Warning: Permanently added '10.128.0.55' (ECDSA) to the list of known hosts. 2018/12/22 06:54:37 fuzzer started 2018/12/22 06:54:41 dialing manager at 10.128.0.26:38057 2018/12/22 06:54:41 syscalls: 1 2018/12/22 06:54:41 code coverage: enabled 2018/12/22 06:54:41 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/22 06:54:41 setuid sandbox: enabled 2018/12/22 06:54:41 namespace sandbox: enabled 2018/12/22 06:54:41 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/22 06:54:41 fault injection: enabled 2018/12/22 06:54:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/22 06:54:41 net packet injection: enabled 2018/12/22 06:54:41 net device setup: enabled 06:57:55 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) close(r1) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) shutdown(0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/208, 0xd0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000180)={0x0, 'vlan0\x00'}, 0x18) syzkaller login: [ 265.980158] IPVS: ftp: loaded support on port[0] = 21 [ 267.426123] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.432880] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.441312] device bridge_slave_0 entered promiscuous mode [ 267.528051] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.534751] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.543027] device bridge_slave_1 entered promiscuous mode [ 267.623915] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 267.704417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 267.952915] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 268.039811] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 268.120103] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 268.127155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.211070] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 268.218145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.473161] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 268.481971] team0: Port device team_slave_0 added [ 268.562550] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 268.571278] team0: Port device team_slave_1 added [ 268.652079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.738773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.823074] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 268.830668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.840018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.925532] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 268.933189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.942428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 06:57:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)={0x1e5, 0x0, [{0x0, 0x1, 0x0, 0x0, @msi}, {0x0, 0x0, 0x0, 0x0, @sint}]}) [ 269.819134] IPVS: ftp: loaded support on port[0] = 21 [ 270.270889] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.277560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.284854] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.291434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.301091] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 270.307800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.218818] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.225538] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.233943] device bridge_slave_0 entered promiscuous mode [ 272.429338] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.436030] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.444527] device bridge_slave_1 entered promiscuous mode [ 272.528036] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 272.609469] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 272.920522] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 273.008837] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 273.693516] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 273.702243] team0: Port device team_slave_0 added [ 273.838290] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 273.847256] team0: Port device team_slave_1 added [ 274.003826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.163014] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.325712] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 274.333568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.342854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.480422] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 274.488214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.497659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 06:58:04 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x400, 0x2000) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) gettid() mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x40000, 0x0) epoll_create1(0xffeffffffffffff9) fstatfs(r0, &(0x7f0000000280)=""/74) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000100), 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x480000000803, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="550000001e007f5300fe01b2a4a280f20006000000a8430891000000080009000a000c0000dc9b131338d54400009b84136ef75afb83de448daa7227c43ab82291d4000000000000000000000000da06c6946739ca", 0x55}], 0x1}, 0x0) [ 275.268477] IPVS: ftp: loaded support on port[0] = 21 [ 276.235728] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.242347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.249407] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.256123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.265850] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 276.272405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.292365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.113451] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 277.748444] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 277.755224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.763488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.132767] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.139400] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.147580] device bridge_slave_0 entered promiscuous mode [ 278.230804] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.237409] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.245722] device bridge_slave_1 entered promiscuous mode [ 278.318250] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.454968] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 278.643291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 279.091947] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 279.296511] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 279.461091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 279.468323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 279.650858] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 279.658112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.185151] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 280.194093] team0: Port device team_slave_0 added [ 280.393644] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 280.402529] team0: Port device team_slave_1 added [ 280.566049] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 280.573163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.582488] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.764219] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 280.771285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.780571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.945776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 280.953649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.962927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 281.143911] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 281.151699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 281.160842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 06:58:11 executing program 3: r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x10000, 0x0) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) setpriority(0x0, 0x0, 0x72) getpid() setpriority(0x2, 0x0, 0x0) prctl$PR_SVE_SET_VL(0x32, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x0) ioctl$BLKROGET(r0, 0x125e, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 06:58:12 executing program 0: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"}) [ 282.568846] IPVS: ftp: loaded support on port[0] = 21 [ 282.616557] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 282.772950] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 06:58:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x3c, &(0x7f0000c86000), &(0x7f0000000000)=0x15c) 06:58:13 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)=@generic={0x0, "7ce62595fc59a6eb7d5f5957209475fb59bf42a91027c6e5be2a949a21e1d94779e4991f43905f97064ffbdd511637c39fb34001a126b5bb19b3c6942cce20aa5916580640da193846f181da07e183c1b99229a8d6da63ab96784324f0d43d3e6e5919951f22ac99cdfd78cd6510ddac231ce9ea3c7a3ef58c813a9226ec"}, 0x80, 0x0}, 0x0) r0 = socket(0x3, 0x8000f, 0x400) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000002e0008002cbd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="00006b00000001000b00040008000b0001ffffff08000b002500000008000b008b06000008000b000600000008000b000600000008000b000500000008000b000400000008000b0009000000587be1d4cfa82b9b6614c0d5131c1f8fd05cef320c24c6a8d5ec84cde6bc09ab6f97c303883ce265777b0f9bc7fbd7929e3819b057ca8c351bbeb0f0ffd4804ba19476c6d3c4f3bc8be094a1889a7b37abad5fba4f8a665ae3ae75235b2afd27e96999563452f558bef1c692fe3e12ca91ef13d20afe6ae7b8bdca3cde2b94b98f42f9a3e272e45b279c576f04edb4c5b9f64cae98cb3fb63c86624778e761d7d177b8"], 0x64}, 0x1, 0x0, 0x0, 0x4c051}, 0x24000000) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00\x00d\x00', 0x20, 0x2, 0x4a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, 0x0, &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'syz_tun\x00', 'bond_slave_0\x00', 'veth0_to_team\x00', 'veth0\x00', @link_local, [], @empty, [], 0x2a8, 0x2a8, 0x2d8, [@bpf0={'bpf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x210}]}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x7, 0x4, 0x5, 'gre0\x00', 'bpq0\x00', 'ip_vti0\x00', 'ip6gretap0\x00', @random="63ee5aef124d", [0xff, 0xff, 0xff, 0xff, 0xffffffffffffffff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x110, 0x110, 0x140, [@devgroup={'devgroup\x00', 0x18, {{0x3, 0x8c, 0x0, 0x2, 0x2}}}, @arp={'arp\x00', 0x38, {{0x30e, 0xfbff, 0x4, @local, 0x0, @broadcast, 0xffffffff, @random="c32d272b43fc", [0x0, 0x0, 0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff], 0x10, 0x20}}}]}}, @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}]}, 0x520) 06:58:13 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x301001, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0xc, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @remote}}}, 0x90) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x200000000400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000240)={{0x6, 0x6}, 'port0\x00', 0x22, 0x100000, 0x1, 0xfffffffeffffffff, 0xfffffffffffff071, 0x0, 0x1f, 0x0, 0x2, 0x5}) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x3) [ 283.493689] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.500313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.507608] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.514279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.523603] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 283.530205] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 06:58:13 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x301001, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0xc, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x0, 0x0, @remote}}}, 0x90) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x200000000400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000240)={{0x6, 0x6}, 'port0\x00', 0x22, 0x100000, 0x1, 0xfffffffeffffffff, 0xfffffffffffff071, 0x0, 0x1f, 0x0, 0x2, 0x5}) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x3) [ 283.873870] 8021q: adding VLAN 0 to HW filter on device bond0 06:58:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) membarrier(0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x100, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x1, 0x7, 0x9}}, 0x30) 06:58:14 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000180)={'eql\x00', 0x3}) r1 = socket$nl_route(0x10, 0x3, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x10, 0x2973) sendmsg$nl_route(r1, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x300000000000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="3800000069ed0105000000000000000073000000", @ANYRES32=0x0, @ANYBLOB="0000000000ff03000000000000000100730000000000000002000f0006000000"], 0x38}}, 0x0) setxattr$security_selinux(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:inetd_child_exec_t:s0\x00', 0x28, 0x3) 06:58:14 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000003a00)=0x1) 06:58:14 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x24f0, 0x80) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/vsock\x00', 0x200000, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000040)={0x100, 0x0, 0x3, [{0x0, 0x7, 0xb, 0x4, '/dev/vsock\x00'}, {0x5, 0x100000000, 0x1d, 0x8, 'bdev]\rmd5sumvboxnet0bdevwlan1'}, {0x5, 0x0, 0x19, 0x2, 'system*nodev#$)keyring]\\*'}, {0x0, 0x8, 0x4, 0x1, 'nfs\x00'}, {0x3, 0x7, 0x8, 0x54539f1, '\x1e/vmnet1'}, {0x0, 0x9, 0x0, 0xffffffffffffffab}]}, 0x100) perf_event_open(&(0x7f000000a000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc001, &(0x7f0000000140)=0xc0000000000000, 0x6, 0x4) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) mkdir(&(0x7f0000f4d000)='./file0\x00', 0x0) mount(&(0x7f00008deff8), &(0x7f0000343ff8)='./file0\x00', &(0x7f00007fc000)='nfs\x00', 0x0, &(0x7f000000a000)) fchmod(r0, 0x54) [ 284.866422] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 285.500273] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 285.506757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.514864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.049520] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.056279] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.064679] device bridge_slave_0 entered promiscuous mode [ 286.142574] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.249652] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.256500] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.264883] device bridge_slave_1 entered promiscuous mode [ 286.398666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 286.592325] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 287.193664] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 287.391904] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 287.522699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 287.529794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.721043] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 287.728234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 288.176562] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 288.185542] team0: Port device team_slave_0 added [ 288.332576] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 288.341445] team0: Port device team_slave_1 added [ 288.470133] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 288.477540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 288.486647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.609886] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 288.617105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.626187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 288.804584] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 288.813352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 288.822615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 288.939866] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 288.947983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 288.957276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 06:58:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x1}, 0x2c) r0 = socket$kcm(0xa, 0x2, 0x11) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000000)=0xfffffffffffffe01, 0x4) [ 290.795328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.930726] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.937362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.944575] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.951125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.960216] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 290.967232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.383670] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 291.922225] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 291.928611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.936825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.528125] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.777482] netlink: 49 bytes leftover after parsing attributes in process `syz-executor2'. 06:58:25 executing program 0: unshare(0x3ffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x88) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) [ 296.207449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.379235] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 296.548838] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 296.555058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.562737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.734772] 8021q: adding VLAN 0 to HW filter on device team0 06:58:27 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a040007000000ebff0fdf333f260005001a000542faaade73b80000000005000654c6c67e31341d978c86bb1a00000000000000000004000000000000"], 0x3e}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x20, 0x0) 06:58:27 executing program 1: mknod(&(0x7f0000000100)='./file0\x00', 0x1044, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) faccessat(r0, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x3) 06:58:27 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='/exe\x00\x00\x00mU\x005\xab\xe1\xe8\r\x90>\rqz\xc1\x88\x9aE\xe5J\\\x8f\x95\xf5\xd2\x96\x8a\xe8\xc7g\xe9\xd1\x8f\xd6\x9a\x00\x00\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f0000000000)=0x7, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000080)=""/114, &(0x7f0000000100)=0x72) 06:58:27 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3d8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000340)={0x0, @raw_data="9fe986f65345d125453ebdd30e0b9a175174dc086f05e6f5dced8937cd2ea02059315eda267b75e303221d7f22174c60121b0bee202234bdcead8aa5eaad7182dfa0112699ef8bcc5c2588293eef337b46185b9987c61b55d20b88ef6732c3ba4d394d6acdb5f02f2140a1d47cdb8dbc74705efe8e4d0e422227229153bb8872ae049336cc4edb734b34bd359a884b4159c59bfc8bc39139e9d04abe192dc0c95c61a789fcbb960d04815794f82a968cb56fdb15cb15b46f600055cb94e50ad7e4e5476c18ad391f"}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="290000000400000000bf0000000000000100000000d54816e49ffcb8d7e126065a1d00000000000000"], 0x29) 06:58:27 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000140)={'bcsh0\x00', 0x100000001}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000180)) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in={0x2, 0x4e24, @multicast2}}}, 0x90) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000280)={0x1000, ""/4096}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001800)={0x53, 0xfffffffffffffffc, 0xea, 0x3, @scatter={0x5, 0x0, &(0x7f00000015c0)=[{&(0x7f00000012c0)=""/3, 0x3}, {&(0x7f0000001300)=""/106, 0x6a}, {&(0x7f0000001380)=""/193, 0xc1}, {&(0x7f0000001480)=""/251, 0xfb}, {&(0x7f0000001580)=""/55, 0x37}]}, &(0x7f0000001640)="2697231a039100e5dc497ac789795abef2c1fc6ca474cd3957f35f9487af8e6399ca36bfc5e070c9259fb9b72ad2b917b8e7cd4b1119fae1a4fe1ce2c5f8882752fa277b39cb946ca64b78e3f438faa481722701428001f404bd58162d71c0cc14ecadf31a4790d66c94e194cad4b61c84e5dc1b917fb2f47fd88a21315ed34641612087bd12d2cb61fc330c12bb6dca8f9485f11bea1a8a9ba3090ccb35acb23705360d494f87762bf9cbe99e5db9df3d371a702a1e6510860e161f32f7878f583c2b6f0a14ba2c83fdb09df7fc0c9cd6bbff8bd54bea8cb497317176b6dc91f5a7bbd194ca52ffe42c", &(0x7f0000001740)=""/114, 0x35, 0x20, 0x3, &(0x7f00000017c0)}) timer_create(0x0, &(0x7f0000001880)={0x0, 0xf, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000018c0)=0x0) timer_delete(r2) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000001900)=""/4096) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000002900)={0xea, ""/234}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002ac0)={'vcan0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000002b00)={@broadcast, @local, r3}, 0xc) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000002b40)={0x0, 0x0, 0x8, 0x0, [], [{0x5, 0x9, 0x0, 0x80, 0x100000000, 0x3}, {0xb91, 0x2917, 0x4558, 0x9, 0x5, 0x200}], [[], [], [], [], [], [], [], []]}) prctl$PR_GET_KEEPCAPS(0x7) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002e00)={0x0}, &(0x7f0000002e40)=0xc) ptrace$getenv(0x4201, r4, 0x100000000, &(0x7f0000002e80)) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) sched_setscheduler(r4, 0x0, &(0x7f0000002ec0)=0x7) finit_module(r5, &(0x7f0000002f00)='\x00', 0x2) r6 = creat(&(0x7f0000002f40)='./file0\x00', 0x2a) ioctl$KVM_S390_VCPU_FAULT(r6, 0x4008ae52, &(0x7f0000002f80)=0x50b4) symlinkat(&(0x7f0000002fc0)='./file0\x00', r6, &(0x7f0000003000)='./file0\x00') ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f0000003040)) nanosleep(&(0x7f0000003080), 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000030c0)={0x0, @in6={{0xa, 0x4e24, 0x4, @mcast1, 0x80000000}}, 0x7, 0x3, 0x24, 0xfff, 0xfffffffffffffff9}, &(0x7f0000003180)=0x98) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000031c0)={r7, 0x1000, "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"}, &(0x7f0000004200)=0x1008) setsockopt$inet6_int(r5, 0x29, 0xcb, &(0x7f0000004240), 0x4) 06:58:27 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x62, @rand_addr=0x2, 0x4e22, 0x0, 'wrr\x00', 0x0, 0x7, 0x5c}, {@remote, 0x4e24, 0x3, 0xfffffffffffffffc, 0xd8ec, 0x101}}, 0x44) io_setup(0x269, &(0x7f00000000c0)=0x0) io_getevents(r1, 0x3, 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000180)={0x77359400}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000001c0)={@my=0x0}) getsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f0000000200), &(0x7f0000000240)=0x4) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000280)) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f00000002c0)={[0x1, 0x3, 0xf000, 0x100000], 0x736d, 0xd0, 0xbe}) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x8, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rfkill\x00', 0x400101, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000380)={0x18, 0x1, 0x0, {0x2}}, 0x18) write$FUSE_BMAP(r0, &(0x7f00000003c0)={0x18, 0xffffffffffffffda, 0x3, {0x7}}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x41011, r2, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)="c965d9e167e3a65ff9a988c10d881970ed5a74fa9dfee115ce9cde656d745f4b01938337e4da7b1085993ad4d0b3b9945632d48e1247f0f43faa08b7b744334dd4d24b67c17d537460", 0x49) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000480)={0x5, [0x4, 0x14f880000000, 0x9, 0x36, 0x5]}, &(0x7f00000004c0)=0xe) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000500)=0x9, 0x9, 0x5f1f8db06d7f5f36) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000540), &(0x7f0000000580)=0xb) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000005c0)={0x0, 0xfffffffffffffffd}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000640)={r3, 0x80000001}, 0x8) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000680)='nr0\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0x50, &(0x7f00000006c0)}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000780)={{{@in=@remote, @in6=@local}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@loopback}}, &(0x7f0000000880)=0xe8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000001}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xc0, r4, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3a}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) syz_open_dev$sndpcmp(&(0x7f0000000a80)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x80) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000ac0)="7648e37d43b1366834dc0aa9314d0cdb", 0x10) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) [ 297.958805] IPVS: length: 7372456 != 707755800 [ 297.994383] IPVS: length: 7372456 != 707755800 06:58:28 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) dup2(0xffffffffffffffff, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000000), 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 06:58:28 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000100)=0x3c21) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x40) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x0, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) fcntl$getownex(r0, 0x10, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getownex(r2, 0x10, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') unshare(0xfffffffffffffffd) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 06:58:28 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x25dfdbff}, 0x14}}, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 06:58:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x294) connect$inet6(r0, &(0x7f0000000340), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) syz_execute_func(&(0x7f0000000100)="3666440f50f564ff0941c3c401f82ebd92823dcfc4c27d794e0066420fe2e3660fa041d288766d0000d3196f") clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002000000e0000001000000000000000000000000000000000000000000000000000000000000000000000074d94e05e80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff000000000000000000000000000000000000000046030000"], 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) 06:58:28 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, 0x0, 0x89749fd4b7455a01, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7f000001e0000002ffffffffffffff0069726c616e30000000000000000000006272696467655f736c6176655f300000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000001100020100000000000000000000000000009800d0000000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003ff0101050000080100080006030000000180000000000000e000000100007ffffffffffffa04ef796263736830000000000000000000000069726c616e3000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000890001140000000000000000000000000000c80028010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000ffffffff0400000001000000000000006000434c555354455249500000000000000000000000000000000000000000000000000000000000000003000e0039003e0030003e00390017000a00330015002500090021000800080034003200000002000000ff7f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800d800000000000000000000000000000000000000000000000000400052415445455354000000000000000000000000000000000000000000000073797a3100000000000000000000000055230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x1) sendto$inet(r0, &(0x7f0000000080)='l', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000840)="cb695d167db0dd374c817bc049d46afe3e6b100bc77d8c8d2538d61ed917fd5a26504c2ae4f21ecaf72f8996fb0a544224dc5addf1331058d0bafdc63926a9e8a8aeb8dbf1244d4f9f11facec6342cec2b883831ec1a64e886dce0690bd15a4d8b5ee1bac8febeab84bc8cc88e2dc6741b76fcb882dc879c3456d2d6d8d1fc57c830", 0x82, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000001080)="ba1b1c6fac9526bde3b5ed1fc6a812d5e8e888b31dd6f2ebdc00e6347e6b1a5d2382af30690c30b45a3068f69c4456f2e55d2862d066cbd40ad7a15ede72a738a76b36eea85cae285b0f9ef48d267b2bb2d4f593b194932ba23dda9bf18ffa915130c27783831a22f78692fba518a9bc2430bd6450e57d94b47575fa473b8cb3abab", 0x82, 0xc0, 0x0, 0x0) shutdown(r0, 0x1) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=""/118, 0x76}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000300)=""/119, 0x77}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/68, 0x44}, {&(0x7f0000000500)=""/208, 0xd0}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/184, 0xb8}], 0x9) 06:58:28 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r1, 0x4000000000000005) dup3(r3, r0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write$sndseq(r0, &(0x7f0000000400)=[{0x4, 0x7, 0xfffffffffffffffd, 0x3f, @tick=0xfffffffffffffffe, {0x0, 0x1ff}, {0x0, 0x4}, @note={0xdb84, 0x5b1, 0x2, 0x3, 0x7fff}}, {0x9, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, 0x0}}], 0x90) 06:58:28 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @loopback}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)='lo:\x00\x00\x06\x00'}) 06:58:28 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x501, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) fchownat(r0, &(0x7f0000000900)='\x00', 0x0, 0x0, 0x1000) semget(0xffffffffffffffff, 0x5, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5473, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 06:58:28 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(0x0, 0xff, 0x14400) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)) close(r2) r3 = msgget$private(0x0, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) mknod(&(0x7f0000000480)='./file0\x00', 0x800001043, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/161) msgrcv(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") openat(r1, &(0x7f0000000080)='./file0\x00', 0x800, 0x104) prctl$PR_SET_DUMPABLE(0x4, 0x0) [ 298.925942] IPVS: ftp: loaded support on port[0] = 21 [ 299.006087] IPVS: ftp: loaded support on port[0] = 21 [ 299.154846] hrtimer: interrupt took 34443 ns [ 300.616114] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.622824] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.631121] device bridge_slave_0 entered promiscuous mode [ 300.660272] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.666940] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.675334] device bridge_slave_0 entered promiscuous mode [ 300.772011] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.778587] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.787166] device bridge_slave_1 entered promiscuous mode [ 300.813389] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.819948] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.828377] device bridge_slave_1 entered promiscuous mode [ 300.868877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 300.910909] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 300.950009] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 300.997757] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 301.204277] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 301.252459] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 301.290501] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 301.338330] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 301.374434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 301.381491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 301.422337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 301.429381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 301.464912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 301.472010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 301.512977] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 301.519957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 301.722084] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 301.730854] team0: Port device team_slave_0 added [ 301.768001] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 301.776693] team0: Port device team_slave_0 added [ 301.811076] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 301.819736] team0: Port device team_slave_1 added [ 301.856222] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 301.864840] team0: Port device team_slave_1 added [ 301.899630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.943298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.986427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.027013] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.067048] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 302.074935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.084291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.110027] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 302.118492] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.127667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.166525] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 302.174795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.183925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.212040] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 302.219626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.228981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.084922] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.091488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.098724] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.105319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.114244] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 303.131797] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.138329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.145493] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.152085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.163604] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 303.222561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.230376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 306.433331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.449609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.731871] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 306.750704] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 307.026011] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 307.032356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 307.040257] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.057877] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 307.064302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 307.072848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.339040] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.377719] 8021q: adding VLAN 0 to HW filter on device team0 06:58:39 executing program 5: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) 06:58:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) [ 309.314893] mmap: syz-executor4 (8147) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 06:58:40 executing program 4: socketpair(0x0, 0x1, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x0) mount(0x0, 0x0, 0x0, 0x840094, 0x0) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000500)={0x43}, 0x43) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) clock_gettime(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:58:40 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002ff0)={&(0x7f0000004fb8)=ANY=[@ANYBLOB="0000000001000000e5000000000000000000000000000000"], 0x1}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="000000000100000001000060108a00009830fa10f09245f0"], 0x1}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000000) 06:58:40 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x2, r2, 0x200000000000005}) 06:58:40 executing program 3: r0 = socket$inet6(0xa, 0x806, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(0x0, 0xff, 0x14400) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246, 0x0) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff80"], 0x2) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)) close(r2) r3 = msgget$private(0x0, 0x0) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, 0x0) mknod(&(0x7f0000000480)='./file0\x00', 0x800001043, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/161) msgrcv(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") openat(r1, &(0x7f0000000080)='./file0\x00', 0x800, 0x104) prctl$PR_SET_DUMPABLE(0x4, 0x0) 06:58:40 executing program 5: socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = socket$inet6(0xa, 0x800, 0xc270) r3 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = add_key(&(0x7f0000000340)='cifs.spnego\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r6 = request_key(&(0x7f0000000400)='rxrpc\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='[%\x00', 0xfffffffffffffffd) keyctl$instantiate(0xc, r5, 0x0, 0x0, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r5, r6}, &(0x7f0000000600)=""/156, 0x9c, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4}, {0x4}}, {{@in6=@local}, 0x0, @in6}}, 0xe8) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x4cc, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001440)='cgroup.stat\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/full\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000001280)='veth1\x00', 0x10) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_ifreq(r1, 0x8956, &(0x7f00000001c0)={'veth0_to_bond\x00', @ifru_addrs=@ax25={0x3, {"ee75b8edf7dee0"}, 0x40}}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, 0x0, &(0x7f0000000140)) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, 0x0, 0x0) dup(r7) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000040)=0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 06:58:40 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@nat={'nat\x00', 0x19, 0x2, 0x2c0, [0x20000080, 0x0, 0x0, 0x20000188, 0x200001b8], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'bpq0\x00', 'veth1_to_bond\x00', 'team_slave_1\x00', 'bridge_slave_1\x00', @dev, [], @link_local, [], 0x70, 0xd8, 0xd8}, [@arpreply={'arpreply\x00', 0x10}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x13, 0x0, 0x0, 'syz_tun\x00', 'bond0\x00', 'ip6tnl0\x00', 'veth1\x00', @local, [], @local, [], 0xe8, 0x120, 0x158, [@mac={'mac\x00', 0x10}, @mark_m={'mark_m\x00', 0x18}]}, [@arpreply={'arpreply\x00', 0x10}]}, @snat={'snat\x00', 0x10, {{@local}}}}]}]}, 0x338) 06:58:40 executing program 3: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) openat$tun(0xffffffffffffff9c, 0x0, 0x5a114c822e348fe0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34003}, 0xc, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) socket(0x1e, 0x805, 0x0) [ 310.217995] kernel msg: ebtables bug: please report to author: entry offsets not in right order 06:58:40 executing program 4: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x14, &(0x7f000095bffc), 0x4) [ 310.268087] kernel msg: ebtables bug: please report to author: entry offsets not in right order 06:58:40 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002ff0)={&(0x7f0000004fb8)=ANY=[@ANYBLOB="0000000001000000e5000000000000000000000000000000"], 0x1}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="000000000100000001000060108a00009830fa10f09245f0"], 0x1}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000000) 06:58:40 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getownex(r2, 0x10, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(r3, 0x107, 0x1b, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x10001000008913, 0x0) 06:58:40 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 06:58:40 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0x102, 0x2}, 0x20) 06:58:40 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000040)='status\x00') preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0) 06:58:40 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) fcntl$getownex(r0, 0x10, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getownex(r2, 0x10, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(r3, 0x107, 0x1b, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') unshare(0xfffffffffffffffd) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x10001000008913, 0x0) 06:58:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x72) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) write$P9_RLINK(r0, &(0x7f0000000000)={0x7}, 0x7) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000380)={@mcast2, 0x36, r3}) r4 = dup3(r1, r2, 0x0) r5 = gettid() getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) flock(r4, 0x2) stat(0x0, 0x0) unshare(0x0) getpeername$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000003c0), 0x88) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f00000001c0)={@local, 0x5}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x696cb6c4aecb3c42) tkill(r5, 0x1000000000016) 06:58:41 executing program 1: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="28c94ea2a55451b1f01a059cd030afc02e323bdfd693dbed3568b03ffc76d4ef2867f0e4ce742a719907493f99ec38aa13e6e2678c19e1c25d6264fea8612b23d8405d8c33695ad0eaf6e567ff8b1ec0f31e7dc50fa23e1d9670aad8", 0x5c, 0x8000, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYBLOB="bb00000000000000007f006f0e14b7c38149721085dfb09c91e532e3f5d31841dd147a256d185d7adf72019d1219ddbc532daa5a5a6c2b4809a051a2000100006cd0ebd700cd13d16e7fea5d93af363a177f139f658b0efd415af3d644123ebceb7b362fbf38e08075b1cff81c683e1b56c0b7336bf859046ec5f91e663f28b1796b773c6fbab551903fd3dd245d357469848e6c87496398f128de00000000000000"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000280)={0x0, 0x200}, 0x2) r5 = gettid() r6 = getpgrp(0xffffffffffffffff) kcmp(r5, r6, 0x0, r3, r4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x4) 06:58:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="3ef00fc78b95cfb807008ee065650f06f36ebaf80c66b889c52e8f66efbafc0cec66b8186e00000f23d00f21f866350000000e0f23f80f01cbd03d670fc75d622e0f01cb", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:58:42 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x7f}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/arp\x00\x99\x96\xd1\x16D rn\x00\x00\x00\x00\x00\x00\x00\x00\x8f\xccy\b\xa1\x85\xa4\xb2\xdb8\xdd\xe1Z1\xa8{\x05\x1c\xb2\x9cg\xf6t\x04<\xd9\xd43o\x8cv\x15\x7f6\xa1z\x88D\x80u\x00\x06\xd05vj\xd4\x04\x1b\xc2\xae\xaejh9\x9a\xc7\xc9\xea\xa1\x1a\r[\xf2\xc9\x82`\xc24A p\xfdk\xdc\xb9\x9b\v5K\x12rb\xdd\xf6!\x8c\xbaA\xb2\x19x\xc6NJT\x80fm\x9aa\xfe\x8c\xb4\nV\x8e?Q\xd2\x01\xf8\x18\xe6N1\xbd\x84\x05z\x81-JE\\\x1b \r}\x88L6\x8c\xfa\x8f\xd8\x03\x91\xe2\xe6\f\xc6\xcc{\xac\xb3B\x8c$\x91\xfa\xb7\x84 \xad\xf6\xd9\xd60x0, 0x0}) setitimer(0x0, &(0x7f0000000100)={{}, {r0, r1/1000+30000}}, &(0x7f0000cd5000)) alarm(0x0) 06:58:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchown(r0, 0x0, 0x0) 06:58:42 executing program 1: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="28c94ea2a55451b1f01a059cd030afc02e323bdfd693dbed3568b03ffc76d4ef2867f0e4ce742a719907493f99ec38aa13e6e2678c19e1c25d6264fea8612b23d8405d8c33695ad0eaf6e567ff8b1ec0f31e7dc50fa23e1d9670aad8", 0x5c, 0x8000, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYBLOB="bb00000000000000007f006f0e14b7c38149721085dfb09c91e532e3f5d31841dd147a256d185d7adf72019d1219ddbc532daa5a5a6c2b4809a051a2000100006cd0ebd700cd13d16e7fea5d93af363a177f139f658b0efd415af3d644123ebceb7b362fbf38e08075b1cff81c683e1b56c0b7336bf859046ec5f91e663f28b1796b773c6fbab551903fd3dd245d357469848e6c87496398f128de00000000000000"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000280)={0x0, 0x200}, 0x2) r5 = gettid() r6 = getpgrp(0xffffffffffffffff) kcmp(r5, r6, 0x0, r3, r4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x4) 06:58:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f00000000c0)=""/11, 0xb) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setrlimit(0x7, &(0x7f0000a9cff8)) socket$packet(0x11, 0x3, 0x300) ioctl$TIOCLINUX6(r1, 0x541c, 0x0) 06:58:42 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) timer_create(0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) 06:58:42 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1b, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x10001000008913, 0x0) [ 312.402360] kvm: emulating exchange as write 06:58:42 executing program 5: sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000100)={{}, {r0, r1/1000+30000}}, &(0x7f0000cd5000)) alarm(0x0) 06:58:42 executing program 1: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="28c94ea2a55451b1f01a059cd030afc02e323bdfd693dbed3568b03ffc76d4ef2867f0e4ce742a719907493f99ec38aa13e6e2678c19e1c25d6264fea8612b23d8405d8c33695ad0eaf6e567ff8b1ec0f31e7dc50fa23e1d9670aad8", 0x5c, 0x8000, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYBLOB="bb00000000000000007f006f0e14b7c38149721085dfb09c91e532e3f5d31841dd147a256d185d7adf72019d1219ddbc532daa5a5a6c2b4809a051a2000100006cd0ebd700cd13d16e7fea5d93af363a177f139f658b0efd415af3d644123ebceb7b362fbf38e08075b1cff81c683e1b56c0b7336bf859046ec5f91e663f28b1796b773c6fbab551903fd3dd245d357469848e6c87496398f128de00000000000000"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000280)={0x0, 0x200}, 0x2) r5 = gettid() r6 = getpgrp(0xffffffffffffffff) kcmp(r5, r6, 0x0, r3, r4) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 'y\x14\bK\x16^\x9e\xc5/\x15\x95\xab)\xeb\xf0\x15\xf3{T\x1aWP\xac\xb2\xac\x95\xe9\xad9b\xaf5.S#\xb7y\x82\x1f\xa5^\xe1K\xf9'}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x4) 06:58:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r2 = dup2(r1, r0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) stat(0x0, 0x0) getgroups(0x0, 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300), 0xc) keyctl$unlink(0x9, 0x0, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, 0x0) 06:58:42 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="3ef00fc78b95cfb807008ee065650f06f36ebaf80c66b889c52e8f66efbafc0cec66b8186e00000f23d00f21f866350000000e0f23f80f01cbd03d670fc75d622e0f01cb", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:58:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000001c0)="3ef00fc78b95cfb807008ee065650f06f36ebaf80c66b889c52e8f66efbafc0cec66b8186e00000f23d00f21f866350000000e0f23f80f01cbd03d670fc75d622e0f01cb", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:58:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x4500, 0x0) 06:58:43 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r0, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000140)) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') unshare(0xfffffffffffffffd) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x10001000008913, 0x0) 06:58:43 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 06:58:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000180)={0x90002}) 06:58:43 executing program 0: syz_open_dev$usbmon(0x0, 0x0, 0x200) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x3, 0x5, 0x0, 0x0, 0xe9ab, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x1000, 0x8, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x400, 0x7f, 0x4, 0x0, 0x3, 0x6, 0x9, 0x9, 0x1c7, 0x8001, 0x2, 0x8, 0x20, 0x2, 0x0, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, @perf_config_ext={0x5c00000000000000, 0x1}, 0x0, 0x99, 0x0, 0x4, 0x3ff, 0x1, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe9a, &(0x7f0000000140)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)={0x14, 0x10, 0x701, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 06:58:43 executing program 2: socket$kcm(0x10, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) unlink(&(0x7f0000000080)='./file0\x00') 06:58:43 executing program 5: r0 = perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x5, 0xffffffff80000000, 0x3, 0x0, 0x400, 0x20000, 0xa, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x8f4a, 0x80, 0x9, 0x0, 0x8000, 0xfb6, 0x3f, 0x9, 0xffff, 0x5, 0x0, 0x0, 0x3, 0x9, 0x0, 0x83e, 0xef, 0x2, 0x7, 0x5, 0xffffffffffffff7f, 0x0, 0x9, 0x0, 0x1ff, 0x1, @perf_bp={0x0}, 0x40, 0xff, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x70, 0x3ff, 0x0, 0x5, 0x0, 0x0, 0xe9ab, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1c7, 0x8001, 0x2, 0x0, 0x0, 0x2, 0x1, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x3}, 0xffffffffffffffff, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)={0x14, 0x10, 0x701, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 06:58:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001800010100000000000000000200000000006d8d43e60000"], 0x1}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 06:58:43 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e9e688d35a978813c38add66548d7575727ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f49338003280cba762268e62b14b7ae78571512fc3b589f402db1c08513f0ded6e40a03a29efca39bafbf63e3e4b60fd268675326ae396833e48daee94e887af86d74dc202b0681331461d67bf873f30dc4cd3dc8ab7c59f0a259c30a06b0ec37d7759c5d6b073b3feea2a72e1af5503e259d30b98dc98d67d3354bb9f06b63a78e235189e3497a62f98bfa9e165775ec29af5ca492de44304ac33aaea65b45383b33376830b4b206bdfb97e36afff62b71c9487b7d6d0fcd07d8dc654bbc4d52f550825f34ccb1c1162dfe3d66eb159d98b130ee24a936e431c8c04bb0e28bdb0f8358be2b72aa5f42eb66279573adc6058764ced002325c0acf0029e9840d6a4b2e7924733d7d94bd0db5c901a3c1415a1ea6f4a4d15d7f91bdac94fca88c98d5a022f8439f253d76a0e23968c48b26c00c84683359d42c3c1ecf93f7118a582e4d21c59b85d50c5e0b16681f017a0658a0e195fe322fab16f51d1eeaf4a9b702ff44a9dcddcc8b531ca00dcfa3e8770ecc918bebf379925253ddea9e53d6232202d77974aa3978bd9d51ddb1417780aa16498dce71760b346bc4f38939f3deeda2551e84087a2797e00175fb1af143724d969cead04999af8ee2de0799941ca5be211d2eb379f274fecbbf2659cf97a7e27453b88f9369f2e6a01ad155ec008d086acaa7e3d20d4f2f929d3cdfaf6e95d4c8a42e9a3863a3f7de05b8e71b12", 0x1000) r3 = openat(0xffffffffffffffff, 0x0, 0x0, 0x8) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000140)={0x5, 0x9, 0x0, 0x2, 0x8000}) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$cgroup_type(r4, &(0x7f0000001180)='threaded\x00', 0xfc9a) fallocate(r4, 0x0, 0x0, 0x10001) fallocate(r4, 0x3, 0x5e00, 0x2cbd) ioctl$KDENABIO(r4, 0x4b36) fallocate(r1, 0x11, 0x0, 0x10000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) sendfile(r1, r2, &(0x7f0000002000), 0xffffffff000) creat(&(0x7f0000000040)='./file0\x00', 0x0) 06:58:43 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4003ff) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x1c5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lseek(r1, 0x0, 0x4) 06:58:43 executing program 0: syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) 06:58:43 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = syz_open_procfs(r0, &(0x7f0000000040)='status\x00') preadv(r1, &(0x7f00000017c0), 0x1a1, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000100)) [ 313.717660] binder: 8341:8342 Acquire 1 refcount change on invalid ref 0 ret -22 [ 313.728065] binder: 8341:8343 Acquire 1 refcount change on invalid ref 0 ret -22 06:58:43 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000100)=0x3c21) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000240)) getgid() fstat(r0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) fstat(r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000008c0)) getegid() fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB], 0x1, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getownex(r2, 0x10, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') unshare(0xfffffffffffffffd) ioctl(0xffffffffffffffff, 0x0, 0x0) 06:58:43 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@in6={0xa, 0x0, 0x100000001, @ipv4={[], [], @multicast1}}, 0x80) 06:58:44 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000002040)="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", 0x5b5}], 0x1) 06:58:44 executing program 0: unshare(0x24020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fchdir(r0) 06:58:44 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0xd4, 0xffa9) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000540)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b374bccf3300859c5b386bf7501e6cae739c27b76f28512828693cf33d763e80c40d783dc521486a51c3c71e50d2a492f628ff8ffdaa2ede18ba1557a694e0ac"}, 0x48}}, 0x0) 06:58:44 executing program 1: request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0xfffffffffffffffe) 06:58:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000000)={0xec2}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 06:58:44 executing program 4: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000100)=0x3c21) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xffffffffffffffee) getgid() getresgid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) fstat(r0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) fstat(r1, &(0x7f0000000780)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000008c0)) getegid() fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB], 0x1, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x0, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) fcntl$getownex(r0, 0x10, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getownex(r2, 0x10, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') unshare(0xfffffffffffffffd) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 06:58:44 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f00005e4000)={0x0, 0x0, &(0x7f0000728000)={&(0x7f00000001c0)={0x5, 0x8ff, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692d3e3c0a6a"}}, 0x48}}, 0x0) 06:58:44 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syslog(0x4, &(0x7f0000000600)=""/170, 0xaa) 06:58:44 executing program 5: mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:58:44 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8080) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 06:58:44 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x10000009, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:58:44 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r1, &(0x7f00000000c0)=0x202, 0x5a) 06:58:44 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0x0, "daf2c82ef0a4a7fc37bd440c2ea6593f9e24d66405bb48bcfa18288ee8607032d55e3c40da1ab81fef5b37f7d17e608c345d496f6975ffe9d2166bb2e38910798fc7454ae92070dbaa7e5e92da221017"}, 0xd8) sendto$inet6(r1, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r1) [ 315.008873] Unknown ioctl 35096 [ 315.020012] Unknown ioctl 35096 06:58:45 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f00005e4000)={0x0, 0x0, &(0x7f0000728000)={&(0x7f00000001c0)={0x5, 0x8ff, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692d3e3c0a6a"}}, 0x48}}, 0x0) 06:58:45 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:58:45 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) close(r0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@dev, @local, 0x0, 0x1, [@rand_addr]}, 0x14) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) 06:58:45 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 06:58:45 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) dup2(r1, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000002c0)=""/143) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getownex(r2, 0x10, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(r3, 0x107, 0x0, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x10001000008913, 0x0) 06:58:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x541b, 0x0) sync_file_range(r0, 0x0, 0x7ff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) 06:58:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:45 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x4, 0x5, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x18) 06:58:45 executing program 5: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x8912, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34003}, 0xc, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) 06:58:46 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) request_key(0x0, 0x0, &(0x7f0000000240)='(em1security\x00', 0xffffffffffffffff) keyctl$clear(0x7, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x0, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file0\x00', 0x8, 0x1) clock_gettime(0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) dup3(r0, r1, 0x80000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 06:58:46 executing program 2: ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34003}, 0xc, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) socket(0x1e, 0x805, 0x0) 06:58:46 executing program 1: syz_open_dev$amidi(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x81}) 06:58:46 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@nat={'nat\x00', 0x19, 0x2, 0x1b0, [0x20000080, 0x0, 0x0, 0x20000188, 0x200001b8], 0x0, 0x0, &(0x7f0000000080)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x13, 0x0, 0x0, 'syz_tun\x00', 'bond0\x00', 'ip6tnl0\x00', 'veth1\x00', @local, [], @local, [], 0xb0, 0xe8, 0x120, [@mark_m={'mark_m\x00', 0x18}]}, [@arpreply={'arpreply\x00', 0x10}]}, @snat={'snat\x00', 0x10, {{@local}}}}]}]}, 0x228) 06:58:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x2c, 0x3, 0x0, &(0x7f0000000100)) 06:58:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:46 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000840)='io.max\x00\xe3\xc6\xa1\xbc\x16\x94p`R\xfbqcm\xab\x87\xf6\xb6y1uoG\x18\xd4\xc8*R6\x84\xfb\xfbUt\x80\xc2q\xeeq\xc7\xaa8', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4) [ 316.417967] kernel msg: ebtables bug: please report to author: Valid hook without chain [ 316.450472] usb usb9: usbfs: process 8459 (syz-executor1) did not claim interface 0 before use 06:58:46 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000100)=0x3c21) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x40) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x0, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$nbd(0x2, 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(r1, 0x107, 0x1b, &(0x7f0000000000), 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') unshare(0xfffffffffffffffd) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 06:58:46 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r1, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(r2, 0x107, 0x1b, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') unshare(0xfffffffffffffffd) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x10001000008913, 0x0) 06:58:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:46 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xf7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000300)=""/137) 06:58:46 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c) fcntl$getownex(r0, 0x10, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000140)) fcntl$getownex(r2, 0x10, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(r3, 0x107, 0x1b, &(0x7f0000000000), 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') unshare(0xfffffffffffffffd) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x10001000008913, 0x0) 06:58:46 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg$can_bcm(r0, &(0x7f00005e4000)={0x0, 0x0, &(0x7f0000728000)={&(0x7f00000001c0)={0x5, 0x8ff, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692d3e3c0a6a"}}, 0x48}}, 0x0) 06:58:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000140)='#}\x00\x9a\x1b\xc2_R\xea\xd3\xddT\xd0\xec;\xa4\x9dV>\xa4\x11\xa4\xac\x9e\x1e\xac\xaaT\xd5\xd3\xf8<\xd7Yb\x04I\xdct,&\xe90\xa8\xaf\xff\xd3\xcd\xcd-\x90\'\xa2v\xbal\xa3l\"\xa0G\xebD\x1d\x8c\x8e\x15\x8d``\xb2\xdb\x9e\'\xef_\xde?i\xacl\x03\xaa\xdc(\x96\xbed\x9b\x1d\x95\x13\xbe\xe7\xb8\xa3\x13>\xdd}\x87\xc7Y\xf1\x92\xe3BIky\xe8\x85\xe9^\x1d\xb2\xd2Ycn\x9d\xafQ\xb1\x02\x99z\x81\xff\xc2\xdd)\xfe\'\xb8\"X@\xd6,\xb5\xa6\xa2\xe1:\xecG\x1d\xfe\x86\x85\xe7\xd4\xf6!C\xa3\xcf\xf3S\xeaA\xd7\x11\xc9O\x8e+\x94\x8c\x1f\xd6\x88\x97\xd0\xdd*\x90)\"\xda', 0x2) ftruncate(r1, 0x40001) sendfile(r0, r1, 0x0, 0x100000000002) fcntl$addseals(r1, 0x409, 0x8) 06:58:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0x13f698e4b9e296e3, 0x4007ffa, 0x0, 0xffffffffffffff06) 06:58:47 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0x8) prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffff406) prctl$PR_GET_TIMERSLACK(0x1e) syz_execute_func(&(0x7f00000000c0)="3666440f9bf56664400f9f3241c3260fac6a0f00c4c27d794e003e0f11581000196f84cd5858cd0f2902") 06:58:47 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 317.214700] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 06:58:47 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) prctl$PR_GET_TIMERSLACK(0x1e) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socket$unix(0x1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x343) write$P9_RGETLOCK(r3, &(0x7f0000000100)={0x1e, 0x37, 0x2, {0x0, 0x800, 0x1, r2}}, 0x1e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev}, 0x20) tkill(r2, 0x1000000000016) 06:58:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:47 executing program 1: r0 = eventfd2(0x0, 0x801) fstatfs(0xffffffffffffffff, &(0x7f0000001400)=""/235) r1 = dup2(r0, r0) write$P9_RWRITE(r1, &(0x7f0000000100)={0xb, 0x77, 0x1, 0xfffffffffffffffd}, 0xfffffffffffffd79) r2 = dup(r0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)) write$cgroup_pid(r2, &(0x7f0000000240), 0x12) write$P9_RWRITE(r2, &(0x7f0000008c40)={0xb, 0x77, 0x0, 0xfffffffffffffff8}, 0xb) 06:58:47 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, 0x42, 0x105}, 0x14}}, 0x0) 06:58:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) exit(0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003a00190700000000000000000a00000038e9fc0dd825eb09723b3db6167690c6f7f8ba9c41f1deb6"], 0x1}}, 0x0) 06:58:47 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000200)={0x9, 0x5, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) dup2(0xffffffffffffffff, r0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(r2, 0x107, 0x1b, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x10001000008913, 0x0) 06:58:47 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@remote, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getgid() getresgid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) fstat(r0, &(0x7f0000000580)) fstat(0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000006c0)) fstat(0xffffffffffffffff, &(0x7f0000000780)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880), &(0x7f00000008c0)=0xc) r2 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x2, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x0, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) fcntl$getownex(r0, 0x10, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getownex(r3, 0x10, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(r4, 0x107, 0x1b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') unshare(0xfffffffffffffffd) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 06:58:47 executing program 4: 06:58:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:47 executing program 1: 06:58:48 executing program 5: 06:58:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:48 executing program 4: 06:58:48 executing program 2: 06:58:48 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 06:58:48 executing program 2: 06:58:48 executing program 0: 06:58:48 executing program 4: 06:58:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000005}) 06:58:48 executing program 5: 06:58:48 executing program 2: 06:58:48 executing program 1: 06:58:48 executing program 4: 06:58:48 executing program 2: 06:58:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000005}) 06:58:48 executing program 0: 06:58:48 executing program 5: 06:58:48 executing program 1: 06:58:48 executing program 4: 06:58:48 executing program 2: 06:58:48 executing program 1: 06:58:49 executing program 0: 06:58:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000005}) 06:58:49 executing program 5: 06:58:49 executing program 4: 06:58:49 executing program 2: 06:58:49 executing program 1: 06:58:49 executing program 0: 06:58:49 executing program 4: 06:58:49 executing program 5: 06:58:49 executing program 1: 06:58:49 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r0, 0x200000000000005}) 06:58:49 executing program 4: 06:58:49 executing program 1: 06:58:49 executing program 0: 06:58:49 executing program 2: 06:58:49 executing program 5: 06:58:49 executing program 1: 06:58:49 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r0, 0x200000000000005}) 06:58:49 executing program 5: 06:58:49 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) write$P9_RUNLINKAT(r1, 0x0, 0x0) 06:58:49 executing program 0: 06:58:50 executing program 2: 06:58:50 executing program 1: 06:58:50 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r0}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r0, 0x200000000000005}) 06:58:50 executing program 0: 06:58:50 executing program 5: 06:58:50 executing program 4: 06:58:50 executing program 2: 06:58:50 executing program 1: 06:58:50 executing program 0: 06:58:50 executing program 4: 06:58:50 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r1}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r1, 0x200000000000005}) 06:58:50 executing program 5: 06:58:50 executing program 1: 06:58:50 executing program 0: 06:58:50 executing program 2: 06:58:50 executing program 4: 06:58:50 executing program 5: 06:58:50 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r1}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r1, 0x200000000000005}) 06:58:50 executing program 1: 06:58:50 executing program 2: 06:58:50 executing program 0: 06:58:51 executing program 5: 06:58:51 executing program 4: 06:58:51 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r1}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r1, 0x200000000000005}) 06:58:51 executing program 1: 06:58:51 executing program 2: 06:58:51 executing program 5: 06:58:51 executing program 0: 06:58:51 executing program 4: 06:58:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:51 executing program 2: 06:58:51 executing program 5: 06:58:51 executing program 0: 06:58:51 executing program 1: 06:58:51 executing program 4: 06:58:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:51 executing program 2: 06:58:51 executing program 5: 06:58:51 executing program 4: 06:58:51 executing program 0: 06:58:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:51 executing program 1: 06:58:52 executing program 2: 06:58:52 executing program 4: 06:58:52 executing program 5: 06:58:52 executing program 0: 06:58:52 executing program 1: 06:58:52 executing program 2: 06:58:52 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r1}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r1, 0x200000000000005}) 06:58:52 executing program 4: 06:58:52 executing program 0: 06:58:52 executing program 2: 06:58:52 executing program 1: 06:58:52 executing program 5: 06:58:52 executing program 4: 06:58:52 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r1}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r1, 0x200000000000005}) 06:58:52 executing program 0: 06:58:52 executing program 2: 06:58:52 executing program 4: 06:58:52 executing program 5: 06:58:52 executing program 0: 06:58:52 executing program 1: 06:58:53 executing program 4: 06:58:53 executing program 2: 06:58:53 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r1}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r1, 0x200000000000005}) 06:58:53 executing program 1: 06:58:53 executing program 0: 06:58:53 executing program 5: 06:58:53 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) unshare(0x24020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x1) 06:58:53 executing program 4: creat(&(0x7f0000000000)='./file0\x00', 0x0) semget(0xffffffffffffffff, 0x0, 0x0) semget(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x288) r0 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$void(0xffffffffffffffff, 0x0) write$binfmt_script(r0, 0x0, 0x0) 06:58:53 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e22, 0x0, @mcast2}, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x7ff}}, 0x5c) 06:58:53 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0xffffffffffffffb5) r1 = gettid() fallocate(r0, 0x0, 0x0, 0x1f) socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) io_submit(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ftruncate(0xffffffffffffffff, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x1000000000016) 06:58:53 executing program 0: 06:58:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:53 executing program 0: 06:58:53 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) 06:58:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:53 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='./file0/file0\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000b40)) chdir(&(0x7f00000002c0)='./file0/file0/file0\x00') ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) chmod(0x0, 0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x8, 0x30, 0x0, 0x99}, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000600)={r1, @in6={{0xa, 0x4e20, 0x7, @ipv4={[], [], @empty}, 0x7f}}, 0x0, 0x0, 0x9, 0x8, 0x20}, &(0x7f00000000c0)=0x98) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000500)={0x1, 0x3, @start={0xa43, 0x1}}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000700)={0x18, 0x0, 0x0, {0x6}}, 0x18) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={r2, 0x4ac}, &(0x7f00000001c0)=0x8) clone(0x3e00000000000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000880)={0x9, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, {0x2, 0x4e20, @loopback}, {0x2, 0x0, @rand_addr=0x7000000}, 0x100, 0x92, 0x4, 0x1, 0xfffffffffffffffa, 0x0, 0x7, 0x0, 0x7}) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000440)={0x14}, 0x14) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000009c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @ipv4={[], [], @rand_addr=0x8001}, 0xd8a}}}, 0x90) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000004c0)={@my}) 06:58:53 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x48) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000100)=0x8, 0x57) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000002c0)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r1}, 0x10) close(r2) 06:58:53 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="de4808"]], 0x0, 0x0, 0x0}) 06:58:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f}}, 0x20) dup2(r0, r1) 06:58:54 executing program 0: msgget(0x3, 0xfffffffffffffffe) 06:58:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:54 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/247, 0xffffff80}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xadbf80a3}], 0x23a, 0x0) [ 324.052945] binder: 8840:8845 unknown command 536871040 [ 324.058418] binder: 8840:8845 ioctl c0306201 20000440 returned -22 [ 324.120453] binder: 8840:8851 unknown command 536871040 [ 324.126107] binder: 8840:8851 ioctl c0306201 20000440 returned -22 06:58:54 executing program 0: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000003500)={&(0x7f0000004540)=""/4096, 0x1000}) 06:58:54 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000380)=0x1c, 0x80000) read(r0, &(0x7f00000003c0)=""/84, 0x54) r1 = memfd_create(0x0, 0x3) r2 = eventfd2(0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046607, 0x0) r3 = dup(r2) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r4, 0x280080) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000180)) sendfile(r2, r4, 0x0, 0x2008004fffffffe) clock_getres(0x2, &(0x7f0000000100)) dup(r4) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r6 = socket(0x0, 0x4, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x20) geteuid() getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) getsockopt$packet_int(r1, 0x107, 0x10, &(0x7f00000001c0), &(0x7f0000000300)=0x4) write(r8, &(0x7f0000000000), 0xfffffe63) read(r7, &(0x7f0000000200)=""/250, 0x50c7e3e3) setsockopt$packet_int(r6, 0x107, 0x14, 0x0, 0x0) futex(&(0x7f0000000040), 0x0, 0x1, 0x0, &(0x7f0000000140)=0x1, 0x2) ppoll(&(0x7f0000000000)=[{r3, 0x1}], 0x1, &(0x7f0000000240)={0x0, r5+10000000}, 0x0, 0x0) 06:58:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:54 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000240)='./control\x00', 0x0) rmdir(&(0x7f0000000080)='./control\x00') 06:58:54 executing program 2: r0 = gettid() ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) r2 = dup2(r1, r1) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) getgid() fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RGETLOCK(r2, 0x0, 0xffffffffffffffe6) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) io_setup(0x0, 0x0) tkill(r0, 0x1000000000016) 06:58:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:54 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, 0x0, &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'lo\x00', 'teql0\x00', 'ip6_vti0\x00', 'bcsf0\x00', @dev, [], @dev, [], 0x70, 0x70, 0xa0}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1a8) 06:58:54 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ppoll(&(0x7f0000000380)=[{r0}, {}, {}], 0x3, 0x0, 0x0, 0x0) 06:58:54 executing program 2: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000540)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b374bccf3300859c5b386bf7501e6cae739c27b76f28512828693cf33d763e80c40d783dc521486a51c3c71e50d2a492f628ff8ffdaa2ede18ba1557a694e0ac"}, 0x10}}, 0x0) 06:58:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x6, 0x0, [{0x400000b7}]}) 06:58:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:55 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg(r0, &(0x7f0000000f80)={&(0x7f0000000ec0)=@in6={0xa, 0x4e22, 0x0, @remote, 0xfc00}, 0x80, 0x0}, 0x0) 06:58:55 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu\x00\x01\xadT\xd97\x9e\xb7wk\xd5UQ0m\x84\xa4\xf7\xa1\rv\xee\xb5{\xf9\xe6L\xc2\xd3\x80SBJ\xdbm\xad\xb8/s\xebZ\x19\xb9TI(\x13\x855\xa5]\xcaZZ\x9c\xd2O\xbb\xbe\x9c\x96E\x96\x95x\xaf\x80\xfa!*0t5\xfb\x1b\xe1M\x93\x01\xac.f?\xeel\'k\xc8\x97\b\a\x7f\x98\x8e*<\x04\xc8!\x96\x11\xcb\x94U\xbd?\xc3\x02\xd1\xe8\xe2H\xbc\xc1\xea\xd3\n\xef\x7fH\x05v\x0eA\xfc\xfe\x00\x88\xc8Y\xb3\"\xf3\xb7\xd6i\xe3\xb6\x9b\xf4]\xbe\xbaxY\xdfV\x17@\xc2\xe1\x80u\xd9\xc9\x13\xa4\x06\x14\xdb\xe9\\Tw\xa8\xe2\xd1\x7f\a\xee\xe4\xed,\xf5\x7f\xd4\xe8,!\xf5\xf1~\xdf@\xc9GH\x13\xf4`\x93\xca\x9du\x1d\x03y\xae\x7f\xe8Ry\xb9\xafM\x81\xban\xb5\x83', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) write$P9_RRENAME(r2, &(0x7f0000000200)={0x7}, 0x7) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000000)={0x0, 0xc000000000000000}) 06:58:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:55 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) unshare(0x24020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x1) 06:58:55 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x11, r2, 0x0) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 06:58:55 executing program 2: r0 = socket$inet6(0xa, 0x400000000000803, 0x74) ioctl(r0, 0x400001000008912, &(0x7f0000000500)="0a5c2d023c126285718070") unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002040)=""/4096, 0x1000, 0xffffffffffffffff}, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', @ifru_flags}) 06:58:55 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000100)=0x3c21) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x0, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) fcntl$getownex(r0, 0x10, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getownex(r2, 0x10, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(r3, 0x107, 0x1b, &(0x7f0000000000), 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') unshare(0xfffffffffffffffd) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 06:58:55 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) mkdir(0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/46, 0x2e) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x0, 0x0, 0x77fffb, 0x0, 0x0, 0x0}, 0x2c) fcntl$getownex(r0, 0x10, 0x0) socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000140)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$getownex(r2, 0x10, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(r3, 0x107, 0x1b, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') unshare(0xfffffffffffffffd) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x10001000008913, 0x0) [ 325.715999] IPVS: ftp: loaded support on port[0] = 21 06:58:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write(r0, &(0x7f0000000140)="1f0000000104ff00fd4354c007110004f3e9000008000100010423dcffdf00", 0x1f) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000001040501ff20f30401000000000000000c0003000012f9000000c5010c0002800080040068000000"], 0x2c}}, 0x0) 06:58:55 executing program 4: r0 = getpgrp(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x5) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfffffef6) unlink(&(0x7f0000000280)='./file0\x00') mknod(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) link(&(0x7f0000000080)='./file2\x00', &(0x7f00000000c0)='./file0\x00') 06:58:56 executing program 1: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0)) ptrace(0x10, r0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000003500)={&(0x7f0000004540)=""/4096, 0x1000}) [ 326.116471] netlink: 'syz-executor0': attribute type 3 has an invalid length. [ 326.153421] netlink: 'syz-executor0': attribute type 3 has an invalid length. 06:58:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) [ 326.165263] netlink: 3 bytes leftover after parsing attributes in process `syz-executor0'. 06:58:56 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) timer_create(0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) getgid() listen(r1, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 06:58:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) [ 326.483406] IPVS: ftp: loaded support on port[0] = 21 06:58:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x840000000002, 0x3, 0xff) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\xd1\x00\x00\x00\x00\x00\xe9\xff\a\x00\x00\x00\x00\x00\x00T\xfa\aBJ\xde\xe9\x16\xd2\xdau\xaf\xe7[\x1f\xe8\xaf\xb4N\xe8\xdf\v5\xa0\xfdj\x1f\x02\x00\xd3\xab&\xd7\xa0q\xfb53\x1c\xe3\x9cZehd\x10\x06\xd7\xc0 jt\x00\x00') setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0xa82, 0x4) sendfile(r1, r2, 0x0, 0x100000001) 06:58:56 executing program 0: r0 = msgget(0x3, 0x203) msgctl$IPC_RMID(r0, 0x0) 06:58:57 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:58:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:57 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0x81}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000180)='syzkaller0\x00') 06:58:57 executing program 1: unshare(0x24020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) flock(r0, 0x3) 06:58:57 executing program 5: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) 06:58:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="de"]], 0x0, 0x0, 0x0}) [ 327.802680] usb usb9: usbfs: process 9004 (syz-executor0) did not claim interface 0 before use [ 327.822324] binder: 9000:9013 unknown command 536871040 [ 327.827842] binder: 9000:9013 ioctl c0306201 20000440 returned -22 [ 327.839691] usb usb9: usbfs: process 9004 (syz-executor0) did not claim interface 0 before use 06:58:57 executing program 1: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x5, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0xd4, 0x4) sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1d, r1}, 0x1b4, &(0x7f0000000200)={&(0x7f0000000540)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "b374bccf3300859c5b386bf7501e6cae739c27b76f28512828693cf33d763e80c40d783dc521486a51c3c71e50d2a492f628ff8ffdaa2ede18ba1557a694e0ac"}, 0x48}}, 0x0) 06:58:57 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes-fixed-time)\x00'}, 0x58) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) [ 327.872078] binder_alloc: binder_alloc_mmap_handler: 9000 20001000-20004000 already mapped failed -16 [ 327.902999] binder: BINDER_SET_CONTEXT_MGR already set [ 327.908329] binder: 9000:9013 ioctl 40046207 0 returned -16 06:58:58 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) fsetxattr$trusted_overlay_nlink(r1, 0x0, 0x0, 0x0, 0x0) r3 = dup3(r0, r2, 0x0) fstat(0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) write$eventfd(r3, 0x0, 0x0) 06:58:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:58 executing program 4: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 06:58:58 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) openat$vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) close(r2) 06:58:58 executing program 2: syz_open_dev$usbmon(0x0, 0x0, 0x200) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4) sched_setaffinity(0x0, 0xfffffffffffffe9a, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c40)={0x14, 0x10, 0x701, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) 06:58:58 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) getpgid(0x0) fcntl$setownex(r0, 0xf, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, 0x0) personality(0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000340)={'eql\x00'}) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/vcs\x00', 0x80202, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000680)) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)={0x2c, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) fsetxattr(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='keyring+%\x00', 0xa, 0x1) r4 = gettid() r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000640)={&(0x7f0000000480), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x3c, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x4080) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r4, 0x401104000000016) 06:58:58 executing program 2: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="020700011000000000000000000800000800120000000300000000000000004006000000000000000000000000000000e00000010000000000000000000000000000000000ffff000000000000000000030006fc0000000000000080ac14ffbb00000000000000000300295c1e5e8673b6b0423b1d8603c92b91c52000009200"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x40000000000021e, 0x0) 06:58:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x2, r2}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x200000000000005}) 06:58:58 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x1, 0x0, 0x310) 06:58:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="18700000003544b9ab81c84b690000009500000000000000f5c97bb2d12b108de3c27936ffd3f13d9fd1d60551306ee3d4e01b28e923a8d1"], 0x0, 0x401, 0x1000, &(0x7f000062b000)=""/4096}, 0x48) [ 329.089302] current->kmsan.in_runtime: -1, last_caller: (null) [ 329.096276] ------------[ cut here ]------------ [ 329.101038] kernel BUG at mm/kmsan/kmsan_instr.c:85! [ 329.106161] invalid opcode: 0000 [#1] SMP [ 329.110321] CPU: 0 PID: 9095 Comm: cryptomgr_probe Not tainted 4.20.0-rc7+ #12 [ 329.117685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.127068] RIP: 0010:__msan_instrument_asm_store+0x12d/0x130 [ 329.132962] Code: 29 0d 59 ff 0f 0b e8 72 f5 7b ff 85 c0 75 1b 8b b3 88 09 00 00 48 8b 93 80 09 00 00 48 c7 c7 4e 72 5f 8b 31 c0 e8 83 22 7c ff <0f> 0b 90 55 48 89 e5 41 57 41 56 41 54 53 48 89 d3 49 89 f6 49 89 [ 329.151879] RSP: 0018:ffff888196fdf7d0 EFLAGS: 00010046 [ 329.157251] RAX: 000000000000003c RBX: ffff888153925a00 RCX: 821270f3d1212100 [ 329.164536] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88821fc36abc [ 329.171816] RBP: ffff888196fdf808 R08: 0000000000000000 R09: ffff88821fc38f10 [ 329.179092] R10: 0000000000000000 R11: ffffffff861d8220 R12: 0000000000000086 [ 329.186420] R13: ffff888196fdf830 R14: 0000000000000001 R15: ffff888196fdf830 [ 329.193705] FS: 0000000000000000(0000) GS:ffff88821fc00000(0000) knlGS:0000000000000000 [ 329.201955] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.207843] CR2: 00007ffca0a7edcc CR3: 0000000135dfb000 CR4: 00000000001406f0 [ 329.215126] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 329.222405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 329.229700] Call Trace: [ 329.232336] _raw_spin_lock_irqsave+0x9c/0x170 [ 329.236943] load_balance+0x5830/0x9ad0 [ 329.241068] pick_next_task_fair+0xaf1/0x3240 [ 329.245627] ? check_preempt_wakeup+0x1620/0x1620 [ 329.250515] pick_next_task+0x1ba/0x420 [ 329.254521] __schedule+0x1f7/0x830 [ 329.258219] schedule+0x1ab/0x2b0 [ 329.261703] kthread+0x3cb/0x4e0 [ 329.265122] ? cryptomgr_notify+0x1190/0x1190 [ 329.269633] ? schedule_tail+0x1b2/0x410 [ 329.273741] ? kthread_blkcg+0xf0/0xf0 [ 329.277666] ret_from_fork+0x35/0x40 [ 329.281402] Modules linked in: [ 329.284634] ---[ end trace 3b54f239d3a9f749 ]--- [ 329.289407] RIP: 0010:__msan_instrument_asm_store+0x12d/0x130 [ 329.295308] Code: 29 0d 59 ff 0f 0b e8 72 f5 7b ff 85 c0 75 1b 8b b3 88 09 00 00 48 8b 93 80 09 00 00 48 c7 c7 4e 72 5f 8b 31 c0 e8 83 22 7c ff <0f> 0b 90 55 48 89 e5 41 57 41 56 41 54 53 48 89 d3 49 89 f6 49 89 [ 329.314241] RSP: 0018:ffff888196fdf7d0 EFLAGS: 00010046 [ 329.319642] RAX: 000000000000003c RBX: ffff888153925a00 RCX: 821270f3d1212100 [ 329.326940] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88821fc36abc [ 329.334223] RBP: ffff888196fdf808 R08: 0000000000000000 R09: ffff88821fc38f10 [ 329.341531] R10: 0000000000000000 R11: ffffffff861d8220 R12: 0000000000000086 [ 329.348820] R13: ffff888196fdf830 R14: 0000000000000001 R15: ffff888196fdf830 [ 329.356103] FS: 0000000000000000(0000) GS:ffff88821fc00000(0000) knlGS:0000000000000000 [ 329.364755] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.370646] CR2: 00007ffca0a7edcc CR3: 0000000135dfb000 CR4: 00000000001406f0 [ 329.377927] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 329.385206] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 329.392486] Kernel panic - not syncing: Fatal exception [ 330.966602] Shutting down cpus with NMI [ 330.987321] Kernel Offset: disabled [ 330.991001] Rebooting in 86400 seconds..