[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 79.938864][ T32] audit: type=1800 audit(1567682672.989:25): pid=11815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 79.961923][ T32] audit: type=1800 audit(1567682673.009:26): pid=11815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 79.997807][ T32] audit: type=1800 audit(1567682673.039:27): pid=11815 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.213' (ECDSA) to the list of known hosts. 2019/09/05 11:24:44 fuzzer started 2019/09/05 11:24:48 dialing manager at 10.128.0.26:34833 2019/09/05 11:24:50 syscalls: 2376 2019/09/05 11:24:50 code coverage: enabled 2019/09/05 11:24:50 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/09/05 11:24:50 extra coverage: enabled 2019/09/05 11:24:50 setuid sandbox: enabled 2019/09/05 11:24:50 namespace sandbox: enabled 2019/09/05 11:24:50 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/05 11:24:50 fault injection: enabled 2019/09/05 11:24:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/05 11:24:50 net packet injection: enabled 2019/09/05 11:24:50 net device setup: enabled 11:26:35 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) syzkaller login: [ 202.622692][T11980] IPVS: ftp: loaded support on port[0] = 21 [ 202.761996][T11980] chnl_net:caif_netlink_parms(): no params data found [ 202.817638][T11980] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.824976][T11980] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.833753][T11980] device bridge_slave_0 entered promiscuous mode [ 202.843342][T11980] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.850548][T11980] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.859376][T11980] device bridge_slave_1 entered promiscuous mode [ 202.891342][T11980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.904225][T11980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.936856][T11980] team0: Port device team_slave_0 added [ 202.946179][T11980] team0: Port device team_slave_1 added [ 203.066326][T11980] device hsr_slave_0 entered promiscuous mode [ 203.232872][T11980] device hsr_slave_1 entered promiscuous mode [ 203.472365][T11980] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.479601][T11980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.487418][T11980] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.494678][T11980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.575270][T11980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.595031][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.607167][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.616800][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.627860][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 203.648786][T11980] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.666064][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.675664][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.682951][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.724909][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.734671][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.741931][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.752387][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.762737][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.788715][T11980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.799469][T11980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.826708][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.835703][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.845282][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.862330][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.883002][T11980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.007853][T11986] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 204.054912][T11986] syz-executor.0 (11986) used greatest stack depth: 53400 bytes left 11:26:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 204.211933][T11990] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 11:26:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 204.322818][T11993] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 11:26:37 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) [ 204.464492][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 11:26:37 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246) unshare(0x24020400) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x4004743b, 0x0) 11:26:37 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246) unshare(0x24020400) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x4004743b, 0x0) 11:26:38 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246) unshare(0x24020400) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x4004743b, 0x0) 11:26:38 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246) unshare(0x24020400) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGREP(r1, 0x4004743b, 0x0) 11:26:38 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) dup3(r0, r1, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) 11:26:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15043169"}, 0x6, 0x0, @fd, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 206.088735][T12015] IPVS: ftp: loaded support on port[0] = 21 11:26:39 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) dup3(r0, r1, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) [ 206.227127][T12015] chnl_net:caif_netlink_parms(): no params data found [ 206.301213][T12015] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.308615][T12015] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.317306][T12015] device bridge_slave_0 entered promiscuous mode [ 206.327512][T12015] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.334873][T12015] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.343723][T12015] device bridge_slave_1 entered promiscuous mode [ 206.377236][T12015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.390177][T12015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.422915][T12015] team0: Port device team_slave_0 added [ 206.432562][T12015] team0: Port device team_slave_1 added [ 206.517358][T12015] device hsr_slave_0 entered promiscuous mode [ 206.552846][T12015] device hsr_slave_1 entered promiscuous mode [ 206.594015][T12015] debugfs: Directory 'hsr0' with parent '/' already present! [ 206.624350][T12015] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.631594][T12015] bridge0: port 2(bridge_slave_1) entered forwarding state 11:26:39 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) dup3(r0, r1, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) [ 206.639445][T12015] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.646696][T12015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.759577][T12015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.780622][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.794016][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.806435][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.819488][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 206.840336][T12015] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.858472][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.867857][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.875157][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.948573][T12015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.959073][T12015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 206.976349][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.985405][ T5] bridge0: port 2(bridge_slave_1) entered blocking state 11:26:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) dup3(r0, r1, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) [ 206.992723][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.003633][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.013715][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.023212][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.032790][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.070482][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.079151][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.116525][T12015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.222004][T12034] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 11:26:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) dup3(r0, r1, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) 11:26:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15043169"}, 0x6, 0x0, @fd, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:26:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15043169"}, 0x6, 0x0, @fd, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:26:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15043169"}, 0x6, 0x0, @fd, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:26:40 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) dup3(r0, r1, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) 11:26:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15043169"}, 0x6, 0x0, @fd, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:26:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15043169"}, 0x6, 0x0, @fd, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:26:41 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)) dup3(r0, r1, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, 0x0) 11:26:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "15043169"}, 0x6, 0x0, @fd, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:26:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000c659ca807737f400000300000000960000000000000000200000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x2) 11:26:41 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000440)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x12) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc05c6104, &(0x7f0000000300)) 11:26:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000c659ca807737f400000300000000960000000000000000200000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x2) 11:26:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000c659ca807737f400000300000000960000000000000000200000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x2) 11:26:41 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000440)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x12) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc05c6104, &(0x7f0000000300)) 11:26:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000c659ca807737f400000300000000960000000000000000200000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x2) 11:26:41 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000440)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x12) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc05c6104, &(0x7f0000000300)) 11:26:41 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000440)=@ethernet={0x0, @broadcast}, &(0x7f0000000300)=0x12) r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x40046109, &(0x7f0000000300)) r1 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0xc05c6104, &(0x7f0000000300)) 11:26:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000c659ca807737f400000300000000960000000000000000200000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x2) 11:26:41 executing program 0: clone(0x2000004100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0xffffffffbffffffc, 0x1) tkill(r0, 0x2) ptrace$cont(0x420b, r0, 0x8, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4003ff) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000000)=""/161) 11:26:41 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000c659ca807737f400000300000000960000000000000000200000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x2) 11:26:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000c659ca807737f400000300000000960000000000000000200000000000000000bfbbb18016410f67f8ed2fbda6599591076756fcb9ff7daf0bdd7cfa3d4ade61ccb14424af8c63ab6fd1845b0c90c78bf8059655", 0x58}], 0x2) 11:26:42 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x92466376d2a1293e) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) futex(&(0x7f0000000140), 0x8c, 0xfffffffffffffffc, &(0x7f0000000040)={r0, r1+10000000}, &(0x7f0000000280)=0x2, 0x0) 11:26:42 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000100)=""/160, 0x1000000, 0x2800, 0x800}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)=@ethtool_eeprom={0xc, 0x8000000000046, 0x0, 0x13e}}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000000)={0x1000, 0x8001, 0x3}) 11:26:42 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x4dc) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) r1 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$link(0x8, 0x0, r1) keyctl$invalidate(0x15, r1) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001300)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0xfffffff1) r2 = socket$inet6(0xa, 0x2, 0x0) unshare(0x2000400) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40) r3 = epoll_create(0x401) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000180)) 11:26:42 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x800004000) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x4003ff) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000000c0)={0x2, 0x0, [{0x10000, 0xc, &(0x7f0000000000)=""/12}, {0x2, 0x5a, &(0x7f0000000040)=""/90}]}) 11:26:42 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='\x00\x00\x00\x03\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xd, 0x4000000001, 0x0, "e5d6643b1bdf5e92ffffff7f000000008fe351a0d4cbdb2acc3c00f1ffffff00"}) [ 209.434409][T12130] mmap: syz-executor.0 (12130) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 11:26:42 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000f40)=[{&(0x7f00000000c0)=""/99, 0x63}], 0x1, 0x0, 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, 0x0}, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000280), 0xc, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x374, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f0000000140)=""/85, 0x20a}, {&(0x7f0000000fc0)=""/4096, 0x49d}, {&(0x7f0000000400)=""/120, 0x2ce}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000000)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='pids.current\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f0000000c00)=0x0) r11 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x0, r12}}) r13 = socket(0x30002000000010, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r15 = socket(0x30002000000010, 0x2, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r17 = socket(0x30002000000010, 0x2, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setresgid(r18, r14, r16) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) ioctl$sock_FIOGETOWN(r19, 0x8903, &(0x7f0000000c40)=0x0) lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d40)={0x0, 0x0, 0x0}, &(0x7f0000000d80)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r23, 0x8904, &(0x7f0000000dc0)=0x0) stat(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r27 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r27, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r28, 0x8912, 0x400200) sendmmsg$unix(r1, &(0x7f0000000f00)=[{&(0x7f00000002c0)=@abs={0xfbcfa331810e0cd4, 0x0, 0x4e20}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000780)="4e12e558621bf2d26041808b65054d5dce09277efbedc9d201f4017791a8ae1417c7ec43f08f7d327f12c5d867c6bfe636924a1cd203d91d000742d3b07375b8926b89daa53c86d0838c9787474bf9656fef3dc018f847d8445680a8cf1cba2bf7d93a", 0x63}, {&(0x7f0000000800)="d2cf0fbf743889fad40880c23584964017965e2bab0547221cc7fa3fb8675bd986a966295ba7762fc173774cdc70d6b6caeb44867f59d80ea48aa973fae06ec4a915ba1b77b386e00004a6d49c2e64bb893a3b7dd528b72eb0f57287ac1392c82e03554cffe618c4e2ad9a32c96b6824bc91e21a37fddb54575652b6bc9701e7ee920f686e", 0x85}, {&(0x7f00000008c0)="3e9aa8f5cde0c32d70dfb09e56ac6424e514ca783fbeb9a06457c8d897fdf40051930128b63939abc11358b91585ca7545c6a52e57f9b8f3a59da953a0c6c5758dd4872502f4f6387f92f7f5b895390850676bc653a9829e2e5c9005cbeca0c9276d442caeae084986200fa0d77940ef5161dad059a8055a5c566ee4353eff6152a40d45df0e57c5409f8a4728d2349a4a272eb6beadf829dfc81c4d", 0x9c}, {&(0x7f0000000980)="b725691302c0ee57cd5a180682ea2750139d01354fc471605eec360e98b777a2cd482b9024b5fad8e8d3de641eb96c3e4addf88a88afc392e265f4ca0ddd27d4c63e666485385673d228d93dbcdac3e00de803d4d3cfae1cc481ab4b9ef16cc88d1bc21a5687d057a5e569bd47d8818cec7e77e90ecce6db9060802a787db693abfbb7601196b924038741006f9d5920808b967311fd7ca5caf7a927c335985153a623f07475d5cd28591569ee433d136466b8eba317f76409a9a68965888829e3f0ea994691e3bbbdc5767c60948684d12d76802a8411c9fb1be7628f2b3c", 0xdf}, {&(0x7f0000000a80)="1f6a024e5496cf2c5e4a705cc6e6ae75696cfa89cf9dd4f7bfb2501f9098f38180b978d390b0d246dfd05e215966546fb7d49ddd662ade9ddda59e0a31724a790df1730fdd6aa837318c8f40", 0x4c}, {&(0x7f0000000b00)="f94004ca560d80aab7e29dd956426712525ebbbf0d4603aa79c3207612254af18e38a61cec9430fa7c8f02996350f2a1815f4fb043a664e7afc631cbf7c97b6d18c4361437f69501bba08434fa5e628df1244b853c31a165cb9bfe00", 0x5c}], 0x6, &(0x7f0000002040)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}, @rights={{0x34, 0x1, 0x1, [r4, r5, r6, r0, r7, r8, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r14}}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @cred={{0x1c, 0x1, 0x2, {r24, r25, r26}}}, @rights={{0x1c, 0x1, 0x1, [r27, r0, r28]}}], 0xd0, 0x1}], 0x1, 0x24040000) 11:26:42 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x8b, 0x1, 0x0, 0x0, 0x1) futex(&(0x7f0000000040), 0x9, 0x1, 0x0, 0x0, 0x1) 11:26:42 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x8b, 0x1, 0x0, 0x0, 0x1) futex(&(0x7f0000000040), 0x9, 0x1, 0x0, 0x0, 0x1) 11:26:42 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x8b, 0x1, 0x0, 0x0, 0x1) futex(&(0x7f0000000040), 0x9, 0x1, 0x0, 0x0, 0x1) 11:26:43 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x8b, 0x1, 0x0, 0x0, 0x1) futex(&(0x7f0000000040), 0x9, 0x1, 0x0, 0x0, 0x1) 11:26:43 executing program 0: futex(&(0x7f000000cffc)=0x4, 0x8b, 0x1, 0x0, 0x0, 0x1) 11:26:43 executing program 0: futex(0x0, 0x8b, 0x1, 0x0, 0x0, 0x1) 11:26:43 executing program 0: futex(0x0, 0x8b, 0x1, 0x0, 0x0, 0x1) 11:26:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000180)={0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, [], [], [], 0x2, 0x1, 0x3, 0x0, "0591d39052699bff9754773ae4a79f00"}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) dup3(r1, r0, 0x140000) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x89086) 11:26:43 executing program 0: futex(0x0, 0x8b, 0x1, 0x0, 0x0, 0x1) 11:26:43 executing program 1: setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x400455cb, 0x0) socket$tipc(0x1e, 0x0, 0x0) 11:26:43 executing program 0: futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, 0x0, 0x1) 11:26:43 executing program 0: futex(&(0x7f000000cffc), 0x0, 0x1, 0x0, 0x0, 0x1) 11:26:43 executing program 0: futex(&(0x7f000000cffc), 0x0, 0x1, 0x0, 0x0, 0x1) 11:26:43 executing program 0: futex(&(0x7f000000cffc), 0x0, 0x1, 0x0, 0x0, 0x1) 11:26:43 executing program 0: futex(&(0x7f000000cffc), 0x8b, 0x0, 0x0, 0x0, 0x1) 11:26:44 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r5 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r6, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r7, 0x3}) fcntl$setflags(r6, 0x2, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f00000003c0)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r9, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r10, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r11 = dup3(r9, 0xffffffffffffffff, 0x180000) sendmsg$rds(r11, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) r12 = socket$inet6(0xa, 0x2, 0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000003080)={0x20002002}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) r13 = open(&(0x7f00000030c0)='./file0\x00', 0x4000, 0xb) linkat(r13, &(0x7f0000003100)='./file0\x00', r11, &(0x7f0000003140)='./file0\x00', 0x1000) r14 = syz_open_dev$usbmon(&(0x7f0000003180)='/dev/usbmon#\x00', 0x8, 0x80) ioctl$sock_SIOCOUTQ(r14, 0x5411, &(0x7f00000031c0)) 11:26:44 executing program 0: futex(&(0x7f000000cffc), 0x8b, 0x0, 0x0, 0x0, 0x1) [ 211.789866][T12190] IPVS: ftp: loaded support on port[0] = 21 [ 211.933651][T12190] chnl_net:caif_netlink_parms(): no params data found [ 211.989980][T12190] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.997256][T12190] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.006063][T12190] device bridge_slave_0 entered promiscuous mode [ 212.017260][T12190] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.024547][T12190] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.033330][T12190] device bridge_slave_1 entered promiscuous mode [ 212.066476][T12190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.079445][T12190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.113291][T12190] team0: Port device team_slave_0 added [ 212.122700][T12190] team0: Port device team_slave_1 added [ 212.208143][T12190] device hsr_slave_0 entered promiscuous mode [ 212.373972][T12190] device hsr_slave_1 entered promiscuous mode 11:26:45 executing program 0: futex(&(0x7f000000cffc), 0x8b, 0x0, 0x0, 0x0, 0x1) [ 212.622753][T12190] debugfs: Directory 'hsr0' with parent '/' already present! [ 212.662906][ T5] Bluetooth: hci0: command 0x1003 tx timeout [ 212.670357][T12175] Bluetooth: hci0: sending frame failed (-49) [ 212.694158][T12190] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.701400][T12190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.709197][T12190] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.716562][T12190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.803622][T12190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.826579][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.836195][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.846916][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.858868][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 212.879585][T12190] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.898469][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.907623][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.914910][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.968769][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.978263][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.985549][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.996062][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.005945][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.015546][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.026737][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.040219][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.049773][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.064884][T12190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.106584][T12190] 8021q: adding VLAN 0 to HW filter on device batadv0 11:26:46 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r5 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r6, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r7, 0x3}) fcntl$setflags(r6, 0x2, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f00000003c0)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r9, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r10, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r11 = dup3(r9, 0xffffffffffffffff, 0x180000) sendmsg$rds(r11, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) r12 = socket$inet6(0xa, 0x2, 0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000003080)={0x20002002}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) r13 = open(&(0x7f00000030c0)='./file0\x00', 0x4000, 0xb) linkat(r13, &(0x7f0000003100)='./file0\x00', r11, &(0x7f0000003140)='./file0\x00', 0x1000) r14 = syz_open_dev$usbmon(&(0x7f0000003180)='/dev/usbmon#\x00', 0x8, 0x80) ioctl$sock_SIOCOUTQ(r14, 0x5411, &(0x7f00000031c0)) 11:26:46 executing program 0: futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, 0x0, 0x0) 11:26:46 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r5 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r6, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r7, 0x3}) fcntl$setflags(r6, 0x2, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f00000003c0)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r9, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r10, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r11 = dup3(r9, 0xffffffffffffffff, 0x180000) sendmsg$rds(r11, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) r12 = socket$inet6(0xa, 0x2, 0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000003080)={0x20002002}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) r13 = open(&(0x7f00000030c0)='./file0\x00', 0x4000, 0xb) linkat(r13, &(0x7f0000003100)='./file0\x00', r11, &(0x7f0000003140)='./file0\x00', 0x1000) r14 = syz_open_dev$usbmon(&(0x7f0000003180)='/dev/usbmon#\x00', 0x8, 0x80) ioctl$sock_SIOCOUTQ(r14, 0x5411, &(0x7f00000031c0)) [ 214.735420][ T3887] Bluetooth: hci0: command 0x1001 tx timeout [ 214.741680][T12175] Bluetooth: hci0: sending frame failed (-49) [ 216.813558][ T3887] Bluetooth: hci0: command 0x1009 tx timeout 11:26:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="1c000000180007041dfffd946f6105000200000a1f00000700280800", 0x1c}], 0x1}, 0x0) 11:26:53 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r5 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r6, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r7, 0x3}) fcntl$setflags(r6, 0x2, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f00000003c0)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r9, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r10, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r11 = dup3(r9, 0xffffffffffffffff, 0x180000) sendmsg$rds(r11, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) r12 = socket$inet6(0xa, 0x2, 0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000003080)={0x20002002}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) r13 = open(&(0x7f00000030c0)='./file0\x00', 0x4000, 0xb) linkat(r13, &(0x7f0000003100)='./file0\x00', r11, &(0x7f0000003140)='./file0\x00', 0x1000) r14 = syz_open_dev$usbmon(&(0x7f0000003180)='/dev/usbmon#\x00', 0x8, 0x80) ioctl$sock_SIOCOUTQ(r14, 0x5411, &(0x7f00000031c0)) 11:26:53 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r5 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r6, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r7, 0x3}) fcntl$setflags(r6, 0x2, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f00000003c0)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r9, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r10, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r11 = dup3(r9, 0xffffffffffffffff, 0x180000) sendmsg$rds(r11, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) r12 = socket$inet6(0xa, 0x2, 0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000003080)={0x20002002}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) r13 = open(&(0x7f00000030c0)='./file0\x00', 0x4000, 0xb) linkat(r13, &(0x7f0000003100)='./file0\x00', r11, &(0x7f0000003140)='./file0\x00', 0x1000) r14 = syz_open_dev$usbmon(&(0x7f0000003180)='/dev/usbmon#\x00', 0x8, 0x80) ioctl$sock_SIOCOUTQ(r14, 0x5411, &(0x7f00000031c0)) 11:26:53 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x8}}, 0x20) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x12040, 0x0) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000100)=""/222, &(0x7f0000000200)=0xde) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xd) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000240)={0xfffffffffffff323, 0x1ff}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x50900, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0xb6c) r3 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x453, 0xf2cefc06c4a5b9e2) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000300)=0xfffffffffffff166) umount2(&(0x7f0000000340)='./file0\x00', 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@initdev, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) quotactl(0x4, &(0x7f0000000380)='./file0\x00', r4, &(0x7f0000000500)="b77e99c989e43583934a139dbb984ad58c5b7fee873c911f85162527569e234036d04530359dcbc7fddee3971ebe3df9fcde475862fba7a869c8d728e5310a98c7f0412dd68ecb623301cee8404e125d1429463fe92ba46c8f50b5e0a167a618ae157525b3d8bc2e106661f1c547016af9c7d2d63bba04fe4820a0111dd0f555e695a13645cafeca6db3bbf2fcf52dddcd98e1a2b4b6b3bc4cd570944dcfe5723c0341649ae9693c045ec3dd0958c1763c4d46e2e71776fa23c7f2427febff82c8015ff4c7facf6297b767b8121064f2bced5173b8d44a161c0bf8406111fec20ee91862c4cc9b7ecbf5cf") getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000600)={0x0, 0xbc5a}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000680)={r5, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x2b}, 0x863}}}, &(0x7f0000000740)=0x84) shmctl$SHM_UNLOCK(0x0, 0xc) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vsock\x00', 0x0, 0x0) r8 = syz_open_dev$admmidi(&(0x7f00000007c0)='/dev/admmidi#\x00', 0x426d, 0xc4a60) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000800)={0x80, 0x401, 0x4, 0x82, 0x9, 0x7000000000, 0xffffffffffffff80, 0x400, r6}, &(0x7f0000000840)=0x20) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000880)={r9, 0x4}, &(0x7f00000008c0)=0x8) write$P9_RWALK(r7, &(0x7f0000000900)={0x30, 0x6f, 0x1, {0x3, [{0x20, 0x3, 0x4}, {0x8, 0x4, 0x1}, {0x80, 0x3, 0x3}]}}, 0x30) r10 = dup2(r8, 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r10, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r11, 0x800, 0x70bd26, 0x3ff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc000000000000000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4005}, 0x800) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f0000000a80)=0x3, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000b40)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000c40)=0xe8) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='fuse\x00', 0x2040800, &(0x7f0000000d40)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r12}, 0x2c, {'group_id', 0x3d, r13}, 0x2c, {[{@allow_other='allow_other'}], [{@fsuuid={'fsuuid', 0x3d, {[0x1c, 0x61, 0x30, 0x65, 0x37, 0x32, 0x35, 0x33], 0x2d, [0x31, 0x37, 0x7, 0x37], 0x2d, [0x38, 0xd0068c1259b0d0c6, 0x65, 0x36], 0x2d, [0x31, 0x66, 0x34, 0x36], 0x2d, [0x63, 0x23, 0x36, 0x35, 0x38, 0x2f, 0x38]}}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '/dev/audio#\x00'}}, {@subj_role={'subj_role', 0x3d, 'IPVS\x00'}}, {@measure='measure'}, {@obj_type={'obj_type', 0x3d, '/dev/admmidi#\x00'}}]}}) r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e40)='auxv\x00') getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000ec0)={0x0, 0x2c, &(0x7f0000000e80)=[@in6={0xa, 0x4e21, 0x9, @mcast2, 0x85}, @in={0x2, 0x4e20, @empty}]}, &(0x7f0000000f00)=0x10) 11:26:53 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x75ccdcd57297dbf9, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x7599) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x40000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x3, 0x18, [], 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000100)=""/24}, &(0x7f00000001c0)=0x78) r2 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x1, 0x183000) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000240)={0x0, 0x0, {0x2b, 0x800, 0x1001, 0x8, 0xa, 0x3, 0x1, 0x5}}) r3 = request_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='vmnet1(\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000380)={r3, 0x7d, 0x6e}, &(0x7f00000003c0)={'enc=', 'pkcs1', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000440)="f2cbf779b37db8a5bd3a67f584a6d980916f80d77d18ca8b467b95ed8f68e92822b5207fdb36be82beabf700dc209c95b174dc3acf5b5617cf41cdc5c3dcedeaadb0630bffd0230f14584ed47cdd65f6f80a55e7790415eedc122494a33745226a33219e7fb7480aeb2ac9e641989af45c875264fcb4080492ab59576d", &(0x7f00000004c0)="8192cb74c253687ebfe36b234c12c769500bace513a56def09dafe81bea18431b560b8cd618a85084ab683c62f1ca55da1e848802414411a8151fb44ca7f7e124d2b86dd13a7506561381b522082d9b967ec30c3c4a2bbc969e2cd712ce2c3154bdb4ba2cd0cebdfcbf01dc5b645") r4 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$negate(0xd, r4, 0x40, r5) r6 = add_key$keyring(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x2}, 0x0, 0x0, r6) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000740), &(0x7f0000000780)=0x4) r7 = syz_open_dev$vcsa(&(0x7f00000007c0)='/dev/vcsa#\x00', 0x5, 0x1) ioctl$VT_SETMODE(r7, 0x5602, &(0x7f0000000800)={0x2, 0x7bb79630, 0x8, 0x9, 0xdf5}) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000840)) times(&(0x7f0000000880)) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/sequencer\x00', 0x80c100, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000900)={0x0, 0x40}, 0x8) r9 = open(&(0x7f0000000940)='./file0\x00', 0x184200, 0x73a9d572d10973ca) r10 = getpgrp(0x0) ioctl$TIOCSPGRP(r9, 0x5410, &(0x7f0000000980)=r10) r11 = creat(&(0x7f00000009c0)='./file0/file0\x00', 0x2) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000ac0)={0x10, 0x0, &(0x7f0000000a00)=[@request_death={0x400c630e, 0x3}], 0x74, 0x0, &(0x7f0000000a40)="f9bbe482901615eb0e03c85b67c1f790476210ec035b59f1b2fc852e93971d8363d632201183ef4d00f59b3fdf2cbe0258d675486fd6789badf7dbc490b293adb426c7c93c0a5c2259246fd2b0f850336a72f3f86d121826490c817836264414872be489266aa1d1931ef6abcf803b07c151b987"}) r12 = syz_open_dev$vcsn(&(0x7f0000000b00)='/dev/vcs#\x00', 0x7, 0x440200) write$UHID_SET_REPORT_REPLY(r12, &(0x7f0000000b40)={0xe, 0x2, 0x7, 0x80000001, 0x40, "e98be00174047d1384f4b30eab6a97e2cf1f8ddb33e6c195545961a9cadf8acad4284b36e76b9d35519aefc7af0aa7488511bb265df853c239dd798ac373e5be"}, 0x4c) pipe(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_MEM_TABLE(r13, 0x4008af03, &(0x7f0000001140)={0x9, 0x0, [{0x1000, 0xed, &(0x7f0000000c00)=""/237}, {0x113000, 0x9, &(0x7f0000000d00)=""/9}, {0xd000, 0xec, &(0x7f0000000d40)=""/236}, {0x1000, 0x34, &(0x7f0000000e40)=""/52}, {0x1000, 0x4e, &(0x7f0000000e80)=""/78}, {0x10000, 0x28, &(0x7f0000000f00)=""/40}, {0x3000, 0x93, &(0x7f0000000f40)=""/147}, {0x0, 0xe5, &(0x7f0000001000)=""/229}, {0xd0227a5efa578d8d, 0x2e, &(0x7f0000001100)=""/46}]}) ioctl$VIDIOC_G_INPUT(r11, 0x80045626, &(0x7f0000001280)) 11:26:53 executing program 3 (fault-call:0 fault-nth:0): futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, 0x0, 0x0) 11:26:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="1c000000180007041dfffd946f6105000200000a1f00000700280800", 0x1c}], 0x1}, 0x0) 11:26:53 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r5 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r6, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r7, 0x3}) fcntl$setflags(r6, 0x2, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f00000003c0)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r9, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r10, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r11 = dup3(r9, 0xffffffffffffffff, 0x180000) sendmsg$rds(r11, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) r12 = socket$inet6(0xa, 0x2, 0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000003080)={0x20002002}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) r13 = open(&(0x7f00000030c0)='./file0\x00', 0x4000, 0xb) linkat(r13, &(0x7f0000003100)='./file0\x00', r11, &(0x7f0000003140)='./file0\x00', 0x1000) r14 = syz_open_dev$usbmon(&(0x7f0000003180)='/dev/usbmon#\x00', 0x8, 0x80) ioctl$sock_SIOCOUTQ(r14, 0x5411, &(0x7f00000031c0)) 11:26:54 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r5 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r6, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r7, 0x3}) fcntl$setflags(r6, 0x2, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f00000003c0)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r9, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r10, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r11 = dup3(r9, 0xffffffffffffffff, 0x180000) sendmsg$rds(r11, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) r12 = socket$inet6(0xa, 0x2, 0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000003080)={0x20002002}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) r13 = open(&(0x7f00000030c0)='./file0\x00', 0x4000, 0xb) linkat(r13, &(0x7f0000003100)='./file0\x00', r11, &(0x7f0000003140)='./file0\x00', 0x1000) syz_open_dev$usbmon(&(0x7f0000003180)='/dev/usbmon#\x00', 0x8, 0x80) 11:26:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="1c000000180007041dfffd946f6105000200000a1f00000700280800", 0x1c}], 0x1}, 0x0) 11:26:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="1c000000180007041dfffd946f6105000200000a1f00000700280800", 0x1c}], 0x1}, 0x0) 11:26:54 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r5 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r6, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r7, 0x3}) fcntl$setflags(r6, 0x2, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f00000003c0)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r9, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r10, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r11 = dup3(r9, 0xffffffffffffffff, 0x180000) sendmsg$rds(r11, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) r12 = socket$inet6(0xa, 0x2, 0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000003080)={0x20002002}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) r13 = open(&(0x7f00000030c0)='./file0\x00', 0x4000, 0xb) linkat(r13, &(0x7f0000003100)='./file0\x00', r11, &(0x7f0000003140)='./file0\x00', 0x1000) r14 = syz_open_dev$usbmon(&(0x7f0000003180)='/dev/usbmon#\x00', 0x8, 0x80) ioctl$sock_SIOCOUTQ(r14, 0x5411, &(0x7f00000031c0)) 11:26:54 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r5 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r6, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r7, 0x3}) fcntl$setflags(r6, 0x2, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f00000003c0)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r9, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r10, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r11 = dup3(r9, 0xffffffffffffffff, 0x180000) sendmsg$rds(r11, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) r12 = socket$inet6(0xa, 0x2, 0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000003080)={0x20002002}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) r13 = open(&(0x7f00000030c0)='./file0\x00', 0x4000, 0xb) linkat(r13, &(0x7f0000003100)='./file0\x00', r11, &(0x7f0000003140)='./file0\x00', 0x1000) 11:26:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:26:54 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r5 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r6, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r7, 0x3}) fcntl$setflags(r6, 0x2, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f00000003c0)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r9, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r10, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r11 = dup3(r9, 0xffffffffffffffff, 0x180000) sendmsg$rds(r11, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) r12 = socket$inet6(0xa, 0x2, 0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000003080)={0x20002002}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) r13 = open(&(0x7f00000030c0)='./file0\x00', 0x4000, 0xb) linkat(r13, &(0x7f0000003100)='./file0\x00', r11, &(0x7f0000003140)='./file0\x00', 0x1000) syz_open_dev$usbmon(&(0x7f0000003180)='/dev/usbmon#\x00', 0x8, 0x80) [ 221.632249][T12273] IPVS: ftp: loaded support on port[0] = 21 [ 221.750348][T12278] IPVS: ftp: loaded support on port[0] = 21 [ 221.782816][T12279] IPVS: ftp: loaded support on port[0] = 21 [ 222.078647][T12273] chnl_net:caif_netlink_parms(): no params data found [ 222.111349][T12278] chnl_net:caif_netlink_parms(): no params data found [ 222.183668][T12279] chnl_net:caif_netlink_parms(): no params data found [ 222.262795][T12273] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.269987][T12273] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.278868][T12273] device bridge_slave_0 entered promiscuous mode [ 222.296291][T12273] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.303610][T12273] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.312290][T12273] device bridge_slave_1 entered promiscuous mode [ 222.320427][T12279] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.327631][T12279] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.336153][T12279] device bridge_slave_0 entered promiscuous mode [ 222.353334][T12278] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.360507][T12278] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.369121][T12278] device bridge_slave_0 entered promiscuous mode [ 222.385704][T12278] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.393008][T12278] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.401519][T12278] device bridge_slave_1 entered promiscuous mode [ 222.409272][T12279] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.416578][T12279] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.425156][T12279] device bridge_slave_1 entered promiscuous mode [ 222.462274][T12273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.474890][T12279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.487092][T12273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.507513][T12279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.520074][T12278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.540184][T12278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.568125][T12273] team0: Port device team_slave_0 added [ 222.585011][T12273] team0: Port device team_slave_1 added [ 222.601533][T12279] team0: Port device team_slave_0 added [ 222.611094][T12279] team0: Port device team_slave_1 added [ 222.630608][T12278] team0: Port device team_slave_0 added [ 222.705456][T12279] device hsr_slave_0 entered promiscuous mode [ 222.742748][T12279] device hsr_slave_1 entered promiscuous mode [ 222.792028][T12279] debugfs: Directory 'hsr0' with parent '/' already present! [ 222.802409][T12278] team0: Port device team_slave_1 added [ 222.854607][T12273] device hsr_slave_0 entered promiscuous mode [ 222.892573][T12273] device hsr_slave_1 entered promiscuous mode [ 222.941954][T12273] debugfs: Directory 'hsr0' with parent '/' already present! [ 223.014649][T12278] device hsr_slave_0 entered promiscuous mode [ 223.052508][T12278] device hsr_slave_1 entered promiscuous mode [ 223.111997][T12278] debugfs: Directory 'hsr0' with parent '/' already present! [ 223.284443][T12273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.310229][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.318794][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.332788][T12278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.348038][T12273] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.364202][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.374343][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.383324][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.390494][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.402932][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.422364][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.430742][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.439456][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.450254][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.459193][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.466391][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.482135][T12278] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.496430][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.527778][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.537621][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.547872][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.579469][T12273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.590122][T12273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.608862][T12279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.617525][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.626946][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.636016][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.644813][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.652129][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.660098][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.669586][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.678775][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.687950][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.696696][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.703951][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.712256][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.720965][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.730072][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.738840][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.754263][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.763445][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.772051][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.810382][T12279] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.824748][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.833795][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.842219][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.862000][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.871570][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.881368][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.890939][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.901034][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.924273][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.934015][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.943001][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.952370][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.961185][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.968537][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.976832][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.985900][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.004114][T12278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.020057][T12273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.044710][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.053896][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.063262][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.072032][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.079132][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.087306][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.096577][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.111525][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.121415][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.134024][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.154643][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.164377][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.173997][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.183058][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.204463][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.213695][ T3887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.233481][T12278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.252980][T12279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.308931][T12279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.365665][T12294] FAULT_INJECTION: forcing a failure. [ 224.365665][T12294] name fail_futex, interval 1, probability 0, space 0, times 1 [ 224.379052][T12294] CPU: 1 PID: 12294 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 224.387024][T12294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.397119][T12294] Call Trace: [ 224.400466][T12294] dump_stack+0x191/0x1f0 [ 224.404836][T12294] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 224.410887][T12294] should_fail+0xa3f/0xa50 [ 224.415377][T12294] get_futex_key+0x24d/0x1a00 [ 224.420099][T12294] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 224.426123][T12294] do_futex+0xc15/0x6550 [ 224.430405][T12294] ? kmsan_set_origin+0x26d/0x340 [ 224.435476][T12294] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 224.441589][T12294] ? fsnotify+0x563/0x2100 [ 224.446062][T12294] ? kmsan_get_metadata_or_null+0x208/0x290 [ 224.452074][T12294] ? __msan_poison_alloca+0x1c0/0x270 [ 224.457486][T12294] ? __x64_sys_futex+0x6e/0x90 [ 224.462380][T12294] __se_sys_futex+0x43c/0x7f0 [ 224.467100][T12294] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 224.472857][T12294] ? syscall_return_slowpath+0x90/0x610 [ 224.478449][T12294] __x64_sys_futex+0x6e/0x90 [ 224.483106][T12294] do_syscall_64+0xbc/0xf0 [ 224.487566][T12294] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 224.493486][T12294] RIP: 0033:0x459879 [ 224.497416][T12294] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 224.517046][T12294] RSP: 002b:00007fe3e136bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 224.525495][T12294] RAX: ffffffffffffffda RBX: 00007fe3e136bc90 RCX: 0000000000459879 [ 224.533492][T12294] RDX: 0000000000000001 RSI: 000000000000008b RDI: 000000002000cffc [ 224.541497][T12294] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 224.549508][T12294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3e136c6d4 [ 224.557513][T12294] R13: 00000000004c02cc R14: 00000000004d2560 R15: 0000000000000003 11:26:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port0\x00', 0xe757b297fa6cc37b, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x20000000000080}, '\nL\xea\xa0]\xad\x12n\x00\x00\x00\x02\xa1V\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xd5vX\x97\x01\xa4', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000003}) 11:26:57 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0edca50d5e0bcfe47bf070") ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'ip_vti0\x00', @ifru_data=&(0x7f0000000040)="635e9537d475cf912822b8b3532ee1cf3be4469deb510465c9eb58cbd8641d57"}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) 11:26:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:26:57 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r5 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r6, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r7, 0x3}) fcntl$setflags(r6, 0x2, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f00000003c0)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r9, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r10, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r11 = dup3(r9, 0xffffffffffffffff, 0x180000) sendmsg$rds(r11, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) r12 = socket$inet6(0xa, 0x2, 0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000003080)={0x20002002}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', r11, &(0x7f0000003140)='./file0\x00', 0x1000) 11:26:57 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r5 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r6, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r7, 0x3}) fcntl$setflags(r6, 0x2, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f00000003c0)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r9, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r10, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r11 = dup3(r9, 0xffffffffffffffff, 0x180000) sendmsg$rds(r11, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) r12 = socket$inet6(0xa, 0x2, 0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000003080)={0x20002002}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) r13 = open(&(0x7f00000030c0)='./file0\x00', 0x4000, 0xb) linkat(r13, &(0x7f0000003100)='./file0\x00', r11, &(0x7f0000003140)='./file0\x00', 0x1000) 11:26:57 executing program 3 (fault-call:0 fault-nth:1): futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, 0x0, 0x0) [ 224.790721][T12308] FAULT_INJECTION: forcing a failure. [ 224.790721][T12308] name fail_futex, interval 1, probability 0, space 0, times 0 [ 224.803766][T12308] CPU: 1 PID: 12308 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 224.811866][T12308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.821974][T12308] Call Trace: [ 224.825321][T12308] dump_stack+0x191/0x1f0 [ 224.829692][T12308] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 224.835724][T12308] should_fail+0xa3f/0xa50 [ 224.840205][T12308] get_futex_key+0x24d/0x1a00 [ 224.844943][T12308] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 224.851196][T12308] futex_wait_setup+0x129/0xd40 [ 224.856120][T12308] ? get_futex_key+0x1276/0x1a00 [ 224.861118][T12308] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 224.867322][T12308] do_futex+0xd10/0x6550 [ 224.871624][T12308] ? kmsan_set_origin+0x26d/0x340 [ 224.876702][T12308] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 224.882896][T12308] ? fsnotify+0x563/0x2100 [ 224.887467][T12308] ? kmsan_get_metadata_or_null+0x208/0x290 [ 224.893425][T12308] ? __msan_poison_alloca+0x1c0/0x270 [ 224.898841][T12308] ? __x64_sys_futex+0x6e/0x90 [ 224.903650][T12308] __se_sys_futex+0x43c/0x7f0 [ 224.908517][T12308] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 224.914282][T12308] ? syscall_return_slowpath+0x90/0x610 [ 224.919874][T12308] __x64_sys_futex+0x6e/0x90 [ 224.924498][T12308] do_syscall_64+0xbc/0xf0 [ 224.929069][T12308] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 224.934990][T12308] RIP: 0033:0x459879 [ 224.938926][T12308] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 224.958615][T12308] RSP: 002b:00007fe3e136bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 224.967124][T12308] RAX: ffffffffffffffda RBX: 00007fe3e136bc90 RCX: 0000000000459879 [ 224.975132][T12308] RDX: 0000000000000001 RSI: 000000000000008b RDI: 000000002000cffc [ 224.983190][T12308] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 224.991195][T12308] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3e136c6d4 [ 224.999210][T12308] R13: 00000000004c02cc R14: 00000000004d2560 R15: 0000000000000003 11:26:58 executing program 3 (fault-call:0 fault-nth:2): futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, 0x0, 0x0) 11:26:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0edca50d5e0bcfe47bf070") ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'ip_vti0\x00', @ifru_data=&(0x7f0000000040)="635e9537d475cf912822b8b3532ee1cf3be4469deb510465c9eb58cbd8641d57"}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) 11:26:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port0\x00', 0xe757b297fa6cc37b, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x20000000000080}, '\nL\xea\xa0]\xad\x12n\x00\x00\x00\x02\xa1V\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xd5vX\x97\x01\xa4', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000003}) 11:26:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:26:58 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r5 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r6, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r7, 0x3}) fcntl$setflags(r6, 0x2, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f00000003c0)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r9, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r10, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r11 = dup3(r9, 0xffffffffffffffff, 0x180000) sendmsg$rds(r11, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) r12 = socket$inet6(0xa, 0x2, 0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000003080)={0x20002002}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) open(&(0x7f00000030c0)='./file0\x00', 0x4000, 0xb) 11:26:58 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r5 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r6, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r7, 0x3}) fcntl$setflags(r6, 0x2, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f00000003c0)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r9, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r10, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r11 = dup3(r9, 0xffffffffffffffff, 0x180000) sendmsg$rds(r11, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) r12 = socket$inet6(0xa, 0x2, 0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000003080)={0x20002002}) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', r11, &(0x7f0000003140)='./file0\x00', 0x1000) 11:26:58 executing program 3: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) fallocate(r0, 0x0, 0x0, 0x4003ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x4003ff) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0xfffffffffffffffa) futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, 0x0, 0x0) 11:26:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0edca50d5e0bcfe47bf070") ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'ip_vti0\x00', @ifru_data=&(0x7f0000000040)="635e9537d475cf912822b8b3532ee1cf3be4469deb510465c9eb58cbd8641d57"}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) 11:26:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port0\x00', 0xe757b297fa6cc37b, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x20000000000080}, '\nL\xea\xa0]\xad\x12n\x00\x00\x00\x02\xa1V\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xd5vX\x97\x01\xa4', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000003}) 11:26:58 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x80}, 'port0\x00', 0xe757b297fa6cc37b, 0x80003}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x20000000000080}, '\nL\xea\xa0]\xad\x12n\x00\x00\x00\x02\xa1V\x9b?\xd4\xce\xc3\a\xe8\xef=\x13\xeby\x0e\xc9\xc6Z\xba\xf9\r\"\x9d\xb6\x92T.[x\xf8\xb2\x9e\n\'\x80\x0f\x00\x00\x00\x00\x00\x00\x00\t\xfbB\xd5vX\x97\x01\xa4', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000003}) 11:26:58 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r8, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r9, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r10 = dup3(r8, 0xffffffffffffffff, 0x180000) sendmsg$rds(r10, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) socket$inet6(0xa, 0x2, 0x9) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', r10, &(0x7f0000003140)='./file0\x00', 0x1000) 11:26:58 executing program 5: r0 = socket(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0edca50d5e0bcfe47bf070") ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'ip_vti0\x00', @ifru_data=&(0x7f0000000040)="635e9537d475cf912822b8b3532ee1cf3be4469deb510465c9eb58cbd8641d57"}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) 11:26:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:26:59 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r5 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r6, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r7, 0x3}) fcntl$setflags(r6, 0x2, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f00000003c0)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r9, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r10, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r11 = dup3(r9, 0xffffffffffffffff, 0x180000) sendmsg$rds(r11, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) r12 = socket$inet6(0xa, 0x2, 0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000003080)={0x20002002}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) 11:26:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00\xacr\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0x106}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) close(r0) 11:26:59 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x2000000000000009, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="10000040020000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x40000010}]) 11:26:59 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r8, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r9, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r10 = dup3(r8, 0xffffffffffffffff, 0x180000) sendmsg$rds(r10, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', r10, &(0x7f0000003140)='./file0\x00', 0x1000) 11:26:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(r0) socket(0x10, 0x20000000080803, 0x2) io_setup(0x41, &(0x7f00000006c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x10012}]) 11:26:59 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r5 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000240)) r6 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r6, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r7, 0x3}) fcntl$setflags(r6, 0x2, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r8, 0x542e, &(0x7f00000003c0)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r9, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r10, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r11 = dup3(r9, 0xffffffffffffffff, 0x180000) sendmsg$rds(r11, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) r12 = socket$inet6(0xa, 0x2, 0x9) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r12, &(0x7f0000003080)={0x20002002}) 11:26:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00\xacr\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0x106}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) close(r0) 11:26:59 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x2000000000000009, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="10000040020000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x40000010}]) 11:26:59 executing program 3: futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x100, 0x0) write$sndseq(r0, &(0x7f0000000040), 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = gettid() tkill(r2, 0x1000000000014) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='net/udplite6\x00') getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@empty}, &(0x7f0000000080)=0x14) 11:26:59 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r8, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r9, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r10 = dup3(r8, 0xffffffffffffffff, 0x180000) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', r10, &(0x7f0000003140)='./file0\x00', 0x1000) 11:26:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(r0) socket(0x10, 0x20000000080803, 0x2) io_setup(0x41, &(0x7f00000006c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x10012}]) 11:26:59 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x2000000000000009, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="10000040020000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x40000010}]) 11:26:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00\xacr\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0x106}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) close(r0) 11:26:59 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r8, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r9, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r10 = dup3(r8, 0xffffffffffffffff, 0x180000) sendmsg$rds(r10, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) socket$inet6(0xa, 0x2, 0x9) 11:26:59 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(r0) socket(0x10, 0x20000000080803, 0x2) io_setup(0x41, &(0x7f00000006c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x10012}]) 11:26:59 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r8, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r9, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:00 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000980)='/dev/cuse\x00', 0x82, 0x0) io_setup(0x2000000000000009, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="10000040020000000000000000000000b22025285db74192e7576d9062ec6e2fe8ffff3ff248691861d03a71091d334252afb1af5b8f0274c2ed58338226131291198f3d70dcf797ac42d0eeed042c06b56b89f02f92b12ebe4c45948a362a76def2f4955f100a13131f474b140942110257e173cea102775e1b3873ebf98dac6421f6d449544114b8ce29f4b48d1738b5be127a96f24c9d3c130e1a6c2eb5b3f12eb6a1f5051594545cbb895e65d83c08d2d6cd56694e5a6c00f54aceaf498f57b2a56634a23ae7", 0x40000010}]) 11:27:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x8000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00\xacr\x00\x00\x00\x00\x00\xec\x97?\x82\x0f|@\x00', 0x106}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) close(r0) 11:27:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(r0) socket(0x10, 0x20000000080803, 0x2) io_setup(0x41, &(0x7f00000006c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x3000000, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0x10012}]) 11:27:00 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r8, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r9, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) r10 = dup3(r8, 0xffffffffffffffff, 0x180000) sendmsg$rds(r10, &(0x7f0000003040)={&(0x7f0000000680)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/78, 0x4e}], 0x1, &(0x7f0000002e80)=[@rdma_dest={0x18, 0x114, 0x2, {0x7fff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x1000, 0x6}, &(0x7f0000000780)=0x9, &(0x7f00000007c0)=0xffffffff, 0x9, 0x7, 0x10000, 0x5, 0x8, 0x25}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/4096, 0x1000}, &(0x7f0000001800), 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0xffff, 0x40}, {&(0x7f0000001840)=""/149, 0x95}, &(0x7f0000002d00)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/156, 0x9c}, {&(0x7f00000029c0)=""/209, 0xd1}, {&(0x7f0000002ac0)=""/26, 0x1a}, {&(0x7f0000002b00)=""/239, 0xef}, {&(0x7f0000002c00)=""/9, 0x9}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)}], 0x8, 0x8, 0x704}}, @rdma_dest={0x18, 0x114, 0x2, {0x0, 0x7a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x3}, &(0x7f0000002d80)=0x813, &(0x7f0000002dc0)=0x10000, 0x1f, 0x101, 0x5, 0x5, 0x10, 0x180000000000000}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x3}, &(0x7f0000002e00)=0x1, &(0x7f0000002e40)=0x9, 0x5, 0x3f, 0x80000000, 0x7f, 0xa}}], 0x1b0, 0x4000000}, 0x40001) 11:27:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r1, 0x10e, 0xb, &(0x7f00000004c0)="9adc01ce", 0x4) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 11:27:02 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r8, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:02 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r8, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r9, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) dup3(r8, 0xffffffffffffffff, 0x180000) 11:27:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a280930206000100000001000000003900090035000c03110000001900154001000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 11:27:02 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000000c0)=""/246) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) 11:27:02 executing program 3: openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4003ff) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xfffffffffffffff8, 0x204100) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000040)) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000200)={0x9c4b, 0x0, 0x20002, 0x1}) fallocate(r2, 0x0, 0x0, 0x4003ff) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000000c0)=""/221) [ 229.744199][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:27:02 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r8, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) fsetxattr$security_selinux(r9, &(0x7f0000000600)='security.selinux\x00', &(0x7f0000000640)='system_u:object_r:updpwd_exec_t:s0\x00', 0x23, 0x0) 11:27:02 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r8, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:03 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r8, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:03 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r8, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) openat$udambuf(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/udmabuf\x00', 0x2) [ 230.043947][T12470] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.118945][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:27:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a280930206000100000001000000003900090035000c03110000001900154001000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 11:27:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r1, 0x10e, 0xb, &(0x7f00000004c0)="9adc01ce", 0x4) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 11:27:03 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) [ 230.346875][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:27:03 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000000c0)=""/246) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) 11:27:03 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r8, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x28, &(0x7f0000000540)}, 0x10) [ 230.391614][T12492] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 11:27:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r1, 0x10e, 0xb, &(0x7f00000004c0)="9adc01ce", 0x4) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 11:27:03 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x100000000, 0x18001) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0x9e52f30e09d3f063, 0x8, {0x7f}}, 0x18) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x10780, 0x0) getsockname$tipc(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10) futex(&(0x7f0000000000), 0x8b, 0x1, 0x0, 0x0, 0x0) bind$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x1e) 11:27:03 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a280930206000100000001000000003900090035000c03110000001900154001000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) [ 230.580710][T12502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:27:03 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000000c0)=""/246) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) 11:27:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r1, 0x10e, 0xb, &(0x7f00000004c0)="9adc01ce", 0x4) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="24000000180007041dfffd946f610500020000001f00000000000800050016000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 11:27:03 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r8, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) [ 230.803824][T12512] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 11:27:03 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) [ 230.860157][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 11:27:04 executing program 3: futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x2) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000040)) r1 = accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000100)=0x1) 11:27:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5f00fe01b2a4a280930206000100000001000000003900090035000c03110000001900154001000000000022dc1338d54400009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 11:27:04 executing program 5: r0 = socket$kcm(0x10, 0x800000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008100e00f80ecdb4cb90402c8650402000000000000fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) 11:27:04 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0xc004743e, &(0x7f00000000c0)=""/246) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe93) 11:27:04 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) fgetxattr(0xffffffffffffffff, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) [ 231.088546][T12531] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.1'. 11:27:04 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:04 executing program 1: madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0xc) 11:27:04 executing program 3: futex(&(0x7f0000000000), 0x4, 0x1, 0x0, 0x0, 0x3) futex(&(0x7f0000000040)=0x2, 0x80, 0x2, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)=0x1, 0x1) 11:27:04 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x47425247}) 11:27:04 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) fgetxattr(0xffffffffffffffff, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:04 executing program 1: madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0xc) 11:27:04 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:04 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x47425247}) 11:27:04 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'v\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'eql\x00', 0x400}) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x6, 0x71, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r1, 0x800454d2, &(0x7f0000000340)=""/4096) 11:27:04 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) ioctl$TIOCGRS485(r7, 0x542e, &(0x7f00000003c0)) fgetxattr(0xffffffffffffffff, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:04 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}]}) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:04 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x47425247}) 11:27:04 executing program 1: madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0xc) 11:27:04 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x11000, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r7, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:05 executing program 3: futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, 0x0, 0x1) 11:27:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'v\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'eql\x00', 0x400}) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x6, 0x71, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r1, 0x800454d2, &(0x7f0000000340)=""/4096) 11:27:05 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:05 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x47425247}) 11:27:05 executing program 1: madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0xc) 11:27:05 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) fcntl$setflags(r5, 0x2, 0x1) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r7, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:05 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000068c0)='dctcp\x00', 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0xf6, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f000000b2c0)=[{{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000000240)="ab", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f0000003840)="ae", 0x100000}], 0x1}}], 0x2, 0x0) 11:27:05 executing program 1: mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev_mcast\x00') read(r0, &(0x7f0000000040)=""/230, 0x1c02fa81) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000480)=',') 11:27:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'v\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'eql\x00', 0x400}) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x6, 0x71, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r1, 0x800454d2, &(0x7f0000000340)=""/4096) 11:27:05 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)={r6, 0x3}) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r7, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:05 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:05 executing program 3: io_setup(0x3, &(0x7f0000000540)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x1, 0x0) io_submit(r0, 0x3e7, &(0x7f0000000200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, 0x0, 0x0) 11:27:05 executing program 1: mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev_mcast\x00') read(r0, &(0x7f0000000040)=""/230, 0x1c02fa81) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000480)=',') 11:27:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000068c0)='dctcp\x00', 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0xf6, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f000000b2c0)=[{{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000000240)="ab", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f0000003840)="ae", 0x100000}], 0x1}}], 0x2, 0x0) 11:27:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'v\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'eql\x00', 0x400}) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x6, 0x71, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r1, 0x800454d2, &(0x7f0000000340)=""/4096) 11:27:05 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) socket(0x8, 0x2, 0x4) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) [ 232.557270][T12618] tmpfs: No value for mount option ' 3333ffaaaa1a [ 232.557270][T12618] 31 veth1_to_bond 1 0 333300000001 [ 232.557270][T12618] 31 veth1_to_bond 1 0 01005e000001 [ 232.557270][T12618] 31 veth1_to_bond 1 0 3333ff00001e [ 232.557270][T12618] 31 veth1_to_bond 1 0 3333ffaaaa1e [ 232.557270][T12618] 28 bridge_slave_1 1 0 333300000001 [ 232.557270][T12618] 28 bridge_slave_1 1 0 01005e000001 [ 232.557270][T12618] 28 bridge_slave_1 1 0 3333ffe76224 11:27:05 executing program 3: futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, 0x0, 0x0) r0 = gettid() tkill(r0, 0x1000000000014) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/249) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000000)={0x7f, 0x1f}) 11:27:05 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}]}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r6, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) [ 232.557270][T12618] 3 gre0 1 0 e0000001 [ 232.557270][T12618] 12 ip6gretap0 1 0 333300000001 [ 232.557270][T12618] 12 ip6gretap0 1 0 3333ff000015 [ 232.557270][T12618] 12 ip6gretap0 1 0 01005e000001 [ 232.557270][T12618] 12 ip6gretap0 1 0 3333ffaaaa15 [ 232.557270][T12618] 41 hsr0 1 0 333300000001 11:27:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000068c0)='dctcp\x00', 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0xf6, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f000000b2c0)=[{{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000000240)="ab", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f0000003840)="ae", 0x100000}], 0x1}}], 0x2, 0x0) 11:27:06 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x40000000000000a, 0x0, 0x0, {0xf36, 0xfa78}}) 11:27:06 executing program 1: mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev_mcast\x00') read(r0, &(0x7f0000000040)=""/230, 0x1c02fa81) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000480)=',') 11:27:06 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:06 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x89010, r5, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r6, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:06 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x40000000000000a, 0x0, 0x0, {0xf36, 0xfa78}}) 11:27:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000068c0)='dctcp\x00', 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r0, 0x0, 0xf6, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f000000b2c0)=[{{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000000240)="ab", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004c40)=[{&(0x7f0000003840)="ae", 0x100000}], 0x1}}], 0x2, 0x0) [ 232.824338][T12632] tmpfs: No value for mount option ' 3333ffaaaa1a [ 232.824338][T12632] 31 veth1_to_bond 1 0 333300000001 [ 232.824338][T12632] 31 veth1_to_bond 1 0 01005e000001 [ 232.824338][T12632] 31 veth1_to_bond 1 0 3333ff00001e [ 232.824338][T12632] 31 veth1_to_bond 1 0 3333ffaaaa1e [ 232.824338][T12632] 28 bridge_slave_1 1 0 333300000001 [ 232.824338][T12632] 28 bridge_slave_1 1 0 01005e000001 [ 232.824338][T12632] 28 bridge_slave_1 1 0 3333ffe76224 11:27:06 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0), 0x800) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) [ 232.824338][T12632] 3 gre0 1 0 e0000001 [ 232.824338][T12632] 12 ip6gretap0 1 0 333300000001 [ 232.824338][T12632] 12 ip6gretap0 1 0 3333ff000015 [ 232.824338][T12632] 12 ip6gretap0 1 0 01005e000001 [ 232.824338][T12632] 12 ip6gretap0 1 0 3333ffaaaa15 [ 232.824338][T12632] 41 hsr0 1 0 333300000001 11:27:06 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x40000000000000a, 0x0, 0x0, {0xf36, 0xfa78}}) 11:27:06 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x300) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r5, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:09 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3, 0x3000}, 0x4) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e24, @multicast2}}) futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, 0x0, 0x0) 11:27:09 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:09 executing program 1: mknod$loop(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/dev_mcast\x00') read(r0, &(0x7f0000000040)=""/230, 0x1c02fa81) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f0000000480)=',') 11:27:09 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x40000000000000a, 0x0, 0x0, {0xf36, 0xfa78}}) 11:27:09 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = socket(0x8, 0x2, 0x4) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000240)) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r5, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:09 executing program 5: mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffff", 0x4) 11:27:09 executing program 5: mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffff", 0x4) 11:27:09 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) socket(0x8, 0x2, 0x4) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r4, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:09 executing program 4: timerfd_create(0x0, 0x0) unshare(0x20600) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000f1, 0x0, 0x0, 0x0) 11:27:09 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) [ 233.425744][T12662] tmpfs: No value for mount option ' 3333ffaaaa1a [ 233.425744][T12662] 31 veth1_to_bond 1 0 333300000001 [ 233.425744][T12662] 31 veth1_to_bond 1 0 01005e000001 [ 233.425744][T12662] 31 veth1_to_bond 1 0 3333ff00001e [ 233.425744][T12662] 31 veth1_to_bond 1 0 3333ffaaaa1e [ 233.425744][T12662] 28 bridge_slave_1 1 0 333300000001 [ 233.425744][T12662] 28 bridge_slave_1 1 0 01005e000001 [ 233.425744][T12662] 28 bridge_slave_1 1 0 3333ffe76224 [ 233.425744][T12662] 3 gre0 1 0 e0000001 [ 233.425744][T12662] 12 ip6gretap0 1 0 333300000001 [ 233.425744][T12662] 12 ip6gretap0 1 0 3333ff000015 [ 233.425744][T12662] 12 ip6gretap0 1 0 01005e000001 [ 233.425744][T12662] 12 ip6gretap0 1 0 3333ffaaaa15 [ 233.425744][T12662] 41 hsr0 1 0 333300000001 11:27:09 executing program 5: mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffff", 0x4) 11:27:09 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:09 executing program 4: timerfd_create(0x0, 0x0) unshare(0x20600) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000f1, 0x0, 0x0, 0x0) 11:27:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x2d) 11:27:09 executing program 3: setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x4, 0x84f0, 0x81, 0x7, 0x1, 0x18f, 0x61}, 0x1c) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4003ff) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={r2, 0x100000000, 0x1, [0x8c]}, 0xa) 11:27:09 executing program 5: mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000d14ffc)="02f9ffff", 0x4) 11:27:09 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x800) setsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), 0x4) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r4, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:09 executing program 4: timerfd_create(0x0, 0x0) unshare(0x20600) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000f1, 0x0, 0x0, 0x0) 11:27:09 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:10 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) pipe2(&(0x7f00000001c0), 0x800) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r3, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x6e}, [@ldst={0x7, 0x0, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 11:27:10 executing program 4: timerfd_create(0x0, 0x0) unshare(0x20600) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ppoll(&(0x7f00000000c0)=[{}], 0x20000000000000f1, 0x0, 0x0, 0x0) 11:27:10 executing program 2: socket$bt_rfcomm(0x1f, 0x1, 0x3) linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x2d) 11:27:10 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x3}, &(0x7f0000000180)=0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r3, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:10 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000088995bc202078530907bebc905e8457d9fb5f8c2531d48e56c969a3512884571923a2c0e75ecb55217584f4ca810857ce8f93d0755eb7e159da120563576c2abf35e0b002c231a5731dc6a16792b1319e2acc0eb1ba8116a89549f9429436c5e0eadfe4f60c87c312413cb529bbd2483d50ea4eb64c2605f33b89a83389fc989391ecd9e9e6d2fb197f96deb441be4f782d10b0159754980d172a59fd579e124827d43c7a9d88df86ef1e130e48c5077ad6179ae09fa341cc71aa5e1eba9f2e070e2c04b855a4430a8eae0ff3c4c109a91e6e6b7683ca400000005000000"], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='a\x00V'], 0x10094) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0'}, 0x4) write$binfmt_aout(r0, &(0x7f0000000680), 0x20) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1a000) 11:27:10 executing program 3: futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 11:27:10 executing program 2: linkat(0xffffffffffffffff, &(0x7f0000003100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x2d) 11:27:10 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x6}, &(0x7f0000000100)=0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r1, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x6e}, [@ldst={0x7, 0x0, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 11:27:10 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000088995bc202078530907bebc905e8457d9fb5f8c2531d48e56c969a3512884571923a2c0e75ecb55217584f4ca810857ce8f93d0755eb7e159da120563576c2abf35e0b002c231a5731dc6a16792b1319e2acc0eb1ba8116a89549f9429436c5e0eadfe4f60c87c312413cb529bbd2483d50ea4eb64c2605f33b89a83389fc989391ecd9e9e6d2fb197f96deb441be4f782d10b0159754980d172a59fd579e124827d43c7a9d88df86ef1e130e48c5077ad6179ae09fa341cc71aa5e1eba9f2e070e2c04b855a4430a8eae0ff3c4c109a91e6e6b7683ca400000005000000"], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='a\x00V'], 0x10094) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0'}, 0x4) write$binfmt_aout(r0, &(0x7f0000000680), 0x20) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1a000) 11:27:10 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x2d) [ 236.306287][T12697] tmpfs: No value for mount option ' 3333ffaaaa1a [ 236.306287][T12697] 31 veth1_to_bond 1 0 333300000001 [ 236.306287][T12697] 31 veth1_to_bond 1 0 01005e000001 [ 236.306287][T12697] 31 veth1_to_bond 1 0 3333ff00001e [ 236.306287][T12697] 31 veth1_to_bond 1 0 3333ffaaaa1e [ 236.306287][T12697] 28 bridge_slave_1 1 0 333300000001 [ 236.306287][T12697] 28 bridge_slave_1 1 0 01005e000001 [ 236.306287][T12697] 28 bridge_slave_1 1 0 3333ffe76224 11:27:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x6e}, [@ldst={0x7, 0x0, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) [ 236.306287][T12697] 3 gre0 1 0 e0000001 [ 236.306287][T12697] 12 ip6gretap0 1 0 333300000001 [ 236.306287][T12697] 12 ip6gretap0 1 0 3333ff000015 [ 236.306287][T12697] 12 ip6gretap0 1 0 01005e000001 [ 236.306287][T12697] 12 ip6gretap0 1 0 3333ffaaaa15 [ 236.306287][T12697] 41 hsr0 1 0 333300000001 11:27:11 executing program 2: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000003140)='./file0\x00', 0x1000) 11:27:11 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000088995bc202078530907bebc905e8457d9fb5f8c2531d48e56c969a3512884571923a2c0e75ecb55217584f4ca810857ce8f93d0755eb7e159da120563576c2abf35e0b002c231a5731dc6a16792b1319e2acc0eb1ba8116a89549f9429436c5e0eadfe4f60c87c312413cb529bbd2483d50ea4eb64c2605f33b89a83389fc989391ecd9e9e6d2fb197f96deb441be4f782d10b0159754980d172a59fd579e124827d43c7a9d88df86ef1e130e48c5077ad6179ae09fa341cc71aa5e1eba9f2e070e2c04b855a4430a8eae0ff3c4c109a91e6e6b7683ca400000005000000"], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='a\x00V'], 0x10094) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0'}, 0x4) write$binfmt_aout(r0, &(0x7f0000000680), 0x20) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1a000) 11:27:11 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r1, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:11 executing program 2: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000) 11:27:11 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000088995bc202078530907bebc905e8457d9fb5f8c2531d48e56c969a3512884571923a2c0e75ecb55217584f4ca810857ce8f93d0755eb7e159da120563576c2abf35e0b002c231a5731dc6a16792b1319e2acc0eb1ba8116a89549f9429436c5e0eadfe4f60c87c312413cb529bbd2483d50ea4eb64c2605f33b89a83389fc989391ecd9e9e6d2fb197f96deb441be4f782d10b0159754980d172a59fd579e124827d43c7a9d88df86ef1e130e48c5077ad6179ae09fa341cc71aa5e1eba9f2e070e2c04b855a4430a8eae0ff3c4c109a91e6e6b7683ca400000005000000"], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='a\x00V'], 0x10094) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0'}, 0x4) write$binfmt_aout(r0, &(0x7f0000000680), 0x20) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1a000) 11:27:11 executing program 0: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r1, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x6e}, [@ldst={0x7, 0x0, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) 11:27:11 executing program 4: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000088995bc202078530907bebc905e8457d9fb5f8c2531d48e56c969a3512884571923a2c0e75ecb55217584f4ca810857ce8f93d0755eb7e159da120563576c2abf35e0b002c231a5731dc6a16792b1319e2acc0eb1ba8116a89549f9429436c5e0eadfe4f60c87c312413cb529bbd2483d50ea4eb64c2605f33b89a83389fc989391ecd9e9e6d2fb197f96deb441be4f782d10b0159754980d172a59fd579e124827d43c7a9d88df86ef1e130e48c5077ad6179ae09fa341cc71aa5e1eba9f2e070e2c04b855a4430a8eae0ff3c4c109a91e6e6b7683ca400000005000000"], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='a\x00V'], 0x10094) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0'}, 0x4) write$binfmt_aout(r0, &(0x7f0000000680), 0x20) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1a000) 11:27:11 executing program 2: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 11:27:11 executing program 2: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 11:27:11 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e21, 0x7, @mcast2, 0x4}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r3, &(0x7f0000000340)=0x4) accept4(r0, &(0x7f0000000040)=@xdp, &(0x7f00000000c0)=0x80, 0x81800) r4 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) shutdown(r5, 0x1) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[]}, 0x1, 0x0, 0x0, 0x40001}, 0x24000861) futex(&(0x7f0000000000), 0x8b, 0x0, 0x0, 0x0, 0x0) 11:27:11 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000088995bc202078530907bebc905e8457d9fb5f8c2531d48e56c969a3512884571923a2c0e75ecb55217584f4ca810857ce8f93d0755eb7e159da120563576c2abf35e0b002c231a5731dc6a16792b1319e2acc0eb1ba8116a89549f9429436c5e0eadfe4f60c87c312413cb529bbd2483d50ea4eb64c2605f33b89a83389fc989391ecd9e9e6d2fb197f96deb441be4f782d10b0159754980d172a59fd579e124827d43c7a9d88df86ef1e130e48c5077ad6179ae09fa341cc71aa5e1eba9f2e070e2c04b855a4430a8eae0ff3c4c109a91e6e6b7683ca400000005000000"], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='a\x00V'], 0x10094) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0'}, 0x4) write$binfmt_aout(r0, &(0x7f0000000680), 0x20) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1a000) 11:27:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) 11:27:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8983, &(0x7f0000000040)={'\x06\x00\x00\x000\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_map={0x0, 0xfffffffffffffff7}}) 11:27:11 executing program 0: socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r0, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:11 executing program 2: linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 238.686613][T12829] binder: 12826:12829 ioctl c018620c 20000000 returned -1 11:27:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x10, 0x0, &(0x7f0000001140)) 11:27:11 executing program 2: get_robust_list(0x0, 0x0, 0xfffffffffffffffe) 11:27:11 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x40, 0x0) fgetxattr(r0, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8983, &(0x7f0000000040)={'\x06\x00\x00\x000\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_map={0x0, 0xfffffffffffffff7}}) 11:27:11 executing program 1: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000088995bc202078530907bebc905e8457d9fb5f8c2531d48e56c969a3512884571923a2c0e75ecb55217584f4ca810857ce8f93d0755eb7e159da120563576c2abf35e0b002c231a5731dc6a16792b1319e2acc0eb1ba8116a89549f9429436c5e0eadfe4f60c87c312413cb529bbd2483d50ea4eb64c2605f33b89a83389fc989391ecd9e9e6d2fb197f96deb441be4f782d10b0159754980d172a59fd579e124827d43c7a9d88df86ef1e130e48c5077ad6179ae09fa341cc71aa5e1eba9f2e070e2c04b855a4430a8eae0ff3c4c109a91e6e6b7683ca400000005000000"], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffffffffffd, 0x30}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='a\x00V'], 0x10094) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0'}, 0x4) write$binfmt_aout(r0, &(0x7f0000000680), 0x20) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1a000) 11:27:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x10, 0x0, &(0x7f0000001140)) 11:27:12 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40, 0x0) fgetxattr(r0, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:12 executing program 2: get_robust_list(0x0, 0x0, 0xfffffffffffffffe) 11:27:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8983, &(0x7f0000000040)={'\x06\x00\x00\x000\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_map={0x0, 0xfffffffffffffff7}}) 11:27:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x10, 0x0, &(0x7f0000001140)) 11:27:12 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000000040)=""/212) futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x5, 0x2, 0x1, 0xdd8, 0x6, [{0x0, 0x800, 0x0, 0x0, 0x0, 0xce1f4de4b72ca765}, {0x9, 0x8, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x40, 0xffffffff}, {0x3, 0x2, 0x9, 0x0, 0x0, 0x1000}, {0x2, 0x6, 0x8001, 0x0, 0x0, 0x400}, {0x6, 0x4, 0x7, 0x0, 0x0, 0x1}]}) 11:27:12 executing program 1: r0 = socket$inet(0x2, 0x100000000003, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x1000000053, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) 11:27:12 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40, 0x0) fgetxattr(r0, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8983, &(0x7f0000000040)={'\x06\x00\x00\x000\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_map={0x0, 0xfffffffffffffff7}}) 11:27:12 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x4003ff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f0000000140)='./file0\x00', r3, r4, 0x1000) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x4003ff) ioctl$CAPI_NCCI_GETUNIT(r5, 0x80044327, &(0x7f0000000080)=0x56a) futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, 0x0, 0x0) 11:27:12 executing program 2: get_robust_list(0x0, 0x0, 0xfffffffffffffffe) 11:27:12 executing program 1: r0 = socket$inet(0x2, 0x100000000003, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x1000000053, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) 11:27:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x10, 0x0, &(0x7f0000001140)) 11:27:13 executing program 2: get_robust_list(0x0, 0x0, 0xfffffffffffffffe) 11:27:13 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40, 0x0) fgetxattr(r0, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:13 executing program 1: r0 = socket$inet(0x2, 0x100000000003, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x1000000053, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) 11:27:13 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlock(&(0x7f0000107000/0x2000)=nil, 0x2000) setrlimit(0x2, &(0x7f0000000080)={0x0, 0x2000000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x403, 0x2000000000032, 0xffffffffffffffff, 0x0) 11:27:13 executing program 5: shmat(0x0, &(0x7f0000a11000/0x3000)=nil, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000200)=0xf4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000440)="f2", 0xfe51, 0x0, 0x0, 0xfffffe58) madvise(&(0x7f000095b000/0x3000)=nil, 0x3000, 0xd) 11:27:13 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x0, 0x0) fgetxattr(r0, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) [ 240.198861][T12910] mmap: syz-executor.4 (12910): VmData 35295232 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. 11:27:13 executing program 2: unshare(0x20400) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) fdatasync(r0) 11:27:13 executing program 1: r0 = socket$inet(0x2, 0x100000000003, 0x33) getsockopt$inet_mreqsrc(r0, 0x0, 0x1000000053, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) [ 240.332804][ C0] hrtimer: interrupt took 34557 ns 11:27:14 executing program 3: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x4003ff) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 11:27:14 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:14 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/s\az0\x8c', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) pause() r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) 11:27:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlock(&(0x7f0000107000/0x2000)=nil, 0x2000) setrlimit(0x2, &(0x7f0000000080)={0x0, 0x2000000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x403, 0x2000000000032, 0xffffffffffffffff, 0x0) 11:27:14 executing program 2: unshare(0x20400) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) fdatasync(r0) 11:27:14 executing program 5: shmat(0x0, &(0x7f0000a11000/0x3000)=nil, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000200)=0xf4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000440)="f2", 0xfe51, 0x0, 0x0, 0xfffffe58) madvise(&(0x7f000095b000/0x3000)=nil, 0x3000, 0xd) 11:27:14 executing program 2: unshare(0x20400) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) fdatasync(r0) 11:27:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlock(&(0x7f0000107000/0x2000)=nil, 0x2000) setrlimit(0x2, &(0x7f0000000080)={0x0, 0x2000000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x403, 0x2000000000032, 0xffffffffffffffff, 0x0) 11:27:14 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:14 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mlock(&(0x7f0000107000/0x2000)=nil, 0x2000) setrlimit(0x2, &(0x7f0000000080)={0x0, 0x2000000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x403, 0x2000000000032, 0xffffffffffffffff, 0x0) 11:27:14 executing program 2: unshare(0x20400) r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) fdatasync(r0) 11:27:14 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 11:27:14 executing program 0: openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000480)=""/137, 0x89) 11:27:15 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/s\az0\x8c', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) pause() r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) 11:27:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_TYPE={0x8, 0x4}]]}}}]}, 0x3c}}, 0x0) 11:27:15 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @ipv4}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000001c0)={0x7, 0x8, 0xfa00, {r2}}, 0x10) 11:27:15 executing program 3: futex(&(0x7f000000cffc), 0x8b, 0x1, 0x0, 0x0, 0x0) r0 = gettid() tkill(r0, 0x1000000000014) r1 = getpgid(r0) ptrace$peekuser(0x3, r1, 0x20) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x4003ff) r3 = gettid() tkill(r3, 0x1000000000014) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000000c0)={{0x2, 0x2, 0x9, 0x0, 'syz0\x00', 0x8}, 0x4, 0x10, 0x6, r3, 0x1, 0x10001, 'syz1\x00', &(0x7f0000000080)=['/dev/btrfs-control\x00'], 0x13, [], [0xffffffff, 0x1, 0xce9, 0x3]}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2fd63155db936565, 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x39) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000040)=0xba) 11:27:15 executing program 5: shmat(0x0, &(0x7f0000a11000/0x3000)=nil, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000200)=0xf4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x4) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000440)="f2", 0xfe51, 0x0, 0x0, 0xfffffe58) madvise(&(0x7f000095b000/0x3000)=nil, 0x3000, 0xd) 11:27:15 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x0, 0x0) fgetxattr(r0, 0x0, &(0x7f0000000480)=""/137, 0x89) [ 242.068109][T12978] ================================================================== [ 242.076249][T12978] BUG: KMSAN: uninit-value in __list_add_valid+0x292/0x430 [ 242.083470][T12978] CPU: 0 PID: 12978 Comm: syz-executor.4 Not tainted 5.3.0-rc7+ #0 [ 242.091371][T12978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.101441][T12978] Call Trace: [ 242.104737][T12978] dump_stack+0x191/0x1f0 [ 242.109066][T12978] kmsan_report+0x162/0x2d0 [ 242.113561][T12978] __msan_warning+0x75/0xe0 [ 242.118057][T12978] __list_add_valid+0x292/0x430 [ 242.122902][T12978] rdma_listen+0x623/0x10b0 [ 242.127405][T12978] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 242.133376][T12978] ucma_listen+0x36e/0x5e0 [ 242.137788][T12978] ? ucma_connect+0xa40/0xa40 [ 242.142454][T12978] ucma_write+0x5c5/0x640 [ 242.146784][T12978] ? ucma_get_global_nl_info+0xe0/0xe0 [ 242.152235][T12978] __vfs_write+0x1a9/0xcb0 [ 242.156660][T12978] ? rw_verify_area+0x3a5/0x5e0 [ 242.161507][T12978] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 242.167484][T12978] vfs_write+0x481/0x920 [ 242.171736][T12978] ksys_write+0x265/0x430 [ 242.176064][T12978] __se_sys_write+0x92/0xb0 [ 242.180561][T12978] __x64_sys_write+0x4a/0x70 [ 242.185142][T12978] do_syscall_64+0xbc/0xf0 [ 242.189551][T12978] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 242.195432][T12978] RIP: 0033:0x459879 [ 242.199329][T12978] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 242.218926][T12978] RSP: 002b:00007fdd9b351c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.227334][T12978] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 242.235296][T12978] RDX: 0000000000000010 RSI: 00000000200001c0 RDI: 0000000000000003 [ 242.243361][T12978] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 242.251323][T12978] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9b3526d4 [ 242.259292][T12978] R13: 00000000004c97f7 R14: 00000000004e0db0 R15: 00000000ffffffff [ 242.267263][T12978] [ 242.269576][T12978] Uninit was created at: [ 242.273809][T12978] kmsan_internal_poison_shadow+0x58/0xb0 [ 242.279514][T12978] kmsan_slab_free+0x8d/0x100 [ 242.284188][T12978] kfree+0x4c1/0x2db0 [ 242.288160][T12978] rdma_destroy_id+0x1c10/0x1c80 [ 242.293171][T12978] ucma_close+0x344/0x4c0 [ 242.297486][T12978] __fput+0x4c9/0xba0 [ 242.301456][T12978] ____fput+0x37/0x40 [ 242.305430][T12978] task_work_run+0x22e/0x2a0 [ 242.310007][T12978] prepare_exit_to_usermode+0x39d/0x4d0 [ 242.315678][T12978] syscall_return_slowpath+0x90/0x610 [ 242.321046][T12978] do_syscall_64+0xe2/0xf0 [ 242.325457][T12978] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 242.331332][T12978] ================================================================== [ 242.339510][T12978] Disabling lock debugging due to kernel taint [ 242.346096][T12978] Kernel panic - not syncing: panic_on_warn set ... [ 242.352766][T12978] CPU: 0 PID: 12978 Comm: syz-executor.4 Tainted: G B 5.3.0-rc7+ #0 [ 242.362038][T12978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.372084][T12978] Call Trace: [ 242.375383][T12978] dump_stack+0x191/0x1f0 [ 242.379717][T12978] panic+0x3c9/0xc1e [ 242.383626][T12978] kmsan_report+0x2ca/0x2d0 [ 242.388142][T12978] __msan_warning+0x75/0xe0 [ 242.392639][T12978] __list_add_valid+0x292/0x430 [ 242.397486][T12978] rdma_listen+0x623/0x10b0 [ 242.401994][T12978] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 242.407967][T12978] ucma_listen+0x36e/0x5e0 [ 242.412397][T12978] ? ucma_connect+0xa40/0xa40 [ 242.417150][T12978] ucma_write+0x5c5/0x640 [ 242.421478][T12978] ? ucma_get_global_nl_info+0xe0/0xe0 [ 242.426927][T12978] __vfs_write+0x1a9/0xcb0 [ 242.431350][T12978] ? rw_verify_area+0x3a5/0x5e0 [ 242.436214][T12978] ? kmsan_get_shadow_origin_ptr+0x28c/0x3a0 [ 242.442183][T12978] vfs_write+0x481/0x920 [ 242.446433][T12978] ksys_write+0x265/0x430 [ 242.450768][T12978] __se_sys_write+0x92/0xb0 [ 242.455528][T12978] __x64_sys_write+0x4a/0x70 [ 242.460112][T12978] do_syscall_64+0xbc/0xf0 [ 242.464525][T12978] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 242.470400][T12978] RIP: 0033:0x459879 [ 242.474283][T12978] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 242.493879][T12978] RSP: 002b:00007fdd9b351c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.502280][T12978] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459879 [ 242.510248][T12978] RDX: 0000000000000010 RSI: 00000000200001c0 RDI: 0000000000000003 [ 242.518206][T12978] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 242.526173][T12978] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdd9b3526d4 [ 242.534134][T12978] R13: 00000000004c97f7 R14: 00000000004e0db0 R15: 00000000ffffffff [ 242.543566][T12978] Kernel Offset: disabled [ 242.547898][T12978] Rebooting in 86400 seconds..