.945680] device bridge_slave_0 entered promiscuous mode 18:09:58 executing program 0: r0 = socket(0x10, 0x200000000080002, 0x0) connect$netlink(r0, &(0x7f00000000c0), 0x9) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x40000) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x0, 0x30}) 18:09:58 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r1}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) [ 228.459853] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.466654] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.475267] device bridge_slave_1 entered promiscuous mode 18:09:58 executing program 0: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname(r0, &(0x7f00000002c0)=@can, &(0x7f0000000100)=0x80) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) [ 228.900888] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 18:09:59 executing program 0: r0 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="48010000feffffff0800000000000000060000000000000000000000f2424f3533603b878299e66734739ae48326c9b565e89621212335afb1eef1331cd3b0a9c1773a8947dd0d370c594c11d17fbee846b0b8d2697979f2c36d3ee78ad321fbea"], 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0xf401, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) [ 229.411520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 230.600886] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 230.948813] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 231.397530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 231.404787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.784377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 231.791493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.383113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.701037] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 232.709343] team0: Port device team_slave_0 added [ 233.041159] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.049265] team0: Port device team_slave_1 added [ 233.238841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 233.246040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.254927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.518459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 233.525707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.534599] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.566379] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.838905] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.847347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.856257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.138913] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 234.146823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.155797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.619054] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 234.625548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.633551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 18:10:05 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r2, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) [ 235.720986] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.100720] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.107301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.114354] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.120802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.129261] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 237.136097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.331328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.211747] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 241.039701] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 241.046226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.054196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.839923] 8021q: adding VLAN 0 to HW filter on device team0 18:10:12 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='bond0\x00', 0x3ab) r1 = socket$inet6(0xa, 0x80003, 0x2) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) sendmmsg(r0, &(0x7f0000005a00)=[{{&(0x7f00000001c0)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000005500), 0x0, &(0x7f0000005540)}}], 0x1, 0x0) [ 245.189077] 8021q: adding VLAN 0 to HW filter on device bond0 18:10:15 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xff) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) [ 245.711856] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 246.126680] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 246.132967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.140643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.430165] 8021q: adding VLAN 0 to HW filter on device team0 18:10:18 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4002) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 18:10:18 executing program 0: timer_create(0x0, &(0x7f0000001380)={0x0, 0x200000000000000, 0x4, @thr={&(0x7f0000001240), &(0x7f0000001300)}}, &(0x7f00000013c0)) 18:10:18 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x200) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x10205, 0x1, 0x6000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'trusted.', '/dev/vcs#\x00'}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x40, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000380)={0x10, 0x30, 0xfa00, {&(0x7f0000000340), 0x3, {0xa, 0x4e21, 0x1000, @remote, 0x6}, r2}}, 0x38) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000500)={@generic={0x1a, "7c1f304950ee2aa13752e3bc33ee6a14cfca2614dda990f376391ee50d0225e79166b6f8b9ebfbf49ea89948a385a514e44ca2719d6c5a0b1b9abf192ca97dc368b622a7899e92c8352b25a22058ee6f650ee0d1898be952c5b759c4adf3787b0edd4c6fdb3fa18cfb02e4e5bc0b3c60d0839eec16ad91cfd010a01f1c78"}, {&(0x7f00000003c0)=""/193, 0xc1}, &(0x7f00000004c0), 0x9}, 0xa0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000005c0)={0x0, 0x0, 0x4, 0x0, [], [{0x1ff, 0x3, 0xde9, 0x3f, 0x6, 0x1f}, {0x200000, 0x1, 0xffffffffffffffff, 0x10000, 0x200, 0x2}], [[], [], [], []]}) faccessat(r1, &(0x7f0000000780)='./file0\x00', 0x40, 0x400) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x1000) r3 = getpgrp(0x0) fcntl$setownex(r1, 0xf, &(0x7f00000007c0)={0x1, r3}) rt_sigaction(0x19, &(0x7f0000000880)={&(0x7f0000000800)="43aef36fc4c241932ca7460fd409f0440fc14f53410f57138f8860b6f475df8900800000c4c125154cea0067da518e", {0x40}, 0xc0000001, &(0x7f0000000840)="650f0009f32e0f405134f33e40d0c7c4216164d83e65450f1a4d24df7e87364580f3d6c4027d0eb7cd810000c4e17b2c1046dc7aff"}, &(0x7f0000000940)={&(0x7f00000008c0)="0f01d836f2470fd6cff30faedec4827d9ea2000880410f63aa74bf000080e5008f0978e306c4e17e6fe0f26e8fc978d23b", {}, 0x0, &(0x7f0000000900)="f04208130fae8e16f29f47f243aec44259b8aee87b00000fedc63e0f2e7d0067642668219c00002645756c3e0f626169c4a3fbf06d0f07"}, 0x8, &(0x7f0000000980)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000009c0)={0xaa, 0x20}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/mixer\x00', 0x88200, 0x0) read(r4, &(0x7f0000000a40)=""/253, 0xfd) write$P9_RREMOVE(r4, &(0x7f0000000b40)={0x7, 0x7b, 0x2}, 0x7) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000032c0)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f00000033c0)=0xe8) recvfrom(r4, &(0x7f0000000b80)=""/254, 0xfe, 0x60, &(0x7f0000003400)=@xdp={0x2c, 0x3, r5, 0xf}, 0x80) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000003480)={0x5, @remote}) setsockopt$RDS_GET_MR(r4, 0x114, 0x2, &(0x7f0000004500)={{&(0x7f00000034c0)=""/4096, 0x1000}, &(0x7f00000044c0), 0x3}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000004580)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0xc0, 0x0, 0x0, 0xc0, 0xc0, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, &(0x7f0000004540), {[{{@ip={@multicast2, @remote, 0xffffffff, 0xffffff00, 'bridge_slave_1\x00', 'teql0\x00', {}, {0xff}, 0xff, 0x3, 0x4}, 0x0, 0x98, 0xc0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x4, 0x6}}}, {{@ip={@loopback, @empty, 0xff000000, 0x0, 'yam0\x00', 'nr0\x00', {0xff}, {0xff}, 0x5e, 0x3, 0x20}, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x1, [0x1f, 0x7ff, 0x25, 0x6, 0xb8c, 0x7], 0x8, 0xa71}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5e, 0x4, "f6da269e6a6b21ed066f2a6b35e62b9a598020e2d46bd7986b12ccbeebc3"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000004880)="ce23d49fbdc0987ee0a0f12ab793aa3df1c095febc08250de38e3f1fa94c91a7a801a75b", 0x24) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000048c0)=0x9, 0x2) r6 = getegid() r7 = getgid() getresgid(&(0x7f0000004900), &(0x7f0000004940)=0x0, &(0x7f0000004980)) setresgid(r6, r7, r8) 18:10:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)}}], 0x0, 0x0, &(0x7f0000000580)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4c, 0x0, &(0x7f0000000600)=[@acquire, @transaction={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000280)}}], 0x0, 0x0, &(0x7f0000000500)}) 18:10:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r2, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="7f454c4600000000090000000000000000000000000000000400000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffff0000000000000004000000000000000000000000000000cd9523cfd22f5e49e51bf88c3f12b9a2f52bcb0a07032d005b9515e3322b8dd467548041f01c8306985ae20029e0b4df504949bca1b5"], 0xff) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) [ 248.417070] binder: 7481:7485 Acquire 1 refcount change on invalid ref 0 ret -22 [ 248.425721] binder: 7481:7485 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 248.434691] binder: 7481:7485 unknown command 0 [ 248.439909] binder: 7481:7485 ioctl c0306201 200005c0 returned -22 [ 248.512344] hrtimer: interrupt took 276214 ns 18:10:18 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="7f454c4600000000090000000000000000000000000000000400000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffff0000000000000004000000000000000000000000000000cd9523cfd22f5e49e51bf88c3f12b9a2f52bcb0a07032d005b9515e3322b8dd467548041f01c8306985ae20029e0b4df504949bca1b5"], 0xff) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:18 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r2, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:18 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4002) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 18:10:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000800)=""/78, 0x4e, 0x0, 0x0, 0x0) bind$rds(r0, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x3c0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x8}}], 0x48}, 0x0) 18:10:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}}, 0x1c) 18:10:19 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4002) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 18:10:19 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="7f454c4600000000090000000000000000000000000000000400000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffff0000000000000004000000000000000000000000000000cd9523cfd22f5e49e51bf88c3f12b9a2f52bcb0a07032d005b9515e3322b8dd467548041f01c8306985ae20029e0b4df504949bca1b5"], 0xff) shutdown(r0, 0x2) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:19 executing program 0: socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x4004, &(0x7f0000000140)=0x0) io_submit(r0, 0x0, &(0x7f0000000240)) [ 249.390778] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 249.921618] IPVS: ftp: loaded support on port[0] = 21 [ 251.349729] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.356247] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.364549] device bridge_slave_0 entered promiscuous mode [ 251.441490] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.448017] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.456092] device bridge_slave_1 entered promiscuous mode [ 251.533267] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 251.610874] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 251.845389] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 251.926732] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 252.084834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 252.091765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.320320] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 252.327883] team0: Port device team_slave_0 added [ 252.403445] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 252.411035] team0: Port device team_slave_1 added [ 252.487211] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.566968] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.646064] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 252.653384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.662385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.741413] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 252.749063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.758222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 253.615395] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.621804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.628722] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.635232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.643902] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 254.033231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.708303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.999259] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 257.288547] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 257.294894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.302713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.587550] 8021q: adding VLAN 0 to HW filter on device team0 18:10:29 executing program 5: 18:10:29 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r2, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:29 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4002) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r0, 0xc) 18:10:29 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vcs\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000030bb36aa0c08046e"], 0x1) 18:10:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="7f454c4600000000090000000000000000000000000000000400000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffff0000000000000004000000000000000000000000000000cd9523cfd22f5e49e51bf88c3f12b9a2f52bcb0a07032d005b9515e3322b8dd467548041f01c8306985ae20029e0b4df504949bca1b5"], 0xff) shutdown(r0, 0x2) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:29 executing program 0: 18:10:29 executing program 0: 18:10:29 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4002) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r0, 0xc) 18:10:29 executing program 5: 18:10:29 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xff) shutdown(r0, 0x2) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r2, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:30 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vcs\x00', 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000030bb36aa0c08046e"], 0x1) 18:10:30 executing program 0: 18:10:30 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4002) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) shmctl$SHM_UNLOCK(r0, 0xc) 18:10:30 executing program 5: 18:10:30 executing program 2: 18:10:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xff) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:30 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r2, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:30 executing program 0: 18:10:30 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4002) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 18:10:31 executing program 2: 18:10:31 executing program 5: 18:10:31 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4002) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 18:10:31 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x20000000ef6b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2e828903, &(0x7f0000000500), &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000440)) 18:10:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r2, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:31 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_ir_bytes\x00', 0x275a, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f00000000c0)) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffe97) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x84000) 18:10:31 executing program 2: 18:10:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r2, &(0x7f0000000540)='i', 0x1) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:31 executing program 0: 18:10:31 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4002) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 18:10:31 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:31 executing program 2: 18:10:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r2, &(0x7f0000000540)='i', 0x1) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:32 executing program 0: 18:10:32 executing program 2: 18:10:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r2, &(0x7f0000000540)='i', 0x1) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:32 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:32 executing program 5: 18:10:32 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 18:10:32 executing program 0: 18:10:32 executing program 2: 18:10:32 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:33 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 18:10:33 executing program 2: 18:10:33 executing program 0: 18:10:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:33 executing program 5: 18:10:33 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xff) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:33 executing program 2: 18:10:33 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 18:10:33 executing program 0: 18:10:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:34 executing program 2: 18:10:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xff) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:34 executing program 5: 18:10:34 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4002) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 18:10:34 executing program 0: 18:10:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:34 executing program 5: 18:10:34 executing program 2: 18:10:34 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4002) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 18:10:34 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xff) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:34 executing program 5: 18:10:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:34 executing program 0: 18:10:35 executing program 2: 18:10:35 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4002) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 18:10:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:35 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="7f454c4600000000090000000000000000000000000000000400000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffff0000000000000004000000000000000000000000000000cd9523cfd22f5e49e51bf88c3f12b9a2f52bcb0a07032d005b9515e3322b8dd467548041f01c8306985ae20029e0b4df504949bca1b5"], 0xff) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:35 executing program 5: 18:10:35 executing program 0: 18:10:35 executing program 2: 18:10:35 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r1, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:35 executing program 4: shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4002) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 18:10:35 executing program 0: 18:10:35 executing program 2: 18:10:36 executing program 5: 18:10:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xff) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:36 executing program 2: 18:10:36 executing program 5: 18:10:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r1, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:36 executing program 4: shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 18:10:36 executing program 0: 18:10:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x900}, 0xc, &(0x7f0000000a80)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0x311}, 0x1c}}, 0x0) 18:10:36 executing program 5: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$inet6(0xa, 0x0, 0x0, &(0x7f0000000200)) r0 = getpid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ptrace(0x4206, r0) waitid(0x0, 0x0, &(0x7f00000000c0), 0x1000002, 0x0) tkill(r0, 0x40) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x0, 0x4) waitid(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000380)) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) 18:10:36 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xff) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:36 executing program 4: shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 18:10:37 executing program 5: 18:10:37 executing program 4: shmctl$SHM_LOCK(0x0, 0xb) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 18:10:37 executing program 0: 18:10:37 executing program 2: 18:10:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r1, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xff) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:37 executing program 4: 18:10:37 executing program 5: r0 = socket$inet6(0x10, 0x100000003, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000280)=@nl, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a280930a06000000a84308910000003900080008000a0000dc1338d54400009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, &(0x7f0000000100)}, 0x0) creat(&(0x7f0000001140)='./file0\x00', 0x0) 18:10:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x1b, &(0x7f0000000040)={'security\x00', 0x2, [{}, {}]}, 0x48) close(0xffffffffffffffff) 18:10:37 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xff) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0xdf, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') getpgrp(0x0) preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 18:10:37 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r1, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:38 executing program 4: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@link_local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @igmp={0x11, 0x0, 0x0, @empty, "b3000000"}}}}}, &(0x7f0000000000)={0x1, 0x0, [0x4, 0xfffffffffffffffc, 0x80000000, 0x7d6]}) 18:10:38 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f00000000c0)=0x8) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000080)=0x400000080002) 18:10:38 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20000000) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x1000000) 18:10:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002b40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000003ac0)={&(0x7f0000000040)={0x10, 0xf0ffffff}, 0xc, &(0x7f0000003a80)={&(0x7f0000003240)={0x20, r1, 0x225, 0x0, 0x0, {0x2}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}}, 0x0) 18:10:38 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r1, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:38 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7e3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xffffffffffffffb2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000480)='veth1_to_team\x00', 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000800)={@host}) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffe01, @dev={0xfe, 0x80, [], 0x1f}}}, 0xfff, 0x6}, 0x90) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) ioprio_set$pid(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) signalfd(0xffffffffffffffff, &(0x7f00000007c0)={0xfffffffffffeffff}, 0x8) 18:10:38 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0x8b2}, &(0x7f0000001380)=0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xff) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:38 executing program 2: msgsnd(0x0, &(0x7f0000000040), 0x8, 0x0) 18:10:38 executing program 0: r0 = socket$inet6(0x10, 0x100000003, 0x0) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000280)=@nl, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)="5500000018007fd500fe01b2a4a280930a06000000a84308910000003900080008000a0000dc1338d54400009b84136ef75afb83de448daa72540d816ed2c55327c43ab8220000060cec4fab91d400000000000000", 0x55}], 0x1, &(0x7f0000000100)}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) 18:10:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000140)=0x4, 0x4) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)=""/79, &(0x7f0000000180)=0x4f) getpeername$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000300)=0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev}, 0xffffffffffffff30) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r1 = open(&(0x7f0000074000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000002c0), 0x2) sync_file_range(r0, 0x7, 0x0, 0x6) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000001c0)) r2 = memfd_create(&(0x7f0000000280)='\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0x0) execveat(r2, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) 18:10:39 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r1, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)) 18:10:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x5, 0xedc}, &(0x7f00000001c0)=0x10) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="7f454c4600000000090000000000000000000000000000000400000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffffff0000000000000004000000000000000000000000000000cd9523cfd22f5e49e51bf88c3f12b9a2f52bcb0a07032d005b9515e3322b8dd467548041f01c8306985ae20029e0b4df504949bca1b5"], 0xff) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:39 executing program 0: r0 = socket$inet(0x10, 0x400000000000003, 0x6) recvmmsg(r0, &(0x7f000000a280)=[{{&(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000480)=""/188, 0xbc}, {&(0x7f0000000540)}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/223, 0xdf}, {&(0x7f0000001680)=""/116, 0x74}, {&(0x7f0000001700)=""/185, 0xb9}, {&(0x7f00000017c0)=""/53, 0x35}], 0x7, &(0x7f0000001a80)=""/121, 0x79}, 0x1}], 0x1, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000440)="1b0000001200030207fffd946fa283080700190000000000000085", 0x1b}], 0x1}, 0x0) 18:10:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x100000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="480000001400199009004b0101048c01010000ebbd2e2ab9fc5f0000632379eb000000000000551f5f0028213ee20607000000000000003f666674a8ffff00c7e5ed5e00000000c8", 0x48}], 0x1) 18:10:39 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7e3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xffffffffffffffb2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000480)='veth1_to_team\x00', 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000800)={@host}) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffe01, @dev={0xfe, 0x80, [], 0x1f}}}, 0xfff, 0x6}, 0x90) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) ioprio_set$pid(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) signalfd(0xffffffffffffffff, &(0x7f00000007c0)={0xfffffffffffeffff}, 0x8) 18:10:39 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r1, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)) [ 269.454005] netlink: 'syz-executor0': attribute type 25 has an invalid length. [ 269.461548] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. [ 269.566184] netlink: 'syz-executor0': attribute type 25 has an invalid length. [ 269.573830] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 18:10:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f00000000c0)) 18:10:39 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7e3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xffffffffffffffb2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000480)='veth1_to_team\x00', 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000800)={@host}) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffe01, @dev={0xfe, 0x80, [], 0x1f}}}, 0xfff, 0x6}, 0x90) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) ioprio_set$pid(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) signalfd(0xffffffffffffffff, &(0x7f00000007c0)={0xfffffffffffeffff}, 0x8) 18:10:39 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0x2, 0x80000000, 0xfffffffffffffff7}) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xff) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:39 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000c80)=[{&(0x7f0000000840)}], 0x1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$inet6(0xa, 0x10000000803, 0x5) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") write(r1, &(0x7f00000027c0)="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", 0x5c0) splice(r0, 0x0, r2, 0x0, 0x20000000003, 0x0) 18:10:40 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r1, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)) 18:10:40 executing program 5: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0//ile0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 18:10:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0xf4, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x4d) 18:10:40 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7e3, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000840)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000600)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xffffffffffffffb2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000480)='veth1_to_team\x00', 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000800)={@host}) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e20, 0xfffffffffffffe01, @dev={0xfe, 0x80, [], 0x1f}}}, 0xfff, 0x6}, 0x90) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)) ioprio_set$pid(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000280)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) signalfd(0xffffffffffffffff, &(0x7f00000007c0)={0xfffffffffffeffff}, 0x8) 18:10:40 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x40, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xff) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) 18:10:40 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = memfd_create(&(0x7f0000000100)="9099f73a1c7a8d070fc9118d5475663b2ed16f0008f441b01fd923c640a21c6619ecb5cf774b4a64549d57962a838f8edd993560a2f848bc483a9d16f602d4739aa45b3d5930d1865232afa712497380f8733173c58546fb224a6dd2e652c54dc25570fce3a59c1ee353a2dcdd719edc15752cee6ea21a24186d1ba23b0b61719b96815f5cbbb9", 0x0) write(r1, &(0x7f0000000540)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)) 18:10:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r0, r2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 18:10:40 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x4, 0x0) 18:10:40 executing program 5: r0 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={"62726964676530003f01c3ffffff00"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00', 0xfffffffffffffffd}) semget(0xffffffffffffffff, 0x0, 0x0) [ 270.896488] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 270.919847] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.927107] bridge0: port 1(bridge_slave_0) entered disabled state 18:10:41 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r0 = inotify_init1(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x4208, r1) 18:10:41 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0xff) shutdown(r0, 0x2) write$binfmt_elf64(r0, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/20, 0x14}, 0x100) [ 270.975647] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.982197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.989251] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.995800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.002892] device bridge0 entered promiscuous mode [ 271.009176] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 271.046427] ================================================================== [ 271.053842] BUG: KMSAN: uninit-value in vmx_set_constant_host_state+0x1778/0x1830 [ 271.061489] CPU: 1 PID: 8165 Comm: syz-executor2 Not tainted 4.19.0-rc4+ #65 [ 271.068690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.078525] Call Trace: [ 271.081150] dump_stack+0x306/0x460 [ 271.084810] ? vmx_set_constant_host_state+0x1778/0x1830 [ 271.090331] kmsan_report+0x1a2/0x2e0 [ 271.094189] __msan_warning+0x7c/0xe0 [ 271.098034] vmx_set_constant_host_state+0x1778/0x1830 [ 271.103351] vmx_create_vcpu+0x3e6f/0x7870 [ 271.107620] ? kmsan_set_origin_inline+0x6b/0x120 [ 271.112502] ? __msan_poison_alloca+0x17a/0x210 [ 271.117223] ? vmx_vm_init+0x340/0x340 [ 271.121141] kvm_arch_vcpu_create+0x25d/0x2f0 [ 271.125686] kvm_vm_ioctl+0x13fd/0x33d0 [ 271.129698] ? __msan_poison_alloca+0x17a/0x210 [ 271.134396] ? do_vfs_ioctl+0x18a/0x2810 [ 271.138484] ? __se_sys_ioctl+0x1da/0x270 [ 271.142707] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 271.147570] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 271.152443] do_vfs_ioctl+0xcf3/0x2810 [ 271.156369] ? security_file_ioctl+0x92/0x200 [ 271.160898] __se_sys_ioctl+0x1da/0x270 [ 271.164910] __x64_sys_ioctl+0x4a/0x70 [ 271.168818] do_syscall_64+0xbe/0x100 [ 271.172655] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 271.177866] RIP: 0033:0x457579 [ 271.181073] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 271.200373] RSP: 002b:00007f10dce31c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.208109] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 271.215387] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 271.222667] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 271.229943] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10dce326d4 [ 271.237227] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 271.244522] [ 271.246160] Local variable description: ----dt@vmx_set_constant_host_state [ 271.253172] Variable was created at: [ 271.256903] vmx_set_constant_host_state+0x2b0/0x1830 [ 271.262111] vmx_create_vcpu+0x3e6f/0x7870 [ 271.266356] ================================================================== [ 271.273716] Disabling lock debugging due to kernel taint [ 271.279171] Kernel panic - not syncing: panic_on_warn set ... [ 271.279171] [ 271.286558] CPU: 1 PID: 8165 Comm: syz-executor2 Tainted: G B 4.19.0-rc4+ #65 [ 271.295144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.304519] Call Trace: [ 271.307142] dump_stack+0x306/0x460 [ 271.310816] panic+0x54c/0xafa [ 271.314068] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 271.319540] kmsan_report+0x2d3/0x2e0 [ 271.323377] __msan_warning+0x7c/0xe0 [ 271.327213] vmx_set_constant_host_state+0x1778/0x1830 [ 271.332518] vmx_create_vcpu+0x3e6f/0x7870 [ 271.336785] ? kmsan_set_origin_inline+0x6b/0x120 [ 271.341674] ? __msan_poison_alloca+0x17a/0x210 [ 271.346390] ? vmx_vm_init+0x340/0x340 [ 271.350309] kvm_arch_vcpu_create+0x25d/0x2f0 [ 271.354862] kvm_vm_ioctl+0x13fd/0x33d0 [ 271.358870] ? __msan_poison_alloca+0x17a/0x210 [ 271.363568] ? do_vfs_ioctl+0x18a/0x2810 [ 271.367687] ? __se_sys_ioctl+0x1da/0x270 [ 271.371863] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 271.376726] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 271.381605] do_vfs_ioctl+0xcf3/0x2810 [ 271.385548] ? security_file_ioctl+0x92/0x200 [ 271.390078] __se_sys_ioctl+0x1da/0x270 [ 271.394085] __x64_sys_ioctl+0x4a/0x70 [ 271.397988] do_syscall_64+0xbe/0x100 [ 271.401813] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 271.407013] RIP: 0033:0x457579 [ 271.410222] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 271.429134] RSP: 002b:00007f10dce31c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.436865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 271.444147] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004 [ 271.451428] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 271.458711] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10dce326d4 [ 271.466007] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 271.474145] Kernel Offset: disabled [ 271.477784] Rebooting in 86400 seconds..