[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 97.650539] audit: type=1800 audit(1553190363.715:25): pid=10518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 97.669940] audit: type=1800 audit(1553190363.715:26): pid=10518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 97.689497] audit: type=1800 audit(1553190363.745:27): pid=10518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.0' (ECDSA) to the list of known hosts. 2019/03/21 17:46:17 fuzzer started 2019/03/21 17:46:23 dialing manager at 10.128.0.26:44543 2019/03/21 17:46:23 syscalls: 1 2019/03/21 17:46:23 code coverage: enabled 2019/03/21 17:46:23 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/03/21 17:46:23 extra coverage: extra coverage is not supported by the kernel 2019/03/21 17:46:23 setuid sandbox: enabled 2019/03/21 17:46:23 namespace sandbox: enabled 2019/03/21 17:46:23 Android sandbox: /sys/fs/selinux/policy does not exist 2019/03/21 17:46:23 fault injection: enabled 2019/03/21 17:46:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/03/21 17:46:23 net packet injection: enabled 2019/03/21 17:46:23 net device setup: enabled 17:49:19 executing program 0: mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) r0 = open(&(0x7f0000000b00)='./file0\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd) renameat2(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x3) setxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000900)='security.SMACK64EXEC\x00', 0x0, 0x0, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000200), 0x18a) fchown(r2, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000000)) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000b40)) futex(&(0x7f0000000080)=0x2000000000000002, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x1, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000ac0)='/dev/input/event#\x00', 0x0, 0x2003) fchdir(0xffffffffffffffff) mknod$loop(&(0x7f00000003c0)='./bus\x00', 0x2400, 0xffffffffffffffff) syz_open_dev$sndtimer(0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) syzkaller login: [ 294.059311] IPVS: ftp: loaded support on port[0] = 21 [ 294.217425] chnl_net:caif_netlink_parms(): no params data found [ 294.293106] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.299662] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.308313] device bridge_slave_0 entered promiscuous mode [ 294.317843] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.324459] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.333228] device bridge_slave_1 entered promiscuous mode [ 294.369033] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 294.381719] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 294.416748] team0: Port device team_slave_0 added [ 294.426073] team0: Port device team_slave_1 added [ 294.607298] device hsr_slave_0 entered promiscuous mode [ 294.773197] device hsr_slave_1 entered promiscuous mode [ 294.964543] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.971135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.978408] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.985013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.066991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.089560] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 295.101633] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.111833] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.123615] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 295.145147] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.165437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.173922] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.180439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.236406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.244932] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.251452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.261609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.270936] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.279814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.299373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.311379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 295.345705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.370428] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.379135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.387785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.586616] input: syz1 as /devices/virtual/input/input5 [ 295.624266] input: syz1 as /devices/virtual/input/input6 17:49:22 executing program 0: mkdir(&(0x7f0000000a40)='./file0\x00', 0x0) r0 = open(&(0x7f0000000b00)='./file0\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xd) renameat2(r0, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x3) setxattr$security_smack_entry(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000900)='security.SMACK64EXEC\x00', 0x0, 0x0, 0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000200), 0x18a) fchown(r2, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000000)) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000b40)) futex(&(0x7f0000000080)=0x2000000000000002, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x1, 0x0) write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0x25}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000ac0)='/dev/input/event#\x00', 0x0, 0x2003) fchdir(0xffffffffffffffff) mknod$loop(&(0x7f00000003c0)='./bus\x00', 0x2400, 0xffffffffffffffff) syz_open_dev$sndtimer(0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2000, 0x0) [ 296.815309] input: syz1 as /devices/virtual/input/input7 17:49:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4000, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) 17:49:23 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x0, 0x0, 0x0, "373f1be7f9400a600cdf7d7445adbd56674202dc30a65b8ee2a2194401399e5a"}) 17:49:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000007000/0x2000)=nil, 0x2000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 297.566607] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 297.686579] IPVS: ftp: loaded support on port[0] = 21 17:49:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x10003, 0x30, r2, 0x0) write$binfmt_misc(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1e2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 297.912115] chnl_net:caif_netlink_parms(): no params data found [ 298.038191] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.044952] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.053443] device bridge_slave_0 entered promiscuous mode [ 298.064069] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.070651] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.079177] device bridge_slave_1 entered promiscuous mode [ 298.125772] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 298.140682] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 298.189740] team0: Port device team_slave_0 added [ 298.211020] team0: Port device team_slave_1 added 17:49:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) [ 298.317166] device hsr_slave_0 entered promiscuous mode [ 298.412798] device hsr_slave_1 entered promiscuous mode [ 298.597912] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.604580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.611975] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.618700] bridge0: port 1(bridge_slave_0) entered forwarding state 17:49:24 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x0, 0x1f, 0x0, 0x4c55}}) fstat(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000000)=[0xee00, 0xee01, 0xee00, 0xffffffffffffffff, 0x0, 0xee00]) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000740)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) fstat(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000900)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000000a00)=0xe8) getresgid(&(0x7f0000000a40)=0x0, &(0x7f0000000a80), &(0x7f0000000ac0)) fstat(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000c00)={0x540, 0xffffffffffffffda, 0x5, [{{0x7fff, 0x2, 0x1, 0x119f, 0xfffffffffffffff7, 0x5, {0x3, 0x80, 0x8, 0x40000, 0x6, 0x0, 0xfffffffffffffffd, 0x7, 0x3, 0x9, 0x3, r1, r2, 0x80, 0x7be}}, {0x3, 0x20}}, {{0x0, 0x0, 0x7e, 0x9, 0x1000000000, 0x81, {0x3, 0xff, 0x0, 0x4, 0xfffffffffffffff7, 0xffffffff, 0x400, 0x101, 0x5, 0xbf4, 0xaf3, r3, r4, 0x2, 0x100000000000}}, {0x6, 0x100, 0x10, 0x400, 'securityeth0user'}}, {{0x0, 0x3, 0x53, 0x0, 0xffffffff, 0x1, {0x1, 0x40, 0x4, 0x6, 0x9b, 0x1, 0x1000000000000000, 0x6, 0x5, 0x5, 0x6, r5, r6, 0xffffffffffff6580, 0x8}}, {0x0, 0x8, 0xa, 0x0, '/dev/rtc0\x00'}}, {{0x1, 0x3, 0x2, 0x401, 0xfffffffffffffffa, 0x1ff, {0x5, 0x10000, 0x4, 0x7ff, 0x166, 0x80000000, 0x1, 0x8, 0x9, 0x0, 0xffffffffffff0001, r7, r8, 0x81, 0x1}}, {0x4, 0x24f2, 0x9, 0x3, '(\xacvmnet1^'}}, {{0x6, 0x3, 0x3ff, 0x5, 0x4, 0x640, {0x0, 0x0, 0x1880, 0x5, 0x400, 0x8, 0x10001, 0x401, 0x5, 0x80000000, 0x1, r9, r10, 0x0, 0xf8}}, {0x1, 0x7f, 0x15, 0x6, 'vmnet0]!vmnet1selinux'}}, {{0x0, 0x2, 0x2, 0x2116, 0x80000001, 0x7, {0x5, 0x5, 0x8000, 0x100000001, 0x4, 0x2, 0x9, 0x6, 0x3ff, 0x0, 0x800, r11, r12, 0x8000, 0x3db81a17}}, {0x3, 0xffffffffffffff4f, 0xa, 0x8, '/dev/rtc0\x00'}}, {{0x0, 0x2, 0x10000, 0x4, 0x2, 0x1, {0x6, 0xfffffffffffffeff, 0xfffffffffffffff7, 0x1800000000, 0x10001, 0x0, 0x100, 0x1, 0x2, 0x7, 0x8, r13, r14, 0x93e, 0xfffffffffffffffe}}, {0x1, 0x3, 0x1, 0x9, '}'}}, {{0x3, 0x2, 0xfffffffffffff800, 0x200, 0xbdd, 0x2b27, {0x1, 0x7, 0x3, 0x8000, 0xfffffffffffffffd, 0xae8, 0x0, 0x1, 0x6, 0x0, 0x3, r15, r16, 0x8001, 0x40}}, {0x2, 0x9, 0xa, 0x2115, '/dev/rtc0\x00'}}]}, 0x540) [ 298.752182] rtc_cmos 00:00: Alarms can be up to one day in the future [ 298.795661] rtc_cmos 00:00: Alarms can be up to one day in the future [ 298.800951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.828645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.854228] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.873571] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.888098] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 17:49:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40000, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x9}, 0x4) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)) [ 298.932521] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.966818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.976971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.985290] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.991864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.050570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.059883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.068208] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.074804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.082725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 299.092112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 299.101399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 299.110499] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 299.119406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 299.128520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.142773] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 299.150886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 299.159609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 299.177616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 299.186207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 299.199910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 299.240940] 8021q: adding VLAN 0 to HW filter on device batadv0 17:49:25 executing program 0: r0 = memfd_create(&(0x7f0000000100)='ppp1%[\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000140)={{0x4, 0x37}, {0xffffffffffffffc7, 0x1}, 0x782831d1, 0x1, 0x5}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$sndseq(r0, &(0x7f0000000000), 0x0) 17:49:25 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) fallocate(r0, 0x10, 0x401, 0x7) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x800000002, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x40096102, 0x0) [ 299.508212] QAT: failed to copy from user cfg_data. 17:49:25 executing program 0: r0 = epoll_create1(0x80000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000002540)={0xffffffff80000005}) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)) epoll_wait(r0, &(0x7f0000002500)=[{}], 0x1, 0x0) [ 299.580135] hrtimer: interrupt took 58208 ns 17:49:25 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x2}, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) 17:49:25 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) clock_nanosleep(0x0, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect(r1, &(0x7f0000000040)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x80) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, 0x0, 0xffffff23) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000280)) dup(r2) ftruncate(r3, 0x20400) read$FUSE(r1, &(0x7f0000000380), 0x1000) sendfile(r0, r2, &(0x7f0000000100), 0x8000ffffbffe) 17:49:25 executing program 1: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff, 0xd89d8d31a695cc2f}) [ 299.844855] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:49:26 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x8, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x6, 0x0, 0xf, 0x2, 0xfffffffffffffffc, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400}, @ldst={0x3, 0x3, 0x6, 0xb, 0xa, 0x120}, @exit, @jmp={0x5, 0x8, 0x7, 0x9, 0x5, 0x0, 0xffffffffffffffff}, @exit, @jmp={0x5, 0x1, 0xf, 0x5, 0xf, 0xffffffffffffffe2, 0xfffffffffffffff0}], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0xd}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) sync() mq_timedreceive(r1, &(0x7f0000000300)=""/244, 0xf4, 0x40000, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) 17:49:26 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) syz_emit_ethernet(0xff27, &(0x7f0000000000)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff08004500fec30000000000299078ac14ffbbe000000100000000478890782f0f7e5e0a9ae3cafdb017c7116af063a5e812af268b108bd9d4454f9870ba5e5f684460acc6928eed7ee505c00071b791abfc121cf144a15dd33660616de4a4ddab06a839713d926a9386b2063af3730b6c9172d32e67c955962963c6e28096334e1a14a3d89748ab34031b285ab5aebbf514e491cc"], 0x0) 17:49:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0xffe, 0x4) bind$inet(r0, &(0x7f0000001280)={0x2, 0x8000004e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000080)={0x2, 0x200000004e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000012c0), 0x4) sendto(r0, &(0x7f0000004ac0)="862e2f66792f889eff93bedf6dc14fbb5a2b270209382521cf00bd5dd192f45ebb2d3656aa7d2db118c1c5a23f3a048d3eb30f0822434274f4b162e1474c3914fb732bdca1055334420dcab57de08c17959534b91556dbbd89f09ab0dcf026e395133d98bfcefb71ade9b5bc3504247948cead01382cfd9cba102d4bedbb0b2ba22bd411c8c4f6be2e8823e353e1042674ca22cc9417c8b3d08e4e2d5b9637022963ce5fc28072dbab19ec0e569fa1c0c3a4e9337423dfee462a64fa0752ab0db772f78af4bb11a7fbef321f6b2e9b64de572eac1dc2c2aa3ba98c3c0f455b211c00c1393d660ed41470aa789655f8a6f785f30b077a467eadbc34af99dd8ba4030f792f80f341419fb005806debc35c70dfa5b41b45923da7efbbeda51003af18201b882a657459962342fe18a68e1587434451500f358b1234889cb683b8050a2b1d222e209e68b7748863854419ff3815c8ea99574a7e5049ba18714e7197a136bf39d95ffa39fa2824a1ab51a447abfe7bbee785a65378e9a90960272ff919cf9db83de033949e63e3cf34db98901f1a9c9ba12f4e1e38a609830baf4d6b188408305600e32bbdc4fcf86f67df43c6a84f7abe5e7408932206116c02b63f4ad51e1c3e3f7a2f04f7f92fd3a3b200280b00243d142033522214ed5f025cbc8164cd9781388d0ef067de46c756f272ea611209d74ee770f073615965307e3fa5a7469cb5a68eef95fb036b7767360e2299fd3d67a850089c533244a5a94941a52a1097284be1da86d3c9169cfb6a17384f8983fc0237d35cf1ca19084dda4e1d3cbd0520fd7a45be921c49460ce366847f812ac53693bc85d75c40a1c2a19f2e677b421921f549110f2827d9c10acbc3c939c971fe80ca39b786f634a0b05f74e155253c1437bf143e8ce84365b46ead29d7bffc7f55274601452a1c6ef093044af63da0f464902b025c866498c7e3004d3d1e8731bd6d1b5774d8e8954a745604400f49b9d022f249de3c15907bff0ef7d757483cdc353f3143e7ebdece542cfc1dc8e933d24ebb760567cf6429d186a43162af49eb5e9d3e943addff581bd5b9c0d589492a938add82b8f806f141e38edbbbc09494d419f9f60bbd2374ed801923f2f8784f4cf8ce729e73410e2899d4d62d59ebf51d831210d85cf71c8617f989c6e90bd74c44076a606f01f4d1d31148c47f667c2702f242b526d1b0e775feaf021d0678326c8a58c92b651e117fd31c9687ac5e9d39cdfcce38dd7122ebde51632fe55817ee7cb59f9cc2b637a3b932a63571a049f39cda426cfc6abf9aca4c06df9ae80d9cce64ca6f356e28a9cd348f94ea73b4d9e61bcdd5d52f6919c086167d816bb79640f8202a8ddcf573d2c22894ef0c480b9b523f63458a95ceabb014387bd07a98220177c3836fed6ec898bef837510bf5c5fa11171ccf42558ed487639274a822993604a2bc421fc425347e33fe52beb590efeebaaf463b1702ab19fa3ac399cc1328c9ae70239df9803d600618aca26e0cbbd1a0cffe8f8c676c5866e6f9e5846259d82e4e6a07e82a036015d17bc7c0a560cf91ed4099791aaefd6a0e551123065eba1d5ce0d280733c16aa6e0f14869fcffe7375a7c43c906b45e26886e47102e499c9a2f4a97275624e6666b9b409b896bded7610d47460be53a3afb75fdc10e5204f5062ef3e1cf5113c72566de4f80f068c10d59c90250f4eb08a3485c3020ef48fdfa0f332528af815fd4ca56f1c362cc1daed51d7c9f8fe3dcbae2186978396a418b437bea66bac938da3177bdd4d1de6b3177438650538b25cc77d0e514c5ea9df00d08f93ad5bb92000900097721f99ed31982405347d380420440894cd057e35ae5533ee5af356d76f03cb0ffb13a87dc4509a17492794d967681974748a36caa08434bec91ba252449624199c36d7876a3fc0a8008daa406405a5435e58d6822f242855d56e92ffe36f0a1a111bdd914a60eca465358ffabb07e2f83d423f819d409913bec430d7850af781db4090e6290ca2fb3c4b593db3fdbc731905bfe148e4e5bc253eb920d7b9521fc50cf20037d8eeed1e1317b4a5c3f73dc23a6bab225470adbc96fb0f276e52c0d046d100018cd284b6b9de6e153a2124bbd3ef7711900b0a702d70de15a2bd61daef920fd74e020aac4a477c9a40e5e0a8bc5354dcc1416df59a232510a163291f2133d9481a9016aa2add24d896d1f9b89cad76e3a56ae62ec96d454c2cdf5bd3304a08ca7d01e302926f27510826cc87be97186a331832d5415ee6e55c2e13858ba7050cf61308462cae16fa67305b1d3ef219a72f65f527338cfcff1a95943118071dbe4626d36fd0a95698b08333e3c08b012f44e129056c4d3c9c29139ecade113e112aa8056b24ab2abd0a6c5059098ffbed1136a65c511cd40574a31c43abf2ff7bc2fe93ba904c0f31fbbfb0d9e369d2d3b74b2a04c88226c92b63c63b35b013705ee4dbf29eff81f4987137599ae9c6a9740134d31c2098221ef3b7e2a94aff4b85f0c95d14dc273df1b2a3822a3ff5fe156af71ce9bd9ee97f39f4e634cd28f16de650bca52458aad4a4711eae00d4cc7b6d1b0fc02829ca47b2072679779ac8ba6f62e56c941b66d3c463f17848ff4089236c909620133ecde673ea6e72af8ca3981e6a889e2664f3ae7a712f6ba8d59c89c064ff4daea7fbfea37bb72c23b2cb3499725f37ac4108ae6399b04db672f13581c7c5a8195964c07e478c3d5051c95b2b519946b5a5b59e882900a8b2c245e972210d76f0c0e12309863091fa3aadba3634069280d9aab701751a2e2223a317d4024c8f307f3c15d0cbb774b333bf5cb15f93c33d2eac24a0097bb64d540971a2a02376858ceb1a4c78ea8012d24c6f3e7f2c5ad495de910cbda18a93e4304216071734b4e08f1078af752a76cded03890b339e6361e1bcfb2f51dfef7d611ba2e7b7b54cc6fd9575b8f0ae02619e0023d4ed2e3d63eb6c6edb15f0892ad3c4df8f564aa9be24359f528487204d4294d0b6d812ba5324ad8e303ec24f70cd108eb88daeaec8c81dcd9ba509b3c266b234eb4124254578f4b63f282e0fc91db26263dfa584d920638293e4b9183373d5381336ecfa227f31473ddfa4a88369fb306cb07f2b12d3c92314d005b4a9d64e2f9ed0247158f13d4147794a3829a0a2e16ac002929a6f3fe91a7d37ec684a7787a5aba328e0026ff89157b8a3f815e9611eadd05f67424aee7e1ab9c878fc0fddc74c4d348ff83c735607e56d2408f2cb909c005f4839fbd5b8b0a10655e2c4fca6542765af9f3fea5b1848fd2e181807528d5a688ec4a7f730df644f4e613d0e41e639a9e53834ee0fa1b6577663d3d340f585515b57a34f1725153b0e1b9d21f36c7d889b70c7b7c992798635b83ab0ba7476fc3a8c1993c2fd66b3bd571dcd34dde658836c3a3b7c9c7ad62e2f81c1f4136bee6df8801b30b7c2f7c9388098cff7fb0b589e8355fadce3faa157df66cf34492bc708f31bb6b08e304b1c8766b90bd6e31fc04d3b537f79db513297b22fec7fcc6c5694b8f9739dfc045d391541a26d449a49d2d9996833aade9ecb3e4c4dc4fc8ca081b784cea7096d53403afa6463751505ca74ee27cd7b0d616e31ea3d3c0e15b301c3a4e801201bdf3f26d1221dda0aff3a70f0e6d2c5aa6db6c6493684a6a2c4700ba1d0cc7bbc8aca789b15ca8814b365b072e72db859bf04de31b76bc594ff85add990b488a4e6a152ff9bc91b30ed6361f1a2b8f96c5131a53927215e18ace8772cf4084773394146e459d7d8ddf68848e5a2ede315d8fa0484e92aac5618e1f22c2a9edb752e5356af2250cfdada665b302040eccb8e1710ee19a1b9308dfcb30000fc313d3528963ee1ee9d4f7597235a7800fffd5caa40f467ba9fab3c8ee8e15c323b42036782f45312c445610dd4e02783661ab7c09df5e6274664fecb66be5380661db3d6df743947e77cbde8bf9629762b736984adea7a907648df29de44f4dc76525c910d010fae940053f5493cee202bc0bec0aae7d4b5b74a4ae855ed28d33b0f21f45b72ec5e65a911bd02635974c490a5ece8266c7532cb5fa1e4cb2bb0a6b5689ccb2a7fecfbbdd173dcb4bffdd89196b131ee00fa11552bc31c1192a80ddc304dd8fa608dd0fe5896449075f1375f8c4193d33ec1669c85edb9284af23b4553e63bebbd920fe58b07f193e282153f4802944b3573ac267e297e80465c4f0868b00a7c6ca23c2af7440768540932ea78e6e20bb5dd292968095a21c02cbd561b29de1edabf3d0ce5780a845b33616bc3c55b955f4180bcc57c3d8ba21f4c9e9a4f8f94f0f27fe5e854c642a24d22befd1aa513be640fef70d99e702559c248fbcf3db8c15eb036951a7c5dbecf2da9e90ec0f980db1beb940beebddaeb2588fad3024c541850011c2382bd20d2b1d9da5f40a937e9eb052bc842d00a63e118d1dfe64d89e18a3795d38f0b99a7be08239a8709678e02afbf9417c4b6e019b8d1bd83540bda0511909bb302e457537b92f7970e7f062f956f6338145df1aec22a04dca89ec7d519013560a156034bfb4a3117f35682270f6a38e181486b26fbe09b012f1551a39a89df1a213940c9a0390ee9329dcabae9126f71fb719b7d6b2bbeca3be28dbb1fb2b1effc0ea441955120aec848871655eed8a4342337a890bf1a757de62e1c5a2321ad5ecc8feadab6aa3ea936aa220d23bf2f493fd48b58e6945887025bb484869433177024571ef33cc4a4726009ecc57efbd990f91131106b02130c45207df969eb16404005dc4997c8e8749b7d4fcd83e1d63d87f064b0b9d47af01e66a9eeeb5f6b4736d74a9c7eca61deff296a60741883e710f91a99309b96b7fc8e55a408d105e5e1a0d7787ba55809c3244ffae589dbd52066746fee69846ce4b0415271c69288218153ae122a491dd09235bae5018c51fcb8b497155c97df5240f88346eda07f21fcbdad128a012a26a6cf5da6f1adca471cfaee11410e10e6863a2ab3085f5e0849bf6ec912805700e6eda9fb09adbf9108fc4929400d6bda39ee4aea957b8d0c6b5a586ca15ddf6b86b73876f1925366abf193549a84a2a2f4ba1b97538bc127ab4b73d41a522b27835271be033ec89f0d652b851c8ee0b5f4432e7b7348d15a9e64af6def64cf02570cf165d5f66c0161558c01e6fa37f58e358ddf9f2cd92cb9dbf48066a393c584246046ed7e55cc93de000dd6828c5b84c4097ed31ada368bbf8e36bf85ddd2d65315b9e3285a2a1c71d3e8236092c6abf00a6a9bab7bc8f9705ac541737da2aaae87f941d4b097a06d57eadb0a9541d1f66a3a5333945fb42aa80728084af19b330f05db4e1f1fc325e101ff8d9a0ba38098d9ce7b306696dc2f38366b11a8d6051dc2aff1851f8750ef033875b86b5dd79b6b250d8a682fd0d2622b756e0c303c394534c6938062ee8167d7da3e61b4f2dd34568c93837bfc952dde7a9fc3db3584bcd16174f3c575055ce78ac426991ecfddeac10804829a204a38ce7dddc49985c3cc93f699a2267b055bc70804268eb58224ef6ceae89071e62507a895c11e206895496b836263fd01a325d2dd0458afb82c82d7dccfef9285946ab6a3cca81c28710fde7ea8ecc87afb3d80b762d06446ca4e2b6e37619250e18c4ca906ecf5e7b43373643c94eea992c45553df319eecaafba82a88bed301d8c769008807cdb5d6d1fef63db45413689c21ced9ab2d2a9f0ceab5d7bfb437a5085fa0f085217052492088705a", 0xfff, 0x84, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet(r1, &(0x7f0000001300)="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", 0x1000, 0x1, 0x0, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000000580)={0xffffffffffffff4e}, 0xfe21) 17:49:26 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x210000) getsockopt$inet_tcp_int(r0, 0x6, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x215, 0x200) read$FUSE(r1, 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f00000003c0)='security.ima\x00', &(0x7f00000002c0)=@v2={0x5, 0x0, 0x5, 0x4, 0xe2, "18102ab6d2b37db5b6071bbb2a7605f3e100e4e7369babdf22d610ec6cbfcb3326339b9941fd9f447a8b278de63a795ec65d8d620cf3f69dcd88adfd50a7174d53a082a730a1b323bb5a3b8a05180c828cb1938e428f97c6aba3d3cc60af9ab23647e1d00bf93743ce031d0c1e59bb1e53781f7f5ffd0d9e627e62368359cf191bfe2cfa0283e80b5b8783c5da111a5e06cb9419a15a831893ab5e8b2ee523220ea24c9e421395bd615aaefaa373f188cbe2d6554a72d759db8876645e82307c8d0558da553e2e7f5b1475bcf9f0a604ca96cf7183163883b7b161aa6f08a691eb20"}, 0xec, 0x2) openat$cgroup_subtree(r0, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) 17:49:26 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80041, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f0000000080)="75e5f2864c4292ab3970d6051788ce9a6ac9ece0033ecde9e12fc722d58ba75a260dd9c38574fca561eb402fc4bff196fd04673a2c390004d0e3d5b3a543367ad74ad1e1b80c8ed19df519bbe7b1180d029b832421b8a23f49afcc0117c6265fb507dc6e34221f9c79607f4bc8348a528e5ef563ca6536559d10e53ccb433ea60e062a64e13ea2e7ecc02eac839092a3a405f71c5b3a64a77d9e1549f8733f73ee9c42043f66527f5b480798", &(0x7f0000000240)=""/252}, 0x18) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="2b000000060000000000000000000000020000000000000004ad0000000000950002000000000000002f27"], 0x2b) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$kcm(0x2, 0x2, 0x73) fallocate(r1, 0x1, 0x1, 0x2cb) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) [ 300.767507] dlm: non-version read from control device 0 [ 300.795108] dlm: non-version read from control device 0 17:49:26 executing program 0: r0 = socket$inet(0xa, 0x801, 0x2ba080) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0207) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 17:49:27 executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000001000)=0xfffffffffffffffe, 0x0) r0 = socket$nl_generic(0xa, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bcsh0\x00', 0x10) sync_file_range(r0, 0x0, 0xff, 0x2) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="02", @ANYRES16=r1, @ANYBLOB="000129bd7000fcdbdf2508000000340007000c00040001000000000000000c00040000080000000000000c00030003000000000000000c0003000600000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2, 0x0, 0x29, 0x2}, 0x1c2) r2 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x58, 0x50480) recvmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000340)=@xdp, 0x80, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/110, 0x6e}, {&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f00000004c0)=""/62, 0x3e}], 0x3}, 0x2) r3 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x6fb, 0x2002) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000280), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x28, &(0x7f0000000200)}, 0x10) 17:49:27 executing program 0: msgget(0x1, 0x400) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') 17:49:27 executing program 1: r0 = socket$inet(0x2, 0x800, 0x84) bind$inet(r0, 0x0, 0x0) 17:49:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000002c0)={0x3, @capture={0x1000, 0x1, {0x9, 0xa3}, 0xfffffffffffffff7, 0x2}}) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="f24b50100e55a40b23ac28f020ac4f0d6703d0705c509e9c1548d69b68e4ebbc8225a65dba6f7da7ef1230518c6010a0f618150c2e17a97336fa42cf218f0d677b691ad3c65a4c7f8072e08020c34ffcf5abebd85dc4f19858453db298d24c217a8337ae21e22969acfe4d7ae94d5162bc7453a930e84e6e8000bec39c19037f07aeeaec94d92b0d6e0da971812e", 0x8e, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000100)='pkcs7_test\x00', 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f00000000c0)=0x80, 0x4) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff82}, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0) 17:49:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000480)) flock(r0, 0xb) 17:49:27 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xfffffd77, &(0x7f0000000400), 0x2ff}, 0x0) r0 = socket$kcm(0x2, 0xf7fffffffffffffa, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x1, 0x80000) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e22}, 0x80, &(0x7f0000003580), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000007000000440000000000"], 0x18}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) nanosleep(&(0x7f00000003c0), &(0x7f0000000400)) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000300)) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000380)={0x10, 0x0, 0x8}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000180)={{0x0, 0x23b4b97}, 'port1\x00', 0x21, 0x80000, 0xe8, 0x7c55, 0x2, 0xffffffffffffff81, 0x800, 0x0, 0x5, 0x80000000}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}}) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000280)={0x6, 0x1, 0x398, 0x3, 0x282}, 0xc) 17:49:27 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x33f, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x80, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000080)) 17:49:27 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x28, &(0x7f0000000140)}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000011c0)={@link_local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "f96bed", 0x30, 0x67, 0x0, @ipv4, @local, {[], @tcp={{0x2100, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"de3e0f297d1c5d8b583e31c0e2b6eb6bab1990e15720598f3a2b5aea"}}}}}}}, 0x0) getegid() getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) getgroups(0x5, &(0x7f00000000c0)=[0xffffffffffffffff, 0xee01, 0x0, 0xee01, 0xee00]) setresgid(r2, r1, r2) 17:49:28 executing program 1: unshare(0x42000100) r0 = socket(0x1e, 0x1000000000005, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x9}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000), 0x4) 17:49:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000001000000300000000000000500300000000000004000000000000000000d2f9d1a3798d81130000000000002400000000000000d80a000000000000882b0000000000000001000000000000ffffff7f000000000000008000000000ffff228000000000880000000000000000800000000000007298913bf7c114fe71431f5a1060a319ec96f6e3bcf485bd6b6dd49cbda127f3dba3cc478d3dbfca743e71bf147c08d0e322db70d57a8ce9565c465fc0102fc0411d367583e8e01c734e31722d2493f7a3229b5da9a480c9362ac4f410e5080ffd716694e6057f8993d2d44b282b1862da66d85d74e02e5f32c19d6c"]) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000080)={0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100001000000000000000000000000800100000000000000000000000000006fb0000000000000000800000000000e000000000000000000000000000000000000000000000000000000000000000030006000001000002000004000001bb000000000000000003000500000000000200423b1d632b090020000000000000"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x400000000000117, 0x0) 17:49:28 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x501000) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VT_RELDISP(r0, 0x5605) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) unshare(0x400) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000340)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000000)={0x0, 0x2000000001, 0x1, &(0x7f0000000180)}) 17:49:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000004040)={&(0x7f0000004000), 0xc, &(0x7f0000000240)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x205, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_IF_NETNSID={0x8}]}, 0x30}}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0xffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000001c0)={{0x3, 0x2, 0x8, 0x1, 0x80}}) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x80000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0xcb, "7e6a85d93d2d2b5ba1e9f49d2925f5e076a71c8bbf33dd6ab0f6eaec0b905d237984619cba7418949a8605d190615cb08e7341f14e02e151f2832a8632e7381ac37bc3a5c9f1924976ffbb187f31d6a29fb4b4bac8ad0ba33c3b652dbe812f09a707b52a1acc4e49bef0f3f1942eb8232056ef28bddd890651c3e595d0ea0d8c05bd307998615cc49bb76577772eb8daac98df55bbc4a141a240e4e3c1d1e3218d77b6269cb777ca5502b8a2a0aed68a2e841d6867b0615648ba9256896c95067873b93d4d87d700661609"}, &(0x7f0000000280)=0xd3) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x1f, 0x400, 0x8005, 0xdb3, 0x0, 0x2, 0x2, 0x1, r4}, 0x20) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20220000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x704, 0x70bd2c, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x800000, 0x7fff, 0x7, 0x20}}}, ["", "", "", "", "", ""]}, 0x30}}, 0x20000040) 17:49:28 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff}) socket(0x3, 0xa, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) splice(r0, 0x0, r1, 0x0, 0x10005, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r2, 0xe, 0x30}, 0xc) 17:49:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f00007a8000)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000000207ffff52000200000007000000000004000700"], 0x18}}, 0x0) r1 = msgget$private(0x0, 0x2) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000000)=""/147) 17:49:28 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000100)=0x1e) 17:49:28 executing program 1: unshare(0x20400) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) 17:49:29 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x220000, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={r1, 0x8}, 0x8) r2 = socket$inet6(0xa, 0x80803, 0x2f) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in=@multicast1, 0x0, 0x2, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in6}}, 0xe8) connect$inet6(r2, &(0x7f00000000c0), 0x1c) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r3, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x7, @link='broadcast-link\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x48005) 17:49:29 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000040)={0x6, 0x101}) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="e000660f38f6f0ba6100b80800ef660fdbfb440f20c0663503000000440f22c0640f0665660fc27f009166b8000001000f23d80f21f86635c00000300f23f8baf80c66b87205798f66efbafc0cb80000ef66b9800000c00f326635004000000f30", 0x61}], 0x1, 0x20, &(0x7f00000001c0)=[@cr0={0x0, 0x80000000}, @cr0={0x0, 0x40000008}], 0x2) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x0, 'c`\x00'}]}, 0xe) [ 303.200399] device nr0 entered promiscuous mode 17:49:29 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000000)) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r0, 0x0, r2, 0x0, 0x5, 0x4) close(r1) 17:49:29 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x26ea, 0x109400) r1 = getpgid(0x0) ptrace$getregs(0xe, r1, 0x0, &(0x7f0000000080)=""/109) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000640), 0x80, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000084000000050000001000000000000600"], 0x18}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x90000, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000280)={0x4, &(0x7f0000000200)=[{0x2, 0x80000001, 0x9, 0x5}, {0x4af, 0x6e0, 0xfff, 0x171}, {0x1, 0x80, 0x8001, 0xff}, {0x41, 0x7fff, 0xffffffffffff6a9f, 0x1000}]}) 17:49:29 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00\b\x00') r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x4, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x20, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0x3, 0x4, 0x3d}], &(0x7f00000001c0)=[0x38, 0x28, 0x0, 0x78, 0x20, 0x30]}}, @decrefs={0x40046307, 0x3}], 0x21, 0x0, &(0x7f0000000300)="678f348182ee2a0a34392f08a73787dd3998ba41d9d61e55a13bdf410d9ae847ec"}) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x44000) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000002840)={0x0, 0xfffffffffffffe7a, 0x0}, 0x0) preadv(r3, &(0x7f00000017c0), 0x1a4, 0x6800) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000100)="a4e8c5804f182d1464d0facd3410717cd1415e968c7777a42e4334d29686ab417e1d6d39eebb6d5a168d579d397a611466a8f4b2f3812a08160c0eb97e779ab2f4a68c5c4b80a2fe5129e0b06dee26436a69f2619780d097846101d5fb40f0c8d2100dc9e520fc6ef81b0d36a39787a473f89508eef8c100eb48ccef420047c24689db17977423b83f182fac197935f670a6a54daa591aef6ac35c8510c9f9508cda6bd72058f33156ff24") 17:49:29 executing program 1: clock_nanosleep(0x7, 0x8000000000001, &(0x7f0000000040)={0x77359400}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) shmget$private(0x0, 0x1000, 0x80000000001004, &(0x7f0000ffb000/0x1000)=nil) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = geteuid() setfsuid(r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'lapb0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000002c0)={0x1d, r3}, 0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e0000000fecb889eaa1408dd4b411d61e1c82b9bd6e86eb809ecd81a6893dec021cd18410173e587b471c659cddb7799e52b861ca43172f8e9ca66458cba2ea9193d1306a9ed18fe817ab4fb1bb531f7861404b4c9b8b1aeda73edf60b6049262ebf6b7a2550086f48aae26b7bcab7f99ba13ef66c408144e6f922a845e2d3cf26f51c68708cb4ae4f7aa6ca85192e30261caf9a3ac8729ac589c89666ed5105ccd550cea66ee57f45735b9ac6aa056ff47c6333e60f95e4f216f0e5111ae8288bcd3d9b4ca4782b7c651c6012b822fd7031f045112916cb5652135ea8ba7114a56601c6"], &(0x7f00000001c0)=0xe8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000200)={r4, 0x48bd, 0x20}, &(0x7f0000000240)=0xc) 17:49:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) shutdown(r0, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x20000, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x7f, @empty, 0x8}, 0x1c) getgid() syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xa0, 0x200000) poll(&(0x7f0000000040)=[{r2}], 0x20000000000000e6, 0x0) 17:49:30 executing program 2: prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0xa001, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000080)={[], 0x3, 0x7, 0x3ec9b7c3, 0x0, 0x5, 0x7000, 0xd001, [], 0x2}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000240)={'nr0\x00', {0x2, 0x4e20, @local}}) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000280)={0x7, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f00000003c0)="8f5aac967858545e87cebd81321da687aef6a2cd527e09f55bfb3e5b42ed11511055bbbfb3297114e29df6e8bdc29aa8a38538aca9653fcc71140ffeda775f79ef89c7b7b855213ed07e2a0390235564f5be5b1b0596cd04", &(0x7f0000000440)=""/96}, 0x18) symlinkat(&(0x7f0000000500)='./file0\x00', r0, &(0x7f0000000540)='./file0\x00') setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000580)=0x6, 0x4) write(r0, &(0x7f00000005c0)="d500b9dd8941a78273ab5dedb041c8937d30e0eee94afb2514b6e50ba7d0e32155a6f30653d02573e7999e01e3ae34de94f348977fa3724682fcef1b406ea88582665a65d50c9223b0d55cdccd3485c3394d15a4c8854ece7ea95bf73c688e5226c40dcb32fa4d640feb8cf8dee29ae222c8e9e402396b363c27be17f6d6deaa49d6eb4f384de8991929a5f052108396c76cade7c167e2e2322dacb196d555ff4dd6a78bac6f850998e31fede45eb06460850f908cce9adefcbb02174c718db5b5880bba836b34603c6141788cadaceb2afe48ac166216740b2db3b7a1305932a7d51cab1b5b6d0d2c01219ff4ee46f06ec0b180884bc1e9", 0xf8) write$P9_RREMOVE(r0, &(0x7f00000006c0)={0x7, 0x7b, 0x1}, 0x7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000700), &(0x7f0000000740)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000780)={0x0, 0xfffffffffffff689}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000800)={r1, 0x7107d82f}, &(0x7f0000000840)=0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000880)) removexattr(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)=@random={'security.', '/dev/audio\x00'}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000940)='/proc/capi/capi20\x00', 0x10000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4bbd0595e1ad343a) signalfd(r0, &(0x7f0000000ac0)={0x5}, 0x8) ioctl$RTC_UIE_OFF(r2, 0x7004) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = inotify_init() ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000b00)=0x1fab1693) fcntl$getown(r5, 0x9) write$P9_RLOPEN(r2, &(0x7f0000000b40)={0x18, 0xd, 0x2, {{0x60, 0x2, 0x3}, 0x2}}, 0x18) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000010c0)={{{@in6=@mcast1, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000011c0)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001200)={@rand_addr=0x80, @dev={0xac, 0x14, 0x14, 0xc}, r6}, 0xc) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000001240)={0x8, {0xdd18000000000000, 0x5, 0xff}}) prctl$PR_MCE_KILL_GET(0x22) fcntl$dupfd(r4, 0x406, r5) 17:49:30 executing program 0: setrlimit(0x7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffd4, 0x0, 0x0, 0x10}}, &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x40042, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@alg={0xe8, 0x10, 0x115, 0x70bd2c, 0x25dfdbfe, {{'drbg_pr_hmac_sha256\x00'}, [], [], 0x400, 0x2400}, [{0x8, 0x1, 0x5}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4800}, 0x1) 17:49:30 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x101, 0x72b8d9fa}, &(0x7f00000000c0)=0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000180)={0x1000, 0xffffffff, 0x200, 0x9, 0x2, 0xffff, 0x6, 0x800, r3}, 0x20) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc008561c, &(0x7f0000000100)={0x980902, 0x210}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000240)=@req={0xfffe0000000000, 0x4, 0x1f, 0x8}, 0x10) 17:49:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = dup(r0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) fcntl$getown(r0, 0x9) [ 304.486130] IPVS: ftp: loaded support on port[0] = 21 17:49:30 executing program 0: unshare(0x20400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x3, 0x90, [0x20000880, 0x0, 0x0, 0x20000a30, 0x20000a60], 0xfeffff07, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]}, 0x17e) openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x80, 0x0) [ 304.593787] kernel msg: ebtables bug: please report to author: Wrong len argument 17:49:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000014000905000000000000000002000000", @ANYRES32=r2, @ANYBLOB="14000600000000400e000000000000000000000014000200fe8000000007b965c57bc9faee0000aacef077d3c2fb41935ec0ab813b08e483685f27b43128a3615fdf2b4a2bd3514fbe6c283d45761b3a41e75c110f2351be795b04e7595574bdef3cac721119e3bfd778c542c72938d5db67165f6e59fa00ecb32a7da1b2c13d3372d86e6d27f49efa5c0cd7586fdeb3c7e5d251038320441383dd497b15766a7f85bc8497bc093289f037fb7d735aa5fd83f919805de2202d022423d8d3d7ee3ea9d0204a7c2213644ee1e1b82526a62b2922e8ee7204070e7ff6b781877c763323391178fd1008f9b90a48432c68013c"], 0x40}}, 0x0) [ 304.741155] chnl_net:caif_netlink_parms(): no params data found 17:49:30 executing program 0: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x81b9, 0x1}, 0x14) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000100)={0xfffffffffffffe01, 0x1, 0x1, 0x3, 0x1}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000340)={0x8, "2d2256df062ca11b92c1cbbbbbed5a1272ea964f4f395b373e5a7041846c93e8", 0x800, 0xbb, 0xff, 0x10, 0x3}) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000001ac0), 0x4) close(r0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000200)=0x7f1, 0x4) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000180)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={r0, r1, 0xa, 0x1}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000002c0)={0x10000, 0x1, {0xffffffffffffffff, 0x1, 0x8, 0x3, 0x3}}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setns(r0, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0)=0xfb8, 0x4) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) [ 304.868067] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 304.943586] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.950132] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.959073] device bridge_slave_0 entered promiscuous mode [ 304.969040] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.975640] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.984180] device bridge_slave_1 entered promiscuous mode 17:49:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x101, 0x1, 0xd300, 0x8001}, &(0x7f0000000500)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x400}}, 0x1f, 0x97}, &(0x7f0000000600)=0x90) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000440)=0xd3) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000480)={r2, 0xfffffffffffffffd}, 0x8) syz_emit_ethernet(0x66, &(0x7f0000000080)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @empty={[0x0, 0x0, 0x0, 0xff00]}, @mcast2, {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x0, [], {0x0, 0x6, "c5771e", 0x0, 0x0, 0x0, @mcast1, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f]}}}}}}}}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3ff, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000008c0)={0x90, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="91029c852bd9db2430dfbbbf49226dce"}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1c}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100000000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f00000002c0)=[r4, r5, r6, r8]) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000640)=""/216, &(0x7f0000000740)=0xd8) ioctl$VT_RELDISP(r3, 0x5605) 17:49:31 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000021000/0x2000)=nil, 0x9, 0x4, 0x2, &(0x7f0000ffa000/0x2000)=nil, 0x1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000008000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffffffffffffd, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) close(r1) [ 305.069816] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 305.093709] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 305.143702] team0: Port device team_slave_0 added [ 305.177428] team0: Port device team_slave_1 added 17:49:31 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x3, 0xe001) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000040)={{0x2, @name="0589261de7530dff208b98dfb1c519c2738284d439206134416c3f1f642dc56c"}, 0x8, 0x3ff}) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x4040, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffbf, 0x0) open(&(0x7f0000000240)='./file0/bus\x00', 0x3, 0x0) [ 305.287305] device hsr_slave_0 entered promiscuous mode [ 305.322662] device hsr_slave_1 entered promiscuous mode [ 305.376988] ima: Unable to reopen file for reading. [ 305.395701] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.402351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.409534] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.416203] bridge0: port 1(bridge_slave_0) entered forwarding state 17:49:31 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x3, 0xf, 0x3}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) [ 305.554198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.613864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.629283] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.657605] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.688863] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 305.730347] 8021q: adding VLAN 0 to HW filter on device team0 17:49:31 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000021000/0x2000)=nil, 0x9, 0x4, 0x2, &(0x7f0000ffa000/0x2000)=nil, 0x1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000008000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffffffffffffd, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) close(r1) [ 305.771128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 305.779883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 305.789506] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.796083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.210621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.219283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.227571] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.234160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.254928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 306.264262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 306.308689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 306.319027] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 306.327726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 306.336726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 306.345545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 306.353962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.363758] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 306.391934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 306.400344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.447651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 306.506460] 8021q: adding VLAN 0 to HW filter on device batadv0 17:49:34 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0xc, &(0x7f0000000000), 0x20a154cc) accept4(r0, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80, 0x800) 17:49:34 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000021000/0x2000)=nil, 0x9, 0x4, 0x2, &(0x7f0000ffa000/0x2000)=nil, 0x1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000008000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffffffffffffd, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) close(r1) 17:49:34 executing program 0: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000021000/0x2000)=nil, 0x9, 0x4, 0x2, &(0x7f0000ffa000/0x2000)=nil, 0x1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000008000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffffffffffffd, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) close(r1) 17:49:34 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0xc, &(0x7f0000000000), 0x20a154cc) accept4(r0, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80, 0x800) 17:49:34 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000021000/0x2000)=nil, 0x9, 0x4, 0x2, &(0x7f0000ffa000/0x2000)=nil, 0x1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000008000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffffffffffffd, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) close(r1) 17:49:34 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1e, @multicast2}, 0xffffffffffffffdb) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000000240)={{0x5}}) 17:49:34 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0xc, &(0x7f0000000000), 0x20a154cc) accept4(r0, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80, 0x800) 17:49:34 executing program 0: mkdir(&(0x7f0000632000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000014ff8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x1, 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) utimensat(r0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1d, 0x4) 17:49:34 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0xc, &(0x7f0000000000), 0x20a154cc) accept4(r0, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80, 0x800) 17:49:34 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000021000/0x2000)=nil, 0x9, 0x4, 0x2, &(0x7f0000ffa000/0x2000)=nil, 0x1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000008000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffffffffffffd, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r2) close(r1) 17:49:34 executing program 0: r0 = gettid() timer_create(0x2, &(0x7f0000044000)={0x100000000000002, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) r1 = socket$pptp(0x18, 0x1, 0x2) pwrite64(r1, &(0x7f0000000280)="784ba109960782e091fa5e82ca2942edea93d9a89f4885cef901a695a27812752a", 0x21, 0x0) exit(0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x302, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) 17:49:35 executing program 2: r0 = socket(0x18, 0x0, 0x0) accept4(r0, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80, 0x800) 17:49:35 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000021000/0x2000)=nil, 0x9, 0x4, 0x2, &(0x7f0000ffa000/0x2000)=nil, 0x1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000008000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0x10) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0xfffffffffffffffd, 0x2000000000032, 0xffffffffffffffff, 0x0) close(r1) 17:49:35 executing program 2: accept4(0xffffffffffffffff, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80, 0x800) 17:49:35 executing program 2: accept4(0xffffffffffffffff, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80, 0x800) 17:49:35 executing program 2: accept4(0xffffffffffffffff, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80, 0x800) 17:49:35 executing program 2: r0 = socket(0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80, 0x800) 17:49:35 executing program 2: r0 = socket(0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80, 0x800) 17:49:35 executing program 2: r0 = socket(0x0, 0x0, 0x0) accept4(r0, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80, 0x800) 17:49:36 executing program 2: socket(0x18, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80, 0x800) 17:49:36 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x80200000006, 0x0) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x20200) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x9, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5d69a1b2"}, 0x0, 0x0, @planes=0x0, 0x4}) 17:49:36 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000021000/0x2000)=nil, 0x9, 0x4, 0x2, &(0x7f0000ffa000/0x2000)=nil, 0x1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000008000/0x4000)=nil, 0x4000}, &(0x7f0000000140)=0x10) close(r1) 17:49:36 executing program 2: socket(0x18, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80, 0x800) 17:49:36 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000c0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f0000000040)={0x9, 0x8, 0x20000002007, 0x2, 0xc, 0xcf73}) ioctl$TUNSETPERSIST(r1, 0x800454cf, 0x70a000) 17:49:36 executing program 2: socket(0x18, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80, 0x800) 17:49:36 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_score_adj\x00\x9f\xc5r\x0e8J\xdb@\xf8\xbfj1\xe8\xce\x88\x02^\xb2\xf4hTR2\xf1\x89\x1e~m\x19\xc9lG^l\x13c7\xf7$\x7f?9>b\xe8/<\xdbj>:\xd9\x10\x04r\x18\x15\xdc)\x10I<\xd0:\x0f\x18\xec\x00\xc2w\x8a0C\xf8\xa9\xeaa\x16\x8c\xe6C\xf5\xcb\xdc\x1c\xea`\x9c\xe1\x8e\xdd\x8e\xaa\x1f\xf4\xaf\xa3Z\xbf\x17M\x1a\xff\xb1\x8dP]<\x9e\xe1B[y\xe6\xae\xe9I\xdb)\x9b\xcb\xa3Wlt\xe9\xa9\xfc\xf8\xde\xf0]\n\xa5S\x16\x1dh\x88\xc5\xea\xcf\xca5\xd2.\x93\xfd\t\x90#hq\r\x9b;\x83\xdd\x0fs\x80\x12\xc6\x8e~\xd4\xef\xc7:\xee4cu\xb2\x03\xd5\xd5)\xc9\xf1/\xea\x95_\'\xfb\xb9\xa94\xca\x9e\xf3\xfb\xc9\xd6~\xd5\xb7}B\xe5.\x86\xbf\xbb#\xb9\xf7N\xb3\xfe?x\xccX^\x16bz\"\x8a\xa45\x10t\xbb\xb7\xca\xa7\xcc\xde_\xdc\xab\xf2\xb8\xc7\xb3\xd3&$\xbb4\x81\t\xbb\xe3\xbfB(ln\xbc\xe9E<6$\x8f)\xb0\x1a\xc9\xe3\x18\xa6\xd9zk\x94Z\xed\x96\xad\xe2\\\xcb,!\x13\rv)r\xf1\x00E\xcccgr\xbf\xd4uB\x9f\xa5\x8c8\xe4D\x0f\xd3Vtd\x89\xc8V\x14\x17=\xd9\xcf*\xc8\xc7\xb7\xcc\x182/Jm\x8c5\x93\x14\xfd\x02\'\xe3\xc9\x12~\xc3\x10\xb7\xc7\xae\xcfA\x823|\xfd\xba2\xbd\xc6-\xe0E_x\xc7i\x8dV\xd9\\_l\xfb\xd8xX.N\x9bd\x91\xd5\xc1\xa1\xbahL\x95wF\x13{\xfd\xc8T\x1f\xe1)h\a\xe8Wn]\xe4\xc4H\xdb \x1aa\x1b\x85\xc2O\x18\x1d\xf5kFA\x14\xaa\xfbsa\x10\x9eyF\xf6\xb7O\xd8wV\n\x1f\x94\xb1\x8e\x04\x9dSiWf\xf5\xc3\xbd\xa9\xa5v)m\xddbL\x9f\x048\xa7\xc8\x18\n\x9e\xef\xfc\xa0\x0f\xa9\x9a_!\xc3?\xa10x0, 0x23, "cf2d015c04d59641143669c71fd2cb3e67530b2ff966e5a00478f06eae7c9ed9723cfb"}, &(0x7f0000000080)=0x2b) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r1, 0xb0, "a8e11ee0ebcbdc1accc4b5ef51f6d143af9f9e468202e00b4cf5ddaa1f6b5c515ba79018a9ba16d68d5f324908200b04dda4fb68acec0d488a3c791c0edc62e0ef4f219e5cadf95e78721ebd631f82871898bc3f7918e6b59f6673124d7219234aebaf830e93954415bd403b8398b230787b0252d11c6cc3e87d624a794c4916e59ad22ac432f7b36797dd33b52a35cc2043a92a8fe3390a34ec2e59c1126d00135567abdfd590c1044eb4252db6b91e"}, &(0x7f0000000180)=0xb8) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x8, 0x4) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={r1, 0x1, 0x9, "68275608b502f6a5f7"}, 0x11) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000200)={0x1, [0xffffffffffff0000]}, &(0x7f0000000240)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ed2ac9b087208799ef34b21655c5fc81ac05a972e2ed1f57ee5b31d09e018eb50d5ea3787cde55e7249255031c699e5af97e27cd4ad11b56fdc62e7d19", 0x3d) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r1, 0x4}, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)=0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={r2, r3, r4}, 0xc) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000500)={0x33, @loopback, 0x4e20, 0x0, 'nq\x00', 0x1, 0x3f, 0x18}, 0x2c) r5 = creat(&(0x7f0000000540)='./file0\x00', 0x9) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000580)=0x2) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f00000005c0)=""/204) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x4) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000006c0)) ioctl$SG_GET_VERSION_NUM(r5, 0x2282, &(0x7f0000000700)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000740)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x124, r6, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffff8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc39a}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x5}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @mcast2, 0xfffffffffffffff8}}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4000000) recvmmsg(r5, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000000a80)=""/87, 0x57}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/29, 0x1d}, {&(0x7f0000001b40)=""/45, 0x2d}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/77, 0x4d}, {&(0x7f0000003c00)=""/111, 0x6f}], 0x8, &(0x7f0000003d00)=""/27, 0x1b}, 0x6}, {{&(0x7f0000003d40)=@ax25={{0x3, @rose}, [@netrom, @rose, @null, @netrom, @null, @default, @null, @netrom]}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003dc0)=""/115, 0x73}, {&(0x7f0000003e40)=""/216, 0xd8}], 0x2}, 0x1ff}, {{&(0x7f0000003f80)=@sco, 0x80, &(0x7f0000005680)=[{&(0x7f0000004000)=""/250, 0xfa}, {&(0x7f0000004100)=""/47, 0x2f}, {&(0x7f0000004140)=""/166, 0xa6}, {&(0x7f0000004200)=""/244, 0xf4}, {&(0x7f0000004300)=""/245, 0xf5}, {&(0x7f0000004400)=""/77, 0x4d}, {&(0x7f0000004480)=""/215, 0xd7}, {&(0x7f0000004580)=""/216, 0xd8}, {&(0x7f0000004680)=""/4096, 0x1000}], 0x9}, 0x3ff}, {{&(0x7f0000005740), 0x80, &(0x7f0000006a00)=[{&(0x7f00000057c0)=""/233, 0xe9}, {&(0x7f00000058c0)=""/178, 0xb2}, {&(0x7f0000005980)=""/4096, 0x1000}, {&(0x7f0000006980)=""/120, 0x78}], 0x4, &(0x7f0000006a40)=""/237, 0xed}, 0xffffffffffffff58}], 0x4, 0x20, &(0x7f0000006c40)={0x77359400}) process_vm_readv(r2, &(0x7f0000007000)=[{&(0x7f0000006c80)=""/231, 0xe7}, {&(0x7f0000006d80)=""/183, 0xb7}, {&(0x7f0000006e40)=""/248, 0xf8}, {&(0x7f0000006f40)=""/131, 0x83}], 0x4, &(0x7f0000007200)=[{&(0x7f0000007040)=""/184, 0xb8}, {&(0x7f0000007100)=""/236, 0xec}], 0x2, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000007240)=0x7) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000007280), &(0x7f00000072c0)=0x4) read$alg(r5, &(0x7f0000007300)=""/60, 0x3c) r7 = add_key(&(0x7f0000007340)='ceph\x00', &(0x7f0000007380)={'syz', 0x1}, &(0x7f00000073c0)="39908e7aec266cd784810bc20b2c6ab63cdd45c3f7b5b8242a918ca58baac2766f99c5ee511b6c81f751537a7592eead0ec3375dc630fd5d", 0x38, 0x0) keyctl$describe(0x6, r7, &(0x7f0000007400)=""/231, 0xe7) 17:49:36 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x2) add_key(&(0x7f0000000340)='cifs.idmap\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="9a", 0x1}], 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x10000, 0x246540) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0x8001, 0x1, 0x4, 0x3]}) 17:49:36 executing program 2: r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x800) [ 310.896721] sg_write: process 114 (syz-executor.0) changed security contexts after opening file descriptor, this is not allowed. 17:49:37 executing program 2: r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 17:49:37 executing program 0: mknod(&(0x7f0000000040)='./bus\x00', 0x2000000000001000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0xb00, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000100)={0x8, r1, 0x0, 0x44}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000140)={r2, 0x4}) r3 = epoll_create(0x100) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00003d6ff4)) prctl$PR_SET_DUMPABLE(0x4, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0xbb, @empty, 0x4e20, 0x3, 'lblcr\x00', 0x2, 0x1, 0x5e}, 0x2c) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000280)=0xffffffffffffff81, 0x4) creat(&(0x7f00000000c0)='./bus\x00', 0x8) open(&(0x7f0000000080)='./bus\x00', 0x10b882, 0x0) creat(&(0x7f00000001c0)='./bus\x00', 0x100) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) 17:49:37 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000021000/0x2000)=nil, 0x9, 0x4, 0x2, &(0x7f0000ffa000/0x2000)=nil, 0x1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) close(r1) 17:49:37 executing program 2 (fault-call:1 fault-nth:0): r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) [ 311.265577] FAULT_INJECTION: forcing a failure. [ 311.265577] name failslab, interval 1, probability 0, space 0, times 1 [ 311.278496] CPU: 0 PID: 11056 Comm: syz-executor.2 Not tainted 5.0.0+ #16 [ 311.285511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.294939] Call Trace: [ 311.297639] dump_stack+0x173/0x1d0 [ 311.301368] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 311.306680] ? __should_failslab+0x278/0x2a0 [ 311.311190] should_fail+0xa19/0xb20 [ 311.315013] __should_failslab+0x278/0x2a0 [ 311.319354] should_failslab+0x29/0x70 [ 311.323345] kmem_cache_alloc+0xff/0xb60 [ 311.327508] ? sock_alloc_inode+0x61/0x330 [ 311.331851] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 311.337137] ? sockfs_mount+0xa0/0xa0 [ 311.341044] sock_alloc_inode+0x61/0x330 [ 311.345227] ? sockfs_mount+0xa0/0xa0 [ 311.349330] new_inode_pseudo+0x95/0x460 [ 311.353495] __sys_accept4+0x2ef/0x12a0 [ 311.357593] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 311.363142] ? prepare_exit_to_usermode+0x114/0x420 [ 311.368246] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 311.373530] ? syscall_return_slowpath+0x50/0x650 [ 311.378475] __se_sys_accept4+0xb7/0xe0 [ 311.382537] __x64_sys_accept4+0x56/0x70 [ 311.386668] do_syscall_64+0xbc/0xf0 [ 311.390470] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 311.395730] RIP: 0033:0x458209 [ 311.399011] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 311.417982] RSP: 002b:00007fb302821c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 311.425836] RAX: ffffffffffffffda RBX: 00007fb302821c90 RCX: 0000000000458209 [ 311.433185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 311.440531] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 311.447875] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb3028226d4 [ 311.455218] R13: 00000000004bdfa9 R14: 00000000004ce390 R15: 0000000000000004 17:49:37 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000040)={0x0, 0x1, 0x1000000}) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x400, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 17:49:37 executing program 2 (fault-call:1 fault-nth:1): r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 17:49:37 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x1, 'ip_vti0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x700000000000000, 0x48c, &(0x7f0000000080)={0x1, 'bcsh0\x00'}, 0x18) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) [ 311.710364] IPVS: ftp: loaded support on port[0] = 21 [ 311.816907] IPVS: stopping master sync thread 11069 ... [ 311.840168] IPVS: stopping master sync thread 11071 ... 17:49:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="0fd3"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 311.985069] FAULT_INJECTION: forcing a failure. [ 311.985069] name failslab, interval 1, probability 0, space 0, times 0 [ 311.996800] CPU: 1 PID: 11076 Comm: syz-executor.2 Not tainted 5.0.0+ #16 [ 312.003799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.013217] Call Trace: [ 312.015922] dump_stack+0x173/0x1d0 [ 312.019632] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 312.024904] should_fail+0xa19/0xb20 [ 312.028727] __should_failslab+0x278/0x2a0 [ 312.033060] should_failslab+0x29/0x70 [ 312.037032] kmem_cache_alloc_trace+0x125/0xb40 [ 312.041787] ? kmem_cache_alloc+0x585/0xb60 [ 312.046196] ? sock_alloc_inode+0x61/0x330 [ 312.050495] ? sock_alloc_inode+0x101/0x330 [ 312.054902] sock_alloc_inode+0x101/0x330 [ 312.059118] ? sockfs_mount+0xa0/0xa0 [ 312.062981] new_inode_pseudo+0x95/0x460 [ 312.067134] __sys_accept4+0x2ef/0x12a0 [ 312.071196] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 312.076719] ? prepare_exit_to_usermode+0x114/0x420 [ 312.081810] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 312.087067] ? syscall_return_slowpath+0x50/0x650 [ 312.092001] __se_sys_accept4+0xb7/0xe0 [ 312.096045] __x64_sys_accept4+0x56/0x70 [ 312.100180] do_syscall_64+0xbc/0xf0 [ 312.103979] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 312.109225] RIP: 0033:0x458209 [ 312.112488] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.131547] RSP: 002b:00007fb302821c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 312.139341] RAX: ffffffffffffffda RBX: 00007fb302821c90 RCX: 0000000000458209 [ 312.146671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 312.153990] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 312.161305] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb3028226d4 [ 312.168617] R13: 00000000004bdfa9 R14: 00000000004ce390 R15: 0000000000000004 17:49:38 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000021000/0x2000)=nil, 0x9, 0x4, 0x2, &(0x7f0000ffa000/0x2000)=nil, 0x1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) close(r1) [ 312.220906] chnl_net:caif_netlink_parms(): no params data found [ 312.405076] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.411625] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.420163] device bridge_slave_0 entered promiscuous mode [ 312.490994] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.497757] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.506468] device bridge_slave_1 entered promiscuous mode [ 312.597150] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 312.617996] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 312.660270] team0: Port device team_slave_0 added [ 312.669526] team0: Port device team_slave_1 added [ 312.747473] device hsr_slave_0 entered promiscuous mode [ 312.803235] device hsr_slave_1 entered promiscuous mode [ 312.871421] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.878076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.885365] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.892015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.966797] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.975704] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.012591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.035846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.043638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.059210] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.077826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 313.086876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.096549] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.103133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.123186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.131668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.139983] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.146556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.184609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.193867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.203096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.212632] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.221621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 313.231001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.240131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.248998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.279454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.291877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 313.330698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.361327] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.370078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.378694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 17:49:39 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20040, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x23, "cf2d015c04d59641143669c71fd2cb3e67530b2ff966e5a00478f06eae7c9ed9723cfb"}, &(0x7f0000000080)=0x2b) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={r1, 0xb0, "a8e11ee0ebcbdc1accc4b5ef51f6d143af9f9e468202e00b4cf5ddaa1f6b5c515ba79018a9ba16d68d5f324908200b04dda4fb68acec0d488a3c791c0edc62e0ef4f219e5cadf95e78721ebd631f82871898bc3f7918e6b59f6673124d7219234aebaf830e93954415bd403b8398b230787b0252d11c6cc3e87d624a794c4916e59ad22ac432f7b36797dd33b52a35cc2043a92a8fe3390a34ec2e59c1126d00135567abdfd590c1044eb4252db6b91e"}, &(0x7f0000000180)=0xb8) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x8, 0x4) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={r1, 0x1, 0x9, "68275608b502f6a5f7"}, 0x11) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000200)={0x1, [0xffffffffffff0000]}, &(0x7f0000000240)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ed2ac9b087208799ef34b21655c5fc81ac05a972e2ed1f57ee5b31d09e018eb50d5ea3787cde55e7249255031c699e5af97e27cd4ad11b56fdc62e7d19", 0x3d) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r1, 0x4}, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000340)=0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={r2, r3, r4}, 0xc) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000500)={0x33, @loopback, 0x4e20, 0x0, 'nq\x00', 0x1, 0x3f, 0x18}, 0x2c) r5 = creat(&(0x7f0000000540)='./file0\x00', 0x9) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000580)=0x2) ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f00000005c0)=""/204) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x4) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000006c0)) ioctl$SG_GET_VERSION_NUM(r5, 0x2282, &(0x7f0000000700)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000740)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x124, r6, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffff8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}]}, @TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc39a}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x5}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @mcast2, 0xfffffffffffffff8}}}}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000c4}, 0x4000000) recvmmsg(r5, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000000a80)=""/87, 0x57}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/29, 0x1d}, {&(0x7f0000001b40)=""/45, 0x2d}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/77, 0x4d}, {&(0x7f0000003c00)=""/111, 0x6f}], 0x8, &(0x7f0000003d00)=""/27, 0x1b}, 0x6}, {{&(0x7f0000003d40)=@ax25={{0x3, @rose}, [@netrom, @rose, @null, @netrom, @null, @default, @null, @netrom]}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003dc0)=""/115, 0x73}, {&(0x7f0000003e40)=""/216, 0xd8}], 0x2}, 0x1ff}, {{&(0x7f0000003f80)=@sco, 0x80, &(0x7f0000005680)=[{&(0x7f0000004000)=""/250, 0xfa}, {&(0x7f0000004100)=""/47, 0x2f}, {&(0x7f0000004140)=""/166, 0xa6}, {&(0x7f0000004200)=""/244, 0xf4}, {&(0x7f0000004300)=""/245, 0xf5}, {&(0x7f0000004400)=""/77, 0x4d}, {&(0x7f0000004480)=""/215, 0xd7}, {&(0x7f0000004580)=""/216, 0xd8}, {&(0x7f0000004680)=""/4096, 0x1000}], 0x9}, 0x3ff}, {{&(0x7f0000005740), 0x80, &(0x7f0000006a00)=[{&(0x7f00000057c0)=""/233, 0xe9}, {&(0x7f00000058c0)=""/178, 0xb2}, {&(0x7f0000005980)=""/4096, 0x1000}, {&(0x7f0000006980)=""/120, 0x78}], 0x4, &(0x7f0000006a40)=""/237, 0xed}, 0xffffffffffffff58}], 0x4, 0x20, &(0x7f0000006c40)={0x77359400}) process_vm_readv(r2, &(0x7f0000007000)=[{&(0x7f0000006c80)=""/231, 0xe7}, {&(0x7f0000006d80)=""/183, 0xb7}, {&(0x7f0000006e40)=""/248, 0xf8}, {&(0x7f0000006f40)=""/131, 0x83}], 0x4, &(0x7f0000007200)=[{&(0x7f0000007040)=""/184, 0xb8}, {&(0x7f0000007100)=""/236, 0xec}], 0x2, 0x0) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000007240)=0x7) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000007280), &(0x7f00000072c0)=0x4) read$alg(r5, &(0x7f0000007300)=""/60, 0x3c) r7 = add_key(&(0x7f0000007340)='ceph\x00', &(0x7f0000007380)={'syz', 0x1}, &(0x7f00000073c0)="39908e7aec266cd784810bc20b2c6ab63cdd45c3f7b5b8242a918ca58baac2766f99c5ee511b6c81f751537a7592eead0ec3375dc630fd5d", 0x38, 0x0) keyctl$describe(0x6, r7, &(0x7f0000007400)=""/231, 0xe7) 17:49:39 executing program 2 (fault-call:1 fault-nth:2): r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 17:49:39 executing program 0: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000021000/0x2000)=nil, 0x9, 0x4, 0x2, &(0x7f0000ffa000/0x2000)=nil, 0x1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) close(r1) 17:49:39 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000021000/0x2000)=nil, 0x9, 0x4, 0x2, &(0x7f0000ffa000/0x2000)=nil, 0x1}) close(r1) [ 313.605488] FAULT_INJECTION: forcing a failure. [ 313.605488] name failslab, interval 1, probability 0, space 0, times 0 [ 313.617499] CPU: 0 PID: 11094 Comm: syz-executor.2 Not tainted 5.0.0+ #16 [ 313.624579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.633995] Call Trace: [ 313.636675] dump_stack+0x173/0x1d0 [ 313.640375] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 313.645645] should_fail+0xa19/0xb20 [ 313.649455] __should_failslab+0x278/0x2a0 [ 313.653793] should_failslab+0x29/0x70 [ 313.657783] kmem_cache_alloc+0xff/0xb60 [ 313.661923] ? __d_alloc+0x98/0xc30 [ 313.665609] ? should_fail+0x5e/0xb20 [ 313.669517] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 313.675291] __d_alloc+0x98/0xc30 [ 313.678835] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 313.684273] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 313.689535] d_alloc_pseudo+0x68/0x80 [ 313.693405] alloc_file_pseudo+0x19f/0x4e0 [ 313.697727] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 313.703021] sock_alloc_file+0x1b2/0x5b0 [ 313.707164] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 313.712431] __sys_accept4+0x6fa/0x12a0 [ 313.716508] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 313.722033] ? prepare_exit_to_usermode+0x114/0x420 [ 313.727116] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 313.732368] ? syscall_return_slowpath+0x50/0x650 [ 313.737290] __se_sys_accept4+0xb7/0xe0 [ 313.741362] __x64_sys_accept4+0x56/0x70 [ 313.745517] do_syscall_64+0xbc/0xf0 [ 313.749319] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 313.754573] RIP: 0033:0x458209 [ 313.757836] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 313.776819] RSP: 002b:00007fb302821c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 313.784605] RAX: ffffffffffffffda RBX: 00007fb302821c90 RCX: 0000000000458209 [ 313.791922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 313.799250] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 313.806576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb3028226d4 [ 313.813897] R13: 00000000004bdfa9 R14: 00000000004ce390 R15: 0000000000000004 17:49:40 executing program 2 (fault-call:1 fault-nth:3): r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) [ 314.009040] FAULT_INJECTION: forcing a failure. [ 314.009040] name failslab, interval 1, probability 0, space 0, times 0 [ 314.020650] CPU: 0 PID: 11107 Comm: syz-executor.2 Not tainted 5.0.0+ #16 [ 314.027639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.037223] Call Trace: [ 314.039914] dump_stack+0x173/0x1d0 [ 314.043613] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 314.048882] ? __should_failslab+0x278/0x2a0 [ 314.053361] should_fail+0xa19/0xb20 [ 314.057164] __should_failslab+0x278/0x2a0 [ 314.061475] should_failslab+0x29/0x70 [ 314.065436] kmem_cache_alloc+0xff/0xb60 [ 314.069559] ? __alloc_file+0xa3/0x710 [ 314.073520] ? __msan_poison_alloca+0x1e0/0x290 [ 314.078259] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 314.083521] __alloc_file+0xa3/0x710 [ 314.087307] alloc_empty_file+0x1f5/0x4b0 [ 314.091529] alloc_file+0xa5/0x7b0 [ 314.095140] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 314.100661] alloc_file_pseudo+0x3ff/0x4e0 [ 314.104987] sock_alloc_file+0x1b2/0x5b0 [ 314.109126] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 314.114387] __sys_accept4+0x6fa/0x12a0 [ 314.118460] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 314.123989] ? prepare_exit_to_usermode+0x114/0x420 [ 314.129090] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 314.134357] ? syscall_return_slowpath+0x50/0x650 [ 314.139281] __se_sys_accept4+0xb7/0xe0 [ 314.143335] __x64_sys_accept4+0x56/0x70 [ 314.147469] do_syscall_64+0xbc/0xf0 [ 314.151276] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 314.156519] RIP: 0033:0x458209 [ 314.159789] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.178784] RSP: 002b:00007fb302821c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 314.186572] RAX: ffffffffffffffda RBX: 00007fb302821c90 RCX: 0000000000458209 [ 314.193892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 314.201216] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 17:49:40 executing program 3: unshare(0x20400) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3000002, 0x40000000000a132, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000140)={0x3, 0x7}) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xa70, 0xa000) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x28, 0x2, &(0x7f0000581000)={{{@in, @in6=@mcast2}}}, &(0x7f0000000100)=0x354873f37839461a) 17:49:40 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) close(r1) [ 314.208546] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb3028226d4 [ 314.215879] R13: 00000000004bdfa9 R14: 00000000004ce390 R15: 0000000000000004 17:49:40 executing program 0: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r4, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000021000/0x2000)=nil, 0x9, 0x4, 0x2, &(0x7f0000ffa000/0x2000)=nil, 0x1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) close(r1) 17:49:40 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x20, 0x181101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000100)) r1 = getpid() ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000040)=r1) 17:49:40 executing program 2 (fault-call:1 fault-nth:4): r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 17:49:40 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) [ 314.556712] FAULT_INJECTION: forcing a failure. [ 314.556712] name failslab, interval 1, probability 0, space 0, times 0 [ 314.568290] CPU: 1 PID: 11127 Comm: syz-executor.2 Not tainted 5.0.0+ #16 [ 314.575291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.584746] Call Trace: [ 314.587453] dump_stack+0x173/0x1d0 [ 314.591179] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 314.596483] should_fail+0xa19/0xb20 [ 314.600324] __should_failslab+0x278/0x2a0 [ 314.604673] should_failslab+0x29/0x70 [ 314.608671] kmem_cache_alloc_trace+0x125/0xb40 [ 314.613442] ? kmsan_internal_memset_shadow+0xc6/0x410 [ 314.618822] ? apparmor_file_alloc_security+0x23b/0x6e0 [ 314.624335] apparmor_file_alloc_security+0x23b/0x6e0 [ 314.629630] ? apparmor_file_permission+0x490/0x490 [ 314.634734] security_file_alloc+0xcf/0x1a0 [ 314.639145] __alloc_file+0x1bf/0x710 [ 314.643021] alloc_empty_file+0x1f5/0x4b0 [ 314.647243] alloc_file+0xa5/0x7b0 [ 314.650875] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 314.656411] alloc_file_pseudo+0x3ff/0x4e0 [ 314.660788] sock_alloc_file+0x1b2/0x5b0 [ 314.664946] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 314.670243] __sys_accept4+0x6fa/0x12a0 [ 314.675314] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 314.680866] ? prepare_exit_to_usermode+0x114/0x420 [ 314.685977] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 314.691247] ? syscall_return_slowpath+0x50/0x650 [ 314.696199] __se_sys_accept4+0xb7/0xe0 [ 314.700307] __x64_sys_accept4+0x56/0x70 [ 314.704442] do_syscall_64+0xbc/0xf0 [ 314.708249] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 314.713512] RIP: 0033:0x458209 [ 314.716773] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.735748] RSP: 002b:00007fb302821c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 314.743550] RAX: ffffffffffffffda RBX: 00007fb302821c90 RCX: 0000000000458209 [ 314.750890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 314.758237] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 314.765618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb3028226d4 [ 314.773057] R13: 00000000004bdfa9 R14: 00000000004ce390 R15: 0000000000000004 17:49:41 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) close(r1) 17:49:41 executing program 2 (fault-call:1 fault-nth:5): r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 17:49:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newroute={0x30, 0x18, 0x311, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0xfec0000000000000}}]}, 0x30}}, 0x0) r1 = dup2(r0, r0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f00000000c0)=0x8001) pipe2(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x801) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f00000001c0)="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", &(0x7f00000011c0)="ee96e1a3666ff7a4e83669d5c29a56aeee3600b816c43eec811a68686a62637e855301b4e99383184d43ed0c7d2ec1e3f3a696d80f444f19fa2a360fbba0e1631c58fcd3efddf3117fe76e1befffeaaf1a7a08f415156391f4615c0a7d79c6a97f10dfc4c9d5745bdabdc0a7a3c9da9006d2a091233a5deb4166b6fc52b5cbda1ee458f0aba4c66951a45bfc3a484a807aaa1c73826540cde5802a030c925f3cc5559806347107a5b9d24dcf4e63731dee6592cdc0335baee77426d240f7a4b4d37c5bc4b42b429308fe0a952d3456e8ead02955da51c5ac10", 0x3}, 0x20) 17:49:41 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x20, 0x7, 0x1ff}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={0x0, 0xfffffffffffffff8, 0x4, [0x2, 0x1, 0x9, 0x400]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r1, 0x8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r2, 0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x208000, 0x0) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000100)="91e6e9e21f33d348f6") accept4(r0, 0x0, 0x0, 0x80800) 17:49:41 executing program 3: sched_yield() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='syz_tun\x00') r1 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xcc, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x656}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xdf}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9b03}]}, @TIPC_NLA_LINK={0x1c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27d5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) keyctl$set_reqkey_keyring(0x5, 0xffffffffffffffff) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000040)={0x5, 0x7}) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x19, 0x19, 0xb, 0x18, 0x9, 0x2, 0x4, 0xa7, 0x1}}) clone(0x2, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 17:49:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x301000) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000080)={0x9, 0x4}) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x5, 0x4) 17:49:41 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) close(r1) 17:49:41 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@ipv4, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', r1}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x7, 0x4) accept4(r0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x4, 0x100) 17:49:41 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0xfffffffffffff050, 0x10402) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000001300)=""/4096) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x3, 0x200) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0xa4880) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000001280)={0xf000000, 0x5, 0x401, [], &(0x7f00000001c0)={0x9c0906, 0x0, [], @string=&(0x7f00000012c0)=0x1ff}}) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0xa0000001}) r4 = dup2(r2, r2) ioctl$ASHMEM_GET_NAME(r4, 0x81007702, &(0x7f0000000080)=""/177) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$packet_int(r5, 0x107, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) 17:49:41 executing program 2: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x5, &(0x7f0000ffd000/0x2000)=nil, 0x6) r0 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xff, 0xc0000) getsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000140)={@broadcast, @loopback}, &(0x7f0000000180)=0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80804) socket$alg(0x26, 0x5, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xff, &(0x7f0000ffc000/0x4000)=nil, 0x3) 17:49:41 executing program 3: syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x1000, 0x100) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000100)={@loopback, @empty, @loopback}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x3, 0x84000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000200)={r2, 0x3}) getsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x50040, 0x0) write$P9_RATTACH(r3, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x4, 0x2, 0x5}}, 0x14) 17:49:41 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) userfaultfd(0x0) close(r1) 17:49:42 executing program 0: capset(&(0x7f0000000040)={0x24020019980330}, &(0x7f0000000140)) socket$pppoe(0x18, 0x1, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'ip6erspan0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0xb}}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8000, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) 17:49:42 executing program 2: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x84202, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) 17:49:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPOUT\x00', &(0x7f0000000040)='\xdc)mime_typenodev\x00', 0x11, 0x2) r1 = dup2(r0, r0) setsockopt$inet_int(r1, 0x0, 0x4, 0x0, 0x0) [ 316.113417] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) 17:49:42 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) lseek(r0, 0x0, 0x0) r1 = socket(0x4, 0x0, 0x200) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @remote}}, [0x9, 0xa078, 0x0, 0x401, 0x3, 0x650, 0x2, 0x7, 0x1db3, 0x2, 0x8, 0x3, 0x6, 0xcbcb, 0x200]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={r3, 0x9}, &(0x7f00000001c0)=0x8) getpeername$tipc(r2, &(0x7f0000000200), &(0x7f0000000240)=0x10) 17:49:42 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, r1, 0x0) close(r1) 17:49:42 executing program 0: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000040)) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @broadcast}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 17:49:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x39a}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x0, 0x4}, 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001ac0)={0x14, 0x42, 0x105}, 0x14}}, 0x0) [ 316.461021] IPVS: ftp: loaded support on port[0] = 21 17:49:42 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x440000) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = socket(0x18, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) 17:49:42 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:49:42 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfffffffffffffff7, 0x2) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100)) 17:49:42 executing program 2: r0 = socket(0x9, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 17:49:43 executing program 3: clone(0x40108000, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x100000000, 0x1, 0xc7, 0x7fffffff, 0xffffffff, 0x7fffffff}) 17:49:43 executing program 2: r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040)) 17:49:43 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) close(r1) [ 317.277646] IPVS: ftp: loaded support on port[0] = 21 17:49:43 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x400000) r1 = accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80000) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmmsg(r2, &(0x7f000000ac80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="280000000000000029000000020000004bc333b81b8776f3106075e08e4068346a00000000000000f811c40f9a8c6aee08725ddb279c35f53d9c6ff9"], 0x28}}], 0x1, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000180)={0x0, 0x46, "b670b8bf3738e892f736ccf63b6b13254a67a4f16d72425ebf02d84166e89357d086819df602ebbdc39e8ce7aa3d4105bc32d9bb89ad062b48f8a93c454eef18ecf994958d3c"}) write$P9_RREADDIR(r0, &(0x7f00000000c0)={0x87, 0x29, 0x2, {0x8, [{{0x20, 0x4, 0x7}, 0x4e, 0x9, 0x7, './file0'}, {{0x2, 0x1, 0x7}, 0x40, 0x86b2, 0x7, './file0'}, {{0x80, 0x2, 0x1}, 0x5, 0x1, 0x7, './file0'}, {{0x0, 0x3, 0x4}, 0x8000, 0x3f, 0x7, './file0'}]}}, 0x87) r3 = socket(0x18, 0x7ffffff, 0xffffffeffffffffe) accept4(r3, 0x0, 0x0, 0x0) [ 317.559377] IPVS: ftp: loaded support on port[0] = 21 17:49:43 executing program 2: r0 = socket(0x18, 0x0, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000000), 0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='security.evm\x00', &(0x7f0000000440)=@sha1={0x1, "830f286a54d296bc870256a8a8eb94d281f1ad26"}, 0x15, 0x1) recvmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/255, 0xff}, {&(0x7f00000001c0)=""/121, 0x79}], 0x2, &(0x7f0000000280)=""/196, 0xc4}, 0x0) 17:49:43 executing program 2: r0 = socket(0x12, 0x8000000000000000, 0x7) accept4(r0, 0x0, 0x0, 0x0) 17:49:45 executing program 0: r0 = timerfd_create(0x0, 0x0) r1 = dup(r0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0x40085400, &(0x7f0000000000)) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x200000000000007, 0xfffffffffffffffe}) 17:49:45 executing program 3: r0 = syz_open_dev$video(&(0x7f00000004c0)='/dev/video#\x00', 0x4, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x210400) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000040)=""/200) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @pix_mp={0x78d, 0x4, 0x32314247, 0x5, 0x8, [{0x400, 0x3}, {0x9}, {0x8, 0x2}, {0x87}, {0xfff, 0x2}, {0xff, 0x1}, {0x20, 0x100000001}, {0x1, 0x800}], 0x8, 0xb4e2, 0x4, 0x3, 0x7}}) 17:49:45 executing program 2: r0 = socket(0x18, 0x80000, 0x4) accept4(r0, 0x0, 0x0, 0xfffffffffffffffc) 17:49:45 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 17:49:45 executing program 2: r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x40100) write$P9_RREAD(r1, &(0x7f0000000040)={0xf, 0x75, 0x2, {0x4, "9007a771"}}, 0xf) 17:49:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x3c3, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:49:45 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x32, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000000)=[{0x100, 0x0, 0x1000}], 0x1) 17:49:45 executing program 2: r0 = socket(0x18, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x5, 0x8, '9P2000.L'}, 0x15) accept4(r0, 0x0, 0x0, 0x0) 17:49:46 executing program 3: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="010000fe", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r1, 0xffff, 0x1}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @mcast2, 0x8}], 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r1}, 0x8) 17:49:46 executing program 2: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x408000) r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 17:49:46 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r0) ioctl$TCSBRKP(r3, 0x5425, 0x560d) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4000, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x0, 0xfffffffffffffff8}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2000, 0x0, 0x0, 0x0, @rand_addr, @broadcast}, @igmp={0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 17:49:46 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000001140)=0x18) 17:49:46 executing program 2: r0 = socket(0x3, 0x0, 0x42a) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={&(0x7f0000000000), 0xc, &(0x7f00000008c0)={&(0x7f00000002c0)=@delpolicy={0x5c8, 0x14, 0x38, 0x70bd2b, 0x25dfdbfc, {{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e20, 0xfff, 0x1, 0x8, 0xa, 0x20, 0x80, 0xff, r1, r2}, 0x6e6bb9, 0x2}, [@proto={0x8, 0x19, 0x7e}, @ipv4_hthresh={0x8, 0x3, {0x6, 0x10}}, @algo_crypt={0x144, 0x2, {{'xts-aes-aesni\x00'}, 0x7c8, "440033b2ec782b0e9434c4c17a10e9ccf84916ec8bea89c8c9008b4bb8b6c90d87508c29e5c1f3a4f751a001fd4e4f0fcfd11e0bebf62b66dda1635fdc75cc2c2c5f64e00366c1400d77aa3b630dd56db82e3983427353e9e15cee74ec5c1192075e3b13efb57da1159b798ad177a9f33d59e7c370df06f09de2d8a4219b39f5557334d2dd21d1721793d2aeaf88dfbe8f603cf1f35be7cd8c83726b8f586b2413cc47ef0e378ca0f51a8b6e3064b480a86c6cb8fa23efb602df8ec192f63236ec1c5abd7f677f80ecc46d6ad8b0e0315c2e169853b94140f6a4475fe66e077dd5cc53a38dee5315de10d453507c082430bbf6bd48eb76b1fe"}}, @algo_aead={0x11c, 0x12, {{'ccm_base(cbc(aes-aesni),sha1-avx)\x00'}, 0x680, 0x0, "c8054403c9df4679a59d4a63d21cc6cb154469fc1048e594495d4a3ebd3a62349ea462a61640dbc82f615af0f6ea5de7913483ebd08202aff26115051ca45ba0799b6f9b5467d3357134af447baaca6e110980029ae05436f381d56797023249e43d14491bc4aae6d34f01e4c9ba8627eb95f6b1057d3922367d4062f61d9d5e1153528f06379a3d881489bbd1618d3f3b307ff8e5e27861896d41be810c1fd23bc7b1856cbd3a637acb91649c2bd33f11bf2baa90f640c4625611f85a15be2f97fdcfd2d4d8fa1173ed2880a2d524b1"}}, @tfcpad={0x8, 0x16, 0x7fff}, @algo_aead={0x124, 0x12, {{'ccm-aes-ce\x00'}, 0x6a8, 0x3c0, "1027a19c0dd20f0f8dec2196ac5cebafba06ae75753de1a745a2e9ff6042fe4a5dd040875527952ec309b1e277f92d806cad408e25b9d8c417f9fbaf99c4b4a5044df39cc1aef83b8fa6a08010ac6709e8501ad243985b2567287808f4865efcb987c2a999021c19012092591207f6e7ca54ea3add37f1a0035b3dbfaafe20fd82ab102f1518f76d91be348f4b483670289d12e4c536328c05cbf1510a1350d157ea55fdced92433cb9071c5eebc69fd4a7df6e4d9fe9d648a55e8fdc1f21f3f974038f35a229cec7b172c393a58557e3a056e4d1a"}}, @tmpl={0x1c4, 0x5, [{{@in=@multicast2, 0x4d6, 0x3f}, 0xa, @in6=@mcast2, 0x3503, 0x3, 0x0, 0x9, 0x8, 0x4, 0x3}, {{@in6=@rand_addr="68f9113563f44bf9e646a6a48f01ab11", 0x4d3}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3507, 0x0, 0x2, 0x2ff1, 0x4, 0x4, 0x3}, {{@in6=@ipv4={[], [], @multicast2}, 0x4d3, 0x33}, 0xa, @in=@multicast1, 0x3506, 0x7, 0x3, 0x9, 0xfffffffffffffff7, 0x2, 0xea}, {{@in=@local, 0x4d3, 0x33}, 0xa, @in=@loopback, 0x3504, 0x1, 0x3, 0x7f, 0xdac, 0x5, 0x8001}, {{@in=@multicast2, 0x4d3, 0x3c}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x7, 0x3, 0x3, 0x5, 0x8, 0x8}, {{@in=@remote, 0x4d2, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x17}, 0x0, 0x2, 0x3, 0x2, 0x80000000, 0x7f, 0x1d}, {{@in=@rand_addr=0x7fff, 0x4d6}, 0x2, @in6=@local, 0x3502, 0x0, 0x2, 0x6, 0x3, 0x642ace34, 0x7}]}, @etimer_thresh={0x8, 0xc, 0x100000000}, @proto={0x8, 0x19, 0x6c}, @tfcpad={0x8, 0x16, 0x8000}]}, 0x5c8}}, 0x4000) accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000940)='/dev/audio#\x00', 0x1, 0x28001) accept$packet(r3, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a00)=0x14) timerfd_gettime(r3, &(0x7f0000000980)) 17:49:46 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 17:49:46 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = eventfd2(0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, {0x0, 0x101, 0x9, 0xffffffffffffffe0}}) io_setup(0xa3c, &(0x7f0000001a00)=0x0) io_submit(r4, 0x1, &(0x7f0000329fd8)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 17:49:46 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000080)={0x7f, 0x95}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 17:49:47 executing program 2: r0 = socket(0x17, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 17:49:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0xc0000100, 0x0, 0xce], [0xc2]}) 17:49:47 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000280)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)='lo]\x00', 0xffffffffffffffff}, 0x30) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x7, 0x101000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = semget$private(0x0, 0xafbc6934c3d9fe3c, 0x200) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f00000001c0)=""/174) close(r0) r5 = eventfd(0x0) io_submit(r1, 0x1ffffffffffffd70, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) writev(r5, &(0x7f0000000640)=[{&(0x7f0000000340)="f67b0a98c16814c5", 0x8}], 0x1) [ 321.130055] kvm [11334]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc2 data 0x0 17:49:47 executing program 2: r0 = socket(0x8, 0xffffffdffffffffe, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0xfd3, 0x10002) write$P9_RLCREATE(r1, &(0x7f0000000180)={0xfffffebe, 0xf, 0x2, {{0xcc, 0x1, 0x8}, 0x7ff}}, 0x18) accept4(r0, 0x0, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x185200, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0xfffffffffffffffb, 0x4001, 0x0, 0x1, 0x6, 0x0, 0x7}}) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x400000) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000001c0)={0x3f, 0x9}) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x800, 0x400, 0x6, 0x403}, 0x8) 17:49:47 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x0, 0x0) unshare(0x400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c, 0x0, 0x15, &(0x7f0000000080)='\xac)^vboxnet0keyring!\'\x00'}, 0x30) r2 = syz_open_procfs(r1, &(0x7f0000000140)='coredu\t\x8f\x88UF7\xac\xc9};\xed\xbfa\xd5mp_filter\x00') mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r2, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)) 17:49:47 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=ANY=[]}}, 0x0) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x200101043) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x4000, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x19, 0xc1}, 0x8) 17:49:47 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:49:47 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1104400000016) r3 = socket(0x18, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) 17:49:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002700)=ANY=[@ANYBLOB="2400050000000000000000000000000080000000000000000000000008000400", @ANYRES32=0x0], 0x24}}, 0x0) 17:49:47 executing program 3: r0 = timerfd_create(0x9, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x9, 0x1, [0x7ff]}, &(0x7f0000000140)=0xa) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000180)={r3, 0x1000, "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"}, &(0x7f00000011c0)=0x1008) bind$xdp(r1, &(0x7f00000000c0)={0x2c, 0x5, r2, 0x22, 0xffffffffffffff9c}, 0x10) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000001200)={0x5, 0x1, 0x4, 0xba, 0x101}, 0xc) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001240)={0x800100a, 0x400}) 17:49:48 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x2}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) move_pages(0x0, 0x5, &(0x7f0000000000)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f00000000c0), 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 17:49:48 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000ec0)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000000), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000141e00000c000000000000eb4f3143001800000000000000140100000c0000000000000000000000"], 0x30}, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x10000) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f00000000c0)={0x10001, [0xfffffffffffffff9, 0xb465, 0x1338e3ed, 0x1cdd80, 0x100000000, 0x3, 0xba51, 0x5, 0x2, 0x81, 0x4, 0x200, 0x1ff, 0x9, 0x8001, 0xc922, 0x0, 0x30, 0x3, 0x4, 0x5, 0x7fff, 0x1e62d66c, 0x2, 0x7, 0x81, 0x0, 0x40, 0x7fffffff, 0xffffffffffffffc1, 0xffffffffffffbb70, 0xff, 0x3, 0x9, 0x2, 0x6f8e, 0x9, 0x3984f5a8, 0x6df6, 0x0, 0x1f, 0x2, 0x100000001, 0x3f, 0xfffffffffffffff8, 0x0, 0x0, 0x100000000], 0xb}) 17:49:48 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000980), 0x0, &(0x7f0000000100)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x2}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000000c0)=0xc) move_pages(0x0, 0x5, &(0x7f0000000000)=[&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil], 0x0, &(0x7f00000000c0), 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 17:49:48 executing program 3: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000030607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20001, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000080)) [ 322.432364] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 322.497741] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 17:49:48 executing program 0: unshare(0x2000400) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x341000, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000080)={0xc0ac, 0x1e0, 0x6, 0xffff}, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7f) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) 17:49:48 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x10000, 0x0) recvmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000140)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/22, 0x16}, {&(0x7f0000000200)=""/164, 0xa4}, {&(0x7f00000002c0)=""/175, 0xaf}, {&(0x7f0000000380)=""/64, 0x40}, {&(0x7f00000003c0)=""/223, 0xdf}, {&(0x7f00000004c0)=""/109, 0x6d}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000600)=""/184, 0xb8}, {&(0x7f00000006c0)=""/63, 0x3f}], 0x9}, 0x20) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x80000) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x3cf265a3, 0x400, 0x7, 0x4}, 'syz0\x00', 0x39}) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0), 0x4) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000840)={'icmp6\x00'}, &(0x7f0000000880)=0x1e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/kvm\x00', 0x0, 0x0) 17:49:48 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:49:48 executing program 4: set_mempolicy(0x3, &(0x7f0000000000)=0xbf, 0xd11) r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x3, 0x6c42) ioctl$TUNSETLINK(r0, 0x400454cd, 0x32b) r1 = getpid() ptrace$peekuser(0x3, r1, 0x3) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'nr0\x00', 0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00000000c0)=[@register_looper], 0xbd, 0x0, &(0x7f0000000100)="aa6ac0a84055e20864102b8c31f86c80c3b4eca519974bdd51d111c15cd0be5214f6b8a8fc1e63cb160dbc5891435e89f7183a1314fcf9fe16977e86994afe904b32c639cd211e597ff5bfa5233db2560721f74b72cfcbb840ffa922b9dceaa1e2e44e83011a5bc508c011fe62e04617ae144e9c083556688bbd80f346d9ea78ec7cfe996ada8a4581304cea789b587416d3b13eb88cb02dbffe309f4ea5c413b572b194d34345034c69bcdde92087728722fc56ce37b52daaf41e9e44"}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x3, @remote, 0x1}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0xfffffffffffffffc, @empty, 0xffffffff}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x88) timerfd_create(0x8, 0x800) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000340)={0x9, 0x9a, 0x10001}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x14000104}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x128, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff8}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_BEARER={0xa0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @loopback, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffffffffffffffff, @remote, 0xfffffffffffffcf6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x1f}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff80000000}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4048814}, 0x0) getpid() setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000005c0)={0x5, 0x4, 0x2000}, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000640)={0x0, 0xb, "139bd61e30f7d1e53007da"}, &(0x7f0000000680)=0x13) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000006c0)={0xfff, 0x8008, 0x0, 0x5, r3}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000700)={0x0, @multicast2, @dev}, &(0x7f0000000740)=0xc) r4 = add_key$keyring(&(0x7f0000000780)='keyring\x00', &(0x7f00000007c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000800)='proc&\x00', &(0x7f0000000840)) recvmsg$kcm(r0, &(0x7f0000001040)={&(0x7f0000000880)=@nfc_llcp, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000000a00)=""/147, 0x93}, {&(0x7f0000000ac0)=""/29, 0x1d}, {&(0x7f0000000b00)=""/193, 0xc1}, {&(0x7f0000000c00)=""/227, 0xe3}, {&(0x7f0000000d00)=""/221, 0xdd}, {&(0x7f0000000e00)=""/212, 0xd4}], 0x7, &(0x7f0000000f80)=""/181, 0xb5}, 0x1) clock_gettime(0x0, &(0x7f0000001080)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f00000010c0)={{0x77359400}, {r5, r6+30000000}}, &(0x7f0000001100)) set_thread_area(&(0x7f0000001140)={0x4, 0x100000, 0xffffffffffffffff, 0x6, 0xa7cee1d, 0x1f, 0x7, 0x380000000000, 0x3, 0x7}) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000001180)={0x3, 0x1f}) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f00000011c0)='@,*trusted\x00', &(0x7f0000001200)) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001340)={0x1f, 0xfd, &(0x7f0000001240)="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"}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001380)={0x28, 0x2, 0x0, {0x4, 0x100000001, 0x200}}, 0x28) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f00000013c0)={0x0, 0x0, [0x1a, 0xdaa4, 0xffffffffffffffc0, 0xfffffffffffffffa]}) 17:49:49 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x6a0800, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)={0x100000001, 0x0, 0x4, 0xa, {0x0, 0x7530}, {0x4, 0x3, 0x1000, 0x2, 0x8, 0x9, "323953df"}, 0x3, 0x7, @userptr=0x1, 0x4}) accept4(r0, 0x0, 0x0, 0x0) 17:49:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xca) getsockopt$inet6_tcp_buf(r0, 0x11a, 0x1, &(0x7f0000000680)=""/4096, &(0x7f0000000180)=0x3) 17:49:49 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r0, 0x0, 0x0, 0x13, 0x0, 0x1fd) 17:49:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001540)='/dev/zero\x00', 0x208400, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8480, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001300)={0x0, 0xffffffffffff471b}, &(0x7f0000001340)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001440)={r5, 0xb0, &(0x7f0000001380)=[@in={0x2, 0x4e20, @rand_addr=0x20}, @in6={0xa, 0x4e21, 0xfffffffffffffff9, @local, 0x8000}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @rand_addr=0x5}, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x1}, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e21, 0x4, @ipv4={[], [], @rand_addr=0x8}, 0xfff}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000001480)=0x10) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000080)={0x0, 0x8}, 0x2) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=""/4096, 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x10000) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000001140)={r6, @in={{0x2, 0x4e24, @multicast1}}, 0x7, 0xb9, 0x400, 0x0, 0x9}, &(0x7f0000001200)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000001240)={r7, 0x1, 0x30, 0x6, 0x8}, &(0x7f0000001280)=0x18) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000012c0)) syz_open_pts(r2, 0x0) write$binfmt_misc(r2, &(0x7f00000000c0)=ANY=[], 0xffa8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000014c0)={r8, 0x7}, 0x8) 17:49:49 executing program 2: r0 = socket(0x800000018, 0x3, 0x7f) sendto(r0, &(0x7f0000000000)="8cc27bec8f33b48fd13cecb73ff5ece32e214bb5543162", 0x17, 0x10, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0xffffffffffffffff) 17:49:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xa132, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'gretap0\x00', 0x1}, 0x18) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000001300)="6f9365fa506610d36e62adfc7ee007c8f7c4efed7d642d815b6eaa4ae64f0e964dad33027f0434c52db55633accd68722f0858a12d761dc74bb11fb5d7d0ea5454a14b7fb961111d808e15fbe0515b9e863c9302e7d5be857c38c2e01ad2af4df4d5a8eb19c573c2cb2bf3b86c3ff20c141a79da11414d4f1eb8738a7d7314813860dac8b9d999f2a1897145f8febddb6c5f49ddb88a96589822514a38eb1c345463f35bf69d7c54e2a5f083822bd89d2337d662873f312cd77c2f33b744b2bb69a696beb835dce96b4f84616bb4f6ca9a070a9f191c7e1ff414e5b7bcf4242fe1b5c7eabb7cfbd9ec680349b88f94bc3303c698ad24b0c16dc2ab0976dcade70a844a338879573e279511f1db82ff47f9fb5f233da835ca11988ca76684343c22a51207026ec4dd099a223bbd2d08b42880504de456531484c423b74bdf508b03e70bdb28c00a05ac19f7f31e1205af20e29db5e62fde2c6ec428cd4668430f6b2ba854db698fc8d77b2374925a9a1d90574a5ca21a129dc738e2b2742068f388db18d2551a7b049305133c38ae342e88e49ff183bd31ab8bf4ee4d8593434b7663f4754acea898e194b640d0d09a417cb5b00f0fece362a937ccc18be16037719dbecf95f940bf360df1c3a5f975035d34d33ef6d2fcd6c20073fd10bd378fc0f75d589470d82646d5c14c051e35cb189280bac5edbfd66c430464672767c4b812cb15c0e076243e39dc794a2ae81db0e9ba6a9e6fe8a5a2337d6f1ee84197018e24a856b9411cfe4986a35bb8edca89b2b4dd878e394c9d290615991a7195e8cfa211db93341c296b10dc4351ff0589eaa1fdbabfb1ee375c891f9a898a744385dded1bf7034d8e1cc1a7ae4d313ad35b1826b908eaea3781c509c4a1f1e7cbc359c960d6df3f531d6b8e80dd9298fbe07d464972e2c7b5b3baeb0d220289cfd364595295dab139a0efcf9ee032c9870965db4a085325d1a474d1137f1d8e1725a1cad582aeaf8d9df039017dee7452ea78cf10e2485f78aa976e37b97bad6337fc8c1790c49e6033456cfcce99a3ee0ad516e22bc87148981ff9372152892f0ced76584142a17c5cc7878f3fc58afc8f745354f10d4da06e6d93bdfce652c347a7739f7a5954f52794e82414b3dc9e0b2d3dc4d5d83630e401439780e8cf7f509c705a836726b4a172bea52ed7a498af6850358c54a2dfd57587b9f1380a8ad31e297711fed984494e64a299d0836fa3a81b9651c214e61ac4272be28953dfe5621a947de6f48559bc8237cd5619681b113e20b4eb630477d5b66ed168967f06bba50653788ee1ada7d9fe12d2226b6c894a8931c14975616e3638e1f09ef4305e4044d9d12ba0f519072bae9dade6618144e4e72075e7705064596a70764f6bbdcdea8ce6dc658be7cf1d6be8049203297f4a483b4f934f80cb003f190f07e2801fe48bc4a906ffd9efc9d162cf3fe01bfd623ba4ebd9491e5269f0773628ba5e094c95b1435b9231128c33ff438696859d459c511b556925a5a65ba374d3fb64c2ae9dfb1f0bf1300761cd4c0062ff0b615e195ad46ab905d9e60cf290b764c42830acb093dcbb4ebfb1a20ee9f3443dbd9960b7a10c01b86c4de430d211944bfed4d76dc05e6dbd1fdf19ad120594c2eaa9ceca841e8b6f569da8623fe90a2dedd155d014cf145419086ed7f18021047564b842afeb6acc4162888715a8495aa4418c7e4f6536081c83691bc3f90d5617492fc408ac65ffdda91d966871402be21ac427739353ffd142eb026c57ccb10640cc549c901f77f4f11ff5b8d8f65d7c1525f974f0831e1fab3209a0196cbeca2738b0964e7bd0ec6fe7607af4e1aaf07f10eb3288c9821fcf5765ca21a08a6fec95f429edf20168cc07e0637a82239d2d093bb14f9bd522743fff927ea81146ee760e44b72beb6728b3577b0d507663a3a0bbd63131409519ab97ee202cb8191a3dfa51014a4e0cbb98f4d2309ab7dd38f3b5adc8a1e9dc8100c0cfde3fd210d3ad0e9ea560b055a0c7e92c63a2041c6d11f57f2591491584754dfbee515b627926f8afea459b0d0a407862c49f4b7c876391c6f839cf6fda330cf7b95064f0f503a0646a295e34ff0dbcfba95c28eb953024496269e836aaff36fe84827e4b9605282bea680a6da2aa8182721372b85ab85b354937f97507c34261256141e6add66e6fd55eb956009bd0fed077ad02a4f963508b6783fc9b0c9546db76258fd8a086d2a2d92edb8940cdb535df6e74fcd37159b5d4c21ed4b40c7267a4026de66958ce00d066d6618d4f0674fec8f5d1b2201544901ab5398b83965b284dd89e488b941f5083aa8591e2bfa97f3504aecb8155e3335cdb3fbbdb7a69b638fc79890e0a17ee478f38257493cb420280adcfcc198fd5671122ecc84b2c6f046236c7e55f392a6b30227605045fb3798b0f2ab9d46b38044daf19296ba6025ce4dd3f049ec7b0a61c530b051e8b044f39c863c4fed127493d4eac20c2906b46d1b95fb442d4d2bf85de0c3e1f09b16f50a1671af8403e8112db7a9c02a37789d7709c68479f16795cfd8ed9eaaa7f0683722c25d4a6de7b3cc01c5fc90b278ff73268020fb68a452c193174068707584053ff141a26a1aa70c68cac2582e7e6af41507001792cc9b43dca6ce469c4201792dfdd48511fef12086b2e697332c9f02d82486e90157d8a9c9a0577780619cce98a7a145da1705301ea5b036033ef2299a3f56e48e49c29e3201f56fd8c536606b53b5ea6ed10bbcf38b7f33cdc88f0f6bc1483447b3d90c57968d59ba3d2a802f19d169179c085dbb965253117cd93c9097cbb1eba45c0e5a3eb5a065edf94d792edcc40b18d271d13dbe35d5e1523e6d601695e817ce90537d983659488b3e2afdfdad41ee744fb2c072d716414e9769917043ddb4c8c5354dc60a1eff4113a016360806f86538f0986923b0f6ffb8712908ffe04137a497d1808253312242856b264799ec1ef2b5030f8880552ef457c2bfe82310f4c1a480f1f38f49f40689c85b93973a2d077802b9145aaaacdee014fb3a70a76f0add969ffe121356de991d2d4d51312189732e1e1ed9d95f16d705d1ded8b7dfa93cfa091e3cfa7ebf50bfdaa430a0371deef9386fa00f939cf5f833c2e0cc372491e3e2cf105d25aa316d159145f30771b4810c3fee87b71f18e85bd6715244616bd790fa4671c7c5f4a5f5fef7b95857cc01e55103f5a591de69d04bb8740c54c92a7a62560dec2f3b2ef913fc5939fd6ce8206f26af7be7ac70f18043f4e09bb003167e1ebef2314306e823d4229fca67dc08363fed4d1503e9f2a11278bd95f942712978a48375f4b1162b7474261266a40a8736c05cc84dc99873739249ffc6a7039aaf756f45760746b3d0443ebc7b74bb397c2cb0fddd0e425d0b2cfa05f516ad6114b2d1cfa13d5f5922247360d0da37526701867d6eca1885f1a402c4a0b3868e846dde9f1818a83bf97fb438640f42279c97ee93b660d76d70cbf413b4ad3fc4a1b188c19ada8d55b1e1fcbdd7787b25fbbf500dcec85626e91eacd1121c088ca17b565fb6ca3e35fd768253072c1da429389b61f54b9a8448ba579a59b171ce164a5610e594443f1cc430ffd0385e383ae50d47f0736340c7d5558193ea41da9c512faaf18dea092c5c429c32026627fae7fb92d90ec8c3c82030ea092d7c6e14292ac633e0bdfdb9e4ea9ec3b788570acae2f0d60b56fe43431479800eda53dfc1fe77b64b66da51e7d1fcc0498e29dbee1cd8d6e64b1478a91963fa317eda28bd306114031649456065eaae6e3a5e58047b42e8aa3d3f9a59c91b42515c9a9389540be89501a27200a6c7c7a04c06e3b3623661c800db4cee4168c955f2d16180ae785c12046e97add36c167dc18a6f4e8068d68604fe0d10ecca5477668d39429df91afc05b7681aa81fff303ad26600822d55889916fdcd1fcf4d104a4a9ea7f7fc11cfffcb348fd83693822121cdb9d75c092957350b43e8d2e3c3076e85609f4eb51614b943df471a12902a2052436048935d646b5b60bdbe73c30cbc99b2ade038cf0db08d2087fcfbee7e8063c9cb0920142c6671c649b3b94e19ee64e6fa1e2fdf2f43577d307161b06e01034ba9aaf8a7cbbadf428381ffd6c79cd8de1f5fefbf1a2f370863714ff267beb765d2444b06b438c203066f3d2f87b302eb8a6003fed5b1b3b06c3fbf4cd8935ae041a1d571087534bc007d6edb3afb8c42f8d83da87bd11f8b9accdd749f6efe228e8b76ae7f0f9b81a3d882c3eee64d411e319635ef27128081cda48bc9dd9ecfcffcb32381f76b6adf48d375cebf40349f9a35fdc48296b20583ce9f37d6e28d3bbe5cf93d709728939ce3c346d2d3468b7236868f1916f801c04b5ee8f32de56e5e071b4d0dc7e0a069361b2ccbaba8932702c19351d1edb3c4ea817725f52524a33bc353567ae4cad1be7dac94cac9dab09d7443492ab2c619fc077654c3723eea91832fe718bcfec45ba38b0a6222e6ab28e2b0e80721eeb59455feb284c460e85ea882e25f67e26c9ebc608be7d22c062509047e2dac91da16b586828de5dc607b5afd18f4c839fc4e99a0b855596807ed4c5b5a6d16a8c0b6fcf516d9991bdfbe88ccf47a38ff950e5c5eb82c2e93929e9ce7c47ff17c5236cd2246eab89406dbd3658980eb9bc41ef1165d5", 0xd01}], 0x1, 0x0) 17:49:49 executing program 2: getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) setuid(r0) r1 = socket(0x18, 0x0, 0x0) sendmsg$nl_crypto(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x404000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delrng={0x10, 0x14, 0x8, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xee68d732301bb4e6}, 0x80) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) accept4(r1, 0x0, 0x0, 0x0) 17:49:49 executing program 3: r0 = socket(0x400000000000010, 0x802, 0x0) pipe2$9p(&(0x7f0000000000), 0x4800) write(r0, &(0x7f00000000c0)="24000000200099f0003be90000ed190e0200081610000001a0ba0080080002007f196be0", 0x24) 17:49:49 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:49:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000140)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], {0x0, 0x989680}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x5000aea5, &(0x7f0000000000)) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) 17:49:50 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x800, 0x400000) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="0a0000003b06034ede2774e4ff04060002000000ffff810001007894"], 0x18) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000280)='./file0\x00', 0x0) r3 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000100)={0x3ff, 0x6, 0x5}) r4 = openat(r3, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x801008, 0x0) symlinkat(&(0x7f000001fff7)='./file0/file0\x00', r4, &(0x7f000001fff8)='./file0\x00') renameat2(r3, &(0x7f0000000180)='./file0/file0/file0/file0\x00', r3, &(0x7f00000000c0)='./file0/file0/file0/file0\x00', 0x0) [ 324.182736] IPVS: ftp: loaded support on port[0] = 21 [ 324.500257] chnl_net:caif_netlink_parms(): no params data found [ 324.605106] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.611673] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.620436] device bridge_slave_0 entered promiscuous mode [ 324.630283] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.636936] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.645700] device bridge_slave_1 entered promiscuous mode [ 324.685348] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 324.698045] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 324.739126] team0: Port device team_slave_0 added [ 324.749991] team0: Port device team_slave_1 added [ 324.847656] device hsr_slave_0 entered promiscuous mode [ 324.882706] device hsr_slave_1 entered promiscuous mode [ 324.996665] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.003347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.010556] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.017234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.118134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.146258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.155972] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.168481] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.180443] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 325.205951] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.227808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.236261] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.242948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.307401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.315868] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.322479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.333361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.342790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.351461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.363053] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.379548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.393459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.441554] 8021q: adding VLAN 0 to HW filter on device batadv0 17:49:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0af51f023c123f3188a070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="3d000000000000000400", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f00000040c0), 0x1000) read$FUSE(r1, &(0x7f0000002000), 0x46d) write$FUSE_INTERRUPT(r1, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00', &(0x7f0000000540)=""/222, 0xde) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000480)={0x10, 0x0, 0x4}, 0x10) 17:49:51 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0x1, 0x3, 0x4, 0x80000000, {r3, r4/1000+30000}, {0x4, 0x0, 0x1000, 0xe9, 0x8, 0x6, "e7ef4f17"}, 0x1, 0x3, @offset, 0x4}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) 17:49:51 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x2) setsockopt$inet6_dccp_buf(r0, 0x110, 0xc, 0x0, 0x0) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x1f, 0x200000) 17:49:51 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @multicast2}], 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000040)=0xe8) ioprio_get$uid(0x3, r1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 17:49:51 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:49:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x8001, 0x4280) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f00000004c0)=0x5, 0xfffffffffffffe48) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0xffffffffffffffff, @loopback}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x3) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x2, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x100) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e21, 0x80000000, @mcast2, 0xffffffffffffffc0}], 0x2c) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000540)=""/34) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendto(r4, &(0x7f00000003c0)="eebf76c2519013b90216232e0341d2e7a3a406ea12efe365375df486246a348d1fc6533d4d5d3f72ad5a5358088090a359cb0396ac2f39f95e45521c45ff14efe6e7307165797017de6f07a844b20f7ef2205a5ccf27a4e115225d9e2cbb5b626fb57f6fa7483a3e2a254e4c68773753c26f79b6937c", 0x76, 0x80, &(0x7f0000000440)=@l2={0x1f, 0xdda, {0x3ff, 0x84, 0x2, 0x8, 0x1a, 0x5}, 0x291, 0x9}, 0x80) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") close(r0) accept$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, &(0x7f0000000500)=0x10) 17:49:52 executing program 2: accept4$tipc(0xffffffffffffff9c, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x80800) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) r0 = semget$private(0x0, 0x2, 0x40) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)=[0x24000000, 0x1, 0x9]) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x5, 0x20400) r2 = accept4(r1, 0x0, 0x0, 0x8) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000000)=""/68, &(0x7f00000001c0)=0x44) 17:49:52 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x101000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x81}, @mss={0x2, 0x58}, @timestamp, @window={0x3, 0x3f, 0x6}, @timestamp, @window={0x3, 0x7, 0x7a}, @sack_perm, @sack_perm], 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)=""/132) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0xfffffffffffffffc, 0x2, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03, 0x1, 0x572]}) 17:49:52 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1, 0x10010, r0, 0x0) munmap(&(0x7f0000007000/0x2000)=nil, 0x2000) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x12) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) 17:49:52 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) [ 326.303964] mmap: syz-executor.4 (11483) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 17:49:52 executing program 2: r0 = socket(0x18, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) accept4(r0, 0x0, 0x0, 0x0) 17:49:52 executing program 0: accept4$tipc(0xffffffffffffff9c, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x80800) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) r0 = semget$private(0x0, 0x2, 0x40) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)=[0x24000000, 0x1, 0x9]) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x5, 0x20400) r2 = accept4(r1, 0x0, 0x0, 0x8) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000000)=""/68, &(0x7f00000001c0)=0x44) 17:49:52 executing program 4: r0 = socket(0x1e, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x20}, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000001c0), 0xb9) 17:49:52 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:49:52 executing program 3: unshare(0x20400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x13) ioctl$sock_SIOCGIFINDEX(r0, 0x4004743d, &(0x7f0000000900)={'netdevsim0\x00', r1}) 17:49:52 executing program 0: accept4$tipc(0xffffffffffffff9c, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x80800) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) r0 = semget$private(0x0, 0x2, 0x40) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)=[0x24000000, 0x1, 0x9]) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x5, 0x20400) r2 = accept4(r1, 0x0, 0x0, 0x8) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000000)=""/68, &(0x7f00000001c0)=0x44) 17:49:52 executing program 2: r0 = socket(0x17, 0x2000000000, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x4}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r2, 0x8, 0x6}, 0xc) 17:49:53 executing program 4: r0 = socket$inet(0x10, 0x3, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x200000) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bridge\x00', &(0x7f0000000100)=@ethtool_stats}) 17:49:53 executing program 0: accept4$tipc(0xffffffffffffff9c, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x80800) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) r0 = semget$private(0x0, 0x2, 0x40) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)=[0x24000000, 0x1, 0x9]) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x5, 0x20400) r2 = accept4(r1, 0x0, 0x0, 0x8) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000000)=""/68, &(0x7f00000001c0)=0x44) 17:49:53 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) close(0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(0xffffffffffffffff) 17:49:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") socketpair$unix(0x1, 0x200000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x8, 0x0) close(r1) close(0xffffffffffffffff) 17:49:53 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x28000000000, 0x80) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x80000000, 0x101]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x6ee}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_SECRETLEN={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x48891}, 0x4000000) r2 = socket(0x18, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) 17:49:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000040)=0x2cc, 0x80801) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="030075b0d5e383e5b3976638d476a0bf", 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x24000, 0x0) sendfile(r1, r2, &(0x7f0000000200), 0x7) 17:49:53 executing program 0: accept4$tipc(0xffffffffffffff9c, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x80800) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) r0 = semget$private(0x0, 0x2, 0x40) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)=[0x24000000, 0x1, 0x9]) r1 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x5, 0x20400) accept4(r1, 0x0, 0x0, 0x8) 17:49:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f00000000c0)=0x3b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name, 0x10) membarrier(0x0, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x4}}, 0x10) 17:49:53 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) close(0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(0xffffffffffffffff) 17:49:53 executing program 2: r0 = socket(0xa, 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x9) accept4(r0, 0x0, 0x0, 0x0) 17:49:53 executing program 0: accept4$tipc(0xffffffffffffff9c, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x80800) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) r0 = semget$private(0x0, 0x2, 0x40) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)=[0x24000000, 0x1, 0x9]) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x5, 0x20400) 17:49:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000001040)="ec", 0x1}], 0x1, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0xffffffff) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) syz_open_procfs(r4, &(0x7f00000001c0)='cmdline\x00') connect$inet6(r3, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100), 0x28) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) 17:49:54 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="dd", 0x1}], 0x1}, 0x0) sendto$inet(r0, &(0x7f00000005c0)="057b8e6bafd9e8eafef5cefbbabed925a0f099fffeb5e06034f134d811b33edeb0d66b1aeea52061697bc802dc8b8e09f527bff9722b5f9764894849dd6a918fc3d818fda09c1408fe438849b4dcfeeee2bfc3de95eacb8484c80a92183b82a2f9b070c88b4c1f91f13b0aca15bc6eb9f858796afd802c231461f04e9daf6e5e0b441772103c394b4882cc75a5b24a386260641c26210b207239449e1566ef3006e038efceec2f3de4c4a4c904df4e30fd39468a8ba4c5aa44b3ee3007207b0210b2c80bc28b761a7a1e2eb7", 0xcc, 0x0, 0x0, 0x0) write(r0, &(0x7f00000001c0)="3f6f9aa1c2092ce7d13725f6c6e0af8ec57da5d0db5c30f661cd01d4ac91181ce707fe931eeff9ccb613ee65df71bd20df166215a0ed1e73fc03ebe792d8b4d6d72750b2d15994c01a4d0d9ef321580c9a9e8564ab158d82c567add9649c3f6aeb64003094246f07", 0x68) 17:49:54 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) close(0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(0xffffffffffffffff) 17:49:54 executing program 2: r0 = socket(0x18, 0x0, 0x4) accept4(r0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 17:49:54 executing program 0: accept4$tipc(0xffffffffffffff9c, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x80800) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) r0 = semget$private(0x0, 0x2, 0x40) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)=[0x24000000, 0x1, 0x9]) 17:49:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8000}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x101000) sendmsg$nl_xfrm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@allocspi={0xf8, 0x16, 0x201, 0x0, 0x0, {{{@in6=@ipv4={[0xa], [], @multicast2}, @in=@remote}, {@in6=@ipv4={[], [], @multicast2}}, @in6=@mcast1}}}, 0xf8}}, 0x0) 17:49:54 executing program 2: r0 = socket(0x15, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x2) 17:49:54 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:49:54 executing program 0: accept4$tipc(0xffffffffffffff9c, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x80800) arch_prctl$ARCH_SET_GS(0x1001, 0x7f) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x24000000, 0x1, 0x9]) 17:49:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getlink={0x34, 0x12, 0x60d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc}, {0x4}}}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x0) 17:49:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2}) eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000015c0)={r2, 0x200000000}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 17:49:54 executing program 2: r0 = socket(0x16, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8001, 0x200080) ioctl$TIOCEXCL(r1, 0x540c) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101700, 0x0) sendmsg$rds(r2, &(0x7f00000014c0)={0x0, 0xffffff30, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/79, 0x4f}, {&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="580000000000000014010000070000000000000002000000", @ANYPTR=&(0x7f0000001300)=ANY=[@ANYBLOB="1037254c2c85ba6f"], @ANYPTR=&(0x7f0000001340)=ANY=[@ANYBLOB="0200000000000000"], @ANYBLOB="3f000000000000004000000000000000000000800000000001000000000000002800000000000000010000800000000030000000000000001401000003000000", @ANYPTR=&(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='3\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f00000013c0)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="0200000000000000180000000000000014010000020000000100010003000000"], 0xa0, 0x8000}, 0x4000004) 17:49:54 executing program 0: accept4$tipc(0xffffffffffffff9c, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x80800) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x24000000, 0x1, 0x9]) 17:49:55 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) r4 = geteuid() r5 = geteuid() r6 = getgid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x4}, [{0x2, 0x2, r4}, {0x2, 0x1, r5}], {0x4, 0x1}, [{0x8, 0x0, r6}, {0x8, 0x2, r7}, {0x8, 0x2, r8}, {0x8, 0x1, r9}], {0x10, 0x7}, {0x20, 0x7}}, 0x54, 0x2) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqsrc(r2, 0x6, 0x2000000000000024, &(0x7f0000013ff4)={@remote}, 0x6) close(r2) dup3(r0, r3, 0x0) 17:49:55 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x24000000, 0x1, 0x9]) 17:49:55 executing program 2: socket(0x18, 0x0, 0x0) 17:49:55 executing program 3: timer_create(0x3, 0x0, &(0x7f0000000140)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1ff) setsockopt$inet_int(r1, 0x0, 0x3b, &(0x7f0000000080)=0x9, 0x4) timer_gettime(r0, &(0x7f00000001c0)) ioctl$VIDIOC_RESERVED(r2, 0x5601, 0x0) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000000)) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x8, 0x100, 0x0, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_address={0x5, 0x7, 0x2b, 0x20, 0x0, @in6={0xa, 0x4e20, 0xd33b, @mcast1, 0x5}}]}, 0x38}}, 0x20000080) 17:49:55 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, 0x0) 17:49:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x100000001, &(0x7f0000000080)=0x0) close(r0) userfaultfd(0x0) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x80440, 0x0) 17:49:55 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:49:55 executing program 3: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000240)="c21903dc66f0cf4f069dcefadba536f91ddc8de9650368a7dc9404001b", 0x1d) 17:49:55 executing program 2: r0 = socket(0x18, 0x809, 0x3) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x141000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) 17:49:55 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, 0x0) 17:49:55 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, 0x0) 17:49:55 executing program 3: semctl$SETALL(0x0, 0x0, 0x11, 0x0) 17:49:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000001540)='net/tcp6\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf4, r2, 0x402, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e8c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x90}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$FICLONE(r1, 0x40049409, r1) 17:49:56 executing program 2: r0 = socket(0x18, 0x0, 0x2) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0xfffffffffffffffa, 0xf0e3}, 0x2) 17:49:56 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x24000000, 0x1]) 17:49:56 executing program 3: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x1, 0x2) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000001c0)=""/85) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, r0/1000+10000}}, 0x0) setitimer(0x8000000002, 0x0, &(0x7f0000000040)) 17:49:56 executing program 4: add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000000c0)='blacklist\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="67bbdcb2d45d0a189e580186972f893c46c8eab8bd497317e23db5a198c3210746c4faab08dbd31b5089d7b9d76558f316ede245c648dc073d2830904086099924949028addecdeaca1b4916dd1daa83f471976216ce7269a2b2abe5344f2b636f5d36af29d9be01af8805013a4ff43b0b7ccfb0c64065fa14dddf7261127c657ad7120de5b4b75a9a1d0c51578385c55e5c20f1565e75bd3ebaa81526118542a81bcbf5495688c7d6c658bb982b79fbb78e423f89ed406d6d2cbac94b79b1447482146c6437f4d54e1e35a99b54f456a53206430d21", 0xd6, 0xfffffffffffffffe) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x100d}}, 0x20) r3 = dup(r1) socket$inet_udplite(0x2, 0x2, 0x88) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000380)={0x12, 0x3a46daf7d4b3d69a, 0xfa00, {&(0x7f00000003c0), r2, r3}}, 0x18) write$binfmt_elf32(r1, &(0x7f0000002780)=ANY=[@ANYBLOB="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"], 0x1158) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000000)={0x0, 0x1, 0x0, [], &(0x7f0000000040)={0x98f905, 0x1000, [], @ptr=0x740000}}) [ 330.355727] syz-executor.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 17:49:56 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42000408}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x9, 0x8, 0x0, 0x3}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x7fff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x7f}, &(0x7f0000000200)=0x8) 17:49:56 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:49:56 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x24000000]) 17:49:56 executing program 3: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x1, 0x2) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000001c0)=""/85) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x0, r0/1000+10000}}, 0x0) setitimer(0x8000000002, 0x0, &(0x7f0000000040)) 17:49:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x9, 0x40000) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000140)=[0x10001, 0xf238]) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x15}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 17:49:56 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) accept4(r0, 0x0, 0x0, 0x0) 17:49:56 executing program 3: r0 = socket$kcm(0x2, 0x2, 0x73) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r1, 0x28}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) [ 330.915946] irq bypass consumer (token 000000001492bdd6) registration fails: -16 17:49:57 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x24000000]) 17:49:57 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x83, 0xffffffffffffffff, 0x0, "616052eabcab615670171ebe6cde243bbf3da07800", 0x80}) 17:49:57 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x24000000]) 17:49:57 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x4000, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x7) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000000c0)) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x40000) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000140)) recvfrom$packet(r0, &(0x7f0000000100)=""/15, 0xf, 0x2, 0x0, 0xaf181a0c20b15899) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000180)) 17:49:57 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000100)=@nfc, &(0x7f0000000000)=0x80) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000180)=0x4) r1 = userfaultfd(0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mmap$binder(&(0x7f000077a000/0x4000)=nil, 0x4000, 0x3000000, 0x11, r2, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) 17:49:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) semget(0x2, 0x0, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, r1}}, 0x18) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x408000, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r2, 0x5, 0x3}, 0x14) 17:49:57 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:49:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') read$FUSE(r0, &(0x7f0000003100), 0xffffffffffffff0e) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x4) 17:49:57 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x24000000, 0x0]) 17:49:57 executing program 2: r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xfffffffffffffffd, 0x101000) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)={0x0, r2}) 17:49:57 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) semget(0x2, 0x0, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0, r1}}, 0x18) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x408000, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r2, 0x5, 0x3}, 0x14) 17:49:58 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x24000000, 0x0]) 17:49:58 executing program 3: unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x2) close(r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80800, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x10000) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af21, &(0x7f0000000140)={0x3, 0x401}) 17:49:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x8) 17:49:58 executing program 2: r0 = socket(0x18, 0x0, 0x100000000000) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) accept4(r0, 0x0, 0x0, 0x0) 17:49:58 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:49:58 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x24000000, 0x0]) 17:49:58 executing program 4: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:49:58 executing program 2: r0 = socket(0x18, 0x0, 0x10) signalfd4(r0, &(0x7f0000000080)={0x2}, 0x8, 0x800) accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000040)=0x10) 17:49:58 executing program 3: unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x2) close(r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80800, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x10000) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af21, &(0x7f0000000140)={0x3, 0x401}) 17:49:58 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x1]) 17:49:58 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:49:58 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x18, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockname$tipc(r1, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10) 17:49:59 executing program 4: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:49:59 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x1]) 17:49:59 executing program 3: unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x2) close(r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80800, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x10000) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af21, &(0x7f0000000140)={0x3, 0x401}) 17:49:59 executing program 2: r0 = socket(0x1b, 0x3, 0x800000000000021) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = dup2(r1, r1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000000c0)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x10001, 0x3, 0x2, 0x3, 0x31ec, 0x3, 0x8, 0x80, 0x8, 0x1, 0x5, 0x6, 0xe0, 0xfffffffffffffff8, 0x5, 0x3], 0x4, 0x1}) 17:49:59 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x1]) 17:49:59 executing program 4: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:49:59 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:49:59 executing program 3: unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x2) close(r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80800, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x10000) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af21, &(0x7f0000000140)={0x3, 0x401}) 17:49:59 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x5) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40000, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) r2 = socket(0x18, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) 17:49:59 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) [ 333.706213] cgroup: fork rejected by pids controller in /syz1 17:49:59 executing program 4: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) 17:49:59 executing program 3: unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x2) close(r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80800, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x10000) ioctl$RTC_VL_READ(r4, 0x80047013, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) 17:50:00 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x82800) fcntl$setstatus(r0, 0x4, 0x800) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001100)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000001040)=0x1008) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001080)={r2, 0x8, 0x7, 0x4}, &(0x7f00000010c0)=0x10) 17:50:00 executing program 0: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:00 executing program 4: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) read(r0, &(0x7f0000000400)=""/100, 0x64) 17:50:00 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:00 executing program 2: r0 = socket(0x1c, 0xb, 0x2) accept4(r0, 0x0, 0x0, 0x8000000) 17:50:00 executing program 3: unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x2) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80800, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x10000) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) 17:50:00 executing program 0 (fault-call:0 fault-nth:0): semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) 17:50:00 executing program 4: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) userfaultfd(0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) 17:50:00 executing program 2: r0 = socket(0x18, 0x0, 0x0) socket(0x11, 0xa, 0xffffffff7fffffff) accept4(r0, 0x0, 0x0, 0x0) 17:50:00 executing program 3: unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x2) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80800, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x10000) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) 17:50:01 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101040, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000080)=0x6) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x1000, 0x1, 0x27b, 0x4, 0xcbd6, 0x80000001, 0xfff]) semget(0x1, 0x3, 0x4a) 17:50:01 executing program 4: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) read(r0, &(0x7f0000000400)=""/100, 0x64) 17:50:01 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x2400, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r1, &(0x7f00000001c0)=0x4) r2 = socket(0x18, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) 17:50:01 executing program 3: unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x2) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80800, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x10000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) 17:50:01 executing program 4: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) read(r0, &(0x7f0000000400)=""/100, 0x64) 17:50:01 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:01 executing program 0: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000340)) r0 = semget(0x0, 0x1003, 0x223) timer_create(0x7, &(0x7f0000000380)={0x0, 0x12, 0x4, @thr={&(0x7f0000000000)="e130b6406fdda790f3b1122e0c7f478eaae5bbdf8fea08b022130a04c0f7340460b1581f1200d2fd", &(0x7f00000002c0)="8fc835b27c83e2ac335a4aa250acb79335109942883c037e5dc919f7aa7f72950c3195cbc7cf4572d75476c2941d847a569941c77bfb10b89f705c863fd238b53de31605b8ffc57d073348"}}, &(0x7f00000003c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)={0xb065, 0xf, 0x4, 0xe004, {0x0, 0x2710}, {0x5, 0x0, 0x1ff, 0x101, 0x6, 0x9, "9dd87a68"}, 0xfffffffffffffff9, 0xa8b8998ca4bbec93, @offset=0x4, 0x4}) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0xffffffffffffffe1, 0x100000000, 0x1, 0x39fd, 0x7}, &(0x7f0000000240)=0x14) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000280)={r3, 0x1000, 0x2, 0x8d9}, 0x10) write$ppp(r1, &(0x7f0000000080)="6599e1fb8d29b9908047cb17f7e7ff0be38605dab7e6691f60cd506142a9f242975080d781633a9c8074eedfa21809ebf40bc637ddcc57cfec34", 0x3a) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) 17:50:01 executing program 2: r0 = socket(0x18, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000000)={0x0, 0x2f4c}) accept4(r0, 0x0, 0x0, 0x0) accept$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x175) 17:50:01 executing program 4: r0 = userfaultfd(0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) 17:50:01 executing program 3: unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x2) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x80800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) 17:50:01 executing program 2: socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 17:50:01 executing program 4: read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64) 17:50:02 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x101003) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000001c0)={r2, 0x80000, r0}) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x22008000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 17:50:02 executing program 3: unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x2) close(r1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) 17:50:02 executing program 1: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r0 = userfaultfd(0x0) close(r0) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64) close(r0) 17:50:02 executing program 2: r0 = socket(0x18, 0x4004, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="0e0225bd7000ffdbdf25050000004000010008000b0073697000080004004e22000008000b00736970000c0006006e6f6e6500000000080004004e230000080002003e000000080004004e2400002000030014000600ff020000000000000000000000000001080003000200000014000200080003000400000008000b000200000008000600f9ffff7f0800040004000000080006000c0dde972c2d7c6a05000000"], 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c011) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2100, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f00000000c0)=""/152) 17:50:02 executing program 4: read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64) 17:50:02 executing program 0: r0 = semget$private(0x0, 0x0, 0x80) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400000, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x2, 0x4}) 17:50:02 executing program 4: read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64) 17:50:02 executing program 2: r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x4040000002003, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)) 17:50:02 executing program 3: unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) 17:50:02 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = semget$private(0x0, 0x4, 0x9) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x6882, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='veth1_to_bridge\x00') semop(r0, &(0x7f0000000000)=[{0x1, 0x21, 0x800}, {0x7, 0x8, 0x1000}, {0x3, 0x3, 0x1800}, {0x1, 0x7, 0x800}, {0x0, 0x1ed0, 0x1000}], 0x5) 17:50:02 executing program 1: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r0 = userfaultfd(0x0) close(r0) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64) close(r0) 17:50:03 executing program 4: userfaultfd(0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64) 17:50:03 executing program 2: r0 = socket(0x18, 0x20000000000, 0x0) accept4(r0, 0x0, 0x0, 0x0) 17:50:03 executing program 3: unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000c85000)) 17:50:03 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x8000000001]) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x189000) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x20, 0x1000000000007, 0xfffffffffffffffe, 0x7fff, 0xf, 0xb, 0x6, 0x0, 0x3ff, 0x10000}) 17:50:03 executing program 4: userfaultfd(0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64) 17:50:03 executing program 2: r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) 17:50:03 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000002c0)=""/151) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) fcntl$setstatus(r0, 0x4, 0x4000) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80) socket$rxrpc(0x21, 0x2, 0xa) recvfrom$rxrpc(r1, &(0x7f00000000c0)=""/141, 0x8d, 0x40000022, 0x0, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) 17:50:03 executing program 1: mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r0 = userfaultfd(0x0) close(r0) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64) close(r0) 17:50:03 executing program 3: unshare(0x24020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) 17:50:03 executing program 4: userfaultfd(0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64) 17:50:03 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2201, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f0000000040)={0x101, 0x4ae}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8a7, 0xa324ba9de0871eb9) r1 = socket(0x7, 0x0, 0x4) accept4(r1, 0x0, 0x0, 0x0) 17:50:04 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e21, @local}, {0x307, @dev={[], 0x1a}}, 0x0, {0x2, 0x4e21, @multicast1}, 'yam0\x00'}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000140)={{0x80000000, 0x6, 0x3, 0x1, 0x801, 0x4}, 0xfff}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x8080, 0x0) 17:50:04 executing program 3: unshare(0x24020400) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) [ 338.108697] QAT: Invalid ioctl [ 338.129160] QAT: Invalid ioctl 17:50:04 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) 17:50:04 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'hwsim0\x00', 0x944e}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) [ 338.284627] QAT: Invalid ioctl [ 338.288137] QAT: Invalid ioctl 17:50:04 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:04 executing program 3: unshare(0x24020400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) 17:50:04 executing program 0: r0 = semget(0x2, 0x3, 0x600) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x1003, 0x6, 0xfffffffffffff23a, 0x1, 0x7, 0x8, 0x2fc9, 0x200000006, 0x2, 0x7fffffff]) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x121400) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000080)={0x57, 0x800, 0x6b, {0x9, 0x80000001}, {0xff, 0xffff}, @const={0xd86, {0xb27, 0x7ff, 0x9, 0x3}}}) 17:50:04 executing program 2: r0 = socket(0x18, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1, 0x6465, 0x8}, 0xc) accept4(r0, 0x0, 0x0, 0x0) 17:50:04 executing program 4 (fault-call:1 fault-nth:0): r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) 17:50:04 executing program 3: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) 17:50:04 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1, 0xfff, 0x40, 0x1}, 0x6}, 0x20, 0x1, 0x0) 17:50:05 executing program 4: userfaultfd(0x80800) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000240)={0x401, 0x3f, 0x4}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000002c0)={{0x0, 0x4}, 0x1, 0x4, 0x9, {0x1a2, 0x10001}, 0x2, 0x401}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xe, 0x4, 0x3f, 0x7fff, 0x11, r0, 0x5}, 0x2c) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20060004}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x502, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8841}, 0x8040) socket$netlink(0x10, 0x3, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x100000000000100, 0x0) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000040)=0x4, 0x4) 17:50:05 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000200)={0x6, 0x56000000000, 0x7, 0x80000001, 0x1ff}) r1 = semget$private(0x0, 0x2, 0x160) semctl$SEM_INFO(r1, 0x0, 0x13, &(0x7f00000000c0)=""/220) r2 = socket(0x18, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x800) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) 17:50:05 executing program 4: r0 = userfaultfd(0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x6, 0x400, 0x9}) read(r0, 0x0, 0x0) 17:50:05 executing program 3: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) 17:50:05 executing program 0: r0 = semget(0x2, 0x5, 0x10) semget(0x0, 0x4, 0x200) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000040)={0x100, 0x9, 0x40}) 17:50:05 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:05 executing program 4: r0 = userfaultfd(0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x402400, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001340)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000001440)=0xe8) r3 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001480)={{{@in6=@mcast2, @in6=@local, 0x4e21, 0x0, 0x4e21, 0x1, 0xa, 0x80, 0x0, 0x3e, r2, r3}, {0x6, 0x7fffffff, 0x5, 0x4, 0x131c, 0x8fa6, 0x7, 0x1}, {0x625c, 0x6, 0x1, 0x8}, 0x8, 0x6e6bbe, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast2, 0x4d5, 0x3c}, 0xa, @in=@multicast2, 0x3506, 0x7, 0x1, 0x10000, 0x1, 0x6b1, 0xffffffff}}, 0xe8) read(r0, 0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r4, 0x8250aea6, &(0x7f0000000040)=""/90) 17:50:05 executing program 2: r0 = socket(0x18, 0xfffffffffffffffd, 0x3) accept4(r0, 0x0, 0x0, 0x0) 17:50:05 executing program 3: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) 17:50:05 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) semget$private(0x0, 0x3, 0x10) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x7, 0x100000000, 0x6, 0x1, 0x12, 0x400, 0x2, 0xe5e, 0x9, 0x3}) 17:50:05 executing program 4: r0 = userfaultfd(0x0) r1 = dup3(r0, r0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) read(r0, 0x0, 0x0) 17:50:05 executing program 2: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000180), 0x800) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000001c0), 0x4) r1 = socket(0x18, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xd7, 0x800) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f00000000c0)=""/33, 0x21}, &(0x7f0000000100), 0x40}, 0x20) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{}, {}, {}, {}, {}]}) accept4(r1, 0x0, 0x0, 0x0) 17:50:05 executing program 3: unshare(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) 17:50:06 executing program 0: r0 = open(&(0x7f0000000100)='./file0\x00', 0x410000, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000012c0)={0x0, 0x83, "74deb72b91425b3350287301467d30a9d16284d38e975b51d94d4f5772d04ef871fcc47741991655d057e48440d33c5a2844c1cce309a0d73374f4f2f53f8d6768ea508694aa5cbe2c9711b99a8d3a09eef3a894a3ead641514e6d8c0e6e56b1dd194930e9dfb49e5395fb91f65c32bd8206ad58434b8fe709dd5eec88d4b912895188"}, &(0x7f0000000140)=0x8b) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001380)={r1, @in={{0x2, 0x4e24, @multicast2}}, 0x7fff, 0x80000001, 0x3f, 0x5, 0x100}, &(0x7f0000001240)=0x98) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0xa000, 0x0) ioctl$PPPIOCGIDLE(r4, 0x8010743f, &(0x7f0000001280)) ptrace$cont(0x1f, r3, 0x10001, 0xda44) accept(r2, 0x0, &(0x7f0000000040)) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=""/4096, 0x1000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f00000011c0)) 17:50:06 executing program 3: unshare(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) 17:50:06 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000002f40)=0x2, 0x4) r1 = userfaultfd(0x0) read(r1, 0x0, 0xfffffffffffffd54) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20200, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000040)={0x0, 0x8, 0x9ff, 0x7, 0x99}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)=0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000001840)={0xfffffffffffffff9, 0x9, 0x4773, 'queue1\x00', 0x2}) process_vm_readv(r3, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f00000001c0)=""/204, 0xcc}], 0x4, &(0x7f00000017c0)=[{&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000380)=""/114, 0x72}, {&(0x7f0000000400)=""/55, 0x37}, {&(0x7f0000000440)=""/243, 0xf3}, {&(0x7f0000000540)=""/97, 0x61}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/236, 0xec}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x8, 0x0) [ 340.185961] QAT: Invalid ioctl [ 340.229814] QAT: Invalid ioctl 17:50:06 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', '&\x00'}) accept4(r0, 0x0, 0x0, 0x3) [ 340.275408] QAT: Invalid ioctl [ 340.432192] QAT: Invalid ioctl 17:50:06 executing program 3: unshare(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000c85000)) 17:50:06 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:06 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x6, 0x1]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) process_vm_readv(r0, &(0x7f0000002340)=[{&(0x7f0000000080)=""/249, 0xf9}, {&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000000200)=""/128, 0x80}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/135, 0x87}], 0x6, &(0x7f0000003500)=[{&(0x7f00000023c0)=""/194, 0xc2}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f00000034c0)=""/33, 0x21}], 0x3, 0x0) [ 340.463312] QAT: Invalid ioctl [ 340.474371] QAT: Invalid ioctl [ 340.492299] QAT: Invalid ioctl [ 340.528031] QAT: Invalid ioctl [ 340.551119] QAT: Invalid ioctl 17:50:06 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x20400, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000200), &(0x7f0000000240)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000000c0)=0x6) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) sched_getparam(r2, &(0x7f0000000100)) r3 = socket(0x18, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, &(0x7f0000000000)=0x2) 17:50:06 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x603c1) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x5, 0x1, {0xb, @win={{0x5, 0x1, 0x7b, 0x6}, 0x8, 0x4c, &(0x7f0000000180)={{0x20, 0xfa3, 0x7, 0x7}, &(0x7f0000000140)={{0x4, 0x1, 0x362b, 0x3}, &(0x7f0000000100)={{0xae, 0x6, 0x6, 0x7}}}}, 0x8, &(0x7f00000001c0)="61c74e20a5124f0cc4b94ebf8d0935631085f930e60145cb658e9851605022aae388fc058a0a4424e9be47f22591a3b5fe1cfdc0cbcf713fadff9c3739615ccf94c07c05a4e5d4d9d1fbb2cfa667eafdd88aa8c63465c998f23363af6b7e145fc4bf505676079532ee19c64d1260103be6e5ecb1dd1ee93782586aa4aaf80a19ea67b441197eb09211977fe8239926c8700388748b0ae41e5879e0752bbce474dc96ecc72ef59ffdea575fae1187c0ce7320995b4e00ac43bb65f0a2789befe174c913184817fa0ac99bd645c8d98dff286e3df6efc014b250a211566c", 0xffffffff}}}) ustat(0x3f, &(0x7f00000000c0)) recvfrom$rxrpc(r1, &(0x7f0000000040)=""/114, 0x72, 0x2020, 0x0, 0x0) 17:50:06 executing program 3: unshare(0x24020400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 17:50:06 executing program 5: r0 = semget(0x2, 0x5, 0x10) semget(0x0, 0x4, 0x200) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000040)={0x100, 0x9, 0x40}) 17:50:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x80) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070a07191dfffd946fa2830020200a0009000108000000680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18b0400000000000000db2406b208d37ed01cc0", 0x4c}], 0x1}, 0x0) 17:50:07 executing program 3: unshare(0x24020400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) [ 341.006377] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 17:50:07 executing program 4: r0 = userfaultfd(0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000180)={0x80}) getsockopt$inet6_buf(r1, 0x29, 0x14, &(0x7f0000000040)=""/207, &(0x7f0000000140)=0xcf) read(r0, 0x0, 0x0) [ 341.060803] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 17:50:07 executing program 2: r0 = socket(0x18, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0xfffffffffffffffd, {{0xa, 0x4e24, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x88) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f00000000c0)="928dfe3c1e0ad37ed55ba54a2e21cc0f3fe204a3e6ad93f64c88473eaed5ae4d07b5bc106d83b2a167803f83701b5821742a5e26058c27cde7827577bbaf283ae68209c5023ac46807f46ad7c3f8e6380585ae3405878cacb96b7f3d80b6d134893a03b2", 0x64) 17:50:07 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x0, 0x100000000, 0x8001, 0x500, 0x7fff, 0x44, 0x8]) 17:50:07 executing program 3: unshare(0x24020400) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 17:50:07 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:07 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0xf9598d44) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r1, &(0x7f00000000c0)={0x2000}) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000040)=""/101) 17:50:07 executing program 2: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 17:50:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x4000, 0x0) 17:50:07 executing program 0: r0 = semget(0x0, 0x0, 0x98) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x10001, 0xb9a1, 0xe961, 0xf342, 0x3f, 0x3, 0x3ff, 0x4, 0x20, 0x4]) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0, 0x1]) [ 342.104204] IPVS: ftp: loaded support on port[0] = 21 [ 342.250564] chnl_net:caif_netlink_parms(): no params data found [ 342.298100] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.304636] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.313419] device bridge_slave_0 entered promiscuous mode [ 342.322119] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.328938] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.337144] device bridge_slave_1 entered promiscuous mode [ 342.360798] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 342.373134] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 342.398401] team0: Port device team_slave_0 added [ 342.406057] team0: Port device team_slave_1 added [ 342.465182] device hsr_slave_0 entered promiscuous mode [ 342.532892] device hsr_slave_1 entered promiscuous mode [ 342.616816] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.623417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.630315] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.636944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.696677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.711439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.721603] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.729910] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.739076] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 342.759481] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.774074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.784051] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.790516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.815241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.826222] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.832875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.847551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 342.856674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.869979] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 342.889335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.905382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.919287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 342.948922] 8021q: adding VLAN 0 to HW filter on device batadv0 17:50:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mincore(&(0x7f0000a97000/0x2000)=nil, 0x2000, 0x0) 17:50:09 executing program 4: r0 = userfaultfd(0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x800, 0x0) read(r0, 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x200) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x4000) 17:50:09 executing program 2: r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0xffffffffffffffff) 17:50:09 executing program 3: r0 = memfd_create(&(0x7f0000000180)='\vem1\xc1\xf8\xa6\x8dL\xc4J\x80\x89K\xf6w\xf3\x97\xac#*\x7f{\x16\xe1\v\xbb\x91gu\x88_[)i\xe1MK_S#%\xd8\x82h\xe2\x1f\xd4\xd6\x80!\xcb`\xbc\xaa%\xed*\xc4\x9fU\"\xa7\xe5SK8\xe5b\xaf^\x02\xb8-Hr\x13\b7\x80\xe0\xb2\xaf\xb6\x98\x02J\xed\x1d\x9cO\x15m\'\xd2\xa2AI\xdb \xc8\x85\xf9\x93\xe0^A{\x8av\xbb{\t\xd3\xf1b\x83\xb4\xa9\x894\xb9m\x8f\x8e:2L\x06J\xf8\xde\xd0nRA\x8d\x8c\xf9\x1cT\x10\x94\x9a\x90\xc6\x87*zBX\xca\x00\xdc\x1b}\xfe\x97\x1al\xdd\xa9 \x18\xcf\xc7\r\xae\xc8 \xb2\x81\xb4\xf6\xa6\xd7$\xda\xc3\x1fN\x8d\x85-%M\xed\xff\x13\x9e\x02\x1e\x9a', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="340000ebffffd3936cb6c4f1bd329f8906857f4142e802ee3bd665e77f2400ffff000011"], 0x24) sendfile(r0, r0, &(0x7f0000000000), 0x10003) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f00000000c0)=[{}]}) 17:50:09 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x0, 0x1]) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x200000, 0x0) r0 = semget$private(0x0, 0x4, 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f00000000c0)=[0x80000000, 0x7, 0x7, 0x2, 0x5, 0x6, 0x1ff, 0x2, 0x7c]) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000080)=0x7ff) 17:50:09 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:09 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e22, 0x80000001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xcb6}}, 0x9ce8, 0x7, 0x9, 0x1}, &(0x7f00000001c0)=0x98) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040), 0xa235) r3 = socket(0x18, 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000200)=""/1) eventfd(0x3) accept4(r3, 0x0, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000240), &(0x7f0000000280)=0x4) 17:50:09 executing program 4: r0 = userfaultfd(0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x8, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x5, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x4, 0x14}) read(r0, 0x0, 0x0) 17:50:09 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) semget$private(0x0, 0x0, 0x100) 17:50:09 executing program 5: socket$inet(0x2, 0x80001, 0x83) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000000)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) msgget(0x1, 0x3) 17:50:09 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountstats\x00') r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x0, 0x7, 0x42, &(0x7f0000ffc000/0x3000)=nil, 0xfffffffffffffff9}) userfaultfd(0x0) r3 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x4, 0x3) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00') accept4$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x80000) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100000000}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x1) read(r3, 0x0, 0xfea7) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) 17:50:09 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x401, 0x9, 0x191f32e1, 0x0, 0x54d9, 0x52000000, 0x5, 0x4, 0x8000, 0xffff, 0x7b1}, 0xb) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) 17:50:09 executing program 2: r0 = socket(0x18, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x18200, 0x14) accept4(r0, 0x0, 0x0, 0x0) 17:50:09 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:10 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x18, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x100, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x20, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x36}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x94}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r3 = accept4(r1, 0x0, 0x0, 0x2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="01000900090006008000040004020080dd940200fdff"], &(0x7f0000000040)=0x1a) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000080)={r4, 0x46f7, 0x9, 0x800}, &(0x7f00000000c0)=0x10) r6 = fcntl$dupfd(r0, 0x406, r1) prctl$PR_GET_FP_MODE(0x2e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000100)={r5, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000001c0)=0x84) 17:50:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000440)={0x10003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:50:10 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) mq_timedsend(r0, &(0x7f0000000040)="c47338d64a82a1acd43e7863ed4c30a370c924451e58551480c7d7eb2af540e198f03399d9cbe91bbedaee8ffc5936accf99cad94a16240c87dc4a7139c18fee17", 0x41, 0xfffffffeffffffff, &(0x7f00000000c0)={0x77359400}) r1 = semget$private(0x0, 0x5, 0x2) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000140)) 17:50:10 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)) 17:50:10 executing program 4: r0 = userfaultfd(0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x400) read(r0, 0x0, 0x0) 17:50:10 executing program 2: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x148) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x5, 0x101, @l2={'ib', 0x3a, 'bridge0\x00'}}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) r3 = dup3(r0, r0, 0x80000) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000280)={{0xa, 0x4e24, 0x6da, @mcast2, 0x5}, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x81}, 0x6, [0x9, 0x8, 0x3, 0x1, 0xbb1, 0x4, 0x20, 0x9355]}, 0x5c) r4 = socket(0x0, 0x0, 0xffffffffffffffff) accept4(r4, 0x0, 0x0, 0x80000) 17:50:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) 17:50:10 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8) r1 = userfaultfd(0x0) read(r1, 0x0, 0x0) 17:50:10 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x100, 0x80000000, 0x4]) 17:50:10 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) [ 344.652747] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 344.787828] tls_set_device_offload: netdev not found 17:50:10 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0xe) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) 17:50:11 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/autofs\x00', 0x200, 0x0) bind$isdn(r0, &(0x7f0000001400)={0x22, 0x18, 0xfff, 0x0, 0xfff}, 0x6) uname(&(0x7f00000001c0)=""/4096) 17:50:11 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x400) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = socket(0x18, 0x0, 0x100) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x120, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x4102, 0x0, {0x18, 0x13, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'vlan0\x00', 0x1}) write$P9_RRENAMEAT(r1, &(0x7f0000000140)={0x7, 0x4b, 0x2}, 0x7) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000200)) accept4(r1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000000280)={0x7, 0x1, 0x5}) r3 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f00000001c0)={0x6, 0x8, 0x10001, 0x1, 0x4}) fcntl$addseals(r1, 0x409, 0x3) 17:50:11 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x400b, 0x0, 0xfffffffffffffeff, 0x57}) r1 = userfaultfd(0xfffffffffffffffd) read(r1, 0x0, 0x97) [ 345.034373] ptrace attach of "/root/syz-executor.3"[13496] was attempted by "/root/syz-executor.3"[13498] 17:50:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28) 17:50:11 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 17:50:11 executing program 0: r0 = semget$private(0x0, 0x0, 0x2) r1 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000), 0x4) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) [ 345.316406] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 345.344533] tls_set_device_offload: netdev not found 17:50:11 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x0, 0x2) ioctl$TIOCSTI(r1, 0x5412, 0x1) accept4(r0, 0x0, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) 17:50:11 executing program 4: userfaultfd(0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80000001, 0x101000) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000080)={0x1, 0x0, 0x102, 0x6, {0xbc, 0x4, 0xfffffffffffffc01, 0x4}}) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x1, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r3 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_cmd={0x1b, 0x4}}) read(r1, 0x0, 0x0) 17:50:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008aec1, &(0x7f0000000140)={0x7b}) 17:50:11 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x66600000000, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000200)={0x6, 0xfffffffffffffff7, 0x1, {r1, r2+10000000}, 0x9, 0x8}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40100, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x2, 0x3b1, [0x0, 0x200001c0, 0x20000468, 0x20000498], 0x0, &(0x7f0000000080), &(0x7f0000000940)=ANY=[@ANYBLOB="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"]}, 0x429) 17:50:11 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000100), 0x4) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 17:50:11 executing program 2: r0 = socket(0x15, 0x0, 0x1000) r1 = accept4(r0, 0x0, 0x0, 0xffffffffffffffff) r2 = dup3(r1, r0, 0x80000) r3 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x200000, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r3, 0x1, 0x4, r4}) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f00000003c0)) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) kexec_load(0x80000001, 0x3, &(0x7f0000000340)=[{&(0x7f00000001c0)="94640f6221770f19af4839511db05c61ddd8a0a005d9293b1edb95bb15a28fc54d863b6e8dbba7b0006c35", 0x2b, 0x533, 0xf3}, {&(0x7f0000000200)="6d67844cc7268a0ddf60fb0225521e24506e23aecbb0a9b14e669d17977c0b00054d5e29dbc7f50370f03444b6a5ddc3dc66b8643d0d19e6a914caf893051d08e6759caaa47daba0f5bd018c8769ca5b652a889cdfeea6fde13390677d204bf22f0aff2784d8894af1f928c9c18c2c305be55059f2372cbdaa1b3045fcc5df68bbb69f2d890477f2e88ce1d588221ed8430ddfdf8fd7609e6d073fb8600c13612509ac033520aafb99b97d9ea0dd0809b470469e0ad7d35d83ea742092cf74184a654c", 0xc3, 0xa6, 0xb3e}, {&(0x7f0000000300)="1e6a265bdee1c6b0e7e286f9183d0975a2f83b8b68fc44c2", 0x18, 0x1ff, 0xffffffff}], 0x0) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000040)={0x1, 0x1, [0x2, 0xc60, 0x5, 0x9, 0x1, 0xfffffffffffffffb, 0x2]}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000400)={[{0x100000001, 0x2, 0xffffffffffffffff, 0x5, 0xffffffffffffff80, 0x5, 0x10000, 0x1, 0x2, 0x81, 0x855, 0x0, 0xdc0a}, {0x0, 0x2, 0x3ff, 0xb19, 0x5, 0x8, 0x800, 0x8, 0x100, 0x3, 0x200, 0x3, 0x2}, {0x100000001, 0xd7, 0x14255b5d0000, 0x0, 0x1, 0x3, 0x3ff, 0x4, 0x6, 0x10001, 0x6, 0x7, 0x4609}], 0x1}) 17:50:11 executing program 4: read(0xffffffffffffffff, 0x0, 0x0) setxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64IPIN\x00', &(0x7f0000000180)='/dev/vfio/vfio\x00', 0xf, 0x1) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x422001, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/88) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f00000000c0)={0x2a, 0x9, 0x80000000000000, 0x4}) getsockname$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000200)=0x1c) [ 345.945684] QAT: Invalid ioctl [ 345.984586] QAT: Invalid ioctl 17:50:12 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = semget$private(0x0, 0x7, 0x400) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x7, 0x7, 0x800}, {0x0, 0x35b6, 0x1800}, {0x0, 0x20, 0x1000}, {0x3, 0x0, 0x1800}, {0x4, 0x77c8, 0x1000}, {0x4, 0x1, 0x800}, {0x3, 0x3}], 0x7, &(0x7f0000000080)={r1, r2+30000000}) 17:50:12 executing program 5: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r1, 0x0) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000006000/0x4000)=nil, 0x4000) 17:50:12 executing program 2: r0 = socket(0x11, 0x8000a, 0x40) accept4(r0, 0x0, 0x0, 0x0) 17:50:12 executing program 4: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x2, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x1}) read(r0, 0x0, 0x0) 17:50:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) sched_setaffinity(0x0, 0x0, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311, 0x0, 0x3}], 0x0, 0x0, 0x0}) 17:50:12 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = semget(0x2, 0x7, 0x4) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x2, 0x1800}, {0x3, 0x20}, {0x2, 0x1, 0x1000}, {0x3, 0x8000, 0x1800}, {0x0, 0x5, 0x800}, {0x2, 0x100000000, 0x800}, {0x4, 0x3f, 0x1800}], 0x7, &(0x7f0000000040)) 17:50:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x5c}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) 17:50:12 executing program 2: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80401, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x28, &(0x7f0000000200)}, 0x10) r1 = socket(0x18, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05002abd7000fbdbdf25010000000c00080003000000000000000c00040008000000000000000c00060001000000000000000c00020019df9e0d0000000071a522c27238fcf1f94a36af823846c61e09eeb1373e11b3a1ff1b226857a491a9b2fdc80e42c81c94ed3ec676bd9af5e97c954364d8196dc22ca65d08"], 0x44}}, 0x4001) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000180), 0x4) [ 346.588109] binder_alloc: 13765: binder_alloc_buf, no vma [ 346.594021] binder: 13765:13766 transaction failed 29189/-3, size 0-0 line 3035 17:50:12 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) [ 346.689093] binder: BINDER_SET_CONTEXT_MGR already set [ 346.694683] binder: 13765:13773 ioctl 40046207 0 returned -16 [ 346.726712] binder_alloc: 13765: binder_alloc_buf, no vma 17:50:12 executing program 4: r0 = dup(0xffffffffffffff9c) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x77359400}}) r1 = userfaultfd(0x0) r2 = dup3(r1, r1, 0x80000) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000000)={0x100000000, "7bae710acf0d14b7e2e0afd07f492ad0b9830f71c78c140f611669fecc8229d2", 0x2}) read(r1, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x80000) [ 346.732536] binder: 13765:13777 transaction failed 29189/-3, size 0-0 line 3035 17:50:12 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) [ 346.792422] binder: undelivered TRANSACTION_ERROR: 29189 [ 346.801046] binder: undelivered TRANSACTION_ERROR: 29189 17:50:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) 17:50:13 executing program 2: r0 = socket(0x18, 0x0, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)='eth0self\x00', 0x9, 0x2) accept4(r0, 0x0, 0x0, 0x0) 17:50:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x14, 0x4, 0x4, 0xb}, 0x2c) dup2(r1, r2) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r4, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000840)="902e700e7c23961c8c16bc6855a3e165807ea6608424caaed001f5c95e87e6152cceb778c747c4077fc8691c64a02de31f901130cb144424f8261bb2f4f116da597c505c1be9fe5ba631655ec717644bffffab04d145bbd9e2e4419c8e60ea4f0241d888ab74025cf666c39510298b334b1d4499a88521243cc7b73f7f350000000030d7276605f4a40dd06e20cfb7f22ff9af8d47f95df489c3ebc045e43120772c0c402606e5079a314a44e416acc22c51ddaad458f5787a8029557a99731c094e315b891ea34e817c28e928abe270726d703936e6e109", 0xd8}, 0x68) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) epoll_create1(0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311, 0x0, 0x3}], 0x0, 0x0, 0x0}) 17:50:13 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) gettid() r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x20, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @empty}, &(0x7f0000000080)=0x8) 17:50:13 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000080)={0x10000, 0x1}) getpgid(r1) socket$nl_netfilter(0x10, 0x3, 0xc) 17:50:13 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:13 executing program 2: lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x1) r0 = socket(0x18, 0x0, 0x0) getpeername(r0, &(0x7f0000000000)=@vsock, &(0x7f0000000080)=0x80) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x600, 0x70bd29, 0x25ffdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0xffffff39}, 0x1, 0x0, 0x0, 0x40001}, 0x4000080) [ 347.317168] binder: BINDER_SET_CONTEXT_MGR already set [ 347.322725] binder: 13868:13879 ioctl 40046207 0 returned -16 17:50:13 executing program 5: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) [ 347.437839] binder_alloc: 13868: binder_alloc_buf, no vma [ 347.443751] binder: 13868:13900 transaction failed 29189/-3, size 0-0 line 3035 [ 347.495169] binder: release 13868:13879 transaction 5 out, still active [ 347.502259] binder: undelivered TRANSACTION_COMPLETE 17:50:13 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000000000000007, 0x4500) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x3, 0xfffffffffffffffb, 0x0, 0xe2c}}) [ 347.544941] binder: undelivered TRANSACTION_ERROR: 29189 [ 347.550546] binder: send failed reply for transaction 5, target dead 17:50:13 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000005ac0)={0x10000, 0x9, 0x3, 0x3, 0x0}, &(0x7f0000005b00)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000005b40)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0xed65, 0x8, 0x200, 0x33}, &(0x7f0000005c00)=0x98) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) r2 = accept(0xffffffffffffffff, &(0x7f00000063c0)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000006440)=0x80) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000006480)={0x0, 0x40}, &(0x7f00000064c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000006500)={r3, 0x1}, 0x8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200040, 0x0) 17:50:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x1, 0xd78, 0x1, 0x0, 0x1, [{}]}) 17:50:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x74}) 17:50:13 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20100, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) dup3(r0, r1, 0x80000) r2 = socket(0x18, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) 17:50:14 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xd5d, 0x40) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1fd}, &(0x7f0000000080)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000003c0)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r2, 0x2}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x3, {0xa, 0x4e23, 0x4, @local, 0x7}, r2}}, 0x38) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0x7}, 0x8) 17:50:14 executing program 4: r0 = userfaultfd(0x80000) read(r0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3}) 17:50:14 executing program 5: ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000000200)='vet\x00\x00\x00\x00\x00z\x00\x00\x02\xbdh\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 17:50:14 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=[{0x10}], 0x10}, 0x0) [ 348.250837] : renamed from vet 17:50:14 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:14 executing program 2: r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) capget(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000040)={0xa84, 0x3, 0x6, 0x3, 0xffffffffe461d458}) ptrace$cont(0xffffffffffffffff, r1, 0x7ff, 0xfdb0) 17:50:14 executing program 4: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x101800, 0x0) r0 = userfaultfd(0x80800) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='syzkaller0\x00') read(r0, 0x0, 0x0) 17:50:14 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x22, 0x0, 0x0) 17:50:14 executing program 5: r0 = memfd_create(&(0x7f0000000f00)='i\xb4b\xca\x17\x05\xb4\x93\x7fH\xbe\xbc\x95\x87h\r?\xc7x\xbd\xe2R\x02\x7fX\xd6.\xd3\xbf]\xe1\x86\xadqPD+\xc9\x89\x0e\x15\xe9\x031\x1e\x03\nE\xccA\xac\xd8\xd2\x95\xb5^J]\xb3\x82\x9a\x10\xc1\x18\n\xf2\x9cRp\x8fww\xe7\xcb^QdO\xce\t(\xe3FHM!\xb1\xd7Q~\xf6L\x12\x13\x16}\x17\b\x88\xe5\xd8\xd6\xa5\xa2\x00\x00\x00\x00\x00\x00\x00\x05\xcb\xeba/\xba\xdb\xca^\xfe\b\x88l\x97\xd2\xf7Y\x92\xd4\x93\xbe\xeeY\xd8\\R\ae\b\x14u[\x13\xbd\xcaf-\x1a)\xf6\xd0\xa0\xdb\x87\xf25\x1c,\xed\xcb\x89\xd8\"\xa3r,\x04\x90\xc2@\xcc7eq\xcb|q3\xe2\x84\xed\x91\xa0\xae\x8b\x85\xde\x18\x11\xf8\xde\x1d\xe3N\x95q\xf5\xf4\xdd8\xb1\\.\xb9E\x87\xb9fh\x93U\xa8+\xbb\x18*\xf8b\x97', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 17:50:14 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xa3c, 0x10402) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x2}, 0x7) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x101a80, 0x0) 17:50:14 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000055c0)='/dev/media#\x00', 0x1, 0x2400) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005640)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000005880)={&(0x7f0000005600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005840)={&(0x7f0000000040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x48810}, 0x8000) 17:50:14 executing program 2: r0 = socket(0x40400000011, 0xa, 0x7fffffff) time(&(0x7f0000000000)) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0xcf, 0x4) accept4(r0, 0x0, 0x0, 0x0) 17:50:14 executing program 5: r0 = memfd_create(&(0x7f0000000f00)='i\xb4b\xca\x17\x05\xb4\x93\x7fH\xbe\xbc\x95\x87h\r?\xc7x\xbd\xe2R\x02\x7fX\xd6.\xd3\xbf]\xe1\x86\xadqPD+\xc9\x89\x0e\x15\xe9\x031\x1e\x03\nE\xccA\xac\xd8\xd2\x95\xb5^J]\xb3\x82\x9a\x10\xc1\x18\n\xf2\x9cRp\x8fww\xe7\xcb^QdO\xce\t(\xe3FHM!\xb1\xd7Q~\xf6L\x12\x13\x16}\x17\b\x88\xe5\xd8\xd6\xa5\xa2\x00\x00\x00\x00\x00\x00\x00\x05\xcb\xeba/\xba\xdb\xca^\xfe\b\x88l\x97\xd2\xf7Y\x92\xd4\x93\xbe\xeeY\xd8\\R\ae\b\x14u[\x13\xbd\xcaf-\x1a)\xf6\xd0\xa0\xdb\x87\xf25\x1c,\xed\xcb\x89\xd8\"\xa3r,\x04\x90\xc2@\xcc7eq\xcb|q3\xe2\x84\xed\x91\xa0\xae\x8b\x85\xde\x18\x11\xf8\xde\x1d\xe3N\x95q\xf5\xf4\xdd8\xb1\\.\xb9E\x87\xb9fh\x93U\xa8+\xbb\x18*\xf8b\x97', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 17:50:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae9c, &(0x7f0000000140)) 17:50:15 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000040)=']eth1\x00', &(0x7f0000000080)='cgroup-^bdevwlan1\x00', &(0x7f00000000c0)='selinux*$posix_acl_access\'user.+^^-\x00', &(0x7f0000000100)='ppp1\x00'], &(0x7f0000000400)=[&(0x7f00000001c0)='ppp0eth1\x00', &(0x7f0000000200)='bdev\xa3security[wlan0([\\em0\x00', &(0x7f0000000240)='+\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='security)lo%\x00', &(0x7f0000000300)='{\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='-lobdev\x00', &(0x7f00000003c0)='$selinuxvboxnet0\x00']) socket$inet6_udp(0xa, 0x2, 0x0) 17:50:15 executing program 4: syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffffffd, 0x80000) userfaultfd(0x0) 17:50:15 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:15 executing program 2: r0 = socket(0x40000017, 0x4, 0x100000) accept4(r0, 0x0, 0x0, 0x807dc) accept4(r0, 0x0, &(0x7f0000000000), 0x80000) 17:50:15 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20040, 0x0) sync_file_range(r0, 0x34b, 0x4, 0x1) 17:50:15 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000000c0)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev}, 0x10) 17:50:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4040ae9e, &(0x7f0000000140)) 17:50:15 executing program 4: read(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x525002, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000040)="596f7fb2c916762a656cc9d083f0b0be1ddbb576fe286084a971db7ba82a7bde5f6aaa74f3f28e71f0455f7446c8f4e1ba5072a8eb56a7523dbd6411f47172081b438d56b372e88e5730f0ac47c52f0f7af92f7772ae4a18788f7ca510462515113a93d43f04fc78ac86383c6256bde20f8952aa0aa94cd3fc8d8f42ab4c40ab2d27b9636a5db9d775bd01bacd974cc83feb0b1cf9bee45bccf08487c42d1e65bf1aecdbc57384d698cc4912b81611bdd40f630a0214114ec6ac404511e6dfaafac6d626e017284ab964229026340c2cf30a4f1983d654698191ddc1bb3a6f5c94e9d36ba00cd302e1cefb8f07757d7685428b0658f343"}, 0x10) 17:50:15 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) io_setup(0xffffffff, &(0x7f0000000000)=0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/capi/capi20\x00', 0x111002, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001140)='TIPCv2\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x400000000000001, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0, 0x2000}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="04482d55fcca8c8bfe0700000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) io_cancel(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x9, 0x3, r0, &(0x7f0000002240)="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", 0xffffff26, 0x3e000}, &(0x7f0000001080)) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x200000, 0x0) 17:50:15 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x14) ioctl(r0, 0x0, &(0x7f0000000100)="71ee9cf7d49dcdc9a02f3c09b39fa82f34f44d012e735ebf0e9cd9a88ea917cf37abbe508a1bb1fa8a7f6934412a47bebd1dd071708700000000000000000000") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x80, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000001c0)=""/166) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)=0xf4276) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f00000000c0)) 17:50:15 executing program 2: r0 = socket(0x18, 0xffffffffffffffff, 0xfffffffffffffffc) accept4(r0, 0x0, 0x0, 0x0) 17:50:15 executing program 3: r0 = memfd_create(&(0x7f0000000040)='/vboxnet1\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) 17:50:16 executing program 2: r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) write$P9_RLOCK(r1, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x3}, 0x8) 17:50:16 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x5, 0x40, 0x4774, 0x7, 0x0, 0x0, 0x78b, 0x30b, 0x40, 0x124, 0x9, 0x10000, 0x38, 0x1, 0xfffffffffffff801, 0x18000, 0x8000}, [{0x1, 0x5, 0x7, 0x7fff, 0x55c4, 0x7, 0x7fffffff, 0x4}], "1084627187d294fba44b6ccf71fca4cd9292959e7eb962552542", [[], [], [], [], []]}, 0x592) 17:50:16 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:16 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = semget(0x3, 0x4, 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0xffffffffffffffff]) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffff, 0x8400) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000080)={0x58}) 17:50:16 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x142, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000dfd000/0x200000)=nil, 0x200000}, 0x2}) r1 = userfaultfd(0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x4000, 0x0) read(r1, 0x0, 0x0) [ 361.118587] clocksource: timekeeping watchdog on CPU1: Marking clocksource 'tsc' as unstable because the skew is too large: [ 361.130100] clocksource: 'acpi_pm' wd_now: 11377 wd_last: bd34a1 mask: ffffff [ 361.139465] clocksource: 'tsc' cs_now: c53d28a466 cs_last: bf8dbaf7f0 mask: ffffffffffffffff [ 361.150105] tsc: Marking TSC unstable due to clocksource watchdog 17:50:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 17:50:17 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x383, 0x40000) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f00000001c0)=""/4096, 0x1000}, &(0x7f0000000040), 0x4}, 0x20) 17:50:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x1f006}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:50:17 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:50:18 executing program 0: r0 = semget(0x2, 0x3, 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x20080, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) semget(0x0, 0x3, 0x1a) 17:50:18 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0xb8) 17:50:27 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8400, 0x0) getsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000140)={@multicast1, @broadcast}, &(0x7f0000000200)=0x8) clone(0x12102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x33, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = dup2(r2, r2) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff5, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) msgrcv(0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, 0x0) [ 361.175847] TSC found unstable after boot, most likely due to broken BIOS. Use 'tsc=unstable'. [ 361.184785] sched_clock: Marking unstable (361254080232, -78253630)<-(361292039639, -116213104) [ 361.210118] clocksource: Switched to clocksource acpi_pm 17:50:27 executing program 2: r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x800) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101001) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x7) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 17:50:27 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200000, 0x0) r1 = signalfd4(0xffffffffffffff9c, &(0x7f0000000240)={0x2}, 0x8, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@ipv4={[], [], @local}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000540)=0xe8) r3 = syz_open_dev$sg(&(0x7f0000000640)='/dev/sg#\x00', 0xffff, 0x200880) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000700)='/dev/usbmon#\x00', 0xfffffffffffffff9, 0x408080) r6 = socket$unix(0x1, 0x5, 0x0) r7 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002d40)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002d80)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000002e80)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002ec0)={0x0, 0x0, 0x0}, &(0x7f0000002f00)=0xc) r11 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002f40)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000003040)=0xe8) r13 = getegid() r14 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000003140)=[0xee01, 0xee01, 0xee01, 0xee01, 0xffffffffffffffff]) r17 = openat$dir(0xffffffffffffff9c, &(0x7f0000003180)='./file0\x00', 0x800, 0x104) r18 = openat$audio(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/audio\x00', 0x200, 0x0) r19 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000003200)='/proc/self/attr/current\x00', 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000003300)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfc, 0x800120}, 0xc, &(0x7f00000006c0)=[{&(0x7f00000001c0)={0x54, 0x16, 0x500, 0x70bd25, 0x25dfdbfb, "", [@generic="7ca1ffaa61de6977d8a815e8b0d4c32bbc2878fe6e0461e1ae9c64041ad67d000086a7680b0d7536d1bbfceaa149f4ff60dbc722bf25845963b72b084a4f8bee3295"]}, 0x54}, {&(0x7f0000000280)={0x1a4, 0x37, 0x8d3c3fca7e25623a, 0x70bd2b, 0x25dfdbff, "", [@nested={0xc, 0x75, [@typed={0x8, 0x17, @fd=r1}]}, @typed={0x8, 0x14, @u32=0x174d9368}, @generic="f3b0f1700439cfbd73fa018530e02fa00e91229629c3d94a26f2031968deb45e3b31eff6eebd26c9b6ceee994dfcf0624048cd4685676bed682a260b06049379d981604dc2f31dcd8b486be37ca8d1534d46120b0291239bb690a5ded35495c6967f9b026f4c3cad087705651174bbf45f334a42330af868963886c27cef11ba298627ea14615e45aacfe9aeabffcf59595dcff5959f15a06367a9b07796746c0a9faeb69c14882727d6d953683621bc779c0ea050d634e7d85297cacc424d368010c76e", @generic="faf203a4c1805afb501590e17d8443fd8e251cd4a0609d4318eb79459c819763557a21ffaa733272cff9c707c68b2aa866a5aa626be6e4f276fe1612d707d9eea0b3f092fbb999810b9147f87edb83e706cf62c039616f7ecf8fe393773147c0efbd7e75c1879188e5c5eb8b30717a299b0752663b51fea64abae26bf2f83646191f54b2b561e2855a9b12dadbccf54b66d386a8e1deda8d1cb727510674dc30723a6ad12485ea1bebf4647f29932ebc249c6191eaa189010532"]}, 0x1a4}, {&(0x7f0000000580)={0x94, 0x36, 0x200, 0x70bd2a, 0x25dfdbff, "", [@typed={0x4, 0x1d}, @generic="bfe4e739ccba5540c54dcb6891b98dad3e2c2649f01523ed5ea5597a77637951412caaabc40e2826b01f044ae5b61b7ca32f84bbddfeb1f4e5985bc1fe8eacc33dab6e137ae9a675303dcb8c62b655e9216999b7cb33b0f30f10dbb696993b4a87c401f08171fbb8627735a46af638892e07", @typed={0x8, 0x83, @uid=r2}, @typed={0x4, 0x9}]}, 0x94}, {&(0x7f0000000680)={0x18, 0x11, 0xb00, 0x70bd29, 0x25dfdbff, "", [@typed={0x8, 0x78, @fd=r3}]}, 0x18}], 0x4, &(0x7f0000003240)=[@rights={0x20, 0x1, 0x1, [r4, r5, r6, r7]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x18, 0x1, 0x1, [r17, r18]}, @rights={0x18, 0x1, 0x1, [r19]}], 0xb0, 0x8804}, 0x4040000) syz_open_dev$amidi(&(0x7f0000000740)='/dev/amidi#\x00', 0x7, 0x100) r20 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x200) ioctl$EVIOCGKEY(r20, 0x80404518, &(0x7f0000000040)=""/229) [ 363.691086] IPVS: ftp: loaded support on port[0] = 21 [ 363.775990] device bridge_slave_1 left promiscuous mode [ 363.782182] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.833530] device bridge_slave_0 left promiscuous mode [ 363.839167] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.904631] device hsr_slave_1 left promiscuous mode [ 366.957988] device hsr_slave_0 left promiscuous mode [ 367.018119] team0 (unregistering): Port device team_slave_1 removed [ 367.029967] team0 (unregistering): Port device team_slave_0 removed [ 367.041515] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 367.068884] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 367.151244] bond0 (unregistering): Released all slaves [ 367.265893] chnl_net:caif_netlink_parms(): no params data found [ 367.313571] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.320034] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.328554] device bridge_slave_0 entered promiscuous mode [ 367.336971] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.343650] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.351429] device bridge_slave_1 entered promiscuous mode [ 367.382546] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 367.394078] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 367.418931] team0: Port device team_slave_0 added [ 367.426608] team0: Port device team_slave_1 added [ 367.496314] device hsr_slave_0 entered promiscuous mode [ 367.552933] device hsr_slave_1 entered promiscuous mode [ 367.622627] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.629182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.636450] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.642989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.743198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.760002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 367.768136] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.776679] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.787623] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 367.807773] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.825604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 367.834016] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.840516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.899479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 367.908010] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.914684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.925612] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 367.935080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 367.962704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 367.972694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.005459] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 368.014164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 368.023308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 368.035893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 368.063138] 8021q: adding VLAN 0 to HW filter on device batadv0 17:50:35 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:35 executing program 4: r0 = userfaultfd(0x0) r1 = dup3(r0, r0, 0x80000) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0xfffffecc) 17:50:35 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) move_pages(r1, 0xb9acd408, 0x0, 0x0, 0x0, 0x0) 17:50:35 executing program 3: 17:50:35 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x1, 0x10000) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000280)=ANY=[]) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000080)={{0x9, 0x5}, 'port0\x00', 0xa1, 0x10, 0x3, 0xd22e, 0x0, 0x6b, 0x80000000, 0x0, 0x2, 0x100}) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000200)) 17:50:35 executing program 2: socket$inet(0x2, 0x80805, 0x5) r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xffff, 0x40000) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x1ff) accept4$tipc(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) 17:50:35 executing program 3: 17:50:35 executing program 4: r0 = userfaultfd(0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0xc080, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000040)={0x80002, 0x0, [0x64884a10, 0x1, 0x54e, 0x1ff, 0x3f, 0x8, 0x1, 0x4]}) read(r0, 0x0, 0x0) 17:50:35 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 17:50:35 executing program 5: 17:50:35 executing program 2: r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x410040, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000040)=0xe2d3) 17:50:35 executing program 3: 17:50:36 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:36 executing program 5: 17:50:36 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x200000) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) 17:50:36 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0xffffffffffffff9c}) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000240), 0x4) clock_gettime(0x0, &(0x7f0000005a80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/209, 0xd1}], 0x1}, 0xff}, {{&(0x7f0000000180)=@x25, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f0000000440)=""/147, 0x93}, {&(0x7f0000000500)=""/98, 0x62}, {&(0x7f0000000580)=""/165, 0xa5}, {&(0x7f0000000640)=""/112, 0x70}, {&(0x7f00000006c0)=""/55, 0x37}], 0x6, &(0x7f0000000780)=""/65, 0x41}, 0x2}, {{&(0x7f0000000800)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/70, 0x46}, {&(0x7f0000000a00)=""/151, 0x97}], 0x3, &(0x7f0000000b00)=""/157, 0x9d}, 0x3}, {{&(0x7f0000000bc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000c40)=""/108, 0x6c}, {&(0x7f0000000cc0)=""/20, 0x14}, {&(0x7f0000000d00)=""/91, 0x5b}, {&(0x7f0000000d80)=""/161, 0xa1}, {&(0x7f0000000e40)=""/8, 0x8}, {&(0x7f0000000e80)=""/89, 0x59}, {&(0x7f0000000f00)=""/170, 0xaa}, {&(0x7f0000000fc0)=""/172, 0xac}, {&(0x7f0000001080)=""/188, 0xbc}], 0x9, &(0x7f0000001200)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000002200)=@alg, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002280)=""/34, 0x22}, {&(0x7f00000022c0)=""/131, 0x83}, {&(0x7f0000002380)=""/135, 0x87}, {&(0x7f0000002440)=""/143, 0x8f}, {&(0x7f0000002500)=""/187, 0xbb}, {&(0x7f00000025c0)=""/207, 0xcf}], 0x6, &(0x7f0000002740)=""/230, 0xe6}, 0x7ff}, {{&(0x7f0000002840)=@tipc, 0x80, &(0x7f0000004a40)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {&(0x7f00000038c0)=""/189, 0xbd}, {&(0x7f0000003980)=""/181, 0xb5}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x4, &(0x7f0000004a80)=""/237, 0xed}, 0x81}, {{&(0x7f0000004b80)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004c00)=""/104, 0x68}, {&(0x7f0000004c80)=""/62, 0x3e}, {&(0x7f0000004cc0)=""/237, 0xed}], 0x3, &(0x7f0000004e00)=""/52, 0x34}, 0xca6e}, {{&(0x7f0000004e40)=@hci, 0x80, &(0x7f0000005380)=[{&(0x7f0000004ec0)=""/31, 0x1f}, {&(0x7f0000004f00)=""/159, 0x9f}, {&(0x7f0000004fc0)=""/40, 0x28}, {&(0x7f0000005000)=""/104, 0x68}, {&(0x7f0000005080)=""/127, 0x7f}, {&(0x7f0000005100)=""/23, 0x17}, {&(0x7f0000005140)=""/237, 0xed}, {&(0x7f0000005240)}, {&(0x7f0000005280)=""/113, 0x71}, {&(0x7f0000005300)=""/72, 0x48}], 0xa, &(0x7f0000005440)=""/73, 0x49}, 0x7fffffff}, {{&(0x7f00000054c0)=@caif=@util, 0x80, &(0x7f0000005580)=[{&(0x7f0000005540)}], 0x1, &(0x7f00000055c0)=""/68, 0x44}, 0x2}, {{&(0x7f0000005640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000005700)=[{&(0x7f00000056c0)=""/59, 0x3b}], 0x1, &(0x7f0000005740)=""/183, 0xb7}, 0x10001}], 0xa, 0x140, &(0x7f0000005ac0)={r1, r2+10000000}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$TUNSETLINK(r3, 0x400454cd, 0x33a) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x8001}, {0xa, 0x4e20, 0x2, @local, 0x19c5000000000}, r5, 0x5}}, 0x48) write$P9_RSYMLINK(r3, &(0x7f0000005240)={0x14, 0x11, 0x2, {0x20, 0x3, 0x3}}, 0x14) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000005b00)={0xfffffffffffffff7, 0x2, 'client0\x00', 0x1, "cf30299f606a27bc", "782c7a0a3d7a17dcc58998307319ffd04a07144a190944ed998bb967502a55a1", 0x6, 0x1}) socket(0x18, 0xf, 0x2) accept4(r0, 0x0, 0x0, 0x0) setsockopt$packet_buf(r4, 0x107, 0x5, &(0x7f0000005bc0)="bc4b78f4266d4e69cb5bcd38021e8ca9e47d609b906c1d2a0999dda927d6671317bef03d7b7b2d988577c977e648813b1d9ff3184bd00d392cdce6e224e1e8b8c44c392d5c2ac86e704bdd988f237e4f5b1b09ac79fa7740a1e1a13ad58c4558f33400e294e83c9cb32564b50645b1e37acb6b4e6308853ed6e074c80ffc9999d5da1caec42d17025749f98bc2003568f004088db760708dacb294d14065fa62f913e42dcf33cb26b6df09", 0xab) 17:50:36 executing program 3: 17:50:36 executing program 4: userfaultfd(0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200080, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) read(r0, 0x0, 0x1857eb48) 17:50:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/133, 0x85) getdents64(r0, &(0x7f0000000280)=""/203, 0x1af) 17:50:36 executing program 5: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x0, 0x0, 0x10000}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 17:50:36 executing program 4: userfaultfd(0x800) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0x100000000002, &(0x7f0000000000)=0x2, 0x28e) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) open_by_handle_at(r1, &(0x7f0000000580)={0x9, 0x8, "84"}, 0x10000) ustat(0x3, &(0x7f0000000540)) pipe2$9p(&(0x7f00000002c0), 0x800) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x80000001, 0x400000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe0, r3, 0x700, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x17}}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x200}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc05}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40080}, 0x81) 17:50:36 executing program 2: r0 = socket(0x1a, 0x20007, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x10000) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000040)={0x13f, "ac7dd19eaeaa6a4be0bdaf6e4f1d2abac7b4130641e4940d1eccd922566569d8", 0x3, 0x1}) fstatfs(r0, &(0x7f0000000080)=""/82) 17:50:36 executing program 0: semget$private(0x0, 0x2, 0x10) r0 = semget$private(0x0, 0x7, 0x3c2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x8000, 0x7]) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x45, 0x100) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000040)={0x0, [0x4, 0xfffffffffffffffe, 0x4, 0x7fff, 0x9, 0x3, 0x7, 0x9, 0x9, 0x0, 0x8, 0x8, 0xfff, 0x575, 0x6, 0x4, 0x7, 0x0, 0x2, 0x7, 0x5, 0x1, 0x6, 0x6, 0x2, 0x100000001, 0xfffffffffffffffd, 0x82f8, 0xd1, 0x9, 0x91c, 0x8, 0x8, 0x8001, 0x3, 0xffffffff, 0x1, 0x1, 0x8, 0x3ff, 0x7fffffff, 0x9786, 0x3, 0x5, 0x6, 0x9, 0x4, 0x1], 0x7}) r2 = shmget(0x3, 0x3000, 0x880, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000000c0)=""/60) 17:50:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents(r0, &(0x7f0000000280)=""/4096, 0x1000) 17:50:36 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:36 executing program 2: r0 = socket(0x1c, 0x800, 0x1) accept4(r0, 0x0, 0x0, 0x0) 17:50:36 executing program 4: r0 = userfaultfd(0x2) read(r0, 0x0, 0x0) 17:50:36 executing program 3: munmap(&(0x7f000001c000/0x3000)=nil, 0x3000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x3d, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) write$binfmt_script(r0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_script(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_pts(r0, 0x0) 17:50:36 executing program 0: setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f0000000080)='!#]eth0\x00', 0x8, 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x0, 0x1]) 17:50:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='\x00\x821\x00\x00\x03\x10\xd7\x00\x00\x00\x00\x00s|\x1do@{\xa3E\xd9c\x89\xdb\x0fA:Cjo\x0f{\n\xdd\xe1\xcd^/s\xfd\xa4\nB\xbc\xc8<\xca2\xf4\x9c\xe7\x008M.\xd0c\x1c9\x8auP\"\xc0]Q5\'\x90\x93\xa9\x99i\xf0n\xd5\x84^\xe5\x8b\xe4\x1d\x1d!\x1e\v3\xaf\x02`A\xce\xeaU\xcf\xb4\xba\x01\xe1%v\x94\x83\\\xd3\xc6\x03\xab\x00\x9eAB\xe5,\xc6\xfb\xe2\xef_\x18=48^\xe0\x88\xf9c#\xe5\r\xfa0\xebC%\xfe\xb6)\x17\xb1{\x1e\xc8\x83\x0f\xc0/\x9c\xcf@,\'\xf0\xf0H\xc4\x9cW\xff\xac\xca:\f\x81\xf0\xd06\x17~\x918~\xa16 W\x83P\x11\xc1aG8p}k\xc7\xe0\xd8\xdd<\r\x97\x971j\b\xe7\xf6\xdc\x9c\x1e\x80/\x9d\xf0\x84\xbb%\xc0\x84d\r\x92K\xa9\xa4\xd2\x17b\xe0\x1dv2\x80\xe6\xf3|G\xb2\x0f\xcbo6\xd03\xbc\x9a\x97\xd4\xd1{\xd8\xb4\xbc\x19N\xf5\x13\x91\x9e\xcf\xb8\xef\xe2\x18@\x0f\xf8A\xa6M?\xce\x9a\xc7Z\x02\xa5u\xa1>\xf3\xdb\xf7\xc8\x8f\xa0\xeco`\xea\x9a\x06I\xc0\x91-\xeb\xc0\xd4\x1af\xbf\x7f\xbd?\x12*\xfap\xb9\xfcM\xe2\x93\x1a_\xd4\xfd}\x19b\xbb\xe1\xe0@\x85\xcc\xc9gZ\x10\x8arc\xa2\xc1\xe6\xb9h\n\x00T\xd8\xffzzz\x1a\xe6\xa1\xc2,,\xf0\xdc\x15\xee\xb9\xb8c\xb5f\xf4Wne\xaaX\xc01]O\xd8\x10\xa6-\x99\xc4[\xaf$\xc3\x02}\aR\x03\x1b\xed\xa4') getdents64(r1, &(0x7f0000000280)=""/203, 0x1af) 17:50:37 executing program 4: r0 = userfaultfd(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)=0x7ff) read(r0, 0x0, 0x0) 17:50:37 executing program 0: r0 = semget$private(0x0, 0x3, 0x46) r1 = open(&(0x7f0000000000)='./file0\x00', 0xc442d64cf7a51289, 0x50) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0xfff) getdents(r1, &(0x7f0000000080)=""/243, 0xf3) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff) 17:50:37 executing program 5: ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x4202}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x8000}, {}], 0x6, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={0x3}, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x24000, 0x0) r1 = syz_open_pts(r0, 0x8102) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000200)=0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r3 = socket$inet6(0xa, 0x800, 0xffffffff) r4 = fcntl$getown(r1, 0x9) ptrace$pokeuser(0x6, r4, 0x0, 0x7) ioctl(r3, 0x6, &(0x7f0000000dc0)="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") r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r2, r5, &(0x7f00000000c0)=0x202, 0xdd) 17:50:37 executing program 2: r0 = socket(0x18, 0x4, 0x0) accept4(r0, 0x0, 0x0, 0x0) 17:50:37 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x0) sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x880}, 0x80, &(0x7f0000000640)=[{&(0x7f00000000c0)="21a8e0fadac33e00cfcc163b766ab52337a77108aea1a115b28741e00c0b30545755883d07f055b98a3b2984406c7213553d12dd7068e681e67996b31ed0f1d88aecb65d1479d2305bf60f0bd72f8801b0ab9d5096447f6a0c48170d8ccc1b63cb8e6279f7f0b34b7231fc678bd39cc23bd54a15261ec4422774d4e522c72cbdc30c27b72ecd", 0x86}, {&(0x7f0000000180)="b6a327ac7649e4d16b7acab1df1644516edc53df5e3eb060ff262d1fcc2aa66a65c29af821ae9ab8681ab4", 0x2b}, {&(0x7f00000001c0)="7f12a5c805ed8406a86f5fe4083d7762f679f0bdafdef999cdcfdca142e1523d1bd2d9", 0x23}, {&(0x7f0000000200)="837fe28bc43a39f9bcd3b81ed3b91ccd11eb503287f93613212e83f3fc744d522434e4dbe9e5acdc23443ddd15560d3717c033a203594d9d6995f08b2514c69cb829aef3c7c88cb638c847a36fe7de20a7617cd68be4ac50ea1d0ece33472881a938ab7354187f043d379c41f964dc0fae", 0x71}, {&(0x7f0000000280)="8d8a8cb9acae7bd2de9322a09b1fb5822bdad34956a2d32beaa700e4e2cacd5d8db354d79afd9601d1c555e88c00a664746c35c2cae2c1a67f20326497e2fe1242644b13639b5e685040d81415ff01ac6f732bce9adcbe143c03af0e2b3f8b71c8f29de262d8b2e8bb600528e7c9429da9fd1b38fccfd7efad4cfaf982a3f645bcbf7a1fca838b748306b8e4210e8b241eda5d2da6b08d27", 0x98}, {&(0x7f0000000340)="2fd05e66ecb17d373bbde720b02336c594f103ab9f9188df98ddf44a7e0c9593339b6452c661ff31ecb3fdb06154aa2913318a68fa2e8a96c2b876535894bc1ed0fcf109e8cf48c7e2e84eddc2dbab9ba89f334ae5cf17066e56e9ba8389cdca62daa5805c5bc0ff770ff45744669ab9830c359d8279876550f7ac7d47e919098c56be575cf3348975eb6b555b6ccab40c15372123e6caba442d5388d12a5606c15ba056e47652dc9ea84bc93a3c333f0356706debc9a078c4e594f754775b18089c16afad49c0", 0xc7}, {&(0x7f0000000440)="04e9062b49907b2a8f0b1ad341ea8e96ae4ae3e422ecd9c4a90418e7be2439fc3ef64cc3926ec1264067036c74ee47c9ffae4118aab32f2d05e0f69ee98b3d44ea01fc04629c266d80bf6512df", 0x4d}, {&(0x7f00000004c0)="63518573bd2fe7428cbc13ba45aafdbb5d06f0461182173944d4b1aa6a3da84faa77a11f048823adfe5a449b716ce8ffd4492ce2a82ea24fde7ccd22084284b6a06db07bf778ad93ef65d1df062b279cdaddb7f8d620ef96bf816a41079c22bb4cd16d9a74", 0x65}, {&(0x7f0000000540)="40d7a0dcc725cfe5e837a35cafb6c2b605b21e257febc13d320fc4424bea5c6d910dac07921aa5623b22bb1952d7affa0613aafdf65619d6458dc39e1942ee7f3009fa", 0x43}, {&(0x7f00000005c0)="24736166d6e79afcb3285199db881d0a61122130d3ae2c2e7345f7ed98cd2719848c2caf1ca93a0b78da6b0e78841d81ef1cbde4766df6f606a32453a967b88752e32767fe82f1bfc82f2fb14f6ac9b7261902ff3e00b371c866", 0x5a}], 0xa}, 0x4000000) 17:50:37 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x10) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) ioctl$sock_ifreq(r0, 0x8970, &(0x7f0000000100)={'eql\x00', @ifru_settings={0x20, 0x36, @raw_hdlc=&(0x7f0000000080)={0x0, 0x2}}}) 17:50:38 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:38 executing program 5: r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x10000) 17:50:38 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) 17:50:38 executing program 2: r0 = socket(0x1c, 0x400000000, 0x6999f1ef) accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x1) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000000c0)={0xe, 0x6, 0xffffffff, 0x6, 0x9e, "aadbd9bc5e100892a511445487265f8241c11a95b170c05eb31a2f84846306fd4488f9d0a13fa9c909f52d7f252c655d965d3ffad8fa5846d3eb86c4d0ff09be0358c87c2b65acf778ffe2f5a2d44b4787d2ec88cfcec1aa16c7422c0344b3e9d42281871b25409d9c392dd324d7911cf4146eff9af5ca3e897c159606dbbdd221035765f2fe03daf56b773672b5330928d8863f7c1b39ba9a1172b9fc23"}, 0xaa) init_module(&(0x7f0000000000)='wlan1trusted\x14$*\x00', 0x10, &(0x7f0000000040)='.-*lo\x00') 17:50:38 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x30000, 0x20) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f00000000c0)) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000001c0)={0x4, @raw_data="d539b7b9722081698103eb6b10387b6aa334bdb46e6679cfb3a15a5392706573cbdc2b95d2df68b1860ceffc3ac6bc0eaebd88cda6738d021737c0debc9913c967c2a82e11be706c8b064e02953b84c8f6cbb5061a9c41cd24e7a8856f0d47f561b183713f2571f72e9ea5a0ce87e8be76bcba20ab7f826070e101a98ad7ea317410a03681e40986e401a3f37271b456e151f572c341be4c2d7938e4ca08703655916575f83eb8d17551a2f3dcd04faa6c0d7b5189cb99fc63445692868174dac8c5f1fc49db6db7"}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r1 = semget(0x2, 0x7, 0x22) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x800]) clock_getres(0x5, &(0x7f0000000040)) 17:50:38 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) sendfile(r0, r1, 0x0, 0x8000fffffffe) 17:50:38 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = semget$private(0x0, 0x4, 0x7c) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0x7, 0x1000}, {0x0, 0x2, 0x1000}, {0x1, 0x6, 0x800}], 0x3, &(0x7f0000000040)={0x0, 0x989680}) 17:50:38 executing program 5: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x85, 0x0, 0x38, 0x56, 0x99, 0x0, 0x20, 0x2, 0x0, 0x800, 0xb11}, [{0x3, 0xfff, 0x8, 0x4, 0xad6, 0x9, 0x0, 0xc742}], '4'}, 0x59) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) bind$inet(r1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r2, r3, 0x0, 0x80000001) 17:50:38 executing program 2: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x101040, 0x0) r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 17:50:38 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7, 0x1) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f00000000c0)={0x6, 0xe32}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) r1 = userfaultfd(0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x2003) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@hyper}) read(r1, 0x0, 0x0) 17:50:38 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x210000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000380)={{0x9a, 0x40}, 'port1\x00', 0x80, 0x40000, 0xb9b, 0x1, 0x4, 0x200, 0x4, 0x0, 0x0, 0x4}) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0x8, "6a423d858da230d60679eb95792ac59898c243b04a218eca44a61a423d2c2698", 0x2, 0x1}) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000005c0)={0x0, 0xaa, "73bb08a8a5aa365e3069142007a68a0deadbfd22bac95fcab0ddc6fcba553abadfbcbe569b8ff2aa9b33f6ec421efe280cb1328c5e8e8e641490e64c00ebc1b37f26deb6db3e253c5e2654310f949b69cd2eef10483f214763944b6db3bfc06e4465286dc73cc59c88e01cee6e4f5e215c69873b5827b8b9e78f0a6c07a830a0cc690c2279552bc96f269774931a27b6366f6143d19ec86daa1da4320fecca21685e68f1564c4eb5fcf0"}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="bc007400", @ANYRES16=r1, @ANYBLOB="060627bd7000fddbdf250a000000200001000c000700120000002000000008000200bb00000008000200010000006000020008000900090000000800070008000000080008000700000008000b000a000000080009000500000008000300010000000800070001000000080004000100000014000100e00000010000000000000000000000000800060000000000200003000800050000000f6114000600549263c15d97c2263596de2075ab7ec10800050005000000"], 0x3}}, 0xc005) socket(0x18, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f00000004c0)=@v2={0x3, 0x1, 0x13, 0x1, 0xcf, "1d5d4abe2442c7f001d8ae07ab809fa1d566dcca5411ce63932a58185b7564703d69d9e98100162a026e07634c8ddbf9583b025e96ef5b889b7d01c1708aeba751a1524a1e0bbdd6f7514ebe4931a96779e3b3f661e69a145463a819d6e0d7e48b14de6dfc7d04668987a3549360ea4f8f807d441408648b3152fec0340e8568af289320b3112a09ba9eb40d1d7b850d75fb2125cb7a42e1840ed6691262fcc52b5b478448c6e90501dc5d29f8269372b3cf545e6b005685067f4c2aeca701fed238a3d5c73fae52b26594c7709f2d"}, 0x44, 0x3) accept4(r0, 0x0, 0x0, 0x0) 17:50:38 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x80003, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000040)=0x400) [ 372.797667] QAT: Invalid ioctl 17:50:39 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:39 executing program 5: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x85, 0x0, 0x38, 0x56, 0x99, 0x0, 0x20, 0x2, 0x0, 0x800, 0xb11}, [{0x3, 0xfff, 0x8, 0x4, 0xad6, 0x9, 0x0, 0xc742}], '4'}, 0x59) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) bind$inet(r1, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') sendfile(r2, r3, 0x0, 0x80000001) 17:50:39 executing program 2: r0 = socket(0x1f, 0xfffffffffffffffe, 0x559) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000a00)={0x0, @dev, @local}, &(0x7f0000000a40)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0}, &(0x7f0000000ac0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000b00)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x4e23, 0xffffffffffff3151, 0x4e21, 0x7, 0xa, 0x80, 0x80, 0x4, r2, r3}, {0x100000001, 0x0, 0x7, 0x200, 0x7ff, 0x2ba7, 0xffffffff, 0x4}, {0x5e, 0x401, 0x81, 0xffffffffffffffcd}, 0x9b3, 0x0, 0x2, 0x1, 0x1, 0x1}, {{@in=@rand_addr=0x4, 0x4d5}, 0xa, @in=@empty, 0x3502, 0x3, 0x2, 0x3, 0xffffffff, 0x2, 0x3}}, 0xe8) 17:50:39 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0) 17:50:39 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000080)={r1}) 17:50:39 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) 17:50:39 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x42c0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0xfffffffffffffffe) userfaultfd(0x80000) read(r1, 0x0, 0x0) eventfd(0xa8f) 17:50:39 executing program 2: socket$bt_hidp(0x1f, 0x3, 0x6) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0xb7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}}, [0x3, 0x1e, 0xb35, 0xffffffff, 0x0, 0x6, 0x6, 0x80000001, 0xaf73, 0x4, 0x80, 0x4, 0x2, 0x401, 0x100000001]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in={{0x2, 0x4e22, @loopback}}, 0x3, 0x1ff, 0x3f, 0x9, 0x10}, &(0x7f00000002c0)=0x98) r2 = socket(0x18, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) accept$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, &(0x7f0000000040)=0x1c) 17:50:39 executing program 0: r0 = userfaultfd(0x800) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)={0x0, @aes256}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) socket$nl_generic(0x10, 0x3, 0x10) 17:50:39 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0) 17:50:39 executing program 5: r0 = syz_open_procfs(0x0, 0xfffffffffffffffe) getdents64(r0, &(0x7f0000000000)=""/192, 0x27) 17:50:39 executing program 4: r0 = userfaultfd(0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x40, 0x80000) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000040)) read(r0, 0x0, 0x0) 17:50:40 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)) 17:50:40 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:40 executing program 2: r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000000)=0x4) 17:50:40 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0) 17:50:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/37, 0x25}], 0x1, 0x0) 17:50:40 executing program 4: r0 = userfaultfd(0x7fd) read(r0, 0x0, 0x0) 17:50:40 executing program 4: r0 = userfaultfd(0xa00000000000001) read(r0, 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vfio/vfio\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0x10, "46ac0331462333f605606d5307da1c37"}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e21, 0x1, @loopback, 0x5}}, 0xffffffffffff5739, 0x7}, &(0x7f00000003c0)=0x90) 17:50:40 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0) 17:50:40 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x80000000}, 0x4) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) 17:50:40 executing program 5: r0 = socket(0x2, 0x2, 0x0) sendto$unix(r0, 0x0, 0x0, 0x3f9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020ee0e5000000000000696c653000"], 0x1) 17:50:40 executing program 2: r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x20000000, 0x8, 0x4}) 17:50:40 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:40 executing program 5: r0 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000140)=@in6={0x2, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffea]}, 0x3}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="818338da0b3bf92e", 0x8}], 0x1}, 0x0) 17:50:40 executing program 2: r0 = socket(0x18, 0x0, 0xfffffffffffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000)=0x1, 0x4) 17:50:40 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0xffffffffffffff90) r1 = msgget$private(0x0, 0x288) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/178) 17:50:40 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f00000002c0)) r1 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000004c0)={0xfffffffffffffffe, 0x0, [], {0x0, @reserved}}) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) r3 = getpgrp(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0xfffffffffffffffc, 0x0, 0x1, 0x10000}) ioctl$DRM_IOCTL_SG_ALLOC(r2, 0xc0106438, &(0x7f00000000c0)={0x3bc, r4}) write$P9_RGETLOCK(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1e00000037000022ffffef000200", @ANYRES32=r3, @ANYBLOB="000084c1a36c7e32d54e4dd4a8b50f47f03a71937a1a4ba6d6f206e4551eedd4b8237d9138b8450f27d14a297648dcd74a4fd51a00584d41e34d52ead1607516cd344410cb7f0f054fa063599b79f0f8ed7dca0d94827e553065ef746334c8ab71359cc43106"], 0x14) r5 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @ipv4={[0xfd], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}, 0x1c) r6 = msgget$private(0x0, 0x0) r7 = geteuid() getgroups(0x3, &(0x7f0000000100)=[0x0, 0x0, 0xffffffffffffffff]) getresuid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)=0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000380)={0x0, 0x4}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={r11, @in={{0x2, 0x4e20, @remote}}, 0x1, 0xffffffffffffffff, 0x7, 0x3, 0x82}, 0x98) msgctl$IPC_SET(r6, 0x1, &(0x7f0000000300)={{0xff, r7, r8, r9, r10, 0x4}, 0x3, 0x2, 0xa743, 0xfffffffffffffffc, 0x9, 0x0, r3, r3}) r12 = semget(0x2, 0x6, 0x700) semctl$SETALL(r12, 0x0, 0x11, &(0x7f0000000680)=[0x1f, 0x5]) 17:50:40 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0) 17:50:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x14, 0x4, 0x4, 0xb}, 0x2c) dup2(r2, r3) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r5, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000840)="902e700e7c23961c8c16bc6855a3e165807ea6608424caaed001f5c95e87e6152cceb778c747c4077fc8691c64a02de31f901130cb144424f8261bb2f4f116da597c505c1be9fe5ba631655ec717644bffffab04d145bbd9e2e4419c8e60ea4f0241d888ab74025cf666c39510298b334b1d4499a88521243cc7b73f7f350000000030d7276605f4a40dd06e20cfb7f22ff9af8d47f95df489c3ebc045e43120772c0c402606e5079a314a44e416acc22c51ddaad458f5787a8029557a99731c094e315b891ea34e817c28e928abe270726d703936e6e1", 0xd7}, 0x68) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') epoll_create1(0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311, 0x0, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x3, 0x0, &(0x7f0000000440)="2c5bb5"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x7) 17:50:41 executing program 2: r0 = socket(0x9, 0xf, 0x5) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x101200, 0x0) openat(r1, &(0x7f0000000080)='./file0\x00', 0x80000, 0xa26dd1c37b61f7a2) accept4(r0, 0x0, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000100)=0x8, 0x4) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000000c0)={0x0, 0x1, {0xf, 0x6, 0x2, 0x5, 0x5, 0x1, 0x2, 0x97}}) 17:50:41 executing program 4: r0 = userfaultfd(0xfffffffffffffffd) read(r0, 0x0, 0x0) 17:50:41 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:41 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0) 17:50:41 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20004000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x67582b154432e847, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000200)={{0x2, 0x4e24, @broadcast}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x2, {0x2, 0x4e21, @empty}, 'veth0_to_bridge\x00'}) [ 375.228187] binder: 14701:14702 got transaction to context manager from process owning it [ 375.236964] binder: 14701:14702 transaction failed 29201/-22, size 0-0 line 2887 17:50:41 executing program 4: r0 = userfaultfd(0x80000) read(r0, 0x0, 0x0) [ 375.341414] binder: BINDER_SET_CONTEXT_MGR already set [ 375.347109] binder: 14701:14702 ioctl 40046207 0 returned -16 17:50:41 executing program 2: r0 = socket(0x18, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 375.423412] binder_alloc: binder_alloc_mmap_handler: 14701 20010000-20014000 already mapped failed -16 [ 375.516305] binder_alloc: 14701: binder_alloc_buf, no vma [ 375.522328] binder: 14701:14721 transaction failed 29189/-3, size 0-0 line 3035 [ 375.549311] binder: release 14701:14702 transaction 8 out, still active [ 375.556522] binder: undelivered TRANSACTION_COMPLETE [ 375.573884] binder: undelivered TRANSACTION_ERROR: 29189 [ 375.579600] binder: send failed reply for transaction 8, target dead 17:50:41 executing program 4: r0 = userfaultfd(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000040)) read(r0, 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000100), &(0x7f0000000140)=0x4) bind$isdn(r1, &(0x7f0000000180)={0x22, 0x3, 0x40, 0xb369, 0xdf46}, 0x6) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @remote}}, [0x10001, 0x4, 0x8, 0x71, 0x4, 0x98, 0x1, 0x2, 0x8, 0x0, 0xfffffffffffffff8, 0x9c3d, 0x9, 0x5, 0x7]}, &(0x7f00000002c0)=0x100) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e20, 0x2, @rand_addr="4e5d4c96d62f67efbcec41a759fce2fc", 0x400}}}, 0x84) 17:50:41 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0) 17:50:41 executing program 2: r0 = socket(0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x1000, "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"}, &(0x7f0000001040)=0x1008) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001080)={r1, @in={{0x2, 0x4e23, @empty}}, [0x4, 0x9, 0x6, 0x58, 0x80, 0x9, 0x0, 0x3, 0x40, 0x1, 0x80000000, 0xca9, 0x1000, 0x9, 0x31]}, &(0x7f0000001180)=0x100) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000001480)={r2, 0x800, 0x79, "bf5cc726933085e130ec51c13d3026af94633d19b161383a8a3fee4780bea746e88920390e99b206796361201dbb26e9c96780164f178b1f6a92f66886bf30783c7d8d07928d9ce414071a95575069333edd6af3d8dc6509c76e51762f8f9b824e834843aaf52676d0980ca963e64e0b1d1aff78e5a4305aa5"}, 0x81) accept4(r0, 0x0, 0x0, 0x80803) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001200)={&(0x7f00000011c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001440)={r3, &(0x7f0000001240)="030d0de2feab1a65c434813fdff8e90c9517c798f3232131797b6e35ee969d250b01644ca9efa5813249865fc92e86e38c624f85aa515eeda82c4a71d16f1a61b4e6aeaedef77d38888c049dd3d0833c52ea2e11437b59d12865f1355af449c77cd3bd4647e34e494f5fabe8b97eb7ab6bc85105d3d77e55b2dd8f8fe5b39be7e3fe3558b427587e3ec5a910f9434bc68434d0c429aad52739e33ad10938360dc9dc46c71d90726b44a892e3b683d69d0ecbf46d03b416076b6856fe0a4dff9ba3d030f8a684a8643f65cf84adcc59e0074bff6a0f45486e64f84ceeda3ce1ab364c5d65", &(0x7f0000001340)="aa5f9b4d001eb07c70eba15de5a4ea311458b2c5e7c1ec97e31d9c35afad57c9cc2145096cd691c425ae6eb0a6f7035c1125cbdddb180390d32d92b8a2a610514e9b29879f238322e73cc978cc9d39186033443d7d7b880b289d1f81b1986d29d1a9a8f6671c91cd8afec7653a34a658e57d3806ab474d0f57213e7e6bb6b51b3754b1dca9eaaf3a50d2d1e79afe4a15082c1b0251fb4b9ae784ea5ac8cff6df6c61caab6d7bf28db47cacf05e29c90998b10475d1aede9e0f484bf83fefa39d20e73233dcec1c917ec3b87183ee61d792a3a9258659f7f95b9825c1003f54a2dfc982e27a785b8edef8b79d95203051983849be58a9a6"}, 0x20) 17:50:41 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:41 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x14, 0x4, 0x4, 0xb}, 0x2c) dup2(0xffffffffffffffff, r0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) chown(0x0, 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') epoll_create1(0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311, 0x0, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x3, 0x0, &(0x7f0000000440)="2c5bb5"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 17:50:41 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x80, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000340)=0x5) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40, 0x0) socketpair(0x4, 0x4, 0xffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x222a00, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x200e80, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2020100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r2, 0x500, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$KDGKBTYPE(r5, 0x4b33, &(0x7f0000000380)) 17:50:42 executing program 2: r0 = socket(0x18, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e22, @broadcast}}) 17:50:42 executing program 4: r0 = userfaultfd(0x800) read(r0, 0x0, 0x0) 17:50:42 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0) [ 376.189466] binder: 14751:14752 got transaction to context manager from process owning it [ 376.198208] binder: 14751:14752 transaction failed 29201/-22, size 0-0 line 2887 [ 376.280991] binder: BINDER_SET_CONTEXT_MGR already set [ 376.286771] binder: 14751:14767 ioctl 40046207 0 returned -16 17:50:42 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0) 17:50:42 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0xffffff6f) 17:50:42 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = semget$private(0x0, 0x7, 0x200) semctl$IPC_INFO(r0, 0x4, 0x3, &(0x7f0000000000)=""/132) 17:50:42 executing program 2: r0 = socket(0x18, 0x0, 0x0) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0xffffffffffffffed) accept4(r0, 0x0, 0x0, 0x0) socket(0x7, 0x80005, 0x7fff) [ 376.405784] binder_alloc: 14751: binder_alloc_buf, no vma [ 376.411455] binder: 14751:14752 transaction failed 29189/-3, size 0-0 line 3035 [ 376.505407] binder: release 14751:14752 transaction 12 out, still active [ 376.512602] binder: undelivered TRANSACTION_COMPLETE [ 376.531004] binder: undelivered TRANSACTION_ERROR: 29189 [ 376.536802] binder: send failed reply for transaction 12, target dead 17:50:42 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x40000) write$P9_RSTAT(r0, &(0x7f0000000040)={0x71, 0x7d, 0x2, {0x0, 0x6a, 0x7, 0x3, {0x80, 0x1, 0x3}, 0x8000000, 0x1, 0x400, 0x4, 0x7, 'wlan1@&', 0x16, 'selinuxprocbdevtrusted', 0x8, 'rlo][]-[', 0x12, 'eth0,user\xe7procGPL*'}}, 0x71) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) 17:50:42 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0) 17:50:43 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:43 executing program 4: r0 = userfaultfd(0x4) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000240)) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f00000004c0)={0x1, 0x0, 0xfb, 0x5, {0x7ff, 0xfa8, 0x100, 0x6b}}) read(r1, 0x0, 0xff05) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x9c, r2, 0x420, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10c00000000000}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xba7}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@sha1={0x1, "5a8d3671ac8d56e0a2662b62cd21d7d37d2816ca"}, 0x15, 0x3) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000480)) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, r2, 0x308, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffffb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x558}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 17:50:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000008c0)) 17:50:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x14, 0x4, 0x4, 0xb}, 0x2c) dup2(r2, r3) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x4020011, r5, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000340)='./file0\x00') ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311, 0x0, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001440)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x2, 0x0, &(0x7f0000000440)=',['}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x7) 17:50:43 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0) 17:50:43 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x2, 0x100000001]) r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f00000001c0)="2ff0af3060c0bd94e5ea786c61f7dac36261954c60ede27d22d222df4cf02531468f3a686baacaa453b4fcf574dd6adaca3b6b55a34cd079e13c865ad97ebee2601d3c368910f5c7d147cd3e9c06ead424185eeaf3b8ceb208713a87882194ed4a8ea00f023f6741498603e9d2e70f29ed7a06f3990713d3bdef11d7cafa486e60ee82f41d353a874ba88bdc002bfeff52bd1305db04aa2b3cffa16efed1fee519155c0cdf73b646b165b86c4ddc7209bdfb2cc6ecf53b995f23ed2ece5fc13e2a98cc6df8f4f3b90fe25bdf6aa56ff579140bd15a00498475c4f3ee6f064ffda5fac5bce71afd7cf5f3e1ea28a3a1e91e8d14e4e3661d", 0xf7, 0xfffffffffffffffb) r2 = request_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='/dev/cec#\x00', 0xfffffffffffffffe) keyctl$search(0xa, r1, &(0x7f0000000140)='pkcs7_test\x00', &(0x7f00000002c0)={'syz', 0x0}, r2) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x5, 0x4, 0x8, 0x80}, {0x0, 0x8, 0x9, 0x7}, {0xfffffffffffffffa, 0xa40, 0x6, 0x7}, {0x1, 0x200, 0x6cf, 0x2}, {0x7, 0x9, 0x2, 0x4}, {0x6, 0x1, 0xfffffffffffffffc}, {0x100000000, 0x4, 0x9, 0x7e00000000000000}, {0x7fffffff, 0x7, 0x10000, 0x80000001}]}) [ 377.197111] binder: 14800:14801 got transaction to context manager from process owning it [ 377.205829] binder: 14800:14801 transaction failed 29201/-22, size 0-0 line 2887 [ 377.247471] kvm: SMP vm created on host with unstable TSC; guest TSC will not be reliable [ 377.258294] binder: BINDER_SET_CONTEXT_MGR already set [ 377.263977] binder: 14800:14801 ioctl 40046207 0 returned -16 [ 377.284446] binder_alloc: binder_alloc_mmap_handler: 14800 20010000-20014000 already mapped failed -16 17:50:43 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0) 17:50:43 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) 17:50:43 executing program 0: r0 = semget(0x0, 0x1, 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0xfffffffffffffffd, 0x1]) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x3, 0x111000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000540)) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xc4, r3, 0x814, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xae}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x308b}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfdd}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000580), &(0x7f00000005c0)=0x4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r1, 0x9, 0x4}, &(0x7f00000000c0)={'enc=', 'raw', ' hash=', {'crc32-generic\x00'}}, &(0x7f00000001c0)="529a27d7e8754d17b874783d36b3c0230fcf886c6204f0a9cf0c0740ec1897035dbd252f38bef96f37cb2169432b876198eebcdb75e13c57baace3b81af433870f7862a5bee9fd97aaaf8949f5919eb5adc39b62c985", &(0x7f0000000240)=""/219) [ 377.401373] binder_alloc: 14800: binder_alloc_buf, no vma [ 377.407235] binder: 14800:14818 transaction failed 29189/-3, size 0-0 line 3035 [ 377.434427] binder: 14800:14819 got transaction to context manager from process owning it [ 377.443195] binder: 14800:14819 transaction failed 29201/-22, size 0-0 line 2887 17:50:43 executing program 2: [ 377.545649] binder: release 14800:14801 transaction 16 out, still active [ 377.552917] binder: undelivered TRANSACTION_COMPLETE [ 377.565369] binder: undelivered TRANSACTION_ERROR: 29189 [ 377.571095] binder: send failed reply for transaction 16, target dead 17:50:43 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000140)=""/96, 0x60}], 0x1, 0x0) 17:50:43 executing program 4: r0 = userfaultfd(0x80800) read(r0, 0x0, 0x3fa) 17:50:44 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000400)=""/100, 0x64) close(r1) 17:50:44 executing program 5: 17:50:44 executing program 2: 17:50:44 executing program 0: 17:50:44 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) 17:50:44 executing program 4: r0 = userfaultfd(0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) write$capi20_data(r1, &(0x7f0000000040)={{0x10, 0x7, 0x8e, 0x80, 0xd16, 0xfffffffffffffffe}, 0x41, "9c7330159f5f3afa92b7ff4536cd89a9cfc9c6464494c58126b43acc98683f5df59a5e9f5b70e741819a7312a11c22aa98d169320b91decbed6ec84941055c9e06"}, 0x53) read(r0, 0x0, 0xfffffd28) 17:50:44 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f00000001c0)=""/196, 0xc4}, 0x10000) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffff7fffffff, 0x8400) r2 = gettid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0xe2b9, 0x65f2, 0x7, 0x9, 0xffff, r2}) 17:50:44 executing program 2: 17:50:44 executing program 5: 17:50:44 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) 17:50:44 executing program 4: r0 = userfaultfd(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r2 = shmget(0x1, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) r4 = getegid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) getgroups(0x5, &(0x7f0000000240)=[0xee01, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff]) inotify_init() shmctl$IPC_SET(r2, 0x1, &(0x7f0000000280)={{0x39, r3, r4, r5, r6, 0x4, 0x200}, 0x4, 0x81, 0x9, 0x80000001, r1, r1, 0x400}) tkill(r1, 0x2b) read(r0, 0x0, 0x0) process_vm_writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/173, 0xad}], 0x1, &(0x7f0000000540)=[{&(0x7f0000000400)=""/226, 0xe2}, {&(0x7f0000000500)=""/58, 0x3a}], 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) 17:50:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) sync_file_range(r2, 0x0, 0x0, 0x4) 17:50:45 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) close(r1) 17:50:45 executing program 5: 17:50:45 executing program 2: 17:50:45 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00', 0xffffffffffffffff}, 0x30) ptrace$pokeuser(0x6, r1, 0x314, 0x401) 17:50:45 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0) 17:50:45 executing program 5: 17:50:45 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200001, 0x0) read$alg(r0, &(0x7f0000000040)=""/47, 0x2f) r1 = semget$private(0x0, 0x4, 0x82) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000080)=[0x401, 0x4, 0x0, 0x9]) 17:50:45 executing program 2: 17:50:45 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x0) 17:50:45 executing program 4: r0 = userfaultfd(0x80800) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1) read(r1, 0x0, 0xfffffffffffffd60) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) socketpair(0x8000000000001e, 0x1, 0x4, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f00006c4f60)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1) recvfrom$inet6(r3, &(0x7f0000000080)=""/44, 0x2c, 0x2, 0x0, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="b6009f370f931ea3a8a1f1ebce973c661c4c0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r4, 0x81, 0x8}, &(0x7f0000000240)=0xc) 17:50:45 executing program 5: 17:50:45 executing program 2: 17:50:46 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) close(r1) 17:50:46 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x0) 17:50:46 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x14e) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x9f, "cb62a945dd16fc81ecfa591e9746f5cbf7dba3da5f6ea99ea8e77461753b380c883b6a35642450ff5dea0ab0e3a2bb69e7bbcf130c692201cbfa5f6a923bfadf8b59ba7538ba2a1a594c289edcfc2a920d1d5197caf436369b1a52ab490a69ea5cc3bd1df4bf645d11e529b6d8347acfb73c65f8a68716fafc044e62465c20ca8a49ab41a70f5e7f67a6e57493c043ff0b2752ff39bb9dff50cc9d2bd0e6d6"}, &(0x7f0000000140)=0xc3) 17:50:46 executing program 5: 17:50:46 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)=[0x7]) r0 = accept4$inet(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x80800) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000100)=ANY=[@ANYBLOB="080000000000000002004e22ac1414aa00000000000000000000000000e5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ff0000000000000000010000000600000002004e21fffeffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffff0000000000000000000000000002004e21ac1e010100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001a247f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e0000001000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x390) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r1 = semget(0x0, 0x0, 0x1) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0x5]) 17:50:46 executing program 2: 17:50:46 executing program 2: 17:50:46 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x0) 17:50:46 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x200000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3}) 17:50:46 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x101001, 0x0) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x85, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', r1}) 17:50:46 executing program 5: 17:50:46 executing program 2: 17:50:47 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, 0x0, 0x0) close(r1) 17:50:47 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0) 17:50:47 executing program 5: 17:50:47 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x109240, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000040)={0x0, 0x8, 0x3008, 0x1}) 17:50:47 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000100)={0x7ff, 0x2, 0x100, 0x2}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x129100, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x5, 0x7, 0x4, 0x0, {}, {0x2, 0x1, 0xd80c, 0x7, 0xfffffffffffffffa, 0x0, "891ecaba"}, 0x401, 0x5, @fd=r1, 0x4}) 17:50:47 executing program 2: 17:50:47 executing program 5: 17:50:47 executing program 2: 17:50:47 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0) 17:50:47 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0xfffffffffffffcf3) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x800) socket$pptp(0x18, 0x1, 0x2) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10, 0x0, 0x4}, 0x10) fchdir(r0) 17:50:47 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x80000001, 0x5, 0x8, 0x5]) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000040)={0x4, 0x1ff, 0xef58, 0x3}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'rose0\x00', {0x2, 0x4e22, @broadcast}}) 17:50:47 executing program 5: 17:50:48 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(0xffffffffffffffff) 17:50:48 executing program 2: 17:50:48 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0) 17:50:48 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = semget$private(0x0, 0x3, 0x600) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xc28, 0x1800}, {0x3, 0x1ff, 0x800}], 0x2, &(0x7f0000000040)) 17:50:48 executing program 5: 17:50:48 executing program 4: r0 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x70, 0x7430, 0x5, 0x9, 0x3763, 0x0, 0x7, 0x0, 0x0, 0x1, 0x4, 0xb0d, 0x0, 0x4, 0x400, 0x0, 0x9, 0x6, 0x8, 0x2, 0x2980, 0x8, 0x8, 0x5, 0x80000001, 0x0, 0x0, 0xd8, 0x2a, 0x7, 0x0, 0xffffffffffffffff, 0x73, 0x80000000, 0x8, 0x7, 0x9, 0x0, 0x94c, 0x4, @perf_config_ext={0xf8c, 0x9}, 0x4000, 0x100000001, 0x0, 0x2, 0x20, 0x3ff, 0x80000001}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0xe) r1 = socket$netlink(0x10, 0x3, 0x1d) read(r0, 0x0, 0x2a2) dup2(r0, r1) r2 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x105300) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:50:48 executing program 2: 17:50:48 executing program 3: 17:50:48 executing program 5: 17:50:48 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = semget(0x1, 0x4, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/49) 17:50:48 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x42) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x2, 0x70bd28, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x11, 0x7, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}}, 0x4000) r2 = userfaultfd(0x0) read(r2, 0x0, 0x1ad) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 17:50:48 executing program 3: 17:50:48 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(0xffffffffffffffff) 17:50:48 executing program 2: 17:50:48 executing program 5: 17:50:48 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x27, 0x88200) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$l2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x4, 0x4, {0xa, 0x4e24, 0x400, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xf05}}}, 0x32) 17:50:49 executing program 3: 17:50:49 executing program 4: r0 = userfaultfd(0x801) read(r0, 0x0, 0x2f4) 17:50:49 executing program 5: 17:50:49 executing program 2: 17:50:49 executing program 0: r0 = semget(0x3, 0x3, 0x80) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x6]) r1 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000000)={0x5}) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$KDDISABIO(r1, 0x4b37) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) 17:50:49 executing program 3: 17:50:49 executing program 1: r0 = userfaultfd(0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) close(0xffffffffffffffff) 17:50:49 executing program 5: 17:50:49 executing program 4: r0 = userfaultfd(0x80008) read(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x13, &(0x7f0000000040), &(0x7f0000000080)=0x4) 17:50:49 executing program 3: 17:50:49 executing program 2: 17:50:49 executing program 5: 17:50:49 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000080)={{0x6, 0x7fffffff, 0x5, 0x7ff, 0x1, 0x6}, 0xd392}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) 17:50:49 executing program 3: 17:50:49 executing program 1: 17:50:50 executing program 2: 17:50:50 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x1ed) 17:50:50 executing program 5: 17:50:50 executing program 1: 17:50:50 executing program 0: r0 = semget(0x2, 0x4, 0x284) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) 17:50:50 executing program 3: 17:50:50 executing program 2: 17:50:50 executing program 5: 17:50:50 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7}) close(r0) 17:50:50 executing program 1: 17:50:50 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x468801, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040)=0x9da9, 0x4) 17:50:50 executing program 5: 17:50:50 executing program 2: 17:50:50 executing program 3: 17:50:50 executing program 1: 17:50:50 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, r1, 0xb10, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xba}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44004}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd(0x0) 17:50:50 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = semget(0x1, 0x3, 0x0) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x9, 0x1000}], 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}) 17:50:51 executing program 5: 17:50:51 executing program 2: 17:50:51 executing program 3: 17:50:51 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000300)={0x0, 0x3f, 0x3, {0xf, @win={{0x4, 0x1, 0x8, 0x800}, 0xf, 0x7, &(0x7f0000000200)={{0xe8b, 0x3e, 0x8, 0x3d0}, &(0x7f00000001c0)={{0x8, 0x8, 0xffff, 0x3f}, &(0x7f0000000140)={{0xfffffffffffffffb, 0x8, 0x1ff, 0x7f}}}}, 0xffffffffffffbd78, &(0x7f0000000240)="6c6cff25b81b4eec8ffd72c68e30f27c455866090a5f76097667aa265397f1d0755c43188e2881857b960802fe5acc1fcf5f0d990f17634bcfc571b541790c1d2cdc64989b1cbb74d0a69ae2894dab4118a5bf6beee543f4f6fba57340151e9650295ff192ecbde64e450762066353b324eb361452619394815284afed1d2d881af069a76fa202", 0x100000001}}}) r1 = semget$private(0x0, 0x4, 0x2) semctl$IPC_INFO(r1, 0xabe93313ce790695, 0x3, &(0x7f0000000000)=""/248) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) 17:50:51 executing program 1: 17:50:51 executing program 4: r0 = userfaultfd(0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e22, 0x113, @ipv4={[], [], @broadcast}, 0x2}, {0xa, 0x4e23, 0x0, @local, 0x1}, 0xfffffffffffffffb, [0x7fff, 0x8, 0x2842, 0x7fff, 0x1ff, 0x4000000000000000, 0x100, 0x6]}, 0x5c) read(r0, 0x0, 0xffffffffffffff0f) 17:50:51 executing program 3: 17:50:51 executing program 2: 17:50:51 executing program 5: 17:50:51 executing program 0: r0 = msgget(0x1, 0x104) msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000007ae23f6480c95190f1a59157146ba098c62249736ef044345557018f0eb674dba2bf8ef9e70ae8bfa323a567ba03359203dff5ae38b66d02a0cc4ae3db3f4887d10ff28be186458541ba351a3212b7853140b0e81855c9be6bb29ca3d4644988293f0ffa484f46d85364254fd67efa039e2dd4b8646baa3c6cff70fc577ae5cf549edc3145854e2fe543d15cb429f7c6ac061da910"], 0x9d, 0x800) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) 17:50:51 executing program 1: 17:50:51 executing program 3: 17:50:51 executing program 4: r0 = userfaultfd(0xffffffffffffffff) read(r0, 0x0, 0x6b) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x5, 0xc0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x6, @random="41df826b0790"}, 0x14, {0x2, 0x4e22, @broadcast}, 'veth0_to_bridge\x00'}) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e20, 0x9, @empty, 0xb226}, {0xa, 0x4e20, 0x90, @local, 0x7}, 0x100, [0x1000, 0x73, 0x7, 0x6, 0x9, 0x8, 0x2, 0x5]}, 0x5c) syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0xde, 0x400) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x80) 17:50:51 executing program 5: 17:50:51 executing program 2: 17:50:52 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0x3, 0x4, 0x1, 0x3dccc875, 0x8000, 0x2}, 0x2}, 0xa) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) 17:50:52 executing program 3: 17:50:52 executing program 1: 17:50:52 executing program 5: 17:50:52 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) r1 = gettid() r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xff, 0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000180)={@hyper}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xfffffffffffffff2, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, r2, 0x0, 0xc, &(0x7f0000000040)='$vmnet0ppp0\x00', r3}, 0x30) 17:50:52 executing program 2: 17:50:52 executing program 5: 17:50:52 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x3, 0x6]) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f00000000c0)={0x9, 0x5, 0x8, 0x80, 0x5, 0x7, 0x4}) modify_ldt$read(0x0, &(0x7f0000000100)=""/186, 0xba) 17:50:52 executing program 3: 17:50:52 executing program 4: r0 = userfaultfd(0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt(r1, 0x800000000000010d, 0xb, &(0x7f000031df55)=""/4, &(0x7f0000b91000)=0x4) read(r0, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/163, 0xa3) open$dir(&(0x7f0000000180)='./file0\x00', 0x80, 0xc0) write$eventfd(r3, &(0x7f0000000140)=0x1, 0x8) 17:50:52 executing program 1: 17:50:52 executing program 2: 17:50:52 executing program 5: 17:50:52 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f00000002c0)={0x2a, &(0x7f0000000280)=""/42}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x10000000001]) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) setxattr$security_smack_entry(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='security.SMACK64MMAP\x00', &(0x7f00000001c0)='security.SMACK64\x00', 0x11, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000040)) unlinkat(r2, &(0x7f0000000200)='./file0\x00', 0x0) 17:50:52 executing program 3: 17:50:53 executing program 1: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_genetlink_get_family_id$ipvs(0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) prctl$PR_GET_SECCOMP(0x15) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x0) dup3(r1, r0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x9c5e83c8fc, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f, 0x1006000000000000}, 0x100) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, 0x0, &(0x7f0000000200)='TRUE', 0x4, 0x0) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 17:50:53 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x85e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x801) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) 17:50:53 executing program 4: r0 = dup(0xffffffffffffff9c) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @loopback, 0x4e20, 0x2, 'fo\x00', 0x8, 0x27db2edf, 0xa}, 0x2c) r1 = userfaultfd(0x0) read(r1, 0x0, 0x0) 17:50:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x6bf3041ee07a58c0}) 17:50:53 executing program 3: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311, 0x0, 0x3}], 0x0, 0x0, 0x0}) [ 387.335355] binder_alloc: 15209: binder_alloc_buf, no vma [ 387.341094] binder: 15209:15213 transaction failed 29189/-3, size 0-0 line 3035 17:50:53 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x94200, 0x0) 17:50:53 executing program 0: semget$private(0x0, 0x3, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x596, 0x400) bind$isdn(r0, &(0x7f0000000080)={0x22, 0x9, 0x3, 0x3, 0x8f5f}, 0x6) syz_execute_func(&(0x7f0000000000)="f2af0f01d842ded9eef20f1aecf30fbc86e7000000c4817df25fc3f39941da1adbf7") 17:50:53 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x85e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)) epoll_wait(r0, &(0x7f0000000100)=[{}], 0x1, 0x801) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000e8c000)={0x7}) [ 387.440864] binder: BINDER_SET_CONTEXT_MGR already set [ 387.446451] binder: 15209:15213 ioctl 40046207 0 returned -16 [ 387.480322] binder_alloc: 15209: binder_alloc_buf, no vma [ 387.486228] binder: 15209:15220 transaction failed 29189/-3, size 0-0 line 3035 [ 387.495902] binder: undelivered TRANSACTION_ERROR: 29189 [ 387.506270] binder: undelivered TRANSACTION_ERROR: 29189 17:50:53 executing program 5: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x10000000fffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, 0x0, 0x0) 17:50:53 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r0, 0x125d, 0x400000) 17:50:53 executing program 4: r0 = userfaultfd(0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000040)={0x7, 0x7, 0x7a}) read(r0, 0x0, 0x0) 17:50:54 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x0, 0x1]) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) 17:50:54 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x2, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x2000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000008c0)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000880)=0x800, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) 17:50:54 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKRRPART(r0, 0x125d, 0x0) 17:50:54 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) fdatasync(r0) 17:50:54 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0xffffffffffffffff, 0x1]) 17:50:54 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 17:50:54 executing program 4: r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) read(r0, 0x0, 0x0) 17:50:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e0000002b00812de45ae087185082cf0124b0d057e74400074100000000001883b2e6dc02e7dc8e5c8ef10b80a6", 0x2e}], 0x1}, 0x0) 17:50:54 executing program 2: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) mknod(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000380)='qnx4\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) 17:50:54 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000012c0)={0x5, 0x70, 0x9, 0x0, 0x1000000000, 0x6f46, 0x0, 0x4, 0x20, 0x2, 0x401, 0x100, 0x6f23952f, 0xfffffffffffffffd, 0x1, 0x2, 0xffff, 0x4, 0xfffffffffffffff8, 0xfff, 0x4, 0x7, 0x6, 0x1, 0xff, 0x100000000, 0xfffffffffffffffa, 0x6ad, 0x2, 0x6, 0xf5d7616, 0xffffffff, 0x9f, 0x4, 0x10001, 0xfffffffffffffbff, 0x7, 0x3, 0x0, 0x640d, 0x3, @perf_bp={&(0x7f0000001280), 0x3}, 0x8200, 0xfffffffffffffffb, 0x3f, 0x0, 0x2, 0x577, 0x1000}, 0xffffffffffffffff, 0x1, 0xffffffffffffff9c, 0x5) sync_file_range(r0, 0x1ff, 0x8, 0x5) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)) r1 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="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", 0x1000, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001080)={r1, 0x8, 0x1000000000ff}, &(0x7f00000010c0)={'enc=', 'pkcs1', ' hash=', {'cbcmac-aes-neon\x00'}}, &(0x7f0000001340)="b7b2bb2f506abecc51e2d7e81f2e5504ece975559ca74691f3799066c41e4924b52fef796978ee0b0b2d4ae6c99bc943c0b637fa6b61ee79d38cc97a3131fb55562f803d21db42e1c758a1624da250dbb0b54b9facdf5cf3d6c5df7b4af90a9533e5d0243a06", &(0x7f00000011c0)=""/139) keyctl$unlink(0x9, r1, r1) 17:50:54 executing program 3: [ 388.611112] ================================================================== [ 388.611847] BUG: KMSAN: uninit-value in memchr+0xce/0x110 [ 388.611847] CPU: 0 PID: 15276 Comm: syz-executor.5 Not tainted 5.0.0+ #16 [ 388.611847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.640300] Call Trace: [ 388.641570] dump_stack+0x173/0x1d0 [ 388.641570] kmsan_report+0x131/0x2a0 [ 388.641570] __msan_warning+0x7a/0xf0 [ 388.651197] memchr+0xce/0x110 [ 388.651197] tipc_nl_compat_link_set+0x121/0x1550 [ 388.651197] ? tipc_nl_compat_link_dump+0x5f0/0x5f0 [ 388.651197] tipc_nl_compat_doit+0x3aa/0xaf0 [ 388.651197] tipc_nl_compat_recv+0x1ae7/0x2750 [ 388.651197] ? tipc_nl_node_dump+0x1300/0x1300 [ 388.651197] ? tipc_nl_compat_link_dump+0x5f0/0x5f0 [ 388.651197] ? tipc_netlink_compat_stop+0x40/0x40 [ 388.651197] genl_rcv_msg+0x185f/0x1a60 [ 388.651197] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 388.651197] ? kmsan_internal_memset_shadow+0xc6/0x410 [ 388.651197] netlink_rcv_skb+0x431/0x620 [ 388.651197] ? genl_unbind+0x390/0x390 [ 388.651197] genl_rcv+0x63/0x80 [ 388.651197] netlink_unicast+0xf3e/0x1020 [ 388.651197] netlink_sendmsg+0x127f/0x1300 [ 388.651197] ___sys_sendmsg+0xdb9/0x11b0 [ 388.651197] ? netlink_getsockopt+0x1460/0x1460 [ 388.651197] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 388.651197] ? __fget_light+0x6e1/0x750 [ 388.651197] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 388.651197] __se_sys_sendmsg+0x305/0x460 [ 388.651197] __x64_sys_sendmsg+0x4a/0x70 [ 388.651197] do_syscall_64+0xbc/0xf0 [ 388.651197] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.651197] RIP: 0033:0x458209 [ 388.651197] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 388.651197] RSP: 002b:00007ff83e7d9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.651197] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 388.806286] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 388.806286] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 388.806286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff83e7da6d4 [ 388.806286] R13: 00000000004c57c8 R14: 00000000004d96b8 R15: 00000000ffffffff [ 388.806286] [ 388.806286] Uninit was created at: [ 388.806286] kmsan_internal_poison_shadow+0x92/0x150 [ 388.806286] kmsan_kmalloc+0xa6/0x130 [ 388.806286] kmsan_slab_alloc+0xe/0x10 [ 388.806286] __kmalloc_node_track_caller+0xe9e/0xff0 [ 388.806286] __alloc_skb+0x309/0xa20 [ 388.806286] netlink_sendmsg+0xb82/0x1300 [ 388.806286] ___sys_sendmsg+0xdb9/0x11b0 [ 388.806286] __se_sys_sendmsg+0x305/0x460 [ 388.806286] __x64_sys_sendmsg+0x4a/0x70 [ 388.806286] do_syscall_64+0xbc/0xf0 [ 388.806286] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 388.806286] ================================================================== [ 388.806286] Disabling lock debugging due to kernel taint [ 388.806286] Kernel panic - not syncing: panic_on_warn set ... [ 388.806286] CPU: 0 PID: 15276 Comm: syz-executor.5 Tainted: G B 5.0.0+ #16 [ 388.806286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 388.806286] Call Trace: [ 388.806286] dump_stack+0x173/0x1d0 [ 388.806286] panic+0x3d1/0xb01 [ 388.806286] kmsan_report+0x29a/0x2a0 [ 388.806286] __msan_warning+0x7a/0xf0 [ 388.806286] memchr+0xce/0x110 [ 388.806286] tipc_nl_compat_link_set+0x121/0x1550 [ 388.806286] ? tipc_nl_compat_link_dump+0x5f0/0x5f0 [ 388.806286] tipc_nl_compat_doit+0x3aa/0xaf0 [ 388.806286] tipc_nl_compat_recv+0x1ae7/0x2750 [ 388.806286] ? tipc_nl_node_dump+0x1300/0x1300 [ 388.806286] ? tipc_nl_compat_link_dump+0x5f0/0x5f0 [ 388.806286] ? tipc_netlink_compat_stop+0x40/0x40 [ 388.806286] genl_rcv_msg+0x185f/0x1a60 [ 388.806286] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 388.806286] ? kmsan_internal_memset_shadow+0xc6/0x410 [ 388.806286] netlink_rcv_skb+0x431/0x620 [ 388.806286] ? genl_unbind+0x390/0x390 [ 388.806286] genl_rcv+0x63/0x80 [ 388.806286] netlink_unicast+0xf3e/0x1020 [ 388.806286] netlink_sendmsg+0x127f/0x1300 [ 388.806286] ___sys_sendmsg+0xdb9/0x11b0 [ 389.018540] ? netlink_getsockopt+0x1460/0x1460 [ 389.018540] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 389.029821] ? __fget_light+0x6e1/0x750 [ 389.029821] ? kmsan_get_shadow_origin_ptr+0x73/0x490 [ 389.029821] __se_sys_sendmsg+0x305/0x460 [ 389.029821] __x64_sys_sendmsg+0x4a/0x70 [ 389.029821] do_syscall_64+0xbc/0xf0 [ 389.029821] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 389.029821] RIP: 0033:0x458209 17:50:55 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)) r0 = semget(0x3, 0x3, 0x40a) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xaaa, 0x800}, {0x7, 0x9000, 0x800}], 0x2, &(0x7f0000000040)) 17:50:55 executing program 1: 17:50:55 executing program 4: r0 = userfaultfd(0x0) read(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x6002, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x8, 0x2}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e24, 0xda94, @ipv4, 0x7}}}, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="2200fc006d4c669e2d8ba4f634d1f3302b204ab5f81d6d6f00892f33527234237e9a1adff4ab"], &(0x7f0000000040)=0x2a) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x4}, &(0x7f00000000c0)=0x8) [ 389.029821] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 389.072985] RSP: 002b:00007ff83e7d9c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.072985] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 389.072985] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000005 [ 389.072985] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 389.072985] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff83e7da6d4 [ 389.113030] R13: 00000000004c57c8 R14: 00000000004d96b8 R15: 00000000ffffffff [ 389.113030] Kernel Offset: disabled [ 389.113030] Rebooting in 86400 seconds..