[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 63.484064][ T24] audit: type=1800 audit(1563926067.620:25): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 63.503931][ T24] audit: type=1800 audit(1563926067.620:26): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 63.524279][ T24] audit: type=1800 audit(1563926067.620:27): pid=9220 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.87' (ECDSA) to the list of known hosts. 2019/07/23 23:54:37 fuzzer started 2019/07/23 23:54:40 dialing manager at 10.128.0.26:37249 2019/07/23 23:54:40 syscalls: 2467 2019/07/23 23:54:40 code coverage: enabled 2019/07/23 23:54:40 comparison tracing: enabled 2019/07/23 23:54:40 extra coverage: extra coverage is not supported by the kernel 2019/07/23 23:54:40 setuid sandbox: enabled 2019/07/23 23:54:40 namespace sandbox: enabled 2019/07/23 23:54:40 Android sandbox: /sys/fs/selinux/policy does not exist 2019/07/23 23:54:40 fault injection: enabled 2019/07/23 23:54:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/07/23 23:54:40 net packet injection: enabled 2019/07/23 23:54:40 net device setup: enabled 23:56:44 executing program 0: syzkaller login: [ 200.498215][ T9387] IPVS: ftp: loaded support on port[0] = 21 23:56:44 executing program 1: [ 200.630003][ T9387] chnl_net:caif_netlink_parms(): no params data found [ 200.719622][ T9387] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.726739][ T9387] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.735096][ T9387] device bridge_slave_0 entered promiscuous mode [ 200.745116][ T9387] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.752338][ T9387] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.761268][ T9387] device bridge_slave_1 entered promiscuous mode [ 200.774655][ T9390] IPVS: ftp: loaded support on port[0] = 21 [ 200.790321][ T9387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.804569][ T9387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.837411][ T9387] team0: Port device team_slave_0 added [ 200.845448][ T9387] team0: Port device team_slave_1 added 23:56:45 executing program 2: [ 201.051585][ T9387] device hsr_slave_0 entered promiscuous mode 23:56:45 executing program 3: [ 201.129524][ T9387] device hsr_slave_1 entered promiscuous mode [ 201.252795][ T9392] IPVS: ftp: loaded support on port[0] = 21 [ 201.277195][ T9394] IPVS: ftp: loaded support on port[0] = 21 [ 201.295191][ T9387] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.302472][ T9387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.310352][ T9387] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.317461][ T9387] bridge0: port 1(bridge_slave_0) entered forwarding state 23:56:45 executing program 4: [ 201.448404][ T9390] chnl_net:caif_netlink_parms(): no params data found [ 201.556150][ T9390] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.563580][ T9390] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.572118][ T9390] device bridge_slave_0 entered promiscuous mode [ 201.646597][ T9387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.675115][ T9390] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.682424][ T9390] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.690746][ T9390] device bridge_slave_1 entered promiscuous mode [ 201.711313][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.729107][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.741245][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 201.773942][ T9392] chnl_net:caif_netlink_parms(): no params data found [ 201.798112][ T9394] chnl_net:caif_netlink_parms(): no params data found [ 201.815508][ T9387] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.824941][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.832985][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.865938][ T9390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.887404][ T9399] IPVS: ftp: loaded support on port[0] = 21 [ 201.899322][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.908423][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.917047][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.924203][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state 23:56:46 executing program 5: [ 201.956989][ T9390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.999133][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.008735][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.017226][ T9402] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.024424][ T9402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.033727][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.046015][ T9394] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.053189][ T9394] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.061444][ T9394] device bridge_slave_0 entered promiscuous mode [ 202.107340][ T9394] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.114597][ T9394] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.123744][ T9394] device bridge_slave_1 entered promiscuous mode [ 202.133067][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.142362][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.151227][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.159843][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.168589][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.180532][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.196792][ T9405] IPVS: ftp: loaded support on port[0] = 21 [ 202.214491][ T9392] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.221647][ T9392] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.229770][ T9392] device bridge_slave_0 entered promiscuous mode [ 202.247634][ T9390] team0: Port device team_slave_0 added [ 202.269075][ T9394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.288855][ T9390] team0: Port device team_slave_1 added [ 202.297566][ T9392] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.305002][ T9392] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.313120][ T9392] device bridge_slave_1 entered promiscuous mode [ 202.333162][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.341682][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.364528][ T2631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.373283][ T2631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.391015][ T9394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.406230][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.420704][ T9392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.438200][ T9392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.487858][ T9392] team0: Port device team_slave_0 added [ 202.496438][ T9392] team0: Port device team_slave_1 added [ 202.539955][ T9390] device hsr_slave_0 entered promiscuous mode [ 202.578326][ T9390] device hsr_slave_1 entered promiscuous mode [ 202.618332][ T9390] debugfs: Directory 'hsr0' with parent '/' already present! [ 202.676622][ T9399] chnl_net:caif_netlink_parms(): no params data found [ 202.721612][ T9394] team0: Port device team_slave_0 added [ 202.743429][ T9399] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.750624][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.758777][ T9399] device bridge_slave_0 entered promiscuous mode [ 202.772891][ T9399] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.780233][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.788406][ T9399] device bridge_slave_1 entered promiscuous mode [ 202.796540][ T9394] team0: Port device team_slave_1 added [ 202.818698][ T9399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.837455][ T9399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.880567][ T9392] device hsr_slave_0 entered promiscuous mode [ 202.908353][ T9392] device hsr_slave_1 entered promiscuous mode [ 202.948052][ T9392] debugfs: Directory 'hsr0' with parent '/' already present! [ 203.009892][ T9394] device hsr_slave_0 entered promiscuous mode [ 203.048305][ T9394] device hsr_slave_1 entered promiscuous mode [ 203.108045][ T9394] debugfs: Directory 'hsr0' with parent '/' already present! [ 203.140492][ T9387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.170398][ T9399] team0: Port device team_slave_0 added [ 203.179436][ T9399] team0: Port device team_slave_1 added [ 203.255746][ T9405] chnl_net:caif_netlink_parms(): no params data found [ 203.331616][ T9399] device hsr_slave_0 entered promiscuous mode [ 203.358391][ T9399] device hsr_slave_1 entered promiscuous mode [ 203.398230][ T9399] debugfs: Directory 'hsr0' with parent '/' already present! [ 203.496146][ T9399] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.503312][ T9399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.510758][ T9399] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.517857][ T9399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.529535][ T9405] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.536980][ T9405] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.545487][ T9405] device bridge_slave_0 entered promiscuous mode [ 203.554349][ T9405] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.562399][ T9405] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.570483][ T9405] device bridge_slave_1 entered promiscuous mode [ 203.611646][ T9390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.626330][ T9394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.665643][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.686078][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.705847][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 23:56:47 executing program 0: [ 203.713999][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.726926][ T9392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.736399][ T9405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.753440][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.761450][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.774263][ T9394] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.786511][ T9390] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.806603][ T9405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.831984][ T9392] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.842449][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 203.850420][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.858622][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.867455][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 23:56:48 executing program 0: [ 203.876204][ T9402] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.883520][ T9402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.891285][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 203.900133][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.908655][ T9402] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.915749][ T9402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.949339][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.957471][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 203.965906][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 203.974950][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.984403][ T9402] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.991546][ T9402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.999282][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.008229][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.016994][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.025561][ T9402] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.032690][ T9402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.040443][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 23:56:48 executing program 0: [ 204.049277][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.057992][ T9402] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.065065][ T9402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.072864][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.081815][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 23:56:48 executing program 0: [ 204.133193][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.141474][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.150617][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.159505][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.168705][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.177480][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.186484][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.195070][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.203640][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.212453][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.221113][ T9402] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.228258][ T9402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.236007][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.245012][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.253952][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.263024][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 23:56:48 executing program 0: [ 204.284427][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.292870][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.301327][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.310173][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.325633][ T9394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.337239][ T9394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.356413][ T9405] team0: Port device team_slave_0 added [ 204.381733][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.390467][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.399068][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.408254][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.416940][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.425529][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 23:56:48 executing program 0: [ 204.434020][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.442876][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.451573][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 204.460147][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 204.468650][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.477147][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 23:56:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0x126, 0xf, 0xde, 0xee, 0x7, 0x9}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr="4561b037fa43471fbf8c31b4dc6e09b6", 0x1f, 0x1, 0xff, 0x4, 0x5, 0x7ff}, &(0x7f0000000100)=0x20) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCNXCL(r2, 0x540d) [ 204.504949][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 204.515448][ T9405] team0: Port device team_slave_1 added [ 204.542472][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.562746][ T9399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.572895][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 204.581490][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 204.593052][ T9394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.616706][ T9392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 204.681213][ T9405] device hsr_slave_0 entered promiscuous mode [ 204.738560][ T9405] device hsr_slave_1 entered promiscuous mode [ 204.778122][ T9405] debugfs: Directory 'hsr0' with parent '/' already present! [ 204.796545][ T9399] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.819914][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.827808][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.879694][ T9392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.899099][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.908017][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.916611][ T9402] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.923817][ T9402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.932394][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.941286][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.949862][ T9402] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.957040][ T9402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.964814][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.983871][ T9405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.999155][ T9390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.007145][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.016115][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.025540][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.068637][ T9405] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.118197][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.126364][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.135283][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.144386][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.152571][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.160790][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.169586][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.178134][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.186769][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.212370][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 23:56:49 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x10001, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x40008, 0x2e, 0x0, r1}) dup2(r0, r2) 23:56:49 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x7, 0x109800) r1 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x81, 0x10401) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000200)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400, 0x0) pread64(r0, &(0x7f0000000080)=""/193, 0xc1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000040)={0x1, 0x4, 0x2}, 0xc) ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0) 23:56:49 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x7d, &(0x7f0000000400), &(0x7f0000000440)=0x18) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x800000, 0x0, 0x7c, 0x7fff}) [ 205.320034][ T9399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.347092][ T9405] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.357778][ T9405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.431984][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.440996][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.449790][ T9401] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.456881][ T9401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.464678][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.473558][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.482156][ T9401] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.489670][ T9401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.497375][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.506368][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.515348][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.524309][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.533548][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.543625][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.552313][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.560923][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.569853][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.578612][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.593629][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.602071][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.610214][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.631296][ T9405] 8021q: adding VLAN 0 to HW filter on device batadv0 23:56:50 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf050000000000000f650000000000006507000002000000070700004c0000001f75000000000000bf5400000000000007050000cc17c7656aeaa6f3000000009500000000000000050000000000000095000000000000000dba2f1e68460481ad06033ec49d61e1cb4886aacdf866e6833fcc305238323adfc32e3c77140718e30acd45d65a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, 0xd96a, 0x7, 0x40, &(0x7f0000ffc000/0x4000)=nil, 0x7}) 23:56:50 executing program 5: r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008100e00f80ecdb4cb904021d65ef0b007c05e8fe55a1bc000500ac14140103000000050000000000812fa8000b000f0063e3e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) r1 = getgid() r2 = getgid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000080), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) setgroups(0x4, &(0x7f0000000300)=[r1, r2, r3, r4]) 23:56:50 executing program 2: signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000080)=""/148, 0x94}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000237, 0x0) getsockopt$llc_int(r0, 0x10c, 0xe, &(0x7f0000000000), &(0x7f0000000140)=0x4) 23:56:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x17, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="050000002d000000000000000000003e1611476943431f0095000000ed91dd557bf799c1bb98e73c999f98b2c9b473d3f094b827bdbb5532373f74ab73e0ee04b9fcb9feb29a55a7310567e7a1d3d7387f7a2c9f8a08b00158810160c252612c4a6af5a4d77e913348b8445a313d564f7ff5c6540e26b3366307129fce8550d25ef4d0019e01"], &(0x7f0000000200)='GPL\x00', 0x8, 0xfb, &(0x7f0000000100)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000280)={0x1, 0x0, 0x10002, 0x9}) sysfs$1(0x1, &(0x7f0000000300)='/proc/self/net/pfkey\x00') ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f00000002c0)={0x2, r1, 0x0, 0x5}) 23:56:50 executing program 1: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x5a7, {{0x2, 0x0, @remote}}}, 0x88) r0 = userfaultfd(0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x4e21, @broadcast}}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) r2 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x9, 0x40000) ioctl$NBD_DO_IT(r2, 0xab03) splice(r0, &(0x7f00000001c0), r0, &(0x7f0000000200)=0x10, 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x100000001, 0x208, 0x0, 0x101, r4}, 0x10) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000007000/0x1000)=nil, 0x1000}) 23:56:50 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001100)='/dev/vhost-net\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x5, 0x400) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080), 0x10) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x5) 23:56:50 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x404000, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00000005c0)={0xa29}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000380)) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="1500080065ffa0f78000000800c0b1fe403bcd9a2a0bc59c70cf3950323030302e9e"], 0x15) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000180)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$VIDIOC_S_MODULATOR(r5, 0x40445637, &(0x7f0000000440)={0x4, "b8c4ee7a7481be26bc874235fffce0f25cc6f66e029875fedd6a006732ae19e9", 0x80, 0x5, 0x200, 0x4, 0x4}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) futimesat(r2, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)={{0x77359400}, {r6, r7/1000+30000}}) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000180)={0x3, 0x0, &(0x7f00000000c0)=""/52, &(0x7f0000000100)=""/69, &(0x7f00000002c0)=""/182, 0xf000}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x4}}, 0xe8) sendmmsg(r2, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000003c0)='vegas\x00', 0x6) [ 206.001754][ C1] hrtimer: interrupt took 30489 ns 23:56:50 executing program 3: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="2321202e2f66696c653020ea"], 0xc) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2) 23:56:50 executing program 1: umount2(&(0x7f0000000040)='./file0\x00', 0xc) socketpair$unix(0x1, 0xfffffffffffffffd, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x4, 0x300) getsockopt$packet_buf(r1, 0x107, 0x13, 0x0, &(0x7f0000000000)=0x53) 23:56:50 executing program 2: semget$private(0x0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc) semget$private(0x0, 0x2, 0x8) semget$private(0x0, 0x2, 0x20) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) r0 = semget(0x1, 0x4, 0x1) semctl$GETVAL(r0, 0x7, 0xc, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c40)=""/23, 0x17}], 0x1, 0x0, 0x0, 0x8}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='cmdline\x00') getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000000000)=""/222, 0xde) preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x0) 23:56:50 executing program 5: syz_read_part_table(0x0, 0x6aa3263ba74b415, &(0x7f0000000080)=[{&(0x7f0000000000)="020082ffffff01000000ff07000000000000000000000000000000000000800000000800000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vsock\x00', 0x301000, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f00000005c0)={0x9000000000000000, 0x3, 0xa1, 0x0, 0x9}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000280)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xe8) fstat(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getuid() openat$vsock(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vsock\x00', 0x80000, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="02000000010006000000000002000500", @ANYRES32=r2, @ANYBLOB="02000200", @ANYRES32=r3, @ANYBLOB="02000400", @ANYRES32=r4, @ANYBLOB="02000400", @ANYRES32=r5, @ANYBLOB="040006000000000008000200", @ANYRES32=r6, @ANYBLOB="1040020002a800002004070000000000"], 0x4c, 0x3) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f00000000c0)=0x1) 23:56:50 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x7, 0x0) r1 = getpid() ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000200)={0x2, r0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000000c0)={{0x7, 0x1, 0x7, 0x0, 'syz0\x00', 0x100000001}, 0x1, 0x20000000, 0x5, r1, 0x4, 0x9, 'syz0\x00', &(0x7f0000000080)=['GPL\x00', 'GPL\x00', 'GPL\x00', 'GPL\x00'], 0x10, [], [0x7, 0x8, 0x48000000000, 0xffff]}) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x15, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007a10003d41ea0000f7ff00950000000000000014ac7742064cba68e6a70ac7267537155c71cf53dc8478317df957c986d61f03221a467e9395f52f4eac20ed23de887b494e127227c13008400c3953f4bd735f05b474b95748b0ab0d26e6cda93225a977a2b9b0721ccb173cccf01fe8f73e477d6483ee54d35e8c3d3d665d528edff59384c31d05efe5e92653ee97c9bd6266e61a6f9f3b194c20a6e388f0db8af7f9ee904eb1178673386a57fbd84759ea8a41bb568e9b196534c07bc9d4b4bc2078"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) accept4$nfc_llcp(r0, &(0x7f0000000500), &(0x7f0000000580)=0xfffffe4b, 0x80800) 23:56:50 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x404000, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00000005c0)={0xa29}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000380)) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="1500080065ffa0f78000000800c0b1fe403bcd9a2a0bc59c70cf3950323030302e9e"], 0x15) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000180)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$VIDIOC_S_MODULATOR(r5, 0x40445637, &(0x7f0000000440)={0x4, "b8c4ee7a7481be26bc874235fffce0f25cc6f66e029875fedd6a006732ae19e9", 0x80, 0x5, 0x200, 0x4, 0x4}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) futimesat(r2, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)={{0x77359400}, {r6, r7/1000+30000}}) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000180)={0x3, 0x0, &(0x7f00000000c0)=""/52, &(0x7f0000000100)=""/69, &(0x7f00000002c0)=""/182, 0xf000}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x4}}, 0xe8) sendmmsg(r2, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000003c0)='vegas\x00', 0x6) 23:56:50 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580)='/dev/audio\x00', 0x404000, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00000005c0)={0xa29}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000380)) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="1500080065ffa0f78000000800c0b1fe403bcd9a2a0bc59c70cf3950323030302e9e"], 0x15) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000180)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x26f) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$VIDIOC_S_MODULATOR(r5, 0x40445637, &(0x7f0000000440)={0x4, "b8c4ee7a7481be26bc874235fffce0f25cc6f66e029875fedd6a006732ae19e9", 0x80, 0x5, 0x200, 0x4, 0x4}) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) futimesat(r2, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540)={{0x77359400}, {r6, r7/1000+30000}}) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000180)={0x3, 0x0, &(0x7f00000000c0)=""/52, &(0x7f0000000100)=""/69, &(0x7f00000002c0)=""/182, 0xf000}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x4}}, 0xe8) sendmmsg(r2, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000003c0)='vegas\x00', 0x6) 23:56:50 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004800004000fe000000009078ac3414bbac1e0000440c06030000000000000000000000004000"/78], 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x1, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000040)=""/134) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x7fffffff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r1, 0x7f, 0x800}, 0x8) 23:56:50 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000100)={0x7e, 0x0, [0x40000082], [0xc1]}) 23:56:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000100)={0x0, 0x21f, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r1, 0x40000021}, 0x1c}, 0x1, 0x0, 0x0, 0x80000000000}, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x40, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f00000000c0)={0x7, 0xfffffffffffffffd, 0x7, 0x8df, 0x1, 0x4}) 23:56:50 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r0}}, 0x18) ioctl(r0, 0x80084121, 0x0) [ 206.869619][ T9518] loop5: p1 [ 206.873016][ T9518] loop5: partition table partially beyond EOD, truncated [ 206.880942][ T9518] loop5: p1 start 1 is beyond EOD, truncated [ 206.883890][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:56:51 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x9, 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x9, 0x20000) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x70, 0x2, 0x6, 0x4f9f, 0x8, 0x0, 0x4, 0x100, 0x6, 0x81, 0x9, 0x4, 0xdfc, 0x72e, 0x100000001, 0x1f, 0x5c3, 0x6a9664ac, 0xffffffffffffffff, 0x3ff, 0x0, 0x4, 0x8, 0x6, 0x9, 0x200, 0xfffffffffffffff8, 0x8, 0xcc3, 0x3611318d, 0x9248, 0x20, 0x20, 0xfffffffffffffff8, 0x100000001, 0x0, 0x5, 0x0, 0x20, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x8, 0x3, 0x7, 0x9, 0xdc15, 0x1ff, 0x8}, r1, 0x3, r0, 0xc) 23:56:51 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x7, 0x1) unlinkat(r1, &(0x7f0000000200)='./file0\x00', 0x200) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180), 0x10) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x6, 0x20000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xb2) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f0000000040)="ee", 0x1, 0x0, 0x0, 0x0) [ 207.054998][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 23:56:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x1]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1) 23:56:51 executing program 2: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2000, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'irlan0\x00', {0x2, 0x4e22, @rand_addr=0x40}}) r1 = socket$inet6_sctp(0xa, 0x8000000005, 0x84) io_setup(0x2, &(0x7f0000000000)=0x0) socket$netlink(0x10, 0x3, 0x2) io_submit(r2, 0x1, &(0x7f0000000900)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) [ 207.334899][ T9566] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 23:56:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x23d, 0x20000000000032, 0x11d, 0x0, 0x0, {0x1802}, [@nested={0xc, 0x0, [@typed={0x8, 0x3, @binary="9262"}]}]}, 0x20}}, 0x0) 23:56:51 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000140)={{{@in=@remote, @in6=@mcast1}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) setreuid(r4, r3) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 23:56:51 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@rc, &(0x7f0000000140)=0x80) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@remote={[], 0x3}, 0x7, 'ifb0\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e62cfe47bf070") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x7) ioctl$TCFLSH(r2, 0x5437, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfff, 0x0) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000080)) 23:56:51 executing program 4: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='children\x00') socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0x5, 0x4) preadv(r1, &(0x7f0000000100), 0x100000000000027a, 0x8000000) 23:56:51 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x7ff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={r1, 0x92, "a4bbb6c0fb8c92256a5f2b3abc09bed073bc5ec902bccff5d0e66663ddf3c8431188f3f7960b0418f0248b53cbbd23f5a18d8509b4b003d064370dec9206b1d4fc18a58f5e042fcb7be3f3ea1a3f097a565b4e7334fc8b99b0cd8d74345e98faa9c3f4a58c452bffb1393101c841c870101f36914d470fdca5d5263083c53eb4ef4e5c1fae52d03304ca41321ac1df114a64"}, &(0x7f00000000c0)=0x9a) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000240)=""/80) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0xcd17, 0xfffffffffffffffa, 0x6, 0x8ea, 0xffffffff}, 0x14) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x3, 0x20000800) 23:56:51 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x2000000000002, 0x0) r2 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) r3 = fcntl$dupfd(r0, 0x0, r1) getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f0000000100)=""/238, &(0x7f0000000200)=0xee) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f00000006c0)={0x5, 0x101, 0x8, 0x0, 0xacfb}) r4 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, 0x0) timer_create(0x7, &(0x7f0000000640)={0x0, 0x3f, 0x0, @thr={&(0x7f0000000dc0)="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", 0x0}}, &(0x7f0000000680)=0x0) timer_getoverrun(r5) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x0, 0x0, 0x4, 0xb9d7}) sendfile(r1, r2, 0x0, 0x20000102000007) syz_genetlink_get_family_id$tipc2(0x0) dup3(r0, 0xffffffffffffffff, 0x80000) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x0) r6 = add_key$user(&(0x7f00000002c0)='user\x00', 0x0, &(0x7f0000000280)="0342a6ff6e8441", 0x7, 0xffffffffffffffff) keyctl$read(0xb, r6, &(0x7f00000004c0)=""/182, 0xb6) ioctl$LOOP_CLR_FD(r1, 0x4c01) dup2(r2, r1) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, 0x0) getdents(r2, &(0x7f0000000580)=""/131, 0x83) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 207.588670][ T9579] sp0: Synchronizing with TNC 23:56:51 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x2, 0x0) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x10010, r1, 0x0) close(r0) 23:56:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x37a, 0x18, 0x0, 0x0) 23:56:51 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x721080, 0x0) bind$isdn_base(r2, &(0x7f0000000340)={0x22, 0x8, 0x5, 0xa91b, 0x1}, 0x6) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x3a46, 0x0) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000180)={0x0, 0x0, 0x8001, [], &(0x7f0000000140)=0x5}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400802, 0x0) r5 = getpgid(0xffffffffffffffff) write$cgroup_pid(r4, &(0x7f00000000c0)=r5, 0x12) bind$bt_l2cap(r1, &(0x7f0000000040), 0xe) listen(r1, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x700, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) [ 207.823956][ T9579] sp0: Synchronizing with TNC [ 207.860482][ T9592] Unknown ioctl 1075883590 [ 207.903412][ T9592] Unknown ioctl 1075883590 [ 207.984879][ T9592] Unknown ioctl 1075883590 23:56:52 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000040)={0x18, 0x0, 0x2, {0x7f}}, 0x18) sendfile(r1, r1, 0x0, 0x8000) [ 208.015340][ T9592] Unknown ioctl 1075883590 23:56:52 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0x408000000000000, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0xfffffffffffffffe) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$getregs(0xe, r2, 0x8, &(0x7f00000000c0)=""/44) [ 208.133812][ T9592] Unknown ioctl 1075883590 23:56:52 executing program 4: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001140)={&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000172000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000229000/0x2000)=nil, &(0x7f0000935000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x353) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x400000) r0 = syz_open_procfs(0x0, &(0x7f0000001880)='environ\x00') read$FUSE(r0, &(0x7f0000000140), 0xfffffefa) [ 208.198438][ T9592] Unknown ioctl 1075883590 23:56:52 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2c0600, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x43, 0x5}, 'port1\x00', 0x1, 0x1002, 0x7b17, 0x9, 0x33, 0x5, 0x7, 0x0, 0x4, 0x1}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x1, r3, 0x3f, r1}, 0x10) read(r2, &(0x7f0000000200)=""/168, 0xa8) syz_extract_tcp_res(0x0, 0x0, 0x0) 23:56:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000200)=0xc) lsetxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x2, 0x3) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', r3, r4) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44a92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000540)=ANY=[], 0x22b5) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xc) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(r1, &(0x7f0000000000), 0x200) [ 208.288218][ T9592] Unknown ioctl 1075883590 [ 208.337699][ T9592] Unknown ioctl 1075883590 23:56:52 executing program 2: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000), 0x10) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000001a80)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000005804000040010000580200005802000070030000700300007003000004000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000067fac1ca95b1895e9e95c0854d49758c52ce1314d29ade4725c9fcc37878"], @ANYBLOB="ac1414aaac1414aaffffff00ffffffffffffffffffff0000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000ffffff000000000000000000000001040007ff00810040009a76657468315f746f5f687372000000007465716c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c6500000000000000000000000000000000000000000000000000000000000000000000000000000000aaaaaaaaaaaa00000000000000000000000000087f0000010f000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030010e1ff01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000180100000000000000000000000000000000000000000000000000002800434c415353494659000000000000000000000000000000000000000000003f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4a8) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000015c0)={'filter\x00', 0x7, 0x4, 0x458, 0x120, 0x258, 0x0, 0x370, 0x370, 0x370, 0x4, &(0x7f0000000040), {[{{@arp={@multicast1, @local, 0xffffff00, 0xffffffff, @mac=@local, {[0xff]}, @mac=@random="22b9db2f81e9", {[0x0, 0xff, 0x0, 0x0, 0xff]}, 0x4, 0x93e9, 0x3fff80000, 0x1, 0xfffffffffffffff8, 0xffffffffffffff01, 'veth1_to_team\x00', 'ip6tnl0\x00', {0xff}, {0xff}}, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x10000, 0x8, 0x1000, 0x2}}}, {{@uncond, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x401, 0xfffffffffffffc00}}}, {{@arp={@remote, @broadcast, 0xffffff00, 0xffffffff, @mac=@dev={[], 0x11}, {[0xff, 0xff, 0xff, 0xff]}, @mac, {[0x0, 0xff, 0xff]}, 0x3ff, 0x1f, 0x7, 0xbd5, 0x7, 0xeb, 'veth0_to_bond\x00', 'gretap0\x00', {}, {0xff}, 0x0, 0x191}, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00'}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0xfffffffffffffdd5) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000001580)={0x1000, &(0x7f0000000580)="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"}) [ 208.408176][ T9592] Unknown ioctl 1075883590 [ 208.412842][ T9592] Unknown ioctl 1075883590 [ 208.499563][ T9592] Unknown ioctl 1075883590 [ 208.515370][ T9592] Unknown ioctl 1075883590 23:56:52 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc06d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000b36, 0x8031, 0xffffffffffffffff, 0x0) 23:56:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x22000) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000340)=0xe8) getpeername(0xffffffffffffffff, &(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x80) recvmsg(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000500)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000580)=""/203, 0xcb}, {&(0x7f0000000680)=""/253, 0xfd}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/141, 0x8d}], 0x4, &(0x7f0000001880)=""/163, 0xa3}, 0x2000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001980)={@remote, @initdev, 0x0}, &(0x7f00000019c0)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001a40)=0x14, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001ac0)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001b00)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@multicast2}}, &(0x7f0000001c00)=0xe8) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000002000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001c40)={0x344, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x1a8, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7bd5c2e}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r7}, {0xfc, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x54, 0x4, [{0x5, 0x6e, 0x4, 0xfffc000000000000}, {0x8000, 0x5, 0x7, 0x7fffffff}, {0x0, 0x7, 0x7, 0x1ff}, {0x7, 0x8001, 0x9}, {0xfffffffffffffffb, 0x36c, 0xfff, 0x608}, {0x8b1, 0x4, 0x9, 0x7}, {0xc, 0x6, 0x0, 0xfffffffffffffffd}, {0xf7b, 0x7fffffff, 0x6, 0x8}, {0xffff, 0xdea5, 0x0, 0x3}, {0x9, 0x4, 0x6, 0x7ff}]}}}]}}, {{0x8, 0x1, r9}, {0x74, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x15e}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}]}, 0x344}, 0x1, 0x0, 0x0, 0x10}, 0x80) r10 = epoll_create1(0x80000) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x7ffffffa) dup3(r0, r10, 0x80000) sched_setaffinity(0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffff9c, 0x0) socket$inet6(0xa, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r11) 23:56:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x6001, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x3, 0x7fff, 0x0, 0x1, 0x7f, 0x1ff, 0x1, 0x2, 0x81, 0x9, 0x92db, 0xffffffffffffffff, 0x40000000000000, 0x2, 0x2, 0x5}}) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) setsockopt$packet_buf(r3, 0x107, 0x7, &(0x7f0000000040)="8af7cd85b8c58aff158a39ec8e303cc661bcabee999b1332d7908104236f1a74a7fcfb54000461edcc6237020ebd4d6b8443e889d4ca1c88ea2ab3816f34654c8bdf875fe6d80892205a37415c7b09e8ed56916d809ac4b5f748874e9729f62b7c329418cb6d21f388dc36e68bb0d33e940a2cf13ecaf7a62e41d420ccc54551f5187f1e7df093288fbab1bcc79f29d83c96b0f484c21feb169e181dc0a8a5", 0x9f) ioctl$PPPIOCGL2TPSTATS(r2, 0x80047437, &(0x7f0000000180)) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x8002, 0x0) write$P9_RFSYNC(r4, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f00000001c0)={0x101, 0x7fffffff}) 23:56:52 executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x60108, 0x0) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) gettid() openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$getownex(r1, 0x10, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f00000005c0)={0xa0, 0x0, 0x5, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x0, 0x807c, 0x6, 0x0, 0x0, 0x0, 0x0, 0xcb1}}}}, 0xa0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000500)) close(r0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) userfaultfd(0x80000) 23:56:53 executing program 0: shmget(0x2, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x2900c0) 23:56:53 executing program 1: clock_nanosleep(0xc, 0x1, &(0x7f0000000000)={0x0, 0x1c9c380}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r0, r1, 0x0, 0x2}, 0x10) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000140)={0x0, 0x0, 0x0, [], &(0x7f0000000100)=0x80000000}) 23:56:53 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000140)=0x1) r1 = creat(&(0x7f0000000540)='./file0\x00', 0x10) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000040)={0x7f, 0x0, [], {0x0, @reserved}}) 23:56:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x20000004e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000140)="b1", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/51, 0x33}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) 23:56:53 executing program 1: r0 = socket$kcm(0x10, 0xfffffffffffffffe, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000000000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 23:56:53 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8001, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='fuse\x00', 0x10, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x1800}}], [{@seclabel='seclabel'}, {@subj_role={'subj_role', 0x3d, '/dev/audio\x00'}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@subj_user={'subj_user', 0x3d, 'trustedvboxnet1-/'}}]}}) recvmsg(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x140) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000640)={0x3, 0x1, &(0x7f00000003c0)=""/231, &(0x7f00000004c0)=""/127, &(0x7f0000000540)=""/253, 0x4}) [ 209.276732][ T9696] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 23:56:53 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x7) r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc05c6104, &(0x7f0000000080)) 23:56:53 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) write(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus/file0\x00', 0x1dc) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000440)={'broute\x00', 0x0, 0x3, 0xab, [], 0x0, 0x0, &(0x7f00000002c0)=""/171}, &(0x7f00000001c0)=0x78) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbcq\x9a\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98q\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00', 0x2761, 0x0) write$cgroup_pid(r2, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x660c, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) r3 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) ioctl$ASHMEM_GET_NAME(r4, 0x81007702, &(0x7f0000000000)=""/63) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) 23:56:54 executing program 5: mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xe000)=nil, 0xe000, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 23:56:54 executing program 4: ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f0000000080)={0xc2a3, 0x1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1, 0x1) ioctl$TIOCNOTTY(r2, 0x5422) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f00000000c0)=0x54) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000008000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23:56:54 executing program 0: r0 = timerfd_create(0x8, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) dup2(r2, r0) 23:56:54 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x20000000001ff, 0x40004) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000040)={0xa6, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}) 23:56:54 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='\x00'/14, 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x4, 0xffffffffffffffa8) 23:56:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f, 0x3}}, 0x20) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x7fffffff, 0x5, 0x952, 0xbe4}) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100000001, 0x2001) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000000c0)=0x200, 0x4) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6gretap0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1}}) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f00000001c0)) 23:56:54 executing program 5: perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x101, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0), 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2d5ba19, 0x80000) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000080)={0x5df7, 0x7, 0x1, 0x4, 0x2, 0x1, 0x3f, 0x0, 0x2, 0x1}) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0xfffffffffffffffe}, 0x10) sendmmsg(r0, &(0x7f00000001c0), 0x400000000000150, 0x0) 23:56:54 executing program 2: socket$tipc(0x1e, 0x2, 0x0) r0 = creat(&(0x7f0000000140)='./file1\x00', 0x0) socket$tipc(0x1e, 0x2, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)) 23:56:54 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xe74f000, 0x121100) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000000c0)={0x81}, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_netrom_SIOCADDRT(r2, 0x40087101, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000140)=0x8) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getstats={0x1c, 0x5e, 0x330, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x7}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x885}, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000200)="55323235d77ee0a2b885882c733a6ecdaf57c6e9a7e4567de9232d1b4a269ee0476b106170912d590ef18d685ab9ddc4687b2b90052ee7a9ba0d7f50dba5548dcb7419def55ab2218fe216d12c3972ea66c8929068ff6b6f0c115aa52df52ad3cc44ca38", 0x64) 23:56:54 executing program 4: pipe(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$UHID_INPUT(r1, &(0x7f0000000200)={0x8, "c33ded47dfe80239e68e17563a1f1ea39fc58a5f9d2f209da0669e5c86567d4d42764a64762a04bbe0b856f4e06c45eabd7bb5889289fce5c35db831b5e771940c3848eb924d2104e8693018c3b9e5f9b9606595961c1b4c17fb337e383c1409019a91f3cbaa9cfb8671809c6710d62f0335a8707d8145a808ba0ecec0eab412c0926a1654da33015f727537b6ed84b678412aaa90a8325a108914163c6fac6e9d0241ef703f4030155f99a35d237c7dc6ef8ff5cb4338896f2df0f6682fee81404d6678cd2883e4ac150a01ac6be98f8a5d5f884ecea58361e45e614b1e853782bb85fc1d8b1fb7cb27f070d8a3c787fcf969905ccfb35771eb80eb598b6f92e6fb857608ed883abfdbed5193c43d625a43823d14bc4ec268f05dce6cbfb48490dc9cf7689538708ff2cf7da725e9615d164cd97e4c1de179bff97902a706af212e6d4ffe25a8133373681e31e0d378c34e466a4af9988ef039fd8e900ff6d21fb5d9d3c9e938113a5a09e207562448f7315ed236e8a58be2da982b98b1fa2dba5911017641602b99fed97c5bcec479f8aa965ca3544a54222e091b25be811b119e8d275453e0c5d33667d51c69bece592fced63940761b10d9cc179d2d7d7b87d9e37e454681aaec20f4d1da2086c013fbbe84988ff45d195367f6b5e56e9275647cabc9d7644659686de8a4f539cec2813cb6828ef956e997224d7680ed7c8c5610429021b4b40c964d08c770cfa8cf67bbea3271270dfa870dd1d93ac72a41c3821ba43751a285da0c278427c622780a765e70bd6f48dfa0ba2c0fbc74ed9dfd4c846bdcb23612f50881633cf320d5583759eb0b81d75a95186c2c662296b5b09526524d327e1d078f38adafb29697aa147703ea87d877d8b68f3884a367be4295d5fd3aa4864438ce7998dd9cb8a86fe2a48a7227248952308f63cc63d1b2409529a9c45833be5246cdd50ab83a7b773323436fa0f8c107b59f123072c069ea229980d63bfc8d90763428735d81b12f4a61008aee8965faeeb5bc8e3347527e12125fcb9053d08e8b1ee33a9be6d39f0f0c54fc3275d06d7eaa585164d7d00470adf5c3bf0fb5823b7f70f2feb36b1b4bdb86c8ab24e1fd8cb638b5f10ff635e08812b555d3220489b93dc2ca5187a04cd0ea49bbb287e33b5745095e48ddfd0694ea8f753a70d01093d0d74471e6078ea9541f34242292e0620dd3ced91b5bcf4047744541b248e7ac306ac87dda38eeaae2a00f9b6f7ad5fcf76133437234a27c0d3b5a16ca46555db422e5007e0a1c14211a1b1d453db2d1209e8cbde616bfe0c933865b97f170616f3645261ff8aae0224253486cbce0d7ddccddd8ef544afd0c7c80da52cae9bcf636786af1c7bc588226611ed625bc0ee522a018dac230c0a361b688873f76498381082bf1e9dbb666a920b382d9aab0dc6455ac8560c7636034c105ab37439b131720bd069fdbaaed6bdecfe9829ad8aded6e858c4f9a912108739744d6cf67d6bf76050bb4ba781706126f278afb3f9fab543fb6044c15a74e8f141af5cce04d7fd721ca1ab48922e3e55fd1921e8713be53d0c7f7491ecb09d340ba6f9ba8d2dc7c9e40d64501b16e813fc9c01ac0e6f8940a405c5492e1334395757ca25a23be83ac4de992123a7c843ab78573651a290f82fdca8f87f0d4512d124ebf160d14be62161e70abeb4b0ae1f0b05e9dc791cdfbd6b51ffd2d55c17150fcf48e868f62758204cc4de89454f8b208592240999e37ad869cba9326aca557a59e55ec82db4888bd67bb32ca853fdbb7ceda16e652ba6c8713847bbfdcde05c8a67fbb959fd024b8840bd3012d820c60d755cc86d789a829395b8029686b605fb6c34b0a6e1fb4d7b09b1b1091d892328b8cf60906c9841ec61944a85ae2feb3a8de793a9128dfc611a012dac35f8299a02531b157a8263bc7a94ce2f29be20d128e7a1171bfec13d2d0e7762db53e4726d35ec4ec72d4205e57b60742a44353795782b04a1caa8c2d3edc9de6cb79b0d4e863820661a9547d7da1b0b6f50bc819443c5e9af6898c74e4a724f873c0f3b1cce9dceddabde55eb71f318dbd29d85c8f08900ea733c45f019e3df031ec26f8ebefbad3d4a92481d98942aa1f3f08660e4426991c42c99bbed4af44f2e30976bff4783fc15f479e30eeb9251c314c193d115b0c72b3166835c7ce08499ae6a0834b996d8e256eb6918754db7f4df61dcd8c44f1c8516482bb82e1483e911d6e9ce5eb2249e2e59753fdd2991917097c0e0dfe34f8b35fd42cc3645bdcbca8648543cee71688a62971d5d3df6f97c634b43c516f5e4701e5b5152ab1db1d7ce5bf7ce897fe0e87a4f4d85a0e718b0daefc92d4c9f7268e99755ec9766a2e3e921902d6f00020f7a2d58d6cb100c1469021683ba3d07b5ddda060870f8887294f2c02902f61edd3aa3fed7b65b3e35b9b83a9657a2eb002e70f26a070567d439843879d9a4f0487574135e2d365ad8e801baa736620be3b37bc550d7c61a5b26e813754a897e7d2518b9326dd5741a31f84d3b3db56e0cff28a7cf99a16cd8feae1cfde56e327d214968b884058458e742613ad0ef093f1bc9e25db4c8e88a7195d662b7c9f4fee1f16e12e879fe42f725a1ec134aa0749a0ca1e821275d1e5e492f55fb9a17fc6e44feca04261a56328201ae29f0bcf0db2fd730356ecd06f1c003b13db1788805d65df7d96113bd43f30caeb084cd5bf23c0056a33a0a31699a406999e4e16eda8dd1db8ac751ed71d0b5394ffd0c63197b4af51cc3499616bc2d3bfe4c90c430729825323f1969ab7c93e744f1b75c0a491b51a30a3fa092ff94795d84e4f0e5a9d176944b4a9f79b1bf4d1b945db31c633de1bad4d168176e49db0d40f743bb8d86c0c028729bef7aae0d24a32235cb6f9b08b9a9e4bf26f0960c18d983c3e8712bb09b6c3ee291ff272de868aa886d4b3d37bb92c7e3d7a64e0e782b71514ca46e1cffb8b96efb55d840048be68eaadf4c526206aa85bef66d35e8394f2a57a8f83439f43c1eb23f5ee02d26cb8e8fcab1ef4eadd4745e773b98771c47a869e39514e82a3e2ed3da9452cdc2c7c0a3cdf4727bc272faa71251ced34ea316d1320939f844aa92025a6a33b9151aeeb1a6c417894681e825c61da3bab8777f0a36d878ec063face15a713431d2bcbf1f81c54342f416e7b5934b1d5735ea319b47decc48bbcb1a806c2ce118cfedde884b8678dd373f33c109df2e5d2d93c7d07539f8f1c6f93a7a3de1f4181506d52dc19607b958ab179ebf93b10333706ce9ba374163e7ef9e675196edbf03d9a234daeb22c5f3407876da78f0d2d8a11ffc70a95a7e167baff5924d7460741f34cd120545e31a03e0471edb22c982f90ba76401aa37d620dc8dfc219aeb46363e530f6881d5a6cd3abccf2d445e5f93fcc7e87335e4c2f6bbc6cfa21c87805b63725c3159edd0b4afb4ba4d4c1cc2c1b9b201d0ecec7a057a1058fe650983c34d23731a2a51456308db21b065ddc1118923b060d84da3acc46a3764479477a9429ed1670de7a90d316ce51bbef5aa5ac2856d89aea456a15adac231fba21481dc6dabae71f642fd34b4d0c5b6d60a3ec86c6a1701303f14a10486432f1b5990bd431b6a46bc3b6d0fe69779e030a8d93747b5e6c846d2b256842296e8a2ca9f7aa6051bda5ba398829e0bdae462a3f4cf4c16417f7e0092ca3a26179485208bcd732a62543f4f8e831e3f6d5ac567c7cac243d2c56e65b5f36af52bffc5fbc8b46b327ccb541c8547dd14084a747f0a1ebf7ecff3fe14896f39e3fd05bcf8e8014805203ed8bcb6de6214ce1a47f8d1a807d0692112a73fb0059cfa41c803416c88fe6442f3970fc4608d9ee6ae48ae2af61bb7542e8d5415483a11dd9ca94f9153d59faf761217fb3ba5cfeb63ec20132633f65f3815d7e10bf147e981bd7b0e8089e005612741587d3c81054a553b530e66d596c6a0e4ff8f2f148edbf0e8e06f2081a057c2174a67222a0dd782c89af41b94565cfbe84e6a67dbabc2fd57f8c91cf929cc5dba77e9cf4ffe1e8cfc3ac274c1549626ce28eebafcf3b450828d0ad28f2eb6ad3453d4194464b228f85c32bd23541b2879f8c10033757fcc4cf59c585b9c2e197d44a2fea62f333668a27e9283e0b333bafca96401c74e4e114ef99a9185f74e9cf039a2d4cfde6e18d481e15f9e45445cbc60bf893e9e572d9eba1d164c4b168786cee0bfc3c4c10ef8d09aa89c1914738dc092287a2cd486f12a6ead8cfafbc810e4658e603d20961779c71b84726cddeebaedc2476bbf4f926f678dd42fecc58c9b493d54ac43773d106166cc7f769161a16ba19a990d926ed6289136dc29b9c0213f94e24fed7a0c90cff8cf43f4867171db69ce7580d5577c5b297c0f5a2d45237626c1562dbfed6652bbad807db8953a2bcae202a05959d660f6c797935b72f9b471c2fde328eef721e3bf6ddb4e48ea27385fbe52e64b77acf3df9f783860904af0742e590394ab7320927ed07ff17749e758e9c2b11eb78a7cef944bb649088458746b430d6d553b0a1f869a18c726513769f06a2b9c0ee4459eddd3d77aebde1a4ea66621efe29cd284a20119e28bfae075cf8d857a2b5d55fca8ae5c50a1d8dc9cf936e3467fea629ba1845af1f4d17b3b591531ee1c99f5f431394b3ff389081a404d575772d898907b6facdb29858b0557fdaff02b74a45a637f4b01ff30524fe33728987a8d7cbfc4304ef1fa331d218b8f8ecde2307f6ee16befc22741b6cdaa95940b9b62ba5191d73b29467b5fa88ed13c406746582cc4d1c625c1cb3105374e0367c0bc07bd688c92ea921e334db3d6d3881f78d23b817515b56b14251fe286fdda670bf340db87c692d86bf6b3618641cca1a4acecf0295859c0b737f5d5d5fd738378ef13165264a503f5780cd4edc0184fd469c0bcbafdecd06ac5f992e8b66e49224860c757cca88b2f538a1af35bbe483e28f0ae1f55cce1321a13bc283ff41cbf3e093053ab05c4b3901aeb0a85dcd1017059da3e849494d9a159a971e9b3cf7c384b489de5abff8cc796616ddc11648924d3b702f67bbbd9595fc666e6808ad410cd7ed70d0b9417ba8f147a3852f7281a77bb8c51335788934a5221a708950dc4e1dbbf5aaaafe999228cfa3803731946da4e5763d67283cffbebf60e4ca1de12c793664367917365ca02d9acd99061e2d3e7224cb42a26f0832b3dd374581838263017f69780d4d29a90c7ee6a35807802aaf8dcfa190f3d4ce12173b81f6d523d5aa8ce82858ba94a963f3fd3e48a4086a661c56e6975c865effddcc73a2393c79c0b03d80418ba745c79343e0b3d01e7e8ffc85ce37b9381e31e88073178d0a7d11e10cd06d88af3e66d36e78e89aec244f6aca38a1d37fb5df877db17eb10f6f3e305aae5dc4391b3c50de898150b161f1018d18a09db6e0c935dbeae371dd6d4d0f57266ac5f18ed4bd101ede0d0b96bdb37aed460b4a3c607b0a84d59b3bc0c067e4614d2c3fc5f840fb3a28af1f61b16ff5e23a7f3d96fd441aaec0bb9b249fb328d6bfd8927e99bf639c156287646de6832a7e3b359013b6227670d21a714361446f737588c12b9fbc5b4c77719822fda1dd947928d3034d379dcefe209e9e622136568a7bc2e1d61dafe778a271f20de805db690d088a9a7008fec47b903394c677cacb37c4cc385ec300c5f254ca1b06eec3928ad0b4a539b3a0e8ddd6faf92a0c8da3ef50824eb39bbee65c0c12977e1844ece50d9e3e", 0x1000}, 0x1006) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e25, @multicast1}, 0xfffffffffffffebf) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 23:56:54 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000480)={0x0, 0xfffffffd, 0x0, {0x2, @raw_data="c5d57e1409c8c8bfc4b0a6a486e6759ec6b71794ff0adc9ee376a40807fdd9774aece3e8b95da34ee175d3529bc03c3401cbd467e3a00b3f565d83fcdaa18e1364954192aa37c8b5d52de4df78b6ea9e89a2c13f92b9f7650b89fdf12ca7c48762bc81646f92b9f2270c1a324c9820fd0525a8c381ced94247dfa06a9362cdade36c5ee4e0463288dced378801a8dad713036ecfa51add03337e4cc1d3d7cdea599d986641334404b67bd660b034ebd565d306b651d8b3a7d05256fd53039928498f4aa480448183"}}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x3f, 0x8, "a2ce01818a118ed0460c17d56f5e779f0fd10c00fead13a75c9357b0eaa8ef9d", 0xffffffff, 0x8d4, 0x0, 0x765, 0x100}) 23:56:54 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{0x0}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000000) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x0, &(0x7f0000000040)="ca52772a8554a3ce04834ca72852d8e3cb0c38c295dbf2ba762fa0b95c9a6dbd", 0x20) ioctl$int_in(r0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000200), 0x0) fstat(r2, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x5) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {}, 0x2c01000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x40) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) dup2(0xffffffffffffffff, 0xffffffffffffffff) tkill(r1, 0x15) 23:56:55 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'vxcan1\x00', {0x2, 0x4e22}}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11}}) 23:56:55 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x1f, 0x40002) write$P9_RCREATE(r1, &(0x7f0000000200)={0x18, 0x73, 0x1, {{0x85, 0x4, 0x8}, 0x1}}, 0x18) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001900d927e65de087185082cf0124b0eba06ec4a86e8f32e00586f9835b3e00009148790000f8de84c5e2", 0x2e}], 0x1}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x88000, 0x0) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000100)={0xf80, 0x9, 0x9, 0x2, 0x7fff}) 23:56:55 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000001503000028feffff720af0fff8ffffff71a4f0ff00000000b706000001ed00001e40fdff000000006506000001ed000071185400000000002d640000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e61917adef6ee1c8a2b4f8ef1e50beca090f32050e436fe275daf51efd601b6bf01c8e8b1b5e4fef3bef7054815ae98743d1ace4c46631256dd19aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb779"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) 23:56:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x8, 0x4, 0x4, 0x8eb, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000000), &(0x7f0000000080)="51c2c341d18c22c942691ee25d0e8f0bff070031e94bb7cb8814b071828e46a9563fd4893bcaa57742761b3083865d380a4700000000bcb989ff69c2a4a5b5cc535b3d0000000000"}, 0x20) r1 = dup2(r0, r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@broadcast, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e22, 0x7, 0x4e20, 0x800, 0xa, 0xa0, 0xa0, 0x3f, r2, r3}, {0x1fe, 0x2, 0x1, 0x9, 0x0, 0x6, 0x10000, 0x9}, {0x7c, 0xfffffffffffffffa, 0x7f, 0x400}, 0x5, 0x6e6bb1, 0x0, 0x1, 0x3, 0x3}, {{@in6=@loopback, 0x4d5}, 0x2, @in=@remote, 0x0, 0x3, 0x2, 0xfffffffffffffff9, 0xbe40, 0x800, 0x7fff}}, 0xe8) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000100)={0x4, {{0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, [], 0x2a}, 0x2}}}, 0x88) fchdir(r0) 23:56:55 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) recvmsg(r1, &(0x7f0000005240)={&(0x7f0000004b40)=@can={0x1d, 0x0}, 0x80, &(0x7f0000005080)=[{&(0x7f0000005000)=""/105, 0x69}], 0x1, &(0x7f0000005140)=""/203, 0xcb}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000d602000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r2, 0x0, 0xffffffffffffff9c, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 23:56:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x218}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"/378], 0x80}}, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x40a000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000117, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0xc, 0x7, 0x2, 0xa, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_x_policy={0x8, 0x12, 0x3, 0x6, 0x0, 0x0, 0x9, {0x6, 0xf37ef8acb5310760, 0x401, 0xfffffffffffffffc, 0x0, 0x4, 0x0, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x24}}}]}, 0x50}}, 0x8000) 23:56:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000018000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) syncfs(r1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7c4, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r4, 0x304, 0x70bd2b, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x5, @media='ib\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000000)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000026000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004, 0x485}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 211.227643][ T9789] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. 23:56:55 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000001080)='/dev/dri/card#\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000640)=[{0x0}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000000) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x0, &(0x7f0000000040)="ca52772a8554a3ce04834ca72852d8e3cb0c38c295dbf2ba762fa0b95c9a6dbd", 0x20) ioctl$int_in(r0, 0x0, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000200), 0x0) fstat(r2, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x5) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {}, 0x2c01000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x40) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000040)) dup2(0xffffffffffffffff, 0xffffffffffffffff) tkill(r1, 0x15) 23:56:55 executing program 0: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0x0, 0x0, 0x590a}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) [ 211.357658][ T9799] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. 23:56:55 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x8) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x10000000000000) mlockall(0x6) 23:56:55 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x98c02, 0x0) write$input_event(r0, &(0x7f0000000280)={{}, 0x0, 0x0, 0x10001}, 0x18) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae01, 0x32b) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x80) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x1}, 0x6) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000002c0)="d5266bc151d874b8e86c6f8e3ed693b1", 0x10) gettid() openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCGSID(r1, 0x5429, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f00000005c0)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x807c, 0x0, 0x0, 0x2}}}}, 0xa0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x8001, @remote, 0x8}, 0x1c) close(r3) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) [ 211.629613][ T1525] ------------[ cut here ]------------ [ 211.635719][ T1525] WARNING: CPU: 0 PID: 1525 at drivers/tty/tty_ioctl.c:319 tty_set_termios.cold+0x11/0x23 [ 211.645716][ T1525] Kernel panic - not syncing: panic_on_warn set ... [ 211.652332][ T1525] CPU: 0 PID: 1525 Comm: kworker/u5:0 Not tainted 5.2.0+ #71 [ 211.661234][ T1525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.671309][ T1525] Workqueue: hci0 hci_power_on [ 211.676091][ T1525] Call Trace: 23:56:55 executing program 2: syz_emit_ethernet(0xba, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @local={0xac, 0x223}, @dev, {[@timestamp={0x8, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v1={0x1000000, [{0x3, 0x20}]}, 0xc, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000180)) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100000001, 0x10000) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f0000000040)=""/174, 0xae}, &(0x7f0000000100), 0x20}, 0x20) [ 211.679397][ T1525] dump_stack+0x16f/0x1f0 [ 211.683739][ T1525] ? tty_set_termios.cold+0x3/0x23 [ 211.688865][ T1525] panic+0x2dc/0x755 [ 211.692784][ T1525] ? add_taint.cold+0x16/0x16 [ 211.693834][ T9817] Bluetooth: hci0: Frame reassembly failed (-84) [ 211.697490][ T1525] ? __kasan_check_write+0x14/0x20 [ 211.697514][ T1525] ? __warn.cold+0x5/0x4c [ 211.713367][ T1525] ? __warn+0xe7/0x1e0 [ 211.717449][ T1525] ? tty_set_termios.cold+0x11/0x23 [ 211.723032][ T1525] __warn.cold+0x20/0x4c [ 211.727387][ T1525] ? tty_set_termios.cold+0x11/0x23 [ 211.732593][ T1525] report_bug+0x263/0x2b0 [ 211.736937][ T1525] do_error_trap+0x11b/0x200 [ 211.741631][ T1525] do_invalid_op+0x37/0x50 [ 211.746056][ T1525] ? tty_set_termios.cold+0x11/0x23 [ 211.751266][ T1525] invalid_op+0x23/0x30 [ 211.755428][ T1525] RIP: 0010:tty_set_termios.cold+0x11/0x23 [ 211.761238][ T1525] Code: ef e8 d6 46 2e fe e9 e8 fe ff ff e8 cc 46 2e fe eb ae e8 c5 46 2e fe eb 84 e8 7e 85 f4 fd 48 c7 c7 20 a2 d0 87 e8 86 ba de fd <0f> 0b e9 d5 d5 ff ff 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 [ 211.781723][ T1525] RSP: 0018:ffff8880a605f978 EFLAGS: 00010282 [ 211.787803][ T1525] RAX: 0000000000000024 RBX: ffff8880a605fa38 RCX: 0000000000000000 [ 211.795790][ T1525] RDX: 0000000000000000 RSI: ffffffff815b9de2 RDI: ffffed1014c0bf21 [ 211.803791][ T1525] RBP: ffff8880a605fa60 R08: 0000000000000024 R09: ffffed1015d06079 [ 211.811774][ T1525] R10: ffffed1015d06078 R11: ffff8880ae8303c7 R12: ffff8880a605faa0 [ 211.819759][ T1525] R13: 0000000000010004 R14: 1ffff11014c0bf4e R15: ffff8880570b41c0 [ 211.827767][ T1525] ? vprintk_func+0x82/0x11c [ 211.832388][ T1525] ? tty_set_termios.cold+0x11/0x23 [ 211.837604][ T1525] ? hci_dev_do_open+0xa7/0x1940 [ 211.842593][ T1525] ? tty_wait_until_sent+0x580/0x580 [ 211.847918][ T1525] ? __kasan_check_write+0x14/0x20 [ 211.853133][ T1525] ? __mutex_lock+0x3a9/0x1330 [ 211.858262][ T1525] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 211.864546][ T1525] ? tty_termios_encode_baud_rate+0x3ca/0x4e0 [ 211.870637][ T1525] hci_uart_set_baudrate+0x157/0x1c0 [ 211.875948][ T1525] ? hci_uart_set_speeds+0x90/0x90 [ 211.881111][ T1525] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 211.887376][ T1525] hci_uart_setup+0xa2/0x4a0 [ 211.891988][ T1525] ? hci_uart_set_baudrate+0x1c0/0x1c0 [ 211.897457][ T1525] hci_dev_do_open+0x3e3/0x1940 [ 211.902330][ T1525] ? hci_rx_work+0xaf0/0xaf0 [ 211.906963][ T1525] ? mark_held_locks+0xf0/0xf0 [ 211.911736][ T1525] hci_power_on+0x12d/0x680 [ 211.916244][ T1525] ? hci_error_reset+0xf0/0xf0 [ 211.921059][ T1525] process_one_work+0x9af/0x16d0 [ 211.926028][ T1525] ? pwq_dec_nr_in_flight+0x320/0x320 [ 211.931430][ T1525] worker_thread+0x98/0xe40 [ 211.935956][ T1525] kthread+0x361/0x430 [ 211.940033][ T1525] ? process_one_work+0x16d0/0x16d0 [ 211.945269][ T1525] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 211.951550][ T1525] ret_from_fork+0x24/0x30 [ 211.957314][ T1525] Kernel Offset: disabled [ 211.961763][ T1525] Rebooting in 86400 seconds..