ActivityState = 00000000 [ 1003.866859] *** Host State *** [ 1003.879519] RIP = 0xffffffff812047de RSP = 0xffff8881bba87390 [ 1003.893048] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1003.922162] FSBase=00007fee7b87f700 GSBase=ffff8881daf00000 TRBase=fffffe0000033000 [ 1003.930967] GDTBase=fffffe0000031000 IDTBase=fffffe0000000000 [ 1003.937155] CR0=0000000080050033 CR3=000000018d828000 CR4=00000000001426e0 [ 1003.944298] Sysenter RSP=fffffe0000032200 CS:RIP=0010:ffffffff87e01360 [ 1003.955248] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1003.961480] *** Control State *** [ 1003.965491] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 22:44:10 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) getuid() quotactl(0x1, &(0x7f0000000100)='./control\x00', 0x0, &(0x7f0000000240)="5667af7b0814e79cc7258c3fa544b3c736b9e07bb81926d74c475d621edeffb62a862219b3c2cf843630bc8d6aa8a297fdba700c5adad2543199f885") unshare(0x60000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x68080, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x82000000) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000340)=@sg0='/dev/sg0\x00', &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000300)='sysv\x00', 0x1004, &(0x7f00000006c0)="2c5672899416abfc816e18c464b57f61c007564217dc683b0a09c28295152d18f4d312f02c0500000000000000ef717300b04157642d4c9a3915afe1f7ae65a9ebf0cf31c4efda2dfafdbf12ce386d22384da74e4581b3e2e6b0c505562719bc5155e346c32df4e1fadaeac18835974d252d5e2e50a5c31cc18fc801350794584aec03782272e29d18a40f28ff8d7556f973f95b67f668ab01a5f9cffd56ce72dbbc7e235dead763d7d02ff2c8bae31d818951fffc8ac846f4361ad3cd0fbfce3d00000000000000000000000000") write$sndseq(r3, &(0x7f0000011fd2), 0x0) unlink(&(0x7f0000000200)='./control/file0\x00') write$P9_RRENAME(r3, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) close(r0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_settime(0x2, &(0x7f0000000280)={r4, r5+10000000}) 22:44:10 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) getuid() quotactl(0x1, &(0x7f0000000100)='./control\x00', 0x0, &(0x7f0000000240)="5667af7b0814e79cc7258c3fa544b3c736b9e07bb81926d74c475d621edeffb62a862219b3c2cf843630bc8d6aa8a297fdba700c5adad2543199f885") unshare(0x60000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x68080, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x82000000) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000340)=@sg0='/dev/sg0\x00', &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000300)='sysv\x00', 0x1004, &(0x7f00000006c0)="2c5672899416abfc816e18c464b57f61c007564217dc683b0a09c28295152d18f4d312f02c0500000000000000ef717300b04157642d4c9a3915afe1f7ae65a9ebf0cf31c4efda2dfafdbf12ce386d22384da74e4581b3e2e6b0c505562719bc5155e346c32df4e1fadaeac18835974d252d5e2e50a5c31cc18fc801350794584aec03782272e29d18a40f28ff8d7556f973f95b67f668ab01a5f9cffd56ce72dbbc7e235dead763d7d02ff2c8bae31d818951fffc8ac846f4361ad3cd0fbfce3d00000000000000000000000000") write$sndseq(r3, &(0x7f0000011fd2), 0x0) unlink(&(0x7f0000000200)='./control/file0\x00') write$P9_RRENAME(r3, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) close(r0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_settime(0x2, &(0x7f0000000280)={r4, r5+10000000}) 22:44:10 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) getuid() quotactl(0x1, &(0x7f0000000100)='./control\x00', 0x0, &(0x7f0000000240)="5667af7b0814e79cc7258c3fa544b3c736b9e07bb81926d74c475d621edeffb62a862219b3c2cf843630bc8d6aa8a297fdba700c5adad2543199f885") unshare(0x60000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x68080, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x82000000) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000340)=@sg0='/dev/sg0\x00', &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000300)='sysv\x00', 0x1004, &(0x7f00000006c0)="2c5672899416abfc816e18c464b57f61c007564217dc683b0a09c28295152d18f4d312f02c0500000000000000ef717300b04157642d4c9a3915afe1f7ae65a9ebf0cf31c4efda2dfafdbf12ce386d22384da74e4581b3e2e6b0c505562719bc5155e346c32df4e1fadaeac18835974d252d5e2e50a5c31cc18fc801350794584aec03782272e29d18a40f28ff8d7556f973f95b67f668ab01a5f9cffd56ce72dbbc7e235dead763d7d02ff2c8bae31d818951fffc8ac846f4361ad3cd0fbfce3d00000000000000000000000000") write$sndseq(r3, &(0x7f0000011fd2), 0x0) unlink(&(0x7f0000000200)='./control/file0\x00') write$P9_RRENAME(r3, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) close(r0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_settime(0x2, &(0x7f0000000280)={r4, r5+10000000}) [ 1003.972352] EntryControls=0000d1ff ExitControls=002fefff [ 1003.978598] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1003.986035] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1003.993114] VMExit: intr_info=80000306 errcode=00000000 ilen=00000003 [ 1004.000234] reason=80000021 qualification=0000000000000000 [ 1004.006668] IDTVectoring: info=00000000 errcode=00000000 [ 1004.012124] TSC Offset = 0xfffffde3ff59167c [ 1004.012135] EPT pointer = 0x00000001b38bd01e 22:44:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x511) semop(r0, &(0x7f00000000c0)=[{0x1, 0x7ff}], 0x3a8) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d000000119dc53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000001400000000000000d5ba641663ac6847d35b8779c6903efd7800e86ccc485bbc15", 0xd5) 22:44:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x511) semop(r0, &(0x7f00000000c0)=[{0x1, 0x7ff}], 0x3a8) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d000000119dc53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000001400000000000000d5ba641663ac6847d35b8779c6903efd7800e86ccc485bbc15", 0xd5) 22:44:10 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a0004000200db50178eb0ff11d41d7872837cc7520700", 0x39}], 0x1) 22:44:10 executing program 3: socket$inet6(0xa, 0x803, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'ifb0\x00', {0x2, 0x4e23, @multicast2}}) pipe2(0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00'}, 0x10) clock_gettime(0x0, &(0x7f0000000900)) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x0, @multicast2}], 0x10) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) close(r1) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000002c0)) 22:44:10 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) getuid() quotactl(0x1, &(0x7f0000000100)='./control\x00', 0x0, &(0x7f0000000240)="5667af7b0814e79cc7258c3fa544b3c736b9e07bb81926d74c475d621edeffb62a862219b3c2cf843630bc8d6aa8a297fdba700c5adad2543199f885") unshare(0x60000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x68080, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x82000000) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000340)=@sg0='/dev/sg0\x00', &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000300)='sysv\x00', 0x1004, &(0x7f00000006c0)="2c5672899416abfc816e18c464b57f61c007564217dc683b0a09c28295152d18f4d312f02c0500000000000000ef717300b04157642d4c9a3915afe1f7ae65a9ebf0cf31c4efda2dfafdbf12ce386d22384da74e4581b3e2e6b0c505562719bc5155e346c32df4e1fadaeac18835974d252d5e2e50a5c31cc18fc801350794584aec03782272e29d18a40f28ff8d7556f973f95b67f668ab01a5f9cffd56ce72dbbc7e235dead763d7d02ff2c8bae31d818951fffc8ac846f4361ad3cd0fbfce3d00000000000000000000000000") write$sndseq(r3, &(0x7f0000011fd2), 0x0) unlink(&(0x7f0000000200)='./control/file0\x00') write$P9_RRENAME(r3, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) close(r0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_settime(0x2, &(0x7f0000000280)={r4, r5+10000000}) 22:44:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000006c0)={0x0, 0x0, 0x1a}) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000}) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000680)={0x0, 0x80000, r0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000002c0)={'mangle\x00', 0x90, "e6d540855848a941dbb4f629fdb00f2e4fe9dc87829bb01d987c71ff5ac98370f865cf75f0d66b17a3820d2e04929779ef5e5cf0baeab57bfed88f84f749b178594badef50648c7a9fe91ca7a365373e05d6611a51c585cee022e3f5b0775008ca9db323079a58016fba6771c9f5b3450ca817267e31305f6b126ac8e417df7ec42a288ec58f70ec1b8c72d13d992c9f"}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x96a, 0x7, 0x1000}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) lchown(&(0x7f0000000200)='./file0\x00', 0x0, r3) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000180), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='statm\x00') write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f00000007c0)={0x6, 0x118, 0xfa00, {{0x101, 0x5abbc243, "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", 0x0, 0x52a1, 0x8000000, 0x5, 0x0, 0x0, 0x2}}}, 0x120) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000780)) sendfile(0xffffffffffffffff, r4, &(0x7f0000000080), 0x1) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="0f18e60f01b808002e0f01cf0f239f66b9800000c00f326635008000000f30baa000edba2100ec66b9020a000066b87a8b000066ba000000000f30f30f092e0fc7a90000", 0x44}], 0x1, 0x0, &(0x7f0000000680), 0x0) socket$netlink(0x10, 0x3, 0x100000000100000) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000480)=""/141) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000740)) 22:44:10 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) getuid() quotactl(0x1, &(0x7f0000000100)='./control\x00', 0x0, &(0x7f0000000240)="5667af7b0814e79cc7258c3fa544b3c736b9e07bb81926d74c475d621edeffb62a862219b3c2cf843630bc8d6aa8a297fdba700c5adad2543199f885") unshare(0x60000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x68080, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x82000000) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000340)=@sg0='/dev/sg0\x00', &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000300)='sysv\x00', 0x1004, &(0x7f00000006c0)="2c5672899416abfc816e18c464b57f61c007564217dc683b0a09c28295152d18f4d312f02c0500000000000000ef717300b04157642d4c9a3915afe1f7ae65a9ebf0cf31c4efda2dfafdbf12ce386d22384da74e4581b3e2e6b0c505562719bc5155e346c32df4e1fadaeac18835974d252d5e2e50a5c31cc18fc801350794584aec03782272e29d18a40f28ff8d7556f973f95b67f668ab01a5f9cffd56ce72dbbc7e235dead763d7d02ff2c8bae31d818951fffc8ac846f4361ad3cd0fbfce3d00000000000000000000000000") write$sndseq(r3, &(0x7f0000011fd2), 0x0) unlink(&(0x7f0000000200)='./control/file0\x00') write$P9_RRENAME(r3, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) close(r0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_settime(0x2, &(0x7f0000000280)={r4, r5+10000000}) 22:44:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x511) semop(r0, &(0x7f00000000c0)=[{0x1, 0x7ff}], 0x3a8) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d000000119dc53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000001400000000000000d5ba641663ac6847d35b8779c6903efd7800e86ccc485bbc15", 0xd5) 22:44:10 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) getuid() quotactl(0x1, &(0x7f0000000100)='./control\x00', 0x0, &(0x7f0000000240)="5667af7b0814e79cc7258c3fa544b3c736b9e07bb81926d74c475d621edeffb62a862219b3c2cf843630bc8d6aa8a297fdba700c5adad2543199f885") unshare(0x60000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x68080, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x82000000) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000340)=@sg0='/dev/sg0\x00', &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000300)='sysv\x00', 0x1004, &(0x7f00000006c0)="2c5672899416abfc816e18c464b57f61c007564217dc683b0a09c28295152d18f4d312f02c0500000000000000ef717300b04157642d4c9a3915afe1f7ae65a9ebf0cf31c4efda2dfafdbf12ce386d22384da74e4581b3e2e6b0c505562719bc5155e346c32df4e1fadaeac18835974d252d5e2e50a5c31cc18fc801350794584aec03782272e29d18a40f28ff8d7556f973f95b67f668ab01a5f9cffd56ce72dbbc7e235dead763d7d02ff2c8bae31d818951fffc8ac846f4361ad3cd0fbfce3d00000000000000000000000000") write$sndseq(r3, &(0x7f0000011fd2), 0x0) unlink(&(0x7f0000000200)='./control/file0\x00') write$P9_RRENAME(r3, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) close(r0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_settime(0x2, &(0x7f0000000280)={r4, r5+10000000}) 22:44:10 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) getuid() quotactl(0x1, &(0x7f0000000100)='./control\x00', 0x0, &(0x7f0000000240)="5667af7b0814e79cc7258c3fa544b3c736b9e07bb81926d74c475d621edeffb62a862219b3c2cf843630bc8d6aa8a297fdba700c5adad2543199f885") unshare(0x60000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x68080, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x82000000) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000340)=@sg0='/dev/sg0\x00', &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000300)='sysv\x00', 0x1004, &(0x7f00000006c0)="2c5672899416abfc816e18c464b57f61c007564217dc683b0a09c28295152d18f4d312f02c0500000000000000ef717300b04157642d4c9a3915afe1f7ae65a9ebf0cf31c4efda2dfafdbf12ce386d22384da74e4581b3e2e6b0c505562719bc5155e346c32df4e1fadaeac18835974d252d5e2e50a5c31cc18fc801350794584aec03782272e29d18a40f28ff8d7556f973f95b67f668ab01a5f9cffd56ce72dbbc7e235dead763d7d02ff2c8bae31d818951fffc8ac846f4361ad3cd0fbfce3d00000000000000000000000000") write$sndseq(r3, &(0x7f0000011fd2), 0x0) unlink(&(0x7f0000000200)='./control/file0\x00') write$P9_RRENAME(r3, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) close(r0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_settime(0x2, &(0x7f0000000280)={r4, r5+10000000}) 22:44:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x511) semop(r0, &(0x7f00000000c0)=[{0x1, 0x7ff}], 0x3a8) r1 = socket(0x10, 0x3, 0xc) write(r1, &(0x7f0000000380)="130000001000ffdde200f49ff60f050000230a009d000000119dc53022e5f9ec364f0000c0ff030000001c24e175cc463437101101bd81dc3181ddd83f8d3d1f2c53e45fca5ab94018975d7db35411543e1226218e88cfc1f2cbefbb693d8a0c8efc28ceb4ec3ff429592e67e7e4f28bca763acd06f40ad03226af55e7129849ae2d726cf46a629bf91efdb19a5faccffe8090d92237be9951be4bd7c2a1c1a2b5b2684ade4025622c962d916c000000000000001400000000000000d5ba641663ac6847d35b8779c6903efd7800e86ccc485bbc15", 0xd5) 22:44:11 executing program 5: socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000340)={&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000001000000010000000300000004000000"], 0x18}, 0x0) sendmsg(r2, &(0x7f0000000940)={&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local, 'veth1_to_bond\x00'}}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000840)}, 0x0) close(r1) close(r2) 22:44:11 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./control\x00', 0x0) mmap(&(0x7f0000010000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) getuid() quotactl(0x1, &(0x7f0000000100)='./control\x00', 0x0, &(0x7f0000000240)="5667af7b0814e79cc7258c3fa544b3c736b9e07bb81926d74c475d621edeffb62a862219b3c2cf843630bc8d6aa8a297fdba700c5adad2543199f885") unshare(0x60000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x68080, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x82000000) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) mount(&(0x7f0000000340)=@sg0='/dev/sg0\x00', &(0x7f0000000380)='./control/file0\x00', &(0x7f0000000300)='sysv\x00', 0x1004, &(0x7f00000006c0)="2c5672899416abfc816e18c464b57f61c007564217dc683b0a09c28295152d18f4d312f02c0500000000000000ef717300b04157642d4c9a3915afe1f7ae65a9ebf0cf31c4efda2dfafdbf12ce386d22384da74e4581b3e2e6b0c505562719bc5155e346c32df4e1fadaeac18835974d252d5e2e50a5c31cc18fc801350794584aec03782272e29d18a40f28ff8d7556f973f95b67f668ab01a5f9cffd56ce72dbbc7e235dead763d7d02ff2c8bae31d818951fffc8ac846f4361ad3cd0fbfce3d00000000000000000000000000") write$sndseq(r3, &(0x7f0000011fd2), 0x0) unlink(&(0x7f0000000200)='./control/file0\x00') write$P9_RRENAME(r3, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) close(r0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) clock_settime(0x2, &(0x7f0000000280)={r4, r5+10000000}) 22:44:11 executing program 3: socket$inet6(0xa, 0x803, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'ifb0\x00', {0x2, 0x4e23, @multicast2}}) pipe2(0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00'}, 0x10) clock_gettime(0x0, &(0x7f0000000900)) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x0, @multicast2}], 0x10) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) close(r1) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000002c0)) 22:44:11 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x81007702, 0x70f000) 22:44:11 executing program 5: socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000340)={&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000001000000010000000300000004000000"], 0x18}, 0x0) sendmsg(r2, &(0x7f0000000940)={&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local, 'veth1_to_bond\x00'}}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000840)}, 0x0) close(r1) close(r2) 22:44:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 22:44:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000006c0)={0x0, 0x0, 0x1a}) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000}) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000680)={0x0, 0x80000, r0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000002c0)={'mangle\x00', 0x90, "e6d540855848a941dbb4f629fdb00f2e4fe9dc87829bb01d987c71ff5ac98370f865cf75f0d66b17a3820d2e04929779ef5e5cf0baeab57bfed88f84f749b178594badef50648c7a9fe91ca7a365373e05d6611a51c585cee022e3f5b0775008ca9db323079a58016fba6771c9f5b3450ca817267e31305f6b126ac8e417df7ec42a288ec58f70ec1b8c72d13d992c9f"}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x96a, 0x7, 0x1000}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) lchown(&(0x7f0000000200)='./file0\x00', 0x0, r3) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000180), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='statm\x00') write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f00000007c0)={0x6, 0x118, 0xfa00, {{0x101, 0x5abbc243, "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", 0x0, 0x52a1, 0x8000000, 0x5, 0x0, 0x0, 0x2}}}, 0x120) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000780)) sendfile(0xffffffffffffffff, r4, &(0x7f0000000080), 0x1) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="0f18e60f01b808002e0f01cf0f239f66b9800000c00f326635008000000f30baa000edba2100ec66b9020a000066b87a8b000066ba000000000f30f30f092e0fc7a90000", 0x44}], 0x1, 0x0, &(0x7f0000000680), 0x0) socket$netlink(0x10, 0x3, 0x100000000100000) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000480)=""/141) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000740)) 22:44:11 executing program 5: socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000340)={&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000001000000010000000300000004000000"], 0x18}, 0x0) sendmsg(r2, &(0x7f0000000940)={&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local, 'veth1_to_bond\x00'}}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000840)}, 0x0) close(r1) close(r2) 22:44:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x100000004e23, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000003a00), 0x3a1, 0x0, 0x0) 22:44:11 executing program 2: syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) mq_open(&(0x7f0000000540)='/dev/ppp\x00', 0x81, 0x1a, &(0x7f0000000780)={0x7, 0x6, 0x80000001, 0x8b, 0x3, 0x42}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xfffffffffffffd6d) r2 = socket$inet6(0xa, 0x3, 0x9) getsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000a80), &(0x7f0000000ac0)=0x1d7) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000b80)={@dev={0xfe, 0x80, [], 0x16}, 0x37, r1}) setsockopt$inet6_int(r0, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x8, 0x1a1100) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000580)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d0, 0xba]}, 0x4a, r4}) r5 = socket$l2tp(0x18, 0x1, 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/rtc0\x00', 0x101002, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@local, @empty={[0x0, 0x0, 0x3e8]}, @loopback, 0x3, 0x2, 0x1f, 0x0, 0x100000000, 0x1c0270, r4}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="9fe21abccb20000016690e0000000000ff9a05a300000000000000000000"], 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f00000006c0)={0x5, 0x8001, 0x100, 'queue0\x00', 0x6}) rename(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x2e75, 0x815}, 0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={@remote, @ipv4={[], [], @loopback}, @mcast2, 0x12c, 0x8, 0x3, 0x400, 0x4, 0x20, r1}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000b00)) socket$inet(0x2, 0x7, 0xbfd) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f0000000080)='syz0\x00') getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockname(r6, &(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000600)=0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000c40)={0x9, 0x108, 0xfa00, {r7, 0x9b, "1ce491", "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"}}, 0x110) 22:44:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 22:44:11 executing program 5: socketpair(0x1, 0x2000000001, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000340)={&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000001000000010000000300000004000000"], 0x18}, 0x0) sendmsg(r2, &(0x7f0000000940)={&(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local, 'veth1_to_bond\x00'}}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000840)}, 0x0) close(r1) close(r2) 22:44:11 executing program 5: socket$nl_crypto(0x10, 0x3, 0x15) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0xe}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f00000000c0)) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000300)={0x10000, 0x3, 0x0, 'queue0\x00', 0x4}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x8000) write$FUSE_BMAP(r1, &(0x7f0000000180)={0x18, 0x0, 0x1, {0x7fffffff}}, 0x18) 22:44:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0xa, 0xa, 0xffffffffffffffff}, 0x14}}, 0x0) 22:44:11 executing program 3: socket$inet6(0xa, 0x803, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'ifb0\x00', {0x2, 0x4e23, @multicast2}}) pipe2(0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00'}, 0x10) clock_gettime(0x0, &(0x7f0000000900)) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x0, @multicast2}], 0x10) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) close(r1) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000002c0)) 22:44:11 executing program 2: syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) mq_open(&(0x7f0000000540)='/dev/ppp\x00', 0x81, 0x1a, &(0x7f0000000780)={0x7, 0x6, 0x80000001, 0x8b, 0x3, 0x42}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xfffffffffffffd6d) r2 = socket$inet6(0xa, 0x3, 0x9) getsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000a80), &(0x7f0000000ac0)=0x1d7) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000b80)={@dev={0xfe, 0x80, [], 0x16}, 0x37, r1}) setsockopt$inet6_int(r0, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x8, 0x1a1100) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000580)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d0, 0xba]}, 0x4a, r4}) r5 = socket$l2tp(0x18, 0x1, 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/rtc0\x00', 0x101002, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@local, @empty={[0x0, 0x0, 0x3e8]}, @loopback, 0x3, 0x2, 0x1f, 0x0, 0x100000000, 0x1c0270, r4}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="9fe21abccb20000016690e0000000000ff9a05a300000000000000000000"], 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f00000006c0)={0x5, 0x8001, 0x100, 'queue0\x00', 0x6}) rename(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x2e75, 0x815}, 0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={@remote, @ipv4={[], [], @loopback}, @mcast2, 0x12c, 0x8, 0x3, 0x400, 0x4, 0x20, r1}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000b00)) socket$inet(0x2, 0x7, 0xbfd) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f0000000080)='syz0\x00') getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockname(r6, &(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000600)=0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000c40)={0x9, 0x108, 0xfa00, {r7, 0x9b, "1ce491", "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"}}, 0x110) 22:44:11 executing program 5: socket$nl_crypto(0x10, 0x3, 0x15) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0xe}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f00000000c0)) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000300)={0x10000, 0x3, 0x0, 'queue0\x00', 0x4}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x8000) write$FUSE_BMAP(r1, &(0x7f0000000180)={0x18, 0x0, 0x1, {0x7fffffff}}, 0x18) 22:44:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0xa, 0xa, 0xffffffffffffffff}, 0x14}}, 0x0) 22:44:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000006c0)={0x0, 0x0, 0x1a}) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000}) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000680)={0x0, 0x80000, r0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000002c0)={'mangle\x00', 0x90, "e6d540855848a941dbb4f629fdb00f2e4fe9dc87829bb01d987c71ff5ac98370f865cf75f0d66b17a3820d2e04929779ef5e5cf0baeab57bfed88f84f749b178594badef50648c7a9fe91ca7a365373e05d6611a51c585cee022e3f5b0775008ca9db323079a58016fba6771c9f5b3450ca817267e31305f6b126ac8e417df7ec42a288ec58f70ec1b8c72d13d992c9f"}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x96a, 0x7, 0x1000}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) lchown(&(0x7f0000000200)='./file0\x00', 0x0, r3) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000180), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='statm\x00') write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f00000007c0)={0x6, 0x118, 0xfa00, {{0x101, 0x5abbc243, "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", 0x0, 0x52a1, 0x8000000, 0x5, 0x0, 0x0, 0x2}}}, 0x120) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000780)) sendfile(0xffffffffffffffff, r4, &(0x7f0000000080), 0x1) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="0f18e60f01b808002e0f01cf0f239f66b9800000c00f326635008000000f30baa000edba2100ec66b9020a000066b87a8b000066ba000000000f30f30f092e0fc7a90000", 0x44}], 0x1, 0x0, &(0x7f0000000680), 0x0) socket$netlink(0x10, 0x3, 0x100000000100000) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000480)=""/141) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000740)) 22:44:12 executing program 2: syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) mq_open(&(0x7f0000000540)='/dev/ppp\x00', 0x81, 0x1a, &(0x7f0000000780)={0x7, 0x6, 0x80000001, 0x8b, 0x3, 0x42}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xfffffffffffffd6d) r2 = socket$inet6(0xa, 0x3, 0x9) getsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000a80), &(0x7f0000000ac0)=0x1d7) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000b80)={@dev={0xfe, 0x80, [], 0x16}, 0x37, r1}) setsockopt$inet6_int(r0, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x8, 0x1a1100) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000580)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d0, 0xba]}, 0x4a, r4}) r5 = socket$l2tp(0x18, 0x1, 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/rtc0\x00', 0x101002, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@local, @empty={[0x0, 0x0, 0x3e8]}, @loopback, 0x3, 0x2, 0x1f, 0x0, 0x100000000, 0x1c0270, r4}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="9fe21abccb20000016690e0000000000ff9a05a300000000000000000000"], 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f00000006c0)={0x5, 0x8001, 0x100, 'queue0\x00', 0x6}) rename(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x2e75, 0x815}, 0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={@remote, @ipv4={[], [], @loopback}, @mcast2, 0x12c, 0x8, 0x3, 0x400, 0x4, 0x20, r1}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000b00)) socket$inet(0x2, 0x7, 0xbfd) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f0000000080)='syz0\x00') getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockname(r6, &(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000600)=0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000c40)={0x9, 0x108, 0xfa00, {r7, 0x9b, "1ce491", "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"}}, 0x110) 22:44:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0xa, 0xa, 0xffffffffffffffff}, 0x14}}, 0x0) 22:44:12 executing program 5: socket$nl_crypto(0x10, 0x3, 0x15) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0xe}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f00000000c0)) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000300)={0x10000, 0x3, 0x0, 'queue0\x00', 0x4}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x8000) write$FUSE_BMAP(r1, &(0x7f0000000180)={0x18, 0x0, 0x1, {0x7fffffff}}, 0x18) 22:44:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 22:44:12 executing program 3: socket$inet6(0xa, 0x803, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'ifb0\x00', {0x2, 0x4e23, @multicast2}}) pipe2(0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00'}, 0x10) clock_gettime(0x0, &(0x7f0000000900)) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x0, @multicast2}], 0x10) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) close(r1) dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000002c0)) 22:44:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f00000000c0), 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0xa, 0xa, 0xffffffffffffffff}, 0x14}}, 0x0) 22:44:12 executing program 2: syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) mq_open(&(0x7f0000000540)='/dev/ppp\x00', 0x81, 0x1a, &(0x7f0000000780)={0x7, 0x6, 0x80000001, 0x8b, 0x3, 0x42}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xfffffffffffffd6d) r2 = socket$inet6(0xa, 0x3, 0x9) getsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000a80), &(0x7f0000000ac0)=0x1d7) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000b80)={@dev={0xfe, 0x80, [], 0x16}, 0x37, r1}) setsockopt$inet6_int(r0, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x8, 0x1a1100) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000580)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d0, 0xba]}, 0x4a, r4}) r5 = socket$l2tp(0x18, 0x1, 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/rtc0\x00', 0x101002, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@local, @empty={[0x0, 0x0, 0x3e8]}, @loopback, 0x3, 0x2, 0x1f, 0x0, 0x100000000, 0x1c0270, r4}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="9fe21abccb20000016690e0000000000ff9a05a300000000000000000000"], 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f00000006c0)={0x5, 0x8001, 0x100, 'queue0\x00', 0x6}) rename(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x2e75, 0x815}, 0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={@remote, @ipv4={[], [], @loopback}, @mcast2, 0x12c, 0x8, 0x3, 0x400, 0x4, 0x20, r1}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000b00)) socket$inet(0x2, 0x7, 0xbfd) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f0000000080)='syz0\x00') getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockname(r6, &(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000600)=0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000c40)={0x9, 0x108, 0xfa00, {r7, 0x9b, "1ce491", "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"}}, 0x110) 22:44:12 executing program 5: socket$nl_crypto(0x10, 0x3, 0x15) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f40)=@ethernet={0x0, @random}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002400)=""/191, 0xbf}}, {{&(0x7f0000003440)=@l2, 0x80, &(0x7f0000003680), 0x0, &(0x7f00000036c0)=""/64, 0xe}}], 0xf, 0x0, &(0x7f0000003700)={0x77359400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f00000000c0)) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000300)={0x10000, 0x3, 0x0, 'queue0\x00', 0x4}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x8000) write$FUSE_BMAP(r1, &(0x7f0000000180)={0x18, 0x0, 0x1, {0x7fffffff}}, 0x18) 22:44:12 executing program 1: syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000900)=ANY=[@ANYBLOB="0024ade3c90400000054db4f00000000bb6818218e5a0800000000009fff2286fd1b0779fbd593af5645500108d1aa36113ecc6ab366e7b7819960eb9e501ff574869fa6b8ce269474907d765dcd3666a035934b7b2377a7bff1670dc14f1449c468420e725210d431dd91a78cb734d1a484aeec55ccc714506f84390000000000736eaffbf483a812fb4b3be9b2871ce0f3534576b635ea8a6e56f3d989a087717ba56f3bdeb70d880fd0e6ce8ecec24c3bd08b275567a2f4ac5e3da1343f2c91f8925a014a50d125ed9a87314530d9678c010071e339e297d366bde3cc5643a2a270347f3f8a2a5efcdbaf4774156f18b127c11d2e159d03e2993966b385f411084ea7a7a132fd3c252021b00ab3cd6863edbe8ef83e269fff6a8e6e2adce8b6be1e5c27e5ce45f17c89ac8c8e3db3e4cc682bf2d7e63cd0c7502b40eed07ccc50f5311196e266428d9fd242e095c60be0a9fda82c455d7818346b94fbd21e5480431e3f33e7ff48c045b206beee871eba174556950a1f4792b9b6d6d392"], 0x0) mq_open(&(0x7f0000000540)='/dev/ppp\x00', 0x81, 0x1a, &(0x7f0000000780)={0x7, 0x6, 0x80000001, 0x8b, 0x3, 0x42}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xfffffffffffffd6d) r2 = socket$inet6(0xa, 0x3, 0x9) getsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000a80), &(0x7f0000000ac0)=0x1d7) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000b80)={@dev={0xfe, 0x80, [], 0x16}, 0x37, r1}) setsockopt$inet6_int(r0, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x8, 0x1a1100) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000580)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d0, 0xba]}, 0x4a, r4}) r5 = socket$l2tp(0x18, 0x1, 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/rtc0\x00', 0x101002, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@local, @empty={[0x0, 0x0, 0x3e8]}, @loopback, 0x3, 0x2, 0x1f, 0x0, 0x100000000, 0x1c0270, r4}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="9fe21abccb20000016690e0000000000ff9a05a300000000000000000000"], 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f00000006c0)={0x5, 0x8001, 0x100, 'queue0\x00', 0x6}) rename(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x2e75, 0x815}, 0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={@remote, @ipv4={[], [], @loopback}, @mcast2, 0x12c, 0x8, 0x3, 0x400, 0x4, 0x20, r1}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000b00)) socket$inet(0x2, 0x7, 0xbfd) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f0000000080)='syz0\x00') getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockname(r6, &(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000600)=0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000c40)={0x9, 0x108, 0xfa00, {r7, 0x9b, "1ce491", "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"}}, 0x110) 22:44:12 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x0, @mcast1, 0x2}}, 0xffffffff, 0xf79}, &(0x7f00000004c0)=0x90) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0xc0200, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x8b89d10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000640), &(0x7f0000000680)=0x4) r6 = socket(0x1e, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, r1, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x8, 0x10001, 0x3, 0x80000001, 0x0, 0x1, 0x40100, 0x0, 0x20, 0x0, 0x0, 0x20, 0x9, 0x9f90, 0xb7, 0x1, 0x9, 0x9, 0xff, 0x6, 0x3, 0x7, 0x1000, 0x33, 0x1000, 0x5, 0xfffffffffffffffb, 0x80, 0x6, 0x2, 0x9, 0xffff, 0x1f, 0x11, 0x8, 0x9, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x7}, 0x8080, 0x8, 0x0, 0x7, 0x80000000, 0x100, 0x7}, r7, 0x2, r2, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000300)={0x2, &(0x7f0000000180)=[{}, {}]}) mkdir(&(0x7f00000005c0)='./file0\x00', 0x1) sendmsg(r6, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, &(0x7f00006e9c68)}, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x8, &(0x7f0000c73000/0x3000)=nil) 22:44:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getitimer(0x0, 0x0) 22:44:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000006c0)={0x0, 0x0, 0x1a}) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, &(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000}) r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000680)={0x0, 0x80000, r0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000002c0)={'mangle\x00', 0x90, "e6d540855848a941dbb4f629fdb00f2e4fe9dc87829bb01d987c71ff5ac98370f865cf75f0d66b17a3820d2e04929779ef5e5cf0baeab57bfed88f84f749b178594badef50648c7a9fe91ca7a365373e05d6611a51c585cee022e3f5b0775008ca9db323079a58016fba6771c9f5b3450ca817267e31305f6b126ac8e417df7ec42a288ec58f70ec1b8c72d13d992c9f"}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x96a, 0x7, 0x1000}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) lchown(&(0x7f0000000200)='./file0\x00', 0x0, r3) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000180), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='statm\x00') write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f00000007c0)={0x6, 0x118, 0xfa00, {{0x101, 0x5abbc243, "3a1ac57fb59b6f11c613d3eb0fdc1463e19c14c08bbc3ea15e272dced8abc2dca3aeb4744aaa43c66bd7da67c3ea98668f81c2092887eaa5e05cd91dec5e99d91f9fda9779230765c9a2602c89cb9cd5e94563e2dec80c57963e49891f6b92cb98448c0346c6ba6f28ebc6d96ccd8053b85d1a82de12775cd0b75403fc6a8e12084f7a9082df5f89d0b5ba9749a8df978495dbbe980884625edcd99db927ba71c2456536418d4a3028873528ce8a884503dfc0767e0a9b846dd44e9bfa1581aca967a9235974ea952506ffc84e890c25ad5ee0a90a4eb260c26ec1f3c89cdfe5521123c91e99ca665c6658f76c34daac9bfb0f5bcb5f239877ef73b53ab39e72", 0x0, 0x52a1, 0x8000000, 0x5, 0x0, 0x0, 0x2}}}, 0x120) ioctl$TCGETA(r4, 0x5405, &(0x7f0000000780)) sendfile(0xffffffffffffffff, r4, &(0x7f0000000080), 0x1) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00001da000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, &(0x7f00000005c0)="0f18e60f01b808002e0f01cf0f239f66b9800000c00f326635008000000f30baa000edba2100ec66b9020a000066b87a8b000066ba000000000f30f30f092e0fc7a90000", 0x44}], 0x1, 0x0, &(0x7f0000000680), 0x0) socket$netlink(0x10, 0x3, 0x100000000100000) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000480)=""/141) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000740)) 22:44:13 executing program 1: syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) mq_open(&(0x7f0000000540)='/dev/ppp\x00', 0x81, 0x1a, &(0x7f0000000780)={0x7, 0x6, 0x80000001, 0x8b, 0x3, 0x42}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xfffffffffffffd6d) r2 = socket$inet6(0xa, 0x3, 0x9) getsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000a80), &(0x7f0000000ac0)=0x1d7) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000b80)={@dev={0xfe, 0x80, [], 0x16}, 0x37, r1}) setsockopt$inet6_int(r0, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x8, 0x1a1100) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000580)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d0, 0xba]}, 0x4a, r4}) r5 = socket$l2tp(0x18, 0x1, 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/rtc0\x00', 0x101002, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@local, @empty={[0x0, 0x0, 0x3e8]}, @loopback, 0x3, 0x2, 0x1f, 0x0, 0x100000000, 0x1c0270, r4}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="9fe21abccb20000016690e0000000000ff9a05a300000000000000000000"], 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f00000006c0)={0x5, 0x8001, 0x100, 'queue0\x00', 0x6}) rename(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x2e75, 0x815}, 0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={@remote, @ipv4={[], [], @loopback}, @mcast2, 0x12c, 0x8, 0x3, 0x400, 0x4, 0x20, r1}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000b00)) socket$inet(0x2, 0x7, 0xbfd) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f0000000080)='syz0\x00') getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockname(r6, &(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000600)=0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000c40)={0x9, 0x108, 0xfa00, {r7, 0x9b, "1ce491", "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"}}, 0x110) 22:44:13 executing program 5: mmap(&(0x7f00009b8000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b48000/0x2000)=nil, 0x2000, 0x6, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000140)='u', 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180), &(0x7f00000001c0)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000601000/0x600000)=nil, 0x600000, &(0x7f0000000080)=""/144) 22:44:13 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 22:44:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 22:44:13 executing program 5: mmap(&(0x7f00009b8000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b48000/0x2000)=nil, 0x2000, 0x6, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000140)='u', 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180), &(0x7f00000001c0)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000601000/0x600000)=nil, 0x600000, &(0x7f0000000080)=""/144) 22:44:13 executing program 5: mmap(&(0x7f00009b8000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b48000/0x2000)=nil, 0x2000, 0x6, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000140)='u', 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180), &(0x7f00000001c0)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000601000/0x600000)=nil, 0x600000, &(0x7f0000000080)=""/144) 22:44:13 executing program 1: syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) mq_open(&(0x7f0000000540)='/dev/ppp\x00', 0x81, 0x1a, &(0x7f0000000780)={0x7, 0x6, 0x80000001, 0x8b, 0x3, 0x42}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xfffffffffffffd6d) r2 = socket$inet6(0xa, 0x3, 0x9) getsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000a80), &(0x7f0000000ac0)=0x1d7) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000b80)={@dev={0xfe, 0x80, [], 0x16}, 0x37, r1}) setsockopt$inet6_int(r0, 0x29, 0xfb, &(0x7f00000001c0)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x8, 0x1a1100) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000580)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d0, 0xba]}, 0x4a, r4}) r5 = socket$l2tp(0x18, 0x1, 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/rtc0\x00', 0x101002, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@local, @empty={[0x0, 0x0, 0x3e8]}, @loopback, 0x3, 0x2, 0x1f, 0x0, 0x100000000, 0x1c0270, r4}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYBLOB="9fe21abccb20000016690e0000000000ff9a05a300000000000000000000"], 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f00000006c0)={0x5, 0x8001, 0x100, 'queue0\x00', 0x6}) rename(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000008c0)=@sack_info={0x0, 0x2e75, 0x815}, 0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={@remote, @ipv4={[], [], @loopback}, @mcast2, 0x12c, 0x8, 0x3, 0x400, 0x4, 0x20, r1}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000b00)) socket$inet(0x2, 0x7, 0xbfd) ioctl$UI_SET_PHYS(r6, 0x4008556c, &(0x7f0000000080)='syz0\x00') getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000280)=0x8) getsockname(r6, &(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000600)=0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000c40)={0x9, 0x108, 0xfa00, {r7, 0x9b, "1ce491", "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"}}, 0x110) 22:44:13 executing program 5: mmap(&(0x7f00009b8000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b48000/0x2000)=nil, 0x2000, 0x6, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000140)='u', 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180), &(0x7f00000001c0)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000601000/0x600000)=nil, 0x600000, &(0x7f0000000080)=""/144) 22:44:13 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@abs={0x1}, 0x6e, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 22:44:14 executing program 3: creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) syz_open_dev$video(0x0, 0x9, 0x0) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0xc9, 0x2, 0x401, "80a249e39bde67913e17f4b9cd7640ad", "3b61a003648dbc9ae916404558d3ac5411aab799b28365c999f77c14b11ecd2cffc108eb7e044c55ba1debf77ea54d32aafab6cbd79e5e627bc8a2089e81c8c2c050e9c3d3079339632147e9fe429d743e7d62574141cd6d464b75e9c4f75a0143828087666d87daf29aeca9e3827176241fb4be66183502d18de26da90b3f781a9cb92fa9aa88b583aec5cc3ab5b8aa704a68e5452727f27a279435a057aef43bb30253e5010df3736aca17d7f0ae97a0f6b4d4"}, 0xc9, 0x3) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) fadvise64(0xffffffffffffffff, 0x16, 0x7, 0x0) getpid() syz_open_procfs(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:44:14 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) 22:44:14 executing program 0: r0 = syz_open_dev$dspn(0x0, 0x1000000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x10}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x3af, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x1, &(0x7f0000001600)=""/101, 0x65, 0x4}, 0x0) 22:44:14 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x20011, r0, 0x0) 22:44:14 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, r3+30000000}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) tkill(r2, 0x1004000000016) 22:44:14 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x0, @mcast1, 0x2}}, 0xffffffff, 0xf79}, &(0x7f00000004c0)=0x90) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0xc0200, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x8b89d10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000640), &(0x7f0000000680)=0x4) r6 = socket(0x1e, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, r1, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x8, 0x10001, 0x3, 0x80000001, 0x0, 0x1, 0x40100, 0x0, 0x20, 0x0, 0x0, 0x20, 0x9, 0x9f90, 0xb7, 0x1, 0x9, 0x9, 0xff, 0x6, 0x3, 0x7, 0x1000, 0x33, 0x1000, 0x5, 0xfffffffffffffffb, 0x80, 0x6, 0x2, 0x9, 0xffff, 0x1f, 0x11, 0x8, 0x9, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x7}, 0x8080, 0x8, 0x0, 0x7, 0x80000000, 0x100, 0x7}, r7, 0x2, r2, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000300)={0x2, &(0x7f0000000180)=[{}, {}]}) mkdir(&(0x7f00000005c0)='./file0\x00', 0x1) sendmsg(r6, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, &(0x7f00006e9c68)}, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x8, &(0x7f0000c73000/0x3000)=nil) 22:44:15 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x0, @mcast1, 0x2}}, 0xffffffff, 0xf79}, &(0x7f00000004c0)=0x90) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0xc0200, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x8b89d10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000640), &(0x7f0000000680)=0x4) r6 = socket(0x1e, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, r1, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x8, 0x10001, 0x3, 0x80000001, 0x0, 0x1, 0x40100, 0x0, 0x20, 0x0, 0x0, 0x20, 0x9, 0x9f90, 0xb7, 0x1, 0x9, 0x9, 0xff, 0x6, 0x3, 0x7, 0x1000, 0x33, 0x1000, 0x5, 0xfffffffffffffffb, 0x80, 0x6, 0x2, 0x9, 0xffff, 0x1f, 0x11, 0x8, 0x9, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x7}, 0x8080, 0x8, 0x0, 0x7, 0x80000000, 0x100, 0x7}, r7, 0x2, r2, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000300)={0x2, &(0x7f0000000180)=[{}, {}]}) mkdir(&(0x7f00000005c0)='./file0\x00', 0x1) sendmsg(r6, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, &(0x7f00006e9c68)}, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x8, &(0x7f0000c73000/0x3000)=nil) [ 1008.592466] input:  as /devices/virtual/input/input77 22:44:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x16, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="02120100020000000000000000020000"], 0x10}}, 0x0) close(r2) [ 1008.817123] input:  as /devices/virtual/input/input78 22:44:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x16, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="02120100020000000000000000020000"], 0x10}}, 0x0) close(r2) 22:44:15 executing program 3: creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) syz_open_dev$video(0x0, 0x9, 0x0) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0xc9, 0x2, 0x401, "80a249e39bde67913e17f4b9cd7640ad", "3b61a003648dbc9ae916404558d3ac5411aab799b28365c999f77c14b11ecd2cffc108eb7e044c55ba1debf77ea54d32aafab6cbd79e5e627bc8a2089e81c8c2c050e9c3d3079339632147e9fe429d743e7d62574141cd6d464b75e9c4f75a0143828087666d87daf29aeca9e3827176241fb4be66183502d18de26da90b3f781a9cb92fa9aa88b583aec5cc3ab5b8aa704a68e5452727f27a279435a057aef43bb30253e5010df3736aca17d7f0ae97a0f6b4d4"}, 0xc9, 0x3) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) fadvise64(0xffffffffffffffff, 0x16, 0x7, 0x0) getpid() syz_open_procfs(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:44:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x16, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="02120100020000000000000000020000"], 0x10}}, 0x0) close(r2) 22:44:15 executing program 0: r0 = syz_open_dev$dspn(0x0, 0x1000000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x10}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x3af, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x1, &(0x7f0000001600)=""/101, 0x65, 0x4}, 0x0) [ 1009.340697] input:  as /devices/virtual/input/input79 22:44:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote}, 0x0, @in=@multicast2}}, 0xe4) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x16, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="02120100020000000000000000020000"], 0x10}}, 0x0) close(r2) 22:44:16 executing program 3: creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) syz_open_dev$video(0x0, 0x9, 0x0) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0xc9, 0x2, 0x401, "80a249e39bde67913e17f4b9cd7640ad", "3b61a003648dbc9ae916404558d3ac5411aab799b28365c999f77c14b11ecd2cffc108eb7e044c55ba1debf77ea54d32aafab6cbd79e5e627bc8a2089e81c8c2c050e9c3d3079339632147e9fe429d743e7d62574141cd6d464b75e9c4f75a0143828087666d87daf29aeca9e3827176241fb4be66183502d18de26da90b3f781a9cb92fa9aa88b583aec5cc3ab5b8aa704a68e5452727f27a279435a057aef43bb30253e5010df3736aca17d7f0ae97a0f6b4d4"}, 0xc9, 0x3) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) fadvise64(0xffffffffffffffff, 0x16, 0x7, 0x0) getpid() syz_open_procfs(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 1009.936767] input:  as /devices/virtual/input/input80 22:44:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0xc0000100], [0xc1]}) 22:44:16 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x0, @mcast1, 0x2}}, 0xffffffff, 0xf79}, &(0x7f00000004c0)=0x90) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0xc0200, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x8b89d10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000640), &(0x7f0000000680)=0x4) r6 = socket(0x1e, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, r1, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x8, 0x10001, 0x3, 0x80000001, 0x0, 0x1, 0x40100, 0x0, 0x20, 0x0, 0x0, 0x20, 0x9, 0x9f90, 0xb7, 0x1, 0x9, 0x9, 0xff, 0x6, 0x3, 0x7, 0x1000, 0x33, 0x1000, 0x5, 0xfffffffffffffffb, 0x80, 0x6, 0x2, 0x9, 0xffff, 0x1f, 0x11, 0x8, 0x9, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x7}, 0x8080, 0x8, 0x0, 0x7, 0x80000000, 0x100, 0x7}, r7, 0x2, r2, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000300)={0x2, &(0x7f0000000180)=[{}, {}]}) mkdir(&(0x7f00000005c0)='./file0\x00', 0x1) sendmsg(r6, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, &(0x7f00006e9c68)}, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x8, &(0x7f0000c73000/0x3000)=nil) 22:44:18 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, r3+30000000}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) tkill(r2, 0x1004000000016) 22:44:18 executing program 3: creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) syz_open_dev$video(0x0, 0x9, 0x0) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0xc9, 0x2, 0x401, "80a249e39bde67913e17f4b9cd7640ad", "3b61a003648dbc9ae916404558d3ac5411aab799b28365c999f77c14b11ecd2cffc108eb7e044c55ba1debf77ea54d32aafab6cbd79e5e627bc8a2089e81c8c2c050e9c3d3079339632147e9fe429d743e7d62574141cd6d464b75e9c4f75a0143828087666d87daf29aeca9e3827176241fb4be66183502d18de26da90b3f781a9cb92fa9aa88b583aec5cc3ab5b8aa704a68e5452727f27a279435a057aef43bb30253e5010df3736aca17d7f0ae97a0f6b4d4"}, 0xc9, 0x3) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$TIOCGLCKTRMIOS(r0, 0x405c5503, &(0x7f0000000000)={0x0, 0x0, 0x2}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) fadvise64(0xffffffffffffffff, 0x16, 0x7, 0x0) getpid() syz_open_procfs(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 22:44:18 executing program 0: r0 = syz_open_dev$dspn(0x0, 0x1000000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x10}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x3af, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x1, &(0x7f0000001600)=""/101, 0x65, 0x4}, 0x0) 22:44:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r1) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) r2 = fcntl$dupfd(r0, 0x0, r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) write$binfmt_elf64(r2, 0x0, 0x0) 22:44:18 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x0, @mcast1, 0x2}}, 0xffffffff, 0xf79}, &(0x7f00000004c0)=0x90) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0xc0200, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x8b89d10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000640), &(0x7f0000000680)=0x4) r6 = socket(0x1e, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, r1, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x8, 0x10001, 0x3, 0x80000001, 0x0, 0x1, 0x40100, 0x0, 0x20, 0x0, 0x0, 0x20, 0x9, 0x9f90, 0xb7, 0x1, 0x9, 0x9, 0xff, 0x6, 0x3, 0x7, 0x1000, 0x33, 0x1000, 0x5, 0xfffffffffffffffb, 0x80, 0x6, 0x2, 0x9, 0xffff, 0x1f, 0x11, 0x8, 0x9, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x7}, 0x8080, 0x8, 0x0, 0x7, 0x80000000, 0x100, 0x7}, r7, 0x2, r2, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000300)={0x2, &(0x7f0000000180)=[{}, {}]}) mkdir(&(0x7f00000005c0)='./file0\x00', 0x1) sendmsg(r6, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, &(0x7f00006e9c68)}, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x8, &(0x7f0000c73000/0x3000)=nil) 22:44:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x0, @mcast1, 0x2}}, 0xffffffff, 0xf79}, &(0x7f00000004c0)=0x90) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0xc0200, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x8b89d10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000640), &(0x7f0000000680)=0x4) r6 = socket(0x1e, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, r1, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x8, 0x10001, 0x3, 0x80000001, 0x0, 0x1, 0x40100, 0x0, 0x20, 0x0, 0x0, 0x20, 0x9, 0x9f90, 0xb7, 0x1, 0x9, 0x9, 0xff, 0x6, 0x3, 0x7, 0x1000, 0x33, 0x1000, 0x5, 0xfffffffffffffffb, 0x80, 0x6, 0x2, 0x9, 0xffff, 0x1f, 0x11, 0x8, 0x9, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x7}, 0x8080, 0x8, 0x0, 0x7, 0x80000000, 0x100, 0x7}, r7, 0x2, r2, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000300)={0x2, &(0x7f0000000180)=[{}, {}]}) mkdir(&(0x7f00000005c0)='./file0\x00', 0x1) sendmsg(r6, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, &(0x7f00006e9c68)}, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x8, &(0x7f0000c73000/0x3000)=nil) [ 1011.723129] input:  as /devices/virtual/input/input81 22:44:18 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @local}], 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0), &(0x7f0000000140)=0x8) 22:44:18 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000880)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x8001, 0x8000000000001, 0x4}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x0, 0x1, 0x1}) 22:44:18 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, r3+30000000}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) tkill(r2, 0x1004000000016) 22:44:18 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socket(0x1a, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x7006, 0x0) 22:44:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000001c0)={[], 0x0, 0xffffffff, 0x3f}) 22:44:18 executing program 0: r0 = syz_open_dev$dspn(0x0, 0x1000000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$vsock_stream(r0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x10}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x3af, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001580)=[{0x0}], 0x1, &(0x7f0000001600)=""/101, 0x65, 0x4}, 0x0) 22:44:18 executing program 3: r0 = socket$inet6(0xa, 0x20800a2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) r5 = socket$inet6(0xa, 0x4000000000000005, 0x8) ioctl(r5, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r7) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) close(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x20) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x80000000000000, 0xffffffff}, 'port1\x00', 0x20, 0x100000, 0x2, 0x5, 0x5, 0xf6b8, 0x0, 0x0, 0x3}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000200)) getpgid(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000580)={0x0, 0x0}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000005c0)=r10) 22:44:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539a1", 0xc1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r0, r0}, &(0x7f0000000240)=""/240, 0xf0, 0x0) 22:44:19 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x0}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, r3+30000000}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) tkill(r2, 0x1004000000016) 22:44:20 executing program 3: r0 = socket$inet6(0xa, 0x20800a2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) r5 = socket$inet6(0xa, 0x4000000000000005, 0x8) ioctl(r5, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r7) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) close(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x20) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x80000000000000, 0xffffffff}, 'port1\x00', 0x20, 0x100000, 0x2, 0x5, 0x5, 0xf6b8, 0x0, 0x0, 0x3}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000200)) getpgid(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000580)={0x0, 0x0}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000005c0)=r10) 22:44:20 executing program 3: r0 = socket$inet6(0xa, 0x20800a2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) r5 = socket$inet6(0xa, 0x4000000000000005, 0x8) ioctl(r5, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r7) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) close(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x20) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x80000000000000, 0xffffffff}, 'port1\x00', 0x20, 0x100000, 0x2, 0x5, 0x5, 0xf6b8, 0x0, 0x0, 0x3}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000200)) getpgid(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000580)={0x0, 0x0}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000005c0)=r10) 22:44:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x0, @mcast1, 0x2}}, 0xffffffff, 0xf79}, &(0x7f00000004c0)=0x90) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0xc0200, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x8b89d10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000640), &(0x7f0000000680)=0x4) r6 = socket(0x1e, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, r1, 0x0, 0x1, &(0x7f0000000280)='\x00'}, 0x30) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x8, 0x10001, 0x3, 0x80000001, 0x0, 0x1, 0x40100, 0x0, 0x20, 0x0, 0x0, 0x20, 0x9, 0x9f90, 0xb7, 0x1, 0x9, 0x9, 0xff, 0x6, 0x3, 0x7, 0x1000, 0x33, 0x1000, 0x5, 0xfffffffffffffffb, 0x80, 0x6, 0x2, 0x9, 0xffff, 0x1f, 0x11, 0x8, 0x9, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x7}, 0x8080, 0x8, 0x0, 0x7, 0x80000000, 0x100, 0x7}, r7, 0x2, r2, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000300)={0x2, &(0x7f0000000180)=[{}, {}]}) mkdir(&(0x7f00000005c0)='./file0\x00', 0x1) sendmsg(r6, &(0x7f0000030000)={&(0x7f00004f5000)=@generic={0x10000000001e, "0100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0, 0x0, &(0x7f00006e9c68)}, 0x0) shmget(0xffffffffffffffff, 0x3000, 0x8, &(0x7f0000c73000/0x3000)=nil) 22:44:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539a1", 0xc1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r0, r0}, &(0x7f0000000240)=""/240, 0xf0, 0x0) 22:44:21 executing program 0: r0 = socket$inet6(0xa, 0x20800a2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) r5 = socket$inet6(0xa, 0x4000000000000005, 0x8) ioctl(r5, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r7) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) close(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x20) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x80000000000000, 0xffffffff}, 'port1\x00', 0x20, 0x100000, 0x2, 0x5, 0x5, 0xf6b8, 0x0, 0x0, 0x3}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000200)) getpgid(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000580)={0x0, 0x0}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000005c0)=r10) 22:44:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539a1", 0xc1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r0, r0}, &(0x7f0000000240)=""/240, 0xf0, 0x0) 22:44:21 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539a1", 0xc1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r0, r0}, &(0x7f0000000240)=""/240, 0xf0, 0x0) 22:44:21 executing program 3: r0 = socket$inet6(0xa, 0x20800a2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) r5 = socket$inet6(0xa, 0x4000000000000005, 0x8) ioctl(r5, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r7) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) close(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x20) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x80000000000000, 0xffffffff}, 'port1\x00', 0x20, 0x100000, 0x2, 0x5, 0x5, 0xf6b8, 0x0, 0x0, 0x3}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000200)) getpgid(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000580)={0x0, 0x0}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000005c0)=r10) 22:44:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539a1", 0xc1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r0, r0}, &(0x7f0000000240)=""/240, 0xf0, 0x0) 22:44:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539a1", 0xc1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r0, r0}, &(0x7f0000000240)=""/240, 0xf0, 0x0) 22:44:22 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539a1", 0xc1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r0, r0}, &(0x7f0000000240)=""/240, 0xf0, 0x0) 22:44:22 executing program 0: r0 = socket$inet6(0xa, 0x20800a2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) r5 = socket$inet6(0xa, 0x4000000000000005, 0x8) ioctl(r5, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r7) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) close(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x20) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x80000000000000, 0xffffffff}, 'port1\x00', 0x20, 0x100000, 0x2, 0x5, 0x5, 0xf6b8, 0x0, 0x0, 0x3}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000200)) getpgid(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000580)={0x0, 0x0}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000005c0)=r10) 22:44:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539a1", 0xc1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r0, r0}, &(0x7f0000000240)=""/240, 0xf0, 0x0) 22:44:22 executing program 3: r0 = socket$inet6(0xa, 0x20800a2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) r5 = socket$inet6(0xa, 0x4000000000000005, 0x8) ioctl(r5, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r7) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) close(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x20) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x80000000000000, 0xffffffff}, 'port1\x00', 0x20, 0x100000, 0x2, 0x5, 0x5, 0xf6b8, 0x0, 0x0, 0x3}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000200)) getpgid(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000580)={0x0, 0x0}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000005c0)=r10) 22:44:24 executing program 3: r0 = socket$inet6(0xa, 0x20800a2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) r5 = socket$inet6(0xa, 0x4000000000000005, 0x8) ioctl(r5, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r7) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) close(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x20) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x80000000000000, 0xffffffff}, 'port1\x00', 0x20, 0x100000, 0x2, 0x5, 0x5, 0xf6b8, 0x0, 0x0, 0x3}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000200)) getpgid(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000580)={0x0, 0x0}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000005c0)=r10) 22:44:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539a1", 0xc1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r0, r0}, &(0x7f0000000240)=""/240, 0xf0, 0x0) 22:44:24 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)="585ccbe4ed83b8361f000000000000002206297b6897b66147b3c7218a9169a85ea0bdc9e1587a050000000000f1ff42e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d25500200000035c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5a7d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40000e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539a1", 0xc1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r1, r0, r0}, &(0x7f0000000240)=""/240, 0xf0, 0x0) 22:44:24 executing program 0: r0 = socket$inet6(0xa, 0x20800a2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) r5 = socket$inet6(0xa, 0x4000000000000005, 0x8) ioctl(r5, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r7) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) close(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x20) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x80000000000000, 0xffffffff}, 'port1\x00', 0x20, 0x100000, 0x2, 0x5, 0x5, 0xf6b8, 0x0, 0x0, 0x3}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000200)) getpgid(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000580)={0x0, 0x0}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000005c0)=r10) 22:44:24 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0xfe5c) 22:44:24 executing program 2: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000002c0)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x201, &(0x7f0000000000)={0x0}) 22:44:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000580)="2f65786500000000000489004bddd9de91be10eebf000ae91e18f0c76fbb23bacd7b25a8ec5882da75f88847ea88f6cb69e071fb35331ce39c5a0100") getgid() ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000640)={'veth1\x00', {0x2, 0x4e24, @local}}) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0x0, 0x8, {0x0, 0x8001, 0x0, {0x6, 0x767, 0x0, 0x0, 0x4, 0x7, 0x1, 0x7, 0x7f, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1b0}}}, 0x78) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000080)=""/16) getrlimit(0xf, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xc, 0xfa00, {0x3, &(0x7f0000000600), 0x13f, 0xa}}, 0x20) syz_open_dev$evdev(&(0x7f0000000300)='/dev/input/event#\x00', 0x3, 0x20000) ioctl$FS_IOC_FSGETXATTR(r1, 0x40086602, &(0x7f0000000040)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x101681, 0x0) 22:44:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000580)="2f65786500000000000489004bddd9de91be10eebf000ae91e18f0c76fbb23bacd7b25a8ec5882da75f88847ea88f6cb69e071fb35331ce39c5a0100") getgid() ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000640)={'veth1\x00', {0x2, 0x4e24, @local}}) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0x0, 0x8, {0x0, 0x8001, 0x0, {0x6, 0x767, 0x0, 0x0, 0x4, 0x7, 0x1, 0x7, 0x7f, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1b0}}}, 0x78) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000080)=""/16) getrlimit(0xf, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xc, 0xfa00, {0x3, &(0x7f0000000600), 0x13f, 0xa}}, 0x20) syz_open_dev$evdev(&(0x7f0000000300)='/dev/input/event#\x00', 0x3, 0x20000) ioctl$FS_IOC_FSGETXATTR(r1, 0x40086602, &(0x7f0000000040)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x101681, 0x0) 22:44:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r2, 0x40012}], 0x1, 0xff) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 22:44:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000580)="2f65786500000000000489004bddd9de91be10eebf000ae91e18f0c76fbb23bacd7b25a8ec5882da75f88847ea88f6cb69e071fb35331ce39c5a0100") getgid() ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000640)={'veth1\x00', {0x2, 0x4e24, @local}}) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0x0, 0x8, {0x0, 0x8001, 0x0, {0x6, 0x767, 0x0, 0x0, 0x4, 0x7, 0x1, 0x7, 0x7f, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1b0}}}, 0x78) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000080)=""/16) getrlimit(0xf, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xc, 0xfa00, {0x3, &(0x7f0000000600), 0x13f, 0xa}}, 0x20) syz_open_dev$evdev(&(0x7f0000000300)='/dev/input/event#\x00', 0x3, 0x20000) ioctl$FS_IOC_FSGETXATTR(r1, 0x40086602, &(0x7f0000000040)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x101681, 0x0) 22:44:25 executing program 0: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e53fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000007fe0)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000007000)={0xffffffffc0000001}) epoll_wait(r3, &(0x7f0000000200)=[{}], 0x1, 0x0) epoll_wait(r3, &(0x7f0000cd8ff4)=[{}], 0x1, 0x3) ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 22:44:25 executing program 3: r0 = socket$inet6(0xa, 0x20800a2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x9, &(0x7f0000000380)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) r5 = socket$inet6(0xa, 0x4000000000000005, 0x8) ioctl(r5, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r7) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) close(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0x20) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x5, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x80000000000000, 0xffffffff}, 'port1\x00', 0x20, 0x100000, 0x2, 0x5, 0x5, 0xf6b8, 0x0, 0x0, 0x3}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000200)) getpgid(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000580)={0x0, 0x0}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000005c0)=r10) 22:44:25 executing program 2: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000002c0)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x201, &(0x7f0000000000)={0x0}) 22:44:25 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0xc0386105, &(0x7f0000000280)) 22:44:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000580)="2f65786500000000000489004bddd9de91be10eebf000ae91e18f0c76fbb23bacd7b25a8ec5882da75f88847ea88f6cb69e071fb35331ce39c5a0100") getgid() ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000640)={'veth1\x00', {0x2, 0x4e24, @local}}) write$FUSE_ATTR(r1, &(0x7f0000000280)={0x78, 0x0, 0x8, {0x0, 0x8001, 0x0, {0x6, 0x767, 0x0, 0x0, 0x4, 0x7, 0x1, 0x7, 0x7f, 0x401, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1b0}}}, 0x78) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000080)=""/16) getrlimit(0xf, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xc, 0xfa00, {0x3, &(0x7f0000000600), 0x13f, 0xa}}, 0x20) syz_open_dev$evdev(&(0x7f0000000300)='/dev/input/event#\x00', 0x3, 0x20000) ioctl$FS_IOC_FSGETXATTR(r1, 0x40086602, &(0x7f0000000040)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0x101681, 0x0) 22:44:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040), 0x0) request_key(&(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='trustedsystem(#cpusetem0\x00', 0xfffffffffffffffd) geteuid() getegid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'br\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) getgroups(0x3, &(0x7f00000000c0)=[0x0, 0x0, 0xee01]) setfsgid(0x0) r1 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000220007031dff39d5fd760500000000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x4000000000000000, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x2, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0x11e, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x17}}}]}, 0x38}}, 0x0) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000004c0)) getuid() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)={'syz1'}, 0x1200e) 22:44:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r2, 0x40012}], 0x1, 0xff) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 22:44:25 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0xc0386105, &(0x7f0000000280)) 22:44:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000040c0), 0x1000) lstat(&(0x7f0000000040)='./file0\x00', 0x0) write$FUSE_ENTRY(r1, &(0x7f00000014c0)={0x90, 0xfffffffffffffff5, 0x2}, 0x90) 22:44:25 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0xc0386105, &(0x7f0000000280)) 22:44:25 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') preadv(r0, &(0x7f00000017c0), 0x10000000000001f7, 0xa3) [ 1019.170334] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 1019.200678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 22:44:25 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0xc0386105, &(0x7f0000000280)) 22:44:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 22:44:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040), 0x0) request_key(&(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='trustedsystem(#cpusetem0\x00', 0xfffffffffffffffd) geteuid() getegid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'br\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) getgroups(0x3, &(0x7f00000000c0)=[0x0, 0x0, 0xee01]) setfsgid(0x0) r1 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000220007031dff39d5fd760500000000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x4000000000000000, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x2, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0x11e, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x17}}}]}, 0x38}}, 0x0) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000004c0)) getuid() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)={'syz1'}, 0x1200e) [ 1019.430119] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 22:44:26 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 22:44:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af14, &(0x7f0000000080)) 22:44:26 executing program 2: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000002c0)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x201, &(0x7f0000000000)={0x0}) 22:44:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r2, 0x40012}], 0x1, 0xff) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 22:44:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040), 0x0) request_key(&(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='trustedsystem(#cpusetem0\x00', 0xfffffffffffffffd) geteuid() getegid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'br\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) getgroups(0x3, &(0x7f00000000c0)=[0x0, 0x0, 0xee01]) setfsgid(0x0) r1 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000220007031dff39d5fd760500000000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x4000000000000000, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x2, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0x11e, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x17}}}]}, 0x38}}, 0x0) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000004c0)) getuid() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)={'syz1'}, 0x1200e) 22:44:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 22:44:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000040), 0x0) request_key(&(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='trustedsystem(#cpusetem0\x00', 0xfffffffffffffffd) geteuid() getegid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'br\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) getgroups(0x3, &(0x7f00000000c0)=[0x0, 0x0, 0xee01]) setfsgid(0x0) r1 = socket$inet(0x10, 0x4000000003, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000220007031dff39d5fd760500000000000000fd21fe1c4095421ba3a20400ff7e280000001100ffffba16a0aa1ce208b3ef090000000000008e3141eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x4000000000000000, &(0x7f0000000380)={&(0x7f0000000300)={0x2, 0x2, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1={0x11e, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x17}}}]}, 0x38}}, 0x0) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000004c0)) getuid() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000440)={'syz1'}, 0x1200e) [ 1019.768913] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 22:44:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af14, &(0x7f0000000080)) 22:44:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) [ 1019.901807] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 22:44:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 22:44:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r2, 0x40012}], 0x1, 0xff) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 22:44:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 22:44:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af14, &(0x7f0000000080)) 22:44:26 executing program 2: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000002c0)) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x201, &(0x7f0000000000)={0x0}) 22:44:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af14, &(0x7f0000000080)) 22:44:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 22:44:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 22:44:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 22:44:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 22:44:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 22:44:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 22:44:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 22:44:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 22:44:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 22:44:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 22:44:27 executing program 4: syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xffffff89, 0x0, @remote={0xac, 0x223}, @dev}, @icmp=@parameter_prob={0x5, 0xf, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @dev}}}}}}, 0x0) 22:44:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 22:44:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x22000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="080008e6c25aaff3e99072afc8301c780893eaf44321e1ceec1e514c2bb000cd91fed7a7e1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x100000001, 0x1, [0x0]}, &(0x7f0000000280)=0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000200)={r3, 0x4}, 0x13e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e20, 0x0, @loopback}}}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000840)=ANY=[], &(0x7f0000009140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000700)=0x9, 0x4) accept$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x12, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000300000000000000070000008dd600011000000095000000000000006bce4fcc040000005a40976fdf0a4f2008d9b2c02cedb7fde43733a95f44933e52e641eadf421b89da83d0b0aec7a97e2385d2b798279d356c301961e8e4142648bda56e868701b3d2d3eeb6325bd6cafe875932d14c7f7942ddbcefd11be492b2043191d99948ba66985e6e54c988ebbd221ee4"], 0x0, 0x5, 0x85, &(0x7f0000000540)=""/133, 0x41100, 0x1, [], r5, 0xa}, 0x48) r6 = gettid() getpgrp(0xffffffffffffffff) kcmp(r6, 0x0, 0x0, 0xffffffffffffffff, r4) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8400ae8e, &(0x7f0000000180)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)) r7 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000043c0), &(0x7f0000004400)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000005740), &(0x7f0000005780)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000005e00), &(0x7f0000005e40)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) connect$vsock_stream(r7, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000340)={0x4, 0x8, 0xfa00, {r8, 0x10000}}, 0x10) 22:44:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) writev(r0, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000880)=0x3, 0x4) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 22:44:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 22:44:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) 22:44:27 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}]}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 22:44:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x2) rt_sigqueueinfo(0x0, 0x10, &(0x7f0000000180)={0x2b, 0x3, 0x1c}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {}, 0x8, {}, "0000000500000000723000"}) 22:44:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x80000000, 0x200002) r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x40, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000200)=0x3fd, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000500), &(0x7f0000000540)=0x0, &(0x7f0000000580)) ioctl$TUNSETGROUP(r1, 0x400454ce, r3) r4 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f00000002c0)={{0x20a0, 0x4}, 0x1}, 0x10) r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) write$P9_RLOPEN(r5, &(0x7f0000000000)={0x18}, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x1000}}) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000680)={0x7, 0x5d5753e5}) recvfrom$inet6(r1, &(0x7f0000000380)=""/216, 0xd8, 0x40000040, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @ipv4={[], [], @rand_addr=0x5669}, 0x5}, 0x1c) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x12, r2, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8004700b, &(0x7f0000000040)) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xfffffffffffffff9, @loopback, 0x20}, {0xa, 0x4e21, 0x0, @mcast1, 0x200}, 0x100000000, [0x9, 0x9, 0x80, 0x4, 0x80, 0x100000001, 0x6, 0x1]}, 0x5c) get_thread_area(&(0x7f00000004c0)={0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x6acbcdb8, 0xd1c, 0x79fe, 0x6, 0x80000000, 0x2, 0x1a}) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e23, 0x3, @local, 0x1}, {0xa, 0x4e20, 0x1000, @mcast1, 0x7d}, 0x0, [0xfffffffffffffe00, 0x9, 0x7, 0x7a1, 0x20, 0x3, 0x2, 0x8]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0x101, @local, 0x281}, {0xa, 0x4e23, 0x82d, @mcast1, 0x7}, 0x7, [0x1, 0x7d, 0xbc6, 0x4, 0x9, 0x1, 0x4, 0xffffffffffffffff]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000180)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x0, 0xa800000000000000, 0x2, 0x7]}, 0x5c) [ 1021.594424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.601154] bridge0: port 1(bridge_slave_0) entered disabled state 22:44:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000380)={0x101, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000400)={r0}, 0x14) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r2 = socket(0x1e, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000), 0x3b4}, 0x0) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 22:44:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000380)={0x101, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000400)={r0}, 0x14) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r2 = socket(0x1e, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000), 0x3b4}, 0x0) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 22:44:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000380)={0x101, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000400)={r0}, 0x14) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r2 = socket(0x1e, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000), 0x3b4}, 0x0) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 22:44:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000380)={0x101, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000400)={r0}, 0x14) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r2 = socket(0x1e, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000), 0x3b4}, 0x0) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) [ 1022.152225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.159266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.168001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.175101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.215634] device bridge0 entered promiscuous mode 22:44:28 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x2) rt_sigqueueinfo(0x0, 0x10, &(0x7f0000000180)={0x2b, 0x3, 0x1c}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {}, 0x8, {}, "0000000500000000723000"}) [ 1022.307297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.313853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.380737] device bridge0 left promiscuous mode [ 1022.589143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.595933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1022.605323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.612171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1022.623731] device bridge0 entered promiscuous mode 22:44:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x22000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="080008e6c25aaff3e99072afc8301c780893eaf44321e1ceec1e514c2bb000cd91fed7a7e1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x100000001, 0x1, [0x0]}, &(0x7f0000000280)=0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000200)={r3, 0x4}, 0x13e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e20, 0x0, @loopback}}}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000840)=ANY=[], &(0x7f0000009140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000700)=0x9, 0x4) accept$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x12, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000300000000000000070000008dd600011000000095000000000000006bce4fcc040000005a40976fdf0a4f2008d9b2c02cedb7fde43733a95f44933e52e641eadf421b89da83d0b0aec7a97e2385d2b798279d356c301961e8e4142648bda56e868701b3d2d3eeb6325bd6cafe875932d14c7f7942ddbcefd11be492b2043191d99948ba66985e6e54c988ebbd221ee4"], 0x0, 0x5, 0x85, &(0x7f0000000540)=""/133, 0x41100, 0x1, [], r5, 0xa}, 0x48) r6 = gettid() getpgrp(0xffffffffffffffff) kcmp(r6, 0x0, 0x0, 0xffffffffffffffff, r4) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8400ae8e, &(0x7f0000000180)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)) r7 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000043c0), &(0x7f0000004400)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000005740), &(0x7f0000005780)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000005e00), &(0x7f0000005e40)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) connect$vsock_stream(r7, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000340)={0x4, 0x8, 0xfa00, {r8, 0x10000}}, 0x10) 22:44:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x2) rt_sigqueueinfo(0x0, 0x10, &(0x7f0000000180)={0x2b, 0x3, 0x1c}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {}, 0x8, {}, "0000000500000000723000"}) 22:44:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x2) rt_sigqueueinfo(0x0, 0x10, &(0x7f0000000180)={0x2b, 0x3, 0x1c}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {}, 0x8, {}, "0000000500000000723000"}) 22:44:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000380)={0x101, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000400)={r0}, 0x14) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r2 = socket(0x1e, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000), 0x3b4}, 0x0) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 22:44:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x2) rt_sigqueueinfo(0x0, 0x10, &(0x7f0000000180)={0x2b, 0x3, 0x1c}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {}, 0x8, {}, "0000000500000000723000"}) 22:44:29 executing program 4: recvmsg(0xffffffffffffff9c, &(0x7f0000002a40)={&(0x7f0000001600)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000001680)=""/108, 0x6c}, {&(0x7f0000001700)=""/112, 0x70}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002800)=""/143, 0x8f}], 0x4}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000030c0)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000480)=0xe8) gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003400)={{{@in6=@ipv4, @in=@remote}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000003500)=0xe8) unshare(0x8020000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000200)={0x0}) r3 = open(&(0x7f0000000240)='./file0\x00', 0x2, 0x80) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000280)={r2, 0x80000, r3}) restart_syscall() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x80002, 0x0) write$UHID_INPUT(r4, &(0x7f00000005c0)={0x8, "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", 0x1000}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x0, 0x5}, 0x2c) r5 = accept4$inet(0xffffffffffffff9c, &(0x7f00000003c0)={0x2, 0x0, @remote}, &(0x7f0000000400)=0xffffffffffffff56, 0x0) msgget$private(0x0, 0x21) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10000, 0x200) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040), 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x200000, 0x0) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg(r1, &(0x7f0000002780)={&(0x7f00000002c0)=@hci={0x1f, r0, 0x3}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)="d7ec3ae93a303af1247d37d817384fef540ffe2bfecc9da5a72667de9fb0680609099b522de7e9e1d2b763dfbef0dde32598bc9552d66d9158a424586da6ba6157dc0d81813ad83d45abef617d20e983a4b6f9ea9a23b26368de4922f38ccf5bf02191f1e72eb9258ab69bbecdc49f92d18127516d82788dc4c61d688f3aadfe61858db13742a1d282ca2d53dc62d3a627f612fc29530c4011c3f048a7f39e119343ffa43bd7d9a55a5abdd6264f56", 0xaf}], 0x1}, 0x8000) setns(r7, 0x0) setsockopt$sock_void(r5, 0x1, 0x24, 0x0, 0x0) clone(0x10062101, &(0x7f00000036c0), 0x0, 0x0, &(0x7f0000000200)) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$KDSETLED(r6, 0x4b32, 0x1) 22:44:29 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x2) rt_sigqueueinfo(0x0, 0x10, &(0x7f0000000180)={0x2b, 0x3, 0x1c}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {}, 0x8, {}, "0000000500000000723000"}) 22:44:29 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x2) rt_sigqueueinfo(0x0, 0x10, &(0x7f0000000180)={0x2b, 0x3, 0x1c}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {}, 0x8, {}, "0000000500000000723000"}) 22:44:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x2) rt_sigqueueinfo(0x0, 0x10, &(0x7f0000000180)={0x2b, 0x3, 0x1c}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {}, 0x8, {}, "0000000500000000723000"}) 22:44:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000380)={0x101, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000400)={r0}, 0x14) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r2 = socket(0x1e, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000), 0x3b4}, 0x0) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 22:44:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x22000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="080008e6c25aaff3e99072afc8301c780893eaf44321e1ceec1e514c2bb000cd91fed7a7e1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x100000001, 0x1, [0x0]}, &(0x7f0000000280)=0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000200)={r3, 0x4}, 0x13e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e20, 0x0, @loopback}}}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000840)=ANY=[], &(0x7f0000009140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000700)=0x9, 0x4) accept$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x12, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000300000000000000070000008dd600011000000095000000000000006bce4fcc040000005a40976fdf0a4f2008d9b2c02cedb7fde43733a95f44933e52e641eadf421b89da83d0b0aec7a97e2385d2b798279d356c301961e8e4142648bda56e868701b3d2d3eeb6325bd6cafe875932d14c7f7942ddbcefd11be492b2043191d99948ba66985e6e54c988ebbd221ee4"], 0x0, 0x5, 0x85, &(0x7f0000000540)=""/133, 0x41100, 0x1, [], r5, 0xa}, 0x48) r6 = gettid() getpgrp(0xffffffffffffffff) kcmp(r6, 0x0, 0x0, 0xffffffffffffffff, r4) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8400ae8e, &(0x7f0000000180)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)) r7 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000043c0), &(0x7f0000004400)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000005740), &(0x7f0000005780)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000005e00), &(0x7f0000005e40)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) connect$vsock_stream(r7, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000340)={0x4, 0x8, 0xfa00, {r8, 0x10000}}, 0x10) 22:44:29 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r2 = getpid() bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) sched_setscheduler(r2, 0x5, &(0x7f0000000080)) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) [ 1023.199096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.206087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.218306] device bridge0 left promiscuous mode [ 1024.005274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.011686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.011937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.024674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.031850] device bridge0 entered promiscuous mode [ 1024.040911] bridge0: port 2(bridge_slave_1) entered disabled state 22:44:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) geteuid() getgroups(0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f00009f3000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f0000000200), 0x0) 22:44:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x22000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="080008e6c25aaff3e99072afc8301c780893eaf44321e1ceec1e514c2bb000cd91fed7a7e1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x100000001, 0x1, [0x0]}, &(0x7f0000000280)=0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000200)={r3, 0x4}, 0x13e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e20, 0x0, @loopback}}}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000840)=ANY=[], &(0x7f0000009140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000700)=0x9, 0x4) accept$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x12, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000300000000000000070000008dd600011000000095000000000000006bce4fcc040000005a40976fdf0a4f2008d9b2c02cedb7fde43733a95f44933e52e641eadf421b89da83d0b0aec7a97e2385d2b798279d356c301961e8e4142648bda56e868701b3d2d3eeb6325bd6cafe875932d14c7f7942ddbcefd11be492b2043191d99948ba66985e6e54c988ebbd221ee4"], 0x0, 0x5, 0x85, &(0x7f0000000540)=""/133, 0x41100, 0x1, [], r5, 0xa}, 0x48) r6 = gettid() getpgrp(0xffffffffffffffff) kcmp(r6, 0x0, 0x0, 0xffffffffffffffff, r4) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8400ae8e, &(0x7f0000000180)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)) r7 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000043c0), &(0x7f0000004400)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000005740), &(0x7f0000005780)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000005e00), &(0x7f0000005e40)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) connect$vsock_stream(r7, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000340)={0x4, 0x8, 0xfa00, {r8, 0x10000}}, 0x10) 22:44:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10) socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[]}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000380)={0x101, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000400)={r0}, 0x14) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r2 = socket(0x1e, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) sendmsg(r2, &(0x7f0000316000)={&(0x7f0000dd7000)=@generic={0x10000000001e, "010000000000000000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624281e27800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000d0bfd0), 0x0, &(0x7f00002d4000), 0x3b4}, 0x0) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) 22:44:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x2) rt_sigqueueinfo(0x0, 0x10, &(0x7f0000000180)={0x2b, 0x3, 0x1c}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {}, 0x8, {}, "0000000500000000723000"}) 22:44:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0x0, 0x2) rt_sigqueueinfo(0x0, 0x10, &(0x7f0000000180)={0x2b, 0x3, 0x1c}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {}, 0x8, {}, "0000000500000000723000"}) [ 1024.051703] bridge0: port 1(bridge_slave_0) entered disabled state 22:44:30 executing program 5: io_setup(0x1, &(0x7f0000000040)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000ac5000), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x53, 0x0) r2 = memfd_create(&(0x7f0000000140)='dev ', 0x2) write(r2, &(0x7f00000001c0)="16", 0x1) sendfile(r1, r2, &(0x7f0000000000), 0xffff) fcntl$addseals(r2, 0x409, 0xd) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8}) write$binfmt_elf64(r2, 0x0, 0x0) io_destroy(r0) 22:44:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) geteuid() getgroups(0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f00009f3000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f0000000200), 0x0) [ 1024.587540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.594070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.600884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.607336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.618208] device bridge0 entered promiscuous mode 22:44:31 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x34, 0x3, 0x0, {0x0, 0x13, 0x0, 'trusted^mime_type!&'}}, 0x34) 22:44:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000400)="0f01cbf30f6f4e000f01cb0f20c035200000000f22c0b862e500000f23c00f21f835000006000f23f80f22a20ff97e9fc4c10debe8c4c27d35a025d000008fe9e09884570c000080", 0x48}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000000)) 22:44:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x22000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="080008e6c25aaff3e99072afc8301c780893eaf44321e1ceec1e514c2bb000cd91fed7a7e1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x100000001, 0x1, [0x0]}, &(0x7f0000000280)=0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000200)={r3, 0x4}, 0x13e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e20, 0x0, @loopback}}}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000840)=ANY=[], &(0x7f0000009140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000700)=0x9, 0x4) accept$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x12, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000300000000000000070000008dd600011000000095000000000000006bce4fcc040000005a40976fdf0a4f2008d9b2c02cedb7fde43733a95f44933e52e641eadf421b89da83d0b0aec7a97e2385d2b798279d356c301961e8e4142648bda56e868701b3d2d3eeb6325bd6cafe875932d14c7f7942ddbcefd11be492b2043191d99948ba66985e6e54c988ebbd221ee4"], 0x0, 0x5, 0x85, &(0x7f0000000540)=""/133, 0x41100, 0x1, [], r5, 0xa}, 0x48) r6 = gettid() getpgrp(0xffffffffffffffff) kcmp(r6, 0x0, 0x0, 0xffffffffffffffff, r4) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8400ae8e, &(0x7f0000000180)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)) r7 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000043c0), &(0x7f0000004400)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000005740), &(0x7f0000005780)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000005e00), &(0x7f0000005e40)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) connect$vsock_stream(r7, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000340)={0x4, 0x8, 0xfa00, {r8, 0x10000}}, 0x10) [ 1024.656366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.663820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.693428] device bridge0 left promiscuous mode 22:44:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) geteuid() getgroups(0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f00009f3000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f0000000200), 0x0) 22:44:31 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x8}}) [ 1025.317568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.324046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1025.330809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.337243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1025.344954] device bridge0 entered promiscuous mode [ 1025.355539] bridge0: port 2(bridge_slave_1) entered disabled state 22:44:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x22000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="080008e6c25aaff3e99072afc8301c780893eaf44321e1ceec1e514c2bb000cd91fed7a7e1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x100000001, 0x1, [0x0]}, &(0x7f0000000280)=0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000200)={r3, 0x4}, 0x13e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e20, 0x0, @loopback}}}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000840)=ANY=[], &(0x7f0000009140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000700)=0x9, 0x4) accept$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x12, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000300000000000000070000008dd600011000000095000000000000006bce4fcc040000005a40976fdf0a4f2008d9b2c02cedb7fde43733a95f44933e52e641eadf421b89da83d0b0aec7a97e2385d2b798279d356c301961e8e4142648bda56e868701b3d2d3eeb6325bd6cafe875932d14c7f7942ddbcefd11be492b2043191d99948ba66985e6e54c988ebbd221ee4"], 0x0, 0x5, 0x85, &(0x7f0000000540)=""/133, 0x41100, 0x1, [], r5, 0xa}, 0x48) r6 = gettid() getpgrp(0xffffffffffffffff) kcmp(r6, 0x0, 0x0, 0xffffffffffffffff, r4) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8400ae8e, &(0x7f0000000180)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)) r7 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000043c0), &(0x7f0000004400)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000005740), &(0x7f0000005780)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000005e00), &(0x7f0000005e40)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) connect$vsock_stream(r7, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000340)={0x4, 0x8, 0xfa00, {r8, 0x10000}}, 0x10) 22:44:31 executing program 3: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0xc000002000000000, &(0x7f00000009c0), 0x173, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0) 22:44:31 executing program 5: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0xc0ed0000, 0x0) [ 1025.363167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.385887] device bridge0 left promiscuous mode 22:44:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000000c0)) geteuid() getgroups(0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f00009f3000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f0000000200), 0x0) 22:44:31 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00f5ff7b84a41e45e3287eb735030000"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000740)=@ll={0x11, 0x1d, r2, 0x1, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)}], 0x1, 0x0, 0x0, 0x20008014}}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(0xffffffffffffffff, 0x0, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000004c0)='erspan0\x00', 0x10) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1}}], 0x1, 0x0) [ 1025.726376] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(238907283527628) <= P.seqno(0) <= S.SWH(238907283527702)) and (P.ackno exists or LAWL(201169366734332) <= P.ackno(201169366734333) <= S.AWH(201169366734333), sending SYNC... 22:44:32 executing program 3: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0xc000002000000000, &(0x7f00000009c0), 0x173, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0) [ 1026.035319] dccp_close: ABORT with 1061 bytes unread 22:44:32 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00f5ff7b84a41e45e3287eb735030000"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000740)=@ll={0x11, 0x1d, r2, 0x1, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)}], 0x1, 0x0, 0x0, 0x20008014}}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(0xffffffffffffffff, 0x0, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000004c0)='erspan0\x00', 0x10) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1}}], 0x1, 0x0) 22:44:32 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00f5ff7b84a41e45e3287eb735030000"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000740)=@ll={0x11, 0x1d, r2, 0x1, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)}], 0x1, 0x0, 0x0, 0x20008014}}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(0xffffffffffffffff, 0x0, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000004c0)='erspan0\x00', 0x10) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1}}], 0x1, 0x0) [ 1026.423156] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(197342511923699) <= P.seqno(0) <= S.SWH(197342511923773)) and (P.ackno exists or LAWL(150862076473749) <= P.ackno(150862076473750) <= S.AWH(150862076473750), sending SYNC... [ 1026.550105] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(75059826756230) <= P.seqno(0) <= S.SWH(75059826756304)) and (P.ackno exists or LAWL(195834769292153) <= P.ackno(195834769292154) <= S.AWH(195834769292154), sending SYNC... [ 1026.603876] dccp_close: ABORT with 1061 bytes unread 22:44:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00f5ff7b84a41e45e3287eb735030000"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000740)=@ll={0x11, 0x1d, r2, 0x1, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)}], 0x1, 0x0, 0x0, 0x20008014}}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(0xffffffffffffffff, 0x0, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000004c0)='erspan0\x00', 0x10) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1}}], 0x1, 0x0) [ 1026.713755] dccp_close: ABORT with 1061 bytes unread [ 1026.766341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.772803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.779614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.786050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.808412] device bridge0 entered promiscuous mode 22:44:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x22000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="080008e6c25aaff3e99072afc8301c780893eaf44321e1ceec1e514c2bb000cd91fed7a7e1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x100000001, 0x1, [0x0]}, &(0x7f0000000280)=0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000200)={r3, 0x4}, 0x13e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e20, 0x0, @loopback}}}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000840)=ANY=[], &(0x7f0000009140)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000700)=0x9, 0x4) accept$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x12, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000300000000000000070000008dd600011000000095000000000000006bce4fcc040000005a40976fdf0a4f2008d9b2c02cedb7fde43733a95f44933e52e641eadf421b89da83d0b0aec7a97e2385d2b798279d356c301961e8e4142648bda56e868701b3d2d3eeb6325bd6cafe875932d14c7f7942ddbcefd11be492b2043191d99948ba66985e6e54c988ebbd221ee4"], 0x0, 0x5, 0x85, &(0x7f0000000540)=""/133, 0x41100, 0x1, [], r5, 0xa}, 0x48) r6 = gettid() getpgrp(0xffffffffffffffff) kcmp(r6, 0x0, 0x0, 0xffffffffffffffff, r4) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8400ae8e, &(0x7f0000000180)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)) r7 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0xfffffffffffffffd}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000043c0), &(0x7f0000004400)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000005740), &(0x7f0000005780)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000005e00), &(0x7f0000005e40)=0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) connect$vsock_stream(r7, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000340)={0x4, 0x8, 0xfa00, {r8, 0x10000}}, 0x10) 22:44:33 executing program 3: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0xc000002000000000, &(0x7f00000009c0), 0x173, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0) [ 1026.866580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.873101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.883310] device bridge0 left promiscuous mode [ 1026.945632] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(260715949442263) <= P.seqno(0) <= S.SWH(260715949442337)) and (P.ackno exists or LAWL(244683916692682) <= P.ackno(244683916692683) <= S.AWH(244683916692683), sending SYNC... [ 1027.059165] dccp_close: ABORT with 1061 bytes unread [ 1027.314430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.320972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.327720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.334103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.341887] device bridge0 entered promiscuous mode [ 1027.358089] bridge0: port 2(bridge_slave_1) entered disabled state 22:44:33 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00f5ff7b84a41e45e3287eb735030000"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000740)=@ll={0x11, 0x1d, r2, 0x1, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)}], 0x1, 0x0, 0x0, 0x20008014}}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(0xffffffffffffffff, 0x0, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000004c0)='erspan0\x00', 0x10) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1}}], 0x1, 0x0) 22:44:33 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', &(0x7f0000000140)="02000000b6", 0x5, 0x0) 22:44:33 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00f5ff7b84a41e45e3287eb735030000"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000740)=@ll={0x11, 0x1d, r2, 0x1, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)}], 0x1, 0x0, 0x0, 0x20008014}}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(0xffffffffffffffff, 0x0, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000004c0)='erspan0\x00', 0x10) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1}}], 0x1, 0x0) 22:44:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00f5ff7b84a41e45e3287eb735030000"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000740)=@ll={0x11, 0x1d, r2, 0x1, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)}], 0x1, 0x0, 0x0, 0x20008014}}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(0xffffffffffffffff, 0x0, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000004c0)='erspan0\x00', 0x10) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1}}], 0x1, 0x0) 22:44:33 executing program 3: mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000000c40)=[{{0x0, 0xc000002000000000, &(0x7f00000009c0), 0x173, &(0x7f00000000c0)}}], 0x40000000000026a, 0x0) [ 1027.364647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.393694] device bridge0 left promiscuous mode 22:44:33 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000000)=@setneightbl={0x1c, 0x43, 0x301, 0x0, 0x0, {0xa}, [@NDTA_NAME={0x8, 0x1, '\x00'}]}, 0x1c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1027.706386] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(234816074901217) <= P.seqno(0) <= S.SWH(234816074901291)) and (P.ackno exists or LAWL(85783527443348) <= P.ackno(85783527443349) <= S.AWH(85783527443349), sending SYNC... [ 1027.741431] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(98430415101199) <= P.seqno(0) <= S.SWH(98430415101273)) and (P.ackno exists or LAWL(88570727470224) <= P.ackno(88570727470225) <= S.AWH(88570727470225), sending SYNC... 22:44:34 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00f5ff7b84a41e45e3287eb735030000"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000740)=@ll={0x11, 0x1d, r2, 0x1, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)}], 0x1, 0x0, 0x0, 0x20008014}}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(0xffffffffffffffff, 0x0, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000004c0)='erspan0\x00', 0x10) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1}}], 0x1, 0x0) 22:44:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x3, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x8b89d10) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x4040) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x8, @dev={[], 0x20}}) mremap(&(0x7f0000aca000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000000000000ff0300000000000005000000000000007f0e00000000000000000100000000000600000000000001010000000000000085cb000000000000000000000000000002000000000000001f000000000000002000000000000000"]) fallocate(r2, 0x20, 0x8, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000b42000/0x3000)=nil) shmat(r4, &(0x7f0000943000/0x2000)=nil, 0x5000) r5 = socket(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000180)={0x10001, {0x8, 0xfffffffffffffff9}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xafe}, &(0x7f0000000240)=0x8) getpid() setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x0, 0x1}, 0x1a70) 22:44:34 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00f5ff7b84a41e45e3287eb735030000"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000740)=@ll={0x11, 0x1d, r2, 0x1, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)}], 0x1, 0x0, 0x0, 0x20008014}}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(0xffffffffffffffff, 0x0, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000004c0)='erspan0\x00', 0x10) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1}}], 0x1, 0x0) 22:44:34 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr/current\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, 0x0}, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) getuid() preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) [ 1028.535359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.541778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.548572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.554982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.710632] device bridge0 entered promiscuous mode 22:44:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x28, 0xb01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 22:44:35 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) fdatasync(0xffffffffffffff9c) socket$inet6(0xa, 0x1000000000002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00f5ff7b84a41e45e3287eb735030000"], 0x1}, 0x1, 0x0, 0x0, 0x90}, 0xfffffffffffffffd) r1 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(r1, 0x4, 0x4800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000700)=0xe8) sendmmsg(r0, &(0x7f0000000900)=[{{&(0x7f0000000740)=@ll={0x11, 0x1d, r2, 0x1, 0x7}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)}], 0x1, 0x0, 0x0, 0x20008014}}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) socket$packet(0x11, 0x0, 0x300) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) mq_open(0x0, 0x0, 0x0, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) getsockopt$inet_dccp_buf(r4, 0x21, 0x0, 0x0, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(0xffffffffffffffff, 0x0, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x3a5, &(0x7f0000003bc0)}}], 0x3a6, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000004c0)='erspan0\x00', 0x10) sendmmsg(r4, &(0x7f000000a080)=[{{&(0x7f0000005440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, 0x80, &(0x7f0000005640)=[{&(0x7f00000097c0)="bf", 0x1}], 0x1}}], 0x1, 0x0) 22:44:35 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x803}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) 22:44:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000005a0007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 22:44:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr/current\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, 0x0}, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) getuid() preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) 22:44:35 executing program 2: socketpair$unix(0x1, 0x40000000000003, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) creat(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000100)=@v3, 0x18, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='security.capability\x00', &(0x7f0000227f74)=""/140, 0x8c) 22:44:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x101d00) close(r0) pkey_free(0xffffffffffffffff) pkey_alloc(0x0, 0x2) 22:44:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr/current\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, 0x0}, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) getuid() preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) 22:44:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x101d00) close(r0) pkey_free(0xffffffffffffffff) pkey_alloc(0x0, 0x2) 22:44:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x101d00) close(r0) pkey_free(0xffffffffffffffff) pkey_alloc(0x0, 0x2) 22:44:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x101d00) close(r0) pkey_free(0xffffffffffffffff) pkey_alloc(0x0, 0x2) 22:44:37 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr/current\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@nl, 0x80, 0x0}, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) getuid() preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) 22:44:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000bfdfdc)={0x14, 0x4, 0x1, 0x800000001}, 0x14}}, 0x0) 22:44:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x3, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x8b89d10) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x4040) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x8, @dev={[], 0x20}}) mremap(&(0x7f0000aca000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000000000000ff0300000000000005000000000000007f0e00000000000000000100000000000600000000000001010000000000000085cb000000000000000000000000000002000000000000001f000000000000002000000000000000"]) fallocate(r2, 0x20, 0x8, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000b42000/0x3000)=nil) shmat(r4, &(0x7f0000943000/0x2000)=nil, 0x5000) r5 = socket(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000180)={0x10001, {0x8, 0xfffffffffffffff9}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xafe}, &(0x7f0000000240)=0x8) getpid() setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x0, 0x1}, 0x1a70) 22:44:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r1) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x6478c8501c739ddb, 0x700, 0x0, 0xffffffffffffff39) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xfffffffffffff001) semget$private(0x0, 0x4, 0x40) 22:44:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x3, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x8b89d10) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x4040) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x8, @dev={[], 0x20}}) mremap(&(0x7f0000aca000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000000000000ff0300000000000005000000000000007f0e00000000000000000100000000000600000000000001010000000000000085cb000000000000000000000000000002000000000000001f000000000000002000000000000000"]) fallocate(r2, 0x20, 0x8, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000b42000/0x3000)=nil) shmat(r4, &(0x7f0000943000/0x2000)=nil, 0x5000) r5 = socket(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000180)={0x10001, {0x8, 0xfffffffffffffff9}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xafe}, &(0x7f0000000240)=0x8) getpid() setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x0, 0x1}, 0x1a70) 22:44:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x3, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x8b89d10) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x4040) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x8, @dev={[], 0x20}}) mremap(&(0x7f0000aca000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000000000000ff0300000000000005000000000000007f0e00000000000000000100000000000600000000000001010000000000000085cb000000000000000000000000000002000000000000001f000000000000002000000000000000"]) fallocate(r2, 0x20, 0x8, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000b42000/0x3000)=nil) shmat(r4, &(0x7f0000943000/0x2000)=nil, 0x5000) r5 = socket(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000180)={0x10001, {0x8, 0xfffffffffffffff9}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xafe}, &(0x7f0000000240)=0x8) getpid() setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x0, 0x1}, 0x1a70) 22:44:37 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x101d00) close(r0) pkey_free(0xffffffffffffffff) pkey_alloc(0x0, 0x2) 22:44:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x101d00) close(r0) pkey_free(0xffffffffffffffff) pkey_alloc(0x0, 0x2) 22:44:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x3, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x8b89d10) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x4040) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x8, @dev={[], 0x20}}) mremap(&(0x7f0000aca000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000000000000ff0300000000000005000000000000007f0e00000000000000000100000000000600000000000001010000000000000085cb000000000000000000000000000002000000000000001f000000000000002000000000000000"]) fallocate(r2, 0x20, 0x8, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000b42000/0x3000)=nil) shmat(r4, &(0x7f0000943000/0x2000)=nil, 0x5000) r5 = socket(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000180)={0x10001, {0x8, 0xfffffffffffffff9}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xafe}, &(0x7f0000000240)=0x8) getpid() setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x0, 0x1}, 0x1a70) 22:44:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x2ef, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x101d00) close(r0) pkey_free(0xffffffffffffffff) pkey_alloc(0x0, 0x2) 22:44:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x1f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100), 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) timer_create(0x7, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000080)}}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) dup2(r0, r2) tkill(r1, 0x14) 22:44:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x8, &(0x7f0000000080)) 22:44:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x1f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100), 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) timer_create(0x7, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000080)}}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) dup2(r0, r2) tkill(r1, 0x14) 22:44:39 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000140)={0x89c, 0x2, 0x4, 0x800, 0x4, 0x2, 0x88b2}) unshare(0x8020000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}]}) setns(r1, 0x2000000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) unshare(0x40000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) [ 1032.830485] Unknown ioctl 19302 [ 1032.936079] IPVS: ftp: loaded support on port[0] = 21 [ 1033.306734] Unknown ioctl 19302 22:44:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x3, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x8b89d10) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x4040) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x8, @dev={[], 0x20}}) mremap(&(0x7f0000aca000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000000000000ff0300000000000005000000000000007f0e00000000000000000100000000000600000000000001010000000000000085cb000000000000000000000000000002000000000000001f000000000000002000000000000000"]) fallocate(r2, 0x20, 0x8, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000b42000/0x3000)=nil) shmat(r4, &(0x7f0000943000/0x2000)=nil, 0x5000) r5 = socket(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000180)={0x10001, {0x8, 0xfffffffffffffff9}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xafe}, &(0x7f0000000240)=0x8) getpid() setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x0, 0x1}, 0x1a70) 22:44:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x1f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100), 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) timer_create(0x7, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000080)}}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) dup2(r0, r2) tkill(r1, 0x14) 22:44:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x3, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x8b89d10) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x4040) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x8, @dev={[], 0x20}}) mremap(&(0x7f0000aca000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000000000000ff0300000000000005000000000000007f0e00000000000000000100000000000600000000000001010000000000000085cb000000000000000000000000000002000000000000001f000000000000002000000000000000"]) fallocate(r2, 0x20, 0x8, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000b42000/0x3000)=nil) shmat(r4, &(0x7f0000943000/0x2000)=nil, 0x5000) r5 = socket(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000180)={0x10001, {0x8, 0xfffffffffffffff9}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xafe}, &(0x7f0000000240)=0x8) getpid() setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x0, 0x1}, 0x1a70) 22:44:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x3, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x8b89d10) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x4040) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x8, @dev={[], 0x20}}) mremap(&(0x7f0000aca000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000000000000ff0300000000000005000000000000007f0e00000000000000000100000000000600000000000001010000000000000085cb000000000000000000000000000002000000000000001f000000000000002000000000000000"]) fallocate(r2, 0x20, 0x8, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000b42000/0x3000)=nil) shmat(r4, &(0x7f0000943000/0x2000)=nil, 0x5000) r5 = socket(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000180)={0x10001, {0x8, 0xfffffffffffffff9}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xafe}, &(0x7f0000000240)=0x8) getpid() setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x0, 0x1}, 0x1a70) 22:44:41 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x82000, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x24457a5dc44b7f) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000006c0)={{{@in6, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000007c0)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vlan0\x00'}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000280)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) accept4$packet(0xffffffffffffff9c, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x14, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, 0x0, &(0x7f00000009c0)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@mcast1, @in6=@local}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f0000000b00)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000b80)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000f40)={{{@in6=@remote, @in6=@mcast2}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000e80)=0xe8) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000033c0)=""/137, 0x89}], 0x1, 0x0, 0x0, 0x2}, 0xca}, {{&(0x7f0000003800)=@hci, 0x80, &(0x7f0000003940)=[{&(0x7f0000003880)=""/155, 0x9b}], 0x1, 0x0, 0x0, 0xc1}}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003a00)=""/181, 0xb5}, {&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000003b00)=""/4096, 0x1000}, {&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/119, 0x77}, {&(0x7f0000005b80)=""/23, 0x17}], 0x6, &(0x7f0000005c40)=""/4096, 0x1000, 0xb5d}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}, {&(0x7f0000006e40)=""/103, 0x67}], 0x3, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000007000), 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}, 0x7}], 0x6, 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000009600)={{{@in6=@mcast2, @in=@local}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000009700)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f000000c100)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f000000c200)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f000000d440)={0x0, @remote, @loopback}, &(0x7f000000d480)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000011440)={'syzkaller1\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000380)={0x3, 0x0, 0x7, 'queue1\x00', 0xfffffffffffffbff}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 22:44:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x1f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100), 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = gettid() r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f000064effb)="8907040000", 0x5) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) timer_create(0x7, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), &(0x7f0000000080)}}, &(0x7f0000583ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000e60000)) dup2(r0, r2) tkill(r1, 0x14) 22:44:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x3, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x8b89d10) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x4040) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x8, @dev={[], 0x20}}) mremap(&(0x7f0000aca000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000000000000ff0300000000000005000000000000007f0e00000000000000000100000000000600000000000001010000000000000085cb000000000000000000000000000002000000000000001f000000000000002000000000000000"]) fallocate(r2, 0x20, 0x8, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000b42000/0x3000)=nil) shmat(r4, &(0x7f0000943000/0x2000)=nil, 0x5000) r5 = socket(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000180)={0x10001, {0x8, 0xfffffffffffffff9}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xafe}, &(0x7f0000000240)=0x8) getpid() setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x0, 0x1}, 0x1a70) 22:44:42 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x0, 0x0, 0x1}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a40)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000002980)=0xe8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) 22:44:42 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/21, 0xfff, 0x800}, 0x18) 22:44:42 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x0, 0x0, 0x1}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a40)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000002980)=0xe8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) 22:44:42 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x269) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendto$inet(r0, &(0x7f0000000240)="cf", 0x1, 0x4c000, &(0x7f0000002c40)={0x2, 0x0, @dev}, 0x10) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1) sendto$inet(r0, &(0x7f0000001300)="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", 0x5c4, 0xc000, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$unix(r0, &(0x7f0000005dc0)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000300)="0b770ce2", 0x4}], 0x1, &(0x7f0000000e80)}], 0x1, 0x0) 22:44:42 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x0, 0x0, 0x1}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a40)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000002980)=0xe8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) 22:44:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x3, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x8b89d10) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x4040) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x8, @dev={[], 0x20}}) mremap(&(0x7f0000aca000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000000000000ff0300000000000005000000000000007f0e00000000000000000100000000000600000000000001010000000000000085cb000000000000000000000000000002000000000000001f000000000000002000000000000000"]) fallocate(r2, 0x20, 0x8, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000b42000/0x3000)=nil) shmat(r4, &(0x7f0000943000/0x2000)=nil, 0x5000) r5 = socket(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000180)={0x10001, {0x8, 0xfffffffffffffff9}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xafe}, &(0x7f0000000240)=0x8) getpid() setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x0, 0x1}, 0x1a70) 22:44:44 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x269) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendto$inet(r0, &(0x7f0000000240)="cf", 0x1, 0x4c000, &(0x7f0000002c40)={0x2, 0x0, @dev}, 0x10) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1) sendto$inet(r0, &(0x7f0000001300)="ebf8f9b67e5561888dd03dc6121e4e121f6578d4360e20cb683c9e5966c6fd116088b2c1dd66efea4d1b9806f59a71785f2f4efdc8d9c95612827d5465f70cb7605e7c0f024bae358590a523bc6a4361760aab4a9d3f4b80a9b98f401bb13bc3b1deb6d3c01f4a64c11750b92e705c189129a6881580a9da4b984317983892af803e8b2cbd42e91c2dbc8577e857fe464d864c51b1250436755f612b3ab4146c4847fb73e671134414e22a279b7e096c8984fbe72a4091c059eb038e5b5aef446f761d820732c8db09e79de8943e87b21baf50d6058695e6bb4b226257cf152ee8dca419b64e0f6f451142594e68bbafd2166518d0aab5ed8398a77869b163c4bf57fbc376ffee6bf4bd266839a8d24b88befc595ffa7b96e000a66cf51ddfce95cbd0656dd3caa6e61339bda90dd46484faf8b9301e3b8b0bd6fd1d6f723c333ec2ccb89d922658a6c6d2f81c1ecc1d4a8dfc6f0b2ebcf11a8351f143914485e8f60ece77b53d5bd97ce2c1bccc990235047d2b3e96e3fa79262675d488ec66663c548d114b5506db66f45c0385b0959683e48019d57c9c4d6a1807d21f40bf0115aa134263e0b5f6fee975c51c7b13717bc18055447b9c2e7bad6fb9deaf3f549515f2e289125051c784bcd976ea6043e8fe1937b61a982283f701513267af6fdc6a0bc498f4f0d81ccc2217ec4ecd7458167f5e67d3af8ea8efcae04288eb09c4aac898f54ef1b74111b2c2b8c453270a0472f519648ba674c023eb9d2758a8cd4c88a0c57e50419bc565f4da4152afd093a2927459d476d27395a0223cfe5fa2dfe4adda39e47aae70665ed6c904def26e6fed7aa63e48ba5f026c29b7b71644437bc56cb649c25849631092a363eb60cb45dc9780a59777d54888badefa8ae8c65b912d803116112d1b1045004b95b4391d66daa2678858ba5a540f3c11f31393e7cbc80a012df28ed4711581b7c9ad6048538de3896f853f042700e02cf1284e81a0a0a93cb47e35dcdf15f74169fa1e2a728b635ee895de1df56b256a9fce14bc5c21d24854a7fbe0585079b536bc2e1c31c9cf6a50394707d72c59961570ccfcf171ace791b9d08b48eaae117005abd50829b5a7ddbacf6d0cb2fd33c9458c0ba4bdf46d73445d556273504207f9a4510f35ab399b64fe1c3509082a2f54e949f1a2e49ee6b82cc1fe5cd20f15c4bab08e62c8bc7d2127d918c19b895cd9b5e56edbe59afb6e2299ab3e754075129da3764003974a68c43f81ef60382fbbc63819a73e67b8d1347e555c1e63f483a2f779cdb98c07132f9c8e4c793f0e616dd6b08c33482d5b50d779202c879ef0829e1588ba25857fe4d265b59a69add87bd7fe90e8bc055146fcd0c10215316f538d18839a2262daf40964cb7b5d7dbd872f76c8923ec4dcf1e1a2a501bcee834e2e91d9be20b26caecd00990f7bcae1cf707f117ec56939af0d23523fca12d7f021416c0eda633f288a6af82a03a785f78d5e1b79066e6277a8e3f613401bc85fc4c1bf5617f16b45ae88c923c01f720568ea032683566886150983d77d8245d348b1c5517347d6820d048647dcd3bf8d53a5dc547ffe8ed4ea92dc14c293604cabfed3678c0fbc920d36d3961d0ec29a3e68f59044330fceb819c3421009c25e58ad727cb43a2b66d5a1915b7e05d4674fd2b3b2333a777a8d72585158317dd15a5156ca7b028d5ebd0131d742cbe26c480bccd27c7dcee3f464091985ca791e576f7f358034db99cfb6aebb8dfdf8cae5ba98b5b0348ff6044f64171112b6dbee0a182f1a977f3745f1dfb7f5cf816a1af69cdaec13414120e38150d9282b2923fe639bed4ba83ed70d037f31f3605990c1eaa8c259981b079f613993fec5b06a19c27a629b4d7f6c140961b20e3084bce59407abbeed4c9dfe017f597c4d8e3632b96d77bd9d6f5d42621aeced4f42c4ba5dade32c1761caf7b397b8e17f94967c5a84323acefce09c8f10de07206bf069f341dbd06d11f48087169e16b214a973132e2ca9312c03c222ed7164f30c4ffb9211626c66ed643173a17042c085f6b19b702f556250924f0de1ad32e76240", 0x5c4, 0xc000, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$unix(r0, &(0x7f0000005dc0)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000300)="0b770ce2", 0x4}], 0x1, &(0x7f0000000e80)}], 0x1, 0x0) 22:44:44 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x3, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x8b89d10) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x4040) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x8, @dev={[], 0x20}}) mremap(&(0x7f0000aca000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000000000000ff0300000000000005000000000000007f0e00000000000000000100000000000600000000000001010000000000000085cb000000000000000000000000000002000000000000001f000000000000002000000000000000"]) fallocate(r2, 0x20, 0x8, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000b42000/0x3000)=nil) shmat(r4, &(0x7f0000943000/0x2000)=nil, 0x5000) r5 = socket(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000180)={0x10001, {0x8, 0xfffffffffffffff9}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xafe}, &(0x7f0000000240)=0x8) getpid() setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x0, 0x1}, 0x1a70) 22:44:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x3, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x8b89d10) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x4040) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x8, @dev={[], 0x20}}) mremap(&(0x7f0000aca000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000000000000ff0300000000000005000000000000007f0e00000000000000000100000000000600000000000001010000000000000085cb000000000000000000000000000002000000000000001f000000000000002000000000000000"]) fallocate(r2, 0x20, 0x8, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000b42000/0x3000)=nil) shmat(r4, &(0x7f0000943000/0x2000)=nil, 0x5000) r5 = socket(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000180)={0x10001, {0x8, 0xfffffffffffffff9}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xafe}, &(0x7f0000000240)=0x8) getpid() setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x0, 0x1}, 0x1a70) 22:44:45 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x0, 0x0, 0x1}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a40)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000002980)=0xe8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0xa) 22:44:45 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x269) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendto$inet(r0, &(0x7f0000000240)="cf", 0x1, 0x4c000, &(0x7f0000002c40)={0x2, 0x0, @dev}, 0x10) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1) sendto$inet(r0, &(0x7f0000001300)="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", 0x5c4, 0xc000, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$unix(r0, &(0x7f0000005dc0)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000300)="0b770ce2", 0x4}], 0x1, &(0x7f0000000e80)}], 0x1, 0x0) 22:44:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f00000001c0)={0x3, r1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x8b89d10) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x4040) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x8, @dev={[], 0x20}}) mremap(&(0x7f0000aca000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000800000000000000ff0300000000000005000000000000007f0e00000000000000000100000000000600000000000001010000000000000085cb000000000000000000000000000002000000000000001f000000000000002000000000000000"]) fallocate(r2, 0x20, 0x8, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000b42000/0x3000)=nil) shmat(r4, &(0x7f0000943000/0x2000)=nil, 0x5000) r5 = socket(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000180)={0x10001, {0x8, 0xfffffffffffffff9}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xafe}, &(0x7f0000000240)=0x8) getpid() setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000280)=@req3={0x0, 0x1}, 0x1a70) 22:44:46 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x269) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendto$inet(r0, &(0x7f0000000240)="cf", 0x1, 0x4c000, &(0x7f0000002c40)={0x2, 0x0, @dev}, 0x10) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1) sendto$inet(r0, &(0x7f0000001300)="ebf8f9b67e5561888dd03dc6121e4e121f6578d4360e20cb683c9e5966c6fd116088b2c1dd66efea4d1b9806f59a71785f2f4efdc8d9c95612827d5465f70cb7605e7c0f024bae358590a523bc6a4361760aab4a9d3f4b80a9b98f401bb13bc3b1deb6d3c01f4a64c11750b92e705c189129a6881580a9da4b984317983892af803e8b2cbd42e91c2dbc8577e857fe464d864c51b1250436755f612b3ab4146c4847fb73e671134414e22a279b7e096c8984fbe72a4091c059eb038e5b5aef446f761d820732c8db09e79de8943e87b21baf50d6058695e6bb4b226257cf152ee8dca419b64e0f6f451142594e68bbafd2166518d0aab5ed8398a77869b163c4bf57fbc376ffee6bf4bd266839a8d24b88befc595ffa7b96e000a66cf51ddfce95cbd0656dd3caa6e61339bda90dd46484faf8b9301e3b8b0bd6fd1d6f723c333ec2ccb89d922658a6c6d2f81c1ecc1d4a8dfc6f0b2ebcf11a8351f143914485e8f60ece77b53d5bd97ce2c1bccc990235047d2b3e96e3fa79262675d488ec66663c548d114b5506db66f45c0385b0959683e48019d57c9c4d6a1807d21f40bf0115aa134263e0b5f6fee975c51c7b13717bc18055447b9c2e7bad6fb9deaf3f549515f2e289125051c784bcd976ea6043e8fe1937b61a982283f701513267af6fdc6a0bc498f4f0d81ccc2217ec4ecd7458167f5e67d3af8ea8efcae04288eb09c4aac898f54ef1b74111b2c2b8c453270a0472f519648ba674c023eb9d2758a8cd4c88a0c57e50419bc565f4da4152afd093a2927459d476d27395a0223cfe5fa2dfe4adda39e47aae70665ed6c904def26e6fed7aa63e48ba5f026c29b7b71644437bc56cb649c25849631092a363eb60cb45dc9780a59777d54888badefa8ae8c65b912d803116112d1b1045004b95b4391d66daa2678858ba5a540f3c11f31393e7cbc80a012df28ed4711581b7c9ad6048538de3896f853f042700e02cf1284e81a0a0a93cb47e35dcdf15f74169fa1e2a728b635ee895de1df56b256a9fce14bc5c21d24854a7fbe0585079b536bc2e1c31c9cf6a50394707d72c59961570ccfcf171ace791b9d08b48eaae117005abd50829b5a7ddbacf6d0cb2fd33c9458c0ba4bdf46d73445d556273504207f9a4510f35ab399b64fe1c3509082a2f54e949f1a2e49ee6b82cc1fe5cd20f15c4bab08e62c8bc7d2127d918c19b895cd9b5e56edbe59afb6e2299ab3e754075129da3764003974a68c43f81ef60382fbbc63819a73e67b8d1347e555c1e63f483a2f779cdb98c07132f9c8e4c793f0e616dd6b08c33482d5b50d779202c879ef0829e1588ba25857fe4d265b59a69add87bd7fe90e8bc055146fcd0c10215316f538d18839a2262daf40964cb7b5d7dbd872f76c8923ec4dcf1e1a2a501bcee834e2e91d9be20b26caecd00990f7bcae1cf707f117ec56939af0d23523fca12d7f021416c0eda633f288a6af82a03a785f78d5e1b79066e6277a8e3f613401bc85fc4c1bf5617f16b45ae88c923c01f720568ea032683566886150983d77d8245d348b1c5517347d6820d048647dcd3bf8d53a5dc547ffe8ed4ea92dc14c293604cabfed3678c0fbc920d36d3961d0ec29a3e68f59044330fceb819c3421009c25e58ad727cb43a2b66d5a1915b7e05d4674fd2b3b2333a777a8d72585158317dd15a5156ca7b028d5ebd0131d742cbe26c480bccd27c7dcee3f464091985ca791e576f7f358034db99cfb6aebb8dfdf8cae5ba98b5b0348ff6044f64171112b6dbee0a182f1a977f3745f1dfb7f5cf816a1af69cdaec13414120e38150d9282b2923fe639bed4ba83ed70d037f31f3605990c1eaa8c259981b079f613993fec5b06a19c27a629b4d7f6c140961b20e3084bce59407abbeed4c9dfe017f597c4d8e3632b96d77bd9d6f5d42621aeced4f42c4ba5dade32c1761caf7b397b8e17f94967c5a84323acefce09c8f10de07206bf069f341dbd06d11f48087169e16b214a973132e2ca9312c03c222ed7164f30c4ffb9211626c66ed643173a17042c085f6b19b702f556250924f0de1ad32e76240", 0x5c4, 0xc000, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$unix(r0, &(0x7f0000005dc0)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000300)="0b770ce2", 0x4}], 0x1, &(0x7f0000000e80)}], 0x1, 0x0) 22:44:46 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x269) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendto$inet(r0, &(0x7f0000000240)="cf", 0x1, 0x4c000, &(0x7f0000002c40)={0x2, 0x0, @dev}, 0x10) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1) sendto$inet(r0, &(0x7f0000001300)="ebf8f9b67e5561888dd03dc6121e4e121f6578d4360e20cb683c9e5966c6fd116088b2c1dd66efea4d1b9806f59a71785f2f4efdc8d9c95612827d5465f70cb7605e7c0f024bae358590a523bc6a4361760aab4a9d3f4b80a9b98f401bb13bc3b1deb6d3c01f4a64c11750b92e705c189129a6881580a9da4b984317983892af803e8b2cbd42e91c2dbc8577e857fe464d864c51b1250436755f612b3ab4146c4847fb73e671134414e22a279b7e096c8984fbe72a4091c059eb038e5b5aef446f761d820732c8db09e79de8943e87b21baf50d6058695e6bb4b226257cf152ee8dca419b64e0f6f451142594e68bbafd2166518d0aab5ed8398a77869b163c4bf57fbc376ffee6bf4bd266839a8d24b88befc595ffa7b96e000a66cf51ddfce95cbd0656dd3caa6e61339bda90dd46484faf8b9301e3b8b0bd6fd1d6f723c333ec2ccb89d922658a6c6d2f81c1ecc1d4a8dfc6f0b2ebcf11a8351f143914485e8f60ece77b53d5bd97ce2c1bccc990235047d2b3e96e3fa79262675d488ec66663c548d114b5506db66f45c0385b0959683e48019d57c9c4d6a1807d21f40bf0115aa134263e0b5f6fee975c51c7b13717bc18055447b9c2e7bad6fb9deaf3f549515f2e289125051c784bcd976ea6043e8fe1937b61a982283f701513267af6fdc6a0bc498f4f0d81ccc2217ec4ecd7458167f5e67d3af8ea8efcae04288eb09c4aac898f54ef1b74111b2c2b8c453270a0472f519648ba674c023eb9d2758a8cd4c88a0c57e50419bc565f4da4152afd093a2927459d476d27395a0223cfe5fa2dfe4adda39e47aae70665ed6c904def26e6fed7aa63e48ba5f026c29b7b71644437bc56cb649c25849631092a363eb60cb45dc9780a59777d54888badefa8ae8c65b912d803116112d1b1045004b95b4391d66daa2678858ba5a540f3c11f31393e7cbc80a012df28ed4711581b7c9ad6048538de3896f853f042700e02cf1284e81a0a0a93cb47e35dcdf15f74169fa1e2a728b635ee895de1df56b256a9fce14bc5c21d24854a7fbe0585079b536bc2e1c31c9cf6a50394707d72c59961570ccfcf171ace791b9d08b48eaae117005abd50829b5a7ddbacf6d0cb2fd33c9458c0ba4bdf46d73445d556273504207f9a4510f35ab399b64fe1c3509082a2f54e949f1a2e49ee6b82cc1fe5cd20f15c4bab08e62c8bc7d2127d918c19b895cd9b5e56edbe59afb6e2299ab3e754075129da3764003974a68c43f81ef60382fbbc63819a73e67b8d1347e555c1e63f483a2f779cdb98c07132f9c8e4c793f0e616dd6b08c33482d5b50d779202c879ef0829e1588ba25857fe4d265b59a69add87bd7fe90e8bc055146fcd0c10215316f538d18839a2262daf40964cb7b5d7dbd872f76c8923ec4dcf1e1a2a501bcee834e2e91d9be20b26caecd00990f7bcae1cf707f117ec56939af0d23523fca12d7f021416c0eda633f288a6af82a03a785f78d5e1b79066e6277a8e3f613401bc85fc4c1bf5617f16b45ae88c923c01f720568ea032683566886150983d77d8245d348b1c5517347d6820d048647dcd3bf8d53a5dc547ffe8ed4ea92dc14c293604cabfed3678c0fbc920d36d3961d0ec29a3e68f59044330fceb819c3421009c25e58ad727cb43a2b66d5a1915b7e05d4674fd2b3b2333a777a8d72585158317dd15a5156ca7b028d5ebd0131d742cbe26c480bccd27c7dcee3f464091985ca791e576f7f358034db99cfb6aebb8dfdf8cae5ba98b5b0348ff6044f64171112b6dbee0a182f1a977f3745f1dfb7f5cf816a1af69cdaec13414120e38150d9282b2923fe639bed4ba83ed70d037f31f3605990c1eaa8c259981b079f613993fec5b06a19c27a629b4d7f6c140961b20e3084bce59407abbeed4c9dfe017f597c4d8e3632b96d77bd9d6f5d42621aeced4f42c4ba5dade32c1761caf7b397b8e17f94967c5a84323acefce09c8f10de07206bf069f341dbd06d11f48087169e16b214a973132e2ca9312c03c222ed7164f30c4ffb9211626c66ed643173a17042c085f6b19b702f556250924f0de1ad32e76240", 0x5c4, 0xc000, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$unix(r0, &(0x7f0000005dc0)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000300)="0b770ce2", 0x4}], 0x1, &(0x7f0000000e80)}], 0x1, 0x0) 22:44:46 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x269) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendto$inet(r0, &(0x7f0000000240)="cf", 0x1, 0x4c000, &(0x7f0000002c40)={0x2, 0x0, @dev}, 0x10) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1) sendto$inet(r0, &(0x7f0000001300)="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", 0x5c4, 0xc000, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$unix(r0, &(0x7f0000005dc0)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000300)="0b770ce2", 0x4}], 0x1, &(0x7f0000000e80)}], 0x1, 0x0) 22:44:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000031c0)=@routing={0x0, 0x0, 0x2}, 0x8) 22:44:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) getpgid(0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x40, 0x2, 0x8, 0x85f4c3b, 0x0, 0x7ac315b2, 0x0, 0x10001, 0x5, 0x9, 0xffffffffffffff33, 0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x100, 0x8, 0xfffffffffffffffb, 0x100000001, 0x3, 0x101, 0x0, 0x0, 0x401, 0x1, 0x4, 0x9, 0x8, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x8}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x4) r3 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000240)) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KDENABIO(r3, 0x4b36) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x301100, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000340)={r7, 0x1, 0x5, [0x100, 0x9, 0x8, 0xd08, 0x1]}, &(0x7f0000000380)=0x12) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) memfd_create(&(0x7f0000000400)='\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81806) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:48 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000003) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) close(r3) 22:44:48 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x269) sendto$unix(r0, &(0x7f0000000280), 0x0, 0x8000, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendto$inet(r0, &(0x7f0000000240)="cf", 0x1, 0x4c000, &(0x7f0000002c40)={0x2, 0x0, @dev}, 0x10) readv(r0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1) sendto$inet(r0, &(0x7f0000001300)="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", 0x5c4, 0xc000, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$unix(r0, &(0x7f0000005dc0)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000300)="0b770ce2", 0x4}], 0x1, &(0x7f0000000e80)}], 0x1, 0x0) 22:44:48 executing program 0: clone(0xc00ffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') ppoll(0x0, 0x0, 0x0, 0x0, 0x32c) sendfile(r0, r0, 0x0, 0x3) 22:44:48 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) bind(r0, &(0x7f0000000000)=@ipx={0x4, 0x0, 0x0, "978480a7f589"}, 0x80) 22:44:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) getpgid(0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x40, 0x2, 0x8, 0x85f4c3b, 0x0, 0x7ac315b2, 0x0, 0x10001, 0x5, 0x9, 0xffffffffffffff33, 0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x100, 0x8, 0xfffffffffffffffb, 0x100000001, 0x3, 0x101, 0x0, 0x0, 0x401, 0x1, 0x4, 0x9, 0x8, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x8}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x4) r3 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000240)) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KDENABIO(r3, 0x4b36) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x301100, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000340)={r7, 0x1, 0x5, [0x100, 0x9, 0x8, 0xd08, 0x1]}, &(0x7f0000000380)=0x12) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) memfd_create(&(0x7f0000000400)='\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81806) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:49 executing program 1: r0 = socket$inet6(0xa, 0xf, 0x2000000000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}) r3 = syz_open_pts(r2, 0x0) r4 = syz_open_dev$vcsa(0x0, 0x7, 0x8a081) ioctl$sock_bt(0xffffffffffffffff, 0xdd1f, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) shmget$private(0x0, 0x1000, 0x0, &(0x7f000044a000/0x1000)=nil) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x5, 0x5, 0x0, 0x3, 0x4}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) sched_getattr(r1, &(0x7f0000000200), 0x30, 0x0) r5 = accept(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000380)={0x0, 0xa, 0x4, 0x402100, {0x0, 0x2710}, {0x3, 0x2, 0x2, 0x67f, 0x9, 0x7, "4c8bdd8d"}, 0x7, 0x2, @fd=r4, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000001c0)={0x0, 0x0, 0x10000, 0x80000000}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000400)={r6, 0x2ec3}) bind$tipc(r5, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4, 0x2}}, 0x10) [ 1042.564969] syz-executor0 (4598): /proc/4595/oom_adj is deprecated, please use /proc/4595/oom_score_adj instead. 22:44:49 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") syz_emit_ethernet(0x300628, &(0x7f0000000000)={@local, @empty=[0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x400101, 0xffffff84, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 22:44:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x54) fstat(r0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000400)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1f, 0x400) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fstat(r2, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000480), 0x4) r4 = gettid() clock_gettime(0x0, &(0x7f0000000400)) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x2) sched_setparam(0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r4, 0x1004000000016) getgroups(0x4, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0xee01]) ioctl$VT_RELDISP(r5, 0x5605) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1, 0x2) 22:44:49 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x1) readv(r0, &(0x7f0000001200)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 22:44:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) getpgid(0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x40, 0x2, 0x8, 0x85f4c3b, 0x0, 0x7ac315b2, 0x0, 0x10001, 0x5, 0x9, 0xffffffffffffff33, 0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x100, 0x8, 0xfffffffffffffffb, 0x100000001, 0x3, 0x101, 0x0, 0x0, 0x401, 0x1, 0x4, 0x9, 0x8, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x8}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x4) r3 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000240)) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KDENABIO(r3, 0x4b36) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x301100, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000340)={r7, 0x1, 0x5, [0x100, 0x9, 0x8, 0xd08, 0x1]}, &(0x7f0000000380)=0x12) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) memfd_create(&(0x7f0000000400)='\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81806) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:50 executing program 3: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) clock_gettime(0x0, &(0x7f0000000000)={0x0}) rt_sigtimedwait(&(0x7f0000000080)={0xfffffffffffffffe}, &(0x7f0000d31ff0), &(0x7f00007adff0)={r2}, 0x8) open(&(0x7f0000000040)='./file0\x00', 0x8803, 0x0) fcntl$setlease(r1, 0x400, 0x0) 22:44:50 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") syz_emit_ethernet(0x300628, &(0x7f0000000000)={@local, @empty=[0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x400101, 0xffffff84, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 22:44:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000000080), 0xc, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000008060501ff0080fffdffff2e0a0000000c000100060000007d0a00010c000200000022ff02f10000"], 0x2c}}, 0x0) 22:44:50 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") syz_emit_ethernet(0x300628, &(0x7f0000000000)={@local, @empty=[0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x400101, 0xffffff84, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 1043.888571] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 1043.926912] netlink: 'syz-executor3': attribute type 1 has an invalid length. 22:44:50 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") syz_emit_ethernet(0x300628, &(0x7f0000000000)={@local, @empty=[0xfffff000], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x400101, 0xffffff84, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [0x0, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 22:44:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000000080), 0xc, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000008060501ff0080fffdffff2e0a0000000c000100060000007d0a00010c000200000022ff02f10000"], 0x2c}}, 0x0) 22:44:50 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0xffefffffffffffff}}) syz_open_dev$usb(0x0, 0x0, 0x0) socket$inet(0x2, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 1044.110694] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 1044.169042] netlink: 'syz-executor3': attribute type 1 has an invalid length. 22:44:50 executing program 1: r0 = socket$inet6(0xa, 0xf, 0x2000000000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}) r3 = syz_open_pts(r2, 0x0) r4 = syz_open_dev$vcsa(0x0, 0x7, 0x8a081) ioctl$sock_bt(0xffffffffffffffff, 0xdd1f, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) shmget$private(0x0, 0x1000, 0x0, &(0x7f000044a000/0x1000)=nil) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x5, 0x5, 0x0, 0x3, 0x4}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) sched_getattr(r1, &(0x7f0000000200), 0x30, 0x0) r5 = accept(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000380)={0x0, 0xa, 0x4, 0x402100, {0x0, 0x2710}, {0x3, 0x2, 0x2, 0x67f, 0x9, 0x7, "4c8bdd8d"}, 0x7, 0x2, @fd=r4, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000001c0)={0x0, 0x0, 0x10000, 0x80000000}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000400)={r6, 0x2ec3}) bind$tipc(r5, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4, 0x2}}, 0x10) 22:44:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x54) fstat(r0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000400)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1f, 0x400) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fstat(r2, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000480), 0x4) r4 = gettid() clock_gettime(0x0, &(0x7f0000000400)) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x2) sched_setparam(0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r4, 0x1004000000016) getgroups(0x4, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0xee01]) ioctl$VT_RELDISP(r5, 0x5605) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1, 0x2) 22:44:50 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x54) fstat(r0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000400)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1f, 0x400) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fstat(r2, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000480), 0x4) r4 = gettid() clock_gettime(0x0, &(0x7f0000000400)) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x2) sched_setparam(0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r4, 0x1004000000016) getgroups(0x4, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0xee01]) ioctl$VT_RELDISP(r5, 0x5605) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1, 0x2) 22:44:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="0fc75af38f49189b26440f00d6c441cb5cc00fc71bc442f932d10f225c0f01cb66baf80cb8a4d35b8bef66bafc0c66edb805000000b9020000000f01c1", 0x3d}], 0x1, 0x40, &(0x7f0000000180), 0x0) getpgid(0xffffffffffffffff) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x40, 0x2, 0x8, 0x85f4c3b, 0x0, 0x7ac315b2, 0x0, 0x10001, 0x5, 0x9, 0xffffffffffffff33, 0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x100, 0x8, 0xfffffffffffffffb, 0x100000001, 0x3, 0x101, 0x0, 0x0, 0x401, 0x1, 0x4, 0x9, 0x8, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x8}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97, 0x8}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x4) r3 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000240)) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KDENABIO(r3, 0x4b36) sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x301100, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000340)={r7, 0x1, 0x5, [0x100, 0x9, 0x8, 0xd08, 0x1]}, &(0x7f0000000380)=0x12) clone(0x0, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000000), &(0x7f0000000280)) memfd_create(&(0x7f0000000400)='\x00', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x81806) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000000080), 0xc, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000008060501ff0080fffdffff2e0a0000000c000100060000007d0a00010c000200000022ff02f10000"], 0x2c}}, 0x0) 22:44:50 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0xffefffffffffffff}}) syz_open_dev$usb(0x0, 0x0, 0x0) socket$inet(0x2, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 1044.457901] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 1044.517088] netlink: 'syz-executor3': attribute type 1 has an invalid length. 22:44:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={&(0x7f0000000080), 0xc, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000008060501ff0080fffdffff2e0a0000000c000100060000007d0a00010c000200000022ff02f10000"], 0x2c}}, 0x0) 22:44:51 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x54) fstat(r0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000400)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1f, 0x400) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fstat(r2, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000480), 0x4) r4 = gettid() clock_gettime(0x0, &(0x7f0000000400)) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x2) sched_setparam(0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r4, 0x1004000000016) getgroups(0x4, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0xee01]) ioctl$VT_RELDISP(r5, 0x5605) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1, 0x2) [ 1044.764244] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 1044.791254] netlink: 'syz-executor3': attribute type 1 has an invalid length. 22:44:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x54) fstat(r0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000400)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1f, 0x400) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fstat(r2, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000480), 0x4) r4 = gettid() clock_gettime(0x0, &(0x7f0000000400)) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x2) sched_setparam(0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r4, 0x1004000000016) getgroups(0x4, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0xee01]) ioctl$VT_RELDISP(r5, 0x5605) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1, 0x2) 22:44:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x54) fstat(r0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000400)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1f, 0x400) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fstat(r2, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000480), 0x4) r4 = gettid() clock_gettime(0x0, &(0x7f0000000400)) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x2) sched_setparam(0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r4, 0x1004000000016) getgroups(0x4, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0xee01]) ioctl$VT_RELDISP(r5, 0x5605) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1, 0x2) 22:44:51 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0xffefffffffffffff}}) syz_open_dev$usb(0x0, 0x0, 0x0) socket$inet(0x2, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 22:44:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x54) fstat(r0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000400)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1f, 0x400) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fstat(r2, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000480), 0x4) r4 = gettid() clock_gettime(0x0, &(0x7f0000000400)) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x2) sched_setparam(0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r4, 0x1004000000016) getgroups(0x4, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0xee01]) ioctl$VT_RELDISP(r5, 0x5605) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1, 0x2) 22:44:52 executing program 1: r0 = socket$inet6(0xa, 0xf, 0x2000000000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}) r3 = syz_open_pts(r2, 0x0) r4 = syz_open_dev$vcsa(0x0, 0x7, 0x8a081) ioctl$sock_bt(0xffffffffffffffff, 0xdd1f, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) shmget$private(0x0, 0x1000, 0x0, &(0x7f000044a000/0x1000)=nil) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x5, 0x5, 0x0, 0x3, 0x4}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) sched_getattr(r1, &(0x7f0000000200), 0x30, 0x0) r5 = accept(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000380)={0x0, 0xa, 0x4, 0x402100, {0x0, 0x2710}, {0x3, 0x2, 0x2, 0x67f, 0x9, 0x7, "4c8bdd8d"}, 0x7, 0x2, @fd=r4, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000001c0)={0x0, 0x0, 0x10000, 0x80000000}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000400)={r6, 0x2ec3}) bind$tipc(r5, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4, 0x2}}, 0x10) 22:44:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x54) fstat(r0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000400)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1f, 0x400) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fstat(r2, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000480), 0x4) r4 = gettid() clock_gettime(0x0, &(0x7f0000000400)) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x2) sched_setparam(0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r4, 0x1004000000016) getgroups(0x4, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0xee01]) ioctl$VT_RELDISP(r5, 0x5605) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1, 0x2) 22:44:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x54) fstat(r0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000400)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1f, 0x400) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fstat(r2, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000480), 0x4) r4 = gettid() clock_gettime(0x0, &(0x7f0000000400)) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x2) sched_setparam(0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r4, 0x1004000000016) getgroups(0x4, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0xee01]) ioctl$VT_RELDISP(r5, 0x5605) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1, 0x2) 22:44:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x54) fstat(r0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000400)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1f, 0x400) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fstat(r2, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000480), 0x4) r4 = gettid() clock_gettime(0x0, &(0x7f0000000400)) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x2) sched_setparam(0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r4, 0x1004000000016) getgroups(0x4, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0xee01]) ioctl$VT_RELDISP(r5, 0x5605) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1, 0x2) 22:44:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x54) fstat(r0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000400)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1f, 0x400) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fstat(r2, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000480), 0x4) r4 = gettid() clock_gettime(0x0, &(0x7f0000000400)) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x2) sched_setparam(0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r4, 0x1004000000016) getgroups(0x4, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0xee01]) ioctl$VT_RELDISP(r5, 0x5605) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1, 0x2) 22:44:52 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0xffefffffffffffff}}) syz_open_dev$usb(0x0, 0x0, 0x0) socket$inet(0x2, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 22:44:52 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x54) fstat(r0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000400)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1f, 0x400) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fstat(r2, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000480), 0x4) r4 = gettid() clock_gettime(0x0, &(0x7f0000000400)) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x2) sched_setparam(0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r4, 0x1004000000016) getgroups(0x4, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0xee01]) ioctl$VT_RELDISP(r5, 0x5605) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1, 0x2) 22:44:53 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x54) fstat(r0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000400)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1f, 0x400) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fstat(r2, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000480), 0x4) r4 = gettid() clock_gettime(0x0, &(0x7f0000000400)) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x2) sched_setparam(0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r4, 0x1004000000016) getgroups(0x4, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0xee01]) ioctl$VT_RELDISP(r5, 0x5605) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1, 0x2) 22:44:53 executing program 1: r0 = socket$inet6(0xa, 0xf, 0x2000000000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}) r3 = syz_open_pts(r2, 0x0) r4 = syz_open_dev$vcsa(0x0, 0x7, 0x8a081) ioctl$sock_bt(0xffffffffffffffff, 0xdd1f, 0x0) write(r2, &(0x7f0000c34fff), 0xffffff0b) shmget$private(0x0, 0x1000, 0x0, &(0x7f000044a000/0x1000)=nil) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x5, 0x5, 0x0, 0x3, 0x4}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000005, 0x5c831, 0xffffffffffffffff, 0x0) sched_getattr(r1, &(0x7f0000000200), 0x30, 0x0) r5 = accept(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x80) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000380)={0x0, 0xa, 0x4, 0x402100, {0x0, 0x2710}, {0x3, 0x2, 0x2, 0x67f, 0x9, 0x7, "4c8bdd8d"}, 0x7, 0x2, @fd=r4, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000001c0)={0x0, 0x0, 0x10000, 0x80000000}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000400)={r6, 0x2ec3}) bind$tipc(r5, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x4, 0x2}}, 0x10) 22:44:53 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x8, 0x3, &(0x7f0000000040)=@framed={{0xffffff9f, 0x0, 0x0, 0x0, 0x8, 0x27}}, &(0x7f0000000240)="47504c0083ff130f5fb00e5d5b644354b6e27770c5a6241e8defd6533e2ae106be655c6c526349216c30bb1f80fb450ec0d5be", 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) 22:44:53 executing program 3: rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000400), &(0x7f00000003c0), 0x8) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x102, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000500)=0x0) mq_notify(r0, &(0x7f0000000540)={0x0, 0x0, 0x3, @tid=r1}) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'team0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{0x0}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000005b00)=""/119, 0x77}], 0x2, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006dc0)=""/66, 0x42}, {&(0x7f0000006e40)=""/103, 0x67}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000007000), 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}, 0x7}, {{&(0x7f00000070c0)=@sco, 0x80, &(0x7f0000008300)=[{&(0x7f0000007140)=""/136, 0x88}, {&(0x7f0000007200)=""/213, 0xd5}, {&(0x7f0000007300)=""/4096, 0x1000}], 0x3, &(0x7f0000008340)=""/4096, 0x1000, 0x49e1}, 0x1}], 0x6, 0x0, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) fanotify_init(0x1, 0x101403) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0) setitimer(0x1, &(0x7f0000000380), &(0x7f0000000440)) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000100)={{0x7, @addr=0x800}, 0x8, 0x680, 0x7f}) syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) 22:44:53 executing program 0: r0 = socket$inet(0x2, 0x3, 0x800000800000001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x8, 0x6}, 0x2c) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000001c0)=0xc) 22:44:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setpriority(0x0, 0x0, 0x7) unshare(0x8000000) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x34000}, 0x16e, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x32, 0x829, 0x0, 0x0, {0x3}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x8000000000}}]}]}, 0x2c}}, 0x0) 22:44:53 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) 22:44:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x54) fstat(r0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000400)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1f, 0x400) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fstat(r2, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000480), 0x4) r4 = gettid() clock_gettime(0x0, &(0x7f0000000400)) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x2) sched_setparam(0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r4, 0x1004000000016) getgroups(0x4, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0xee01]) ioctl$VT_RELDISP(r5, 0x5605) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1, 0x2) [ 1047.369696] net_ratelimit: 10 callbacks suppressed [ 1047.369703] netlink: zone id is out of range [ 1047.445276] netlink: get zone limit has 4 unknown bytes 22:44:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000002c0)={0x7e, 0x0, [0x200000488]}) 22:44:54 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) 22:44:54 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) 22:44:54 executing program 3: rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000400), &(0x7f00000003c0), 0x8) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x102, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000500)=0x0) mq_notify(r0, &(0x7f0000000540)={0x0, 0x0, 0x3, @tid=r1}) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'team0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{0x0}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000005b00)=""/119, 0x77}], 0x2, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006dc0)=""/66, 0x42}, {&(0x7f0000006e40)=""/103, 0x67}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000007000), 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}, 0x7}, {{&(0x7f00000070c0)=@sco, 0x80, &(0x7f0000008300)=[{&(0x7f0000007140)=""/136, 0x88}, {&(0x7f0000007200)=""/213, 0xd5}, {&(0x7f0000007300)=""/4096, 0x1000}], 0x3, &(0x7f0000008340)=""/4096, 0x1000, 0x49e1}, 0x1}], 0x6, 0x0, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) fanotify_init(0x1, 0x101403) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0) setitimer(0x1, &(0x7f0000000380), &(0x7f0000000440)) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000100)={{0x7, @addr=0x800}, 0x8, 0x680, 0x7f}) syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) 22:44:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x54) fstat(r0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000400)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1f, 0x400) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fstat(r2, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000480), 0x4) r4 = gettid() clock_gettime(0x0, &(0x7f0000000400)) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x2) sched_setparam(0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r4, 0x1004000000016) getgroups(0x4, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0xee01]) ioctl$VT_RELDISP(r5, 0x5605) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1, 0x2) 22:44:54 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) 22:44:54 executing program 5: r0 = socket(0x10, 0x80002, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000010000000000000080000000000000000"], 0x14}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492805, 0x0) 22:44:54 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xced423) clone(0x1002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='dax\x00', 0x0, 0x0) open(&(0x7f00000008c0)='./file0\x00', 0x20141041, 0x0) socket$alg(0x26, 0x5, 0x0) 22:44:54 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000004e0007041dfffd946fa28300201b0a0009000304341d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 22:44:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in6=@mcast1}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0x54) fstat(r0, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000400)=0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x1f, 0x400) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000100)={0x18}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) fstat(r2, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000480), 0x4) r4 = gettid() clock_gettime(0x0, &(0x7f0000000400)) clock_nanosleep(0x2, 0x1, &(0x7f0000000040), &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000000)) r5 = creat(&(0x7f0000000300)='./file0\x00', 0x2) sched_setparam(0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r7, &(0x7f0000000980), 0xffffff4d) recvmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x4, 0x4) tkill(r4, 0x1004000000016) getgroups(0x4, &(0x7f0000000440)=[0xee01, 0x0, 0x0, 0xee01]) ioctl$VT_RELDISP(r5, 0x5605) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB], 0x1, 0x2) 22:44:54 executing program 3: rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000400), &(0x7f00000003c0), 0x8) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x102, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000500)=0x0) mq_notify(r0, &(0x7f0000000540)={0x0, 0x0, 0x3, @tid=r1}) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'team0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{0x0}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000005b00)=""/119, 0x77}], 0x2, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006dc0)=""/66, 0x42}, {&(0x7f0000006e40)=""/103, 0x67}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000007000), 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}, 0x7}, {{&(0x7f00000070c0)=@sco, 0x80, &(0x7f0000008300)=[{&(0x7f0000007140)=""/136, 0x88}, {&(0x7f0000007200)=""/213, 0xd5}, {&(0x7f0000007300)=""/4096, 0x1000}], 0x3, &(0x7f0000008340)=""/4096, 0x1000, 0x49e1}, 0x1}], 0x6, 0x0, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) fanotify_init(0x1, 0x101403) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0) setitimer(0x1, &(0x7f0000000380), &(0x7f0000000440)) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000100)={{0x7, @addr=0x800}, 0x8, 0x680, 0x7f}) syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) 22:44:55 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@mpls_getroute={0x1c, 0x1a, 0x101}, 0x1c}}, 0x0) 22:44:55 executing program 0: timer_delete(0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r0, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x1000c0586300}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="ec", 0x1}], 0x1}, 0x0) 22:44:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xd000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:55 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x3, 0x200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000680)="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", 0x1aa}], 0x1}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) mount(&(0x7f0000000280), &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='securityfs\x00', 0x100021, &(0x7f0000000480)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x3, 0x7ffff) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={r2}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x2000, 0x0) write$input_event(r3, &(0x7f0000000040)={{0x0, 0x7530}, 0x2, 0x3, 0xfffffffffffffffd}, 0x18) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) close(r3) setxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000004c0)='proc\x00', 0x5, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) listen(r4, 0x80) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) close(r4) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000580)={{0xa, 0x4e23, 0x4, @empty, 0x5}, {0xa, 0x4e24, 0x81, @dev={0xfe, 0x80, [], 0x15}, 0x5}, 0x3, [0xffff, 0xfff, 0x0, 0x6, 0x8, 0x1, 0x9980, 0xfffffffffffffff8]}, 0x5c) 22:44:55 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000583ffc)) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) write$P9_RMKNOD(r1, &(0x7f0000000080)={0x14}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_in(r1, 0x80000000005001, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) close(r1) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) tkill(r0, 0x15) 22:44:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x28, 0xb11, 0x0, 0x0, {0x16}}, 0x14}}, 0x0) 22:44:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xd000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:55 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) 22:44:55 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x3, 0x200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000680)="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", 0x1aa}], 0x1}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) mount(&(0x7f0000000280), &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='securityfs\x00', 0x100021, &(0x7f0000000480)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x3, 0x7ffff) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={r2}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x2000, 0x0) write$input_event(r3, &(0x7f0000000040)={{0x0, 0x7530}, 0x2, 0x3, 0xfffffffffffffffd}, 0x18) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) close(r3) setxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000004c0)='proc\x00', 0x5, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) listen(r4, 0x80) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) close(r4) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000580)={{0xa, 0x4e23, 0x4, @empty, 0x5}, {0xa, 0x4e24, 0x81, @dev={0xfe, 0x80, [], 0x15}, 0x5}, 0x3, [0xffff, 0xfff, 0x0, 0x6, 0x8, 0x1, 0x9980, 0xfffffffffffffff8]}, 0x5c) 22:44:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x28, 0xb11, 0x0, 0x0, {0x16}}, 0x14}}, 0x0) 22:44:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xd000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:55 executing program 3: rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000400), &(0x7f00000003c0), 0x8) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vsock\x00', 0x102, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000500)=0x0) mq_notify(r0, &(0x7f0000000540)={0x0, 0x0, 0x3, @tid=r1}) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000004c0)=0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'team0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{0x0}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/64, 0x40}], 0x4, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5}, 0x5}, {{&(0x7f0000003980)=@ipx, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003ac0)=""/4, 0x4}, {&(0x7f0000005b00)=""/119, 0x77}], 0x2, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006dc0)=""/66, 0x42}, {&(0x7f0000006e40)=""/103, 0x67}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000007000), 0x0, &(0x7f0000007040)=""/66, 0x42, 0x800}, 0x7}, {{&(0x7f00000070c0)=@sco, 0x80, &(0x7f0000008300)=[{&(0x7f0000007140)=""/136, 0x88}, {&(0x7f0000007200)=""/213, 0xd5}, {&(0x7f0000007300)=""/4096, 0x1000}], 0x3, &(0x7f0000008340)=""/4096, 0x1000, 0x49e1}, 0x1}], 0x6, 0x0, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000005c0)) fanotify_init(0x1, 0x101403) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0) setitimer(0x1, &(0x7f0000000380), &(0x7f0000000440)) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) ioctl$VIDIOC_DBG_S_REGISTER(0xffffffffffffffff, 0x4038564f, &(0x7f0000000100)={{0x7, @addr=0x800}, 0x8, 0x680, 0x7f}) syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x3, 0x0) 22:44:55 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x3, 0x200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000680)="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", 0x1aa}], 0x1}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) mount(&(0x7f0000000280), &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='securityfs\x00', 0x100021, &(0x7f0000000480)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x3, 0x7ffff) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={r2}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x2000, 0x0) write$input_event(r3, &(0x7f0000000040)={{0x0, 0x7530}, 0x2, 0x3, 0xfffffffffffffffd}, 0x18) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) close(r3) setxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000004c0)='proc\x00', 0x5, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) listen(r4, 0x80) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) close(r4) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000580)={{0xa, 0x4e23, 0x4, @empty, 0x5}, {0xa, 0x4e24, 0x81, @dev={0xfe, 0x80, [], 0x15}, 0x5}, 0x3, [0xffff, 0xfff, 0x0, 0x6, 0x8, 0x1, 0x9980, 0xfffffffffffffff8]}, 0x5c) 22:44:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x28, 0xb11, 0x0, 0x0, {0x16}}, 0x14}}, 0x0) 22:44:55 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x3, 0x200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000680)="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", 0x1aa}], 0x1}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) mount(&(0x7f0000000280), &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='securityfs\x00', 0x100021, &(0x7f0000000480)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x3, 0x7ffff) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={r2}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x2000, 0x0) write$input_event(r3, &(0x7f0000000040)={{0x0, 0x7530}, 0x2, 0x3, 0xfffffffffffffffd}, 0x18) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) close(r3) setxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000004c0)='proc\x00', 0x5, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) listen(r4, 0x80) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) close(r4) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000580)={{0xa, 0x4e23, 0x4, @empty, 0x5}, {0xa, 0x4e24, 0x81, @dev={0xfe, 0x80, [], 0x15}, 0x5}, 0x3, [0xffff, 0xfff, 0x0, 0x6, 0x8, 0x1, 0x9980, 0xfffffffffffffff8]}, 0x5c) 22:44:55 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) timerfd_create(0x0, 0x7fffd) 22:44:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x28, 0xb11, 0x0, 0x0, {0x16}}, 0x14}}, 0x0) 22:44:56 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0xf}}) 22:44:56 executing program 5: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x3, 0x200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000680)="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", 0x1aa}], 0x1}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) mount(&(0x7f0000000280), &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='securityfs\x00', 0x100021, &(0x7f0000000480)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x3, 0x7ffff) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={r2}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x2000, 0x0) write$input_event(r3, &(0x7f0000000040)={{0x0, 0x7530}, 0x2, 0x3, 0xfffffffffffffffd}, 0x18) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) close(r3) setxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000004c0)='proc\x00', 0x5, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) listen(r4, 0x80) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) close(r4) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000580)={{0xa, 0x4e23, 0x4, @empty, 0x5}, {0xa, 0x4e24, 0x81, @dev={0xfe, 0x80, [], 0x15}, 0x5}, 0x3, [0xffff, 0xfff, 0x0, 0x6, 0x8, 0x1, 0x9980, 0xfffffffffffffff8]}, 0x5c) 22:44:56 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x3, 0x200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000680)="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", 0x1aa}], 0x1}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) mount(&(0x7f0000000280), &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='securityfs\x00', 0x100021, &(0x7f0000000480)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x3, 0x7ffff) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={r2}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x2000, 0x0) write$input_event(r3, &(0x7f0000000040)={{0x0, 0x7530}, 0x2, 0x3, 0xfffffffffffffffd}, 0x18) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) close(r3) setxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000004c0)='proc\x00', 0x5, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) listen(r4, 0x80) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) close(r4) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000580)={{0xa, 0x4e23, 0x4, @empty, 0x5}, {0xa, 0x4e24, 0x81, @dev={0xfe, 0x80, [], 0x15}, 0x5}, 0x3, [0xffff, 0xfff, 0x0, 0x6, 0x8, 0x1, 0x9980, 0xfffffffffffffff8]}, 0x5c) 22:44:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xd000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000340), 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x1c, 0x10001d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da15}, [@nested={0x8, 0x5, [@generic='i']}]}, 0x1c}}, 0x0) 22:44:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) [ 1049.879732] kauditd_printk_skb: 241 callbacks suppressed [ 1049.879747] audit: type=1326 audit(1544654696.295:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4914 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a4da code=0x0 22:44:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x201000, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0), 0x0) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x40000) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f00000003c0)='./file0\x00') setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 22:44:56 executing program 0: socket(0x1e, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x2, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000001c0)="01000000010000007f") 22:44:56 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x3, 0x200) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000680)="7027244a93b90a1de7bfc1ed0e95876df0d074347d046d60f44959b7fdfcd5e61a703636c5ebe0773ad10ea9bc3018566824463898e81aad5629e71e5d30f2b5b68d8a497d8f19d491f51d8585f2e0eeed54220fbe69d7d01491f2edd5c5cfc90c22d5e048fcdab7e8e413dc479c7bf4b4fc86e17013aca658aade625505ebc392cac63082c42cbcd02827e2a0ad26f559ef4c1cfb60a8ee9c9b5412935bc290d54f34c4d04e06839006ac9ce34c1738b9951ffae2fa452b08d3d7e1803a1c868489e5a63f710937692c7ee58f334cccd05805c5cef9103dcd01e4ffd34e389b26498318c74651b5b86b3af64e16545f85235d33e171b4112479ede24d83d1f161b933d261eefca2c28faa27b7911f1bb07e0b836aa5253aa1a8cef07170f3f750fd807f3dcf176f31d902f17f688490364d596f2623499e2221a9f81a7a9ddd3062f7ca1055ea8b555e8b1a9272e977ce051d77cbf9c89625b1981becba833adaedc1328b3c2a8071078ec5c04467e9cca168fa01937e7f568fae5cdff21bba6fb056434b04d9c3ce5e59d84983e8a7dab117c376d3e7de357d456fc172f2f5b189afd8a5221f9b141b", 0x1aa}], 0x1}, 0x0) mount(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f00000001c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) mount(&(0x7f0000000280), &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='securityfs\x00', 0x100021, &(0x7f0000000480)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000540)='/dev/snd/pcmC#D#c\x00', 0x3, 0x7ffff) r2 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={r2}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rfkill\x00', 0x2000, 0x0) write$input_event(r3, &(0x7f0000000040)={{0x0, 0x7530}, 0x2, 0x3, 0xfffffffffffffffd}, 0x18) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) close(r3) setxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000440)=@known='system.posix_acl_default\x00', &(0x7f00000004c0)='proc\x00', 0x5, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) listen(r4, 0x80) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) close(r4) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000580)={{0xa, 0x4e23, 0x4, @empty, 0x5}, {0xa, 0x4e24, 0x81, @dev={0xfe, 0x80, [], 0x15}, 0x5}, 0x3, [0xffff, 0xfff, 0x0, 0x6, 0x8, 0x1, 0x9980, 0xfffffffffffffff8]}, 0x5c) 22:44:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000280)="0f01795ec4c2fd2a4721420f01ca0ffda6990000003e0ff6e5c4a1685d567f420f01b2f19100003e440f20c766b805018ec8c744240002000000c744240200000000c7442406000000000f011c24", 0x4e}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x200}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000080)="580000001400add427323b470c458c560a067fffffff81004e22000000050028925aa80000000000000080000efffeffe809000000fff5dd0000001000020000000000000000cfb193e7ee00000000000000000000000000", 0x58}], 0x1) [ 1050.159114] autofs4:pid:4922:validate_dev_ioctl: invalid path supplied for cmd(0x0000937e) 22:44:56 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x3c, 0x20, 0x201, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x18, 'b0b0\x00'}]}, 0x3c}}, 0x0) 22:44:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={0x0, 0x0, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 22:44:56 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x2d}, [@ldst={0x3fd}]}, &(0x7f0000000080)="47504c049c3514bf772da07ae82e76590a36f6493ec1ab91b397e42abf1ea6cd8cd77427fc9a9e2b7165f52b4107bf0850d899dc52d013175ddb1b2f46203c2a05b722e33e556fb2e3f39a3cde1fca53640337ec956146bdbfcb115070195631de5d21a5ea9e638c2bdb78a501ca4b6ea313d82568f9382c2c3f6faba6b4ee54793b4ed26dae3e52225029bb2ac0007f77754c3f23ceda9809b9a9684a940abcaa8cfcc7133ec422e9c83888318d41e9a493f0195fe2599651b89504f5dba14625ce2366f33d95dba92f867279cabf4aceddc85a8af7a0fa68d767ce5136b9d0d1966c499cb6bf34c2988666970000000000000000000000", 0x3, 0xfe7e, &(0x7f000000cf3d)=""/195}, 0x48) 22:44:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x201000, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0), 0x0) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x40000) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f00000003c0)='./file0\x00') setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 22:44:56 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) mkdir(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000000c0)=0x4010, 0x4) rmdir(&(0x7f0000000340)='./file0//ile0\x00') 22:44:56 executing program 0: r0 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) write(r0, &(0x7f0000000080)='/', 0x1) sendfile(r0, r0, &(0x7f0000001000), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) [ 1050.681199] audit: type=1326 audit(1544654697.095:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4914 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a4da code=0x0 22:44:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) 22:44:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={0x0, 0x0, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 22:44:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x201000, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0), 0x0) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x40000) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f00000003c0)='./file0\x00') setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 22:44:57 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x3a, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x4) 22:44:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000280)="0f01795ec4c2fd2a4721420f01ca0ffda6990000003e0ff6e5c4a1685d567f420f01b2f19100003e440f20c766b805018ec8c744240002000000c744240200000000c7442406000000000f011c24", 0x4e}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:57 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020000000d0000000000000000000000030000000000000002000000e000000100000000000000000800120000000000000000000000000006000000000000000000006a1f"], 0x45}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000180)="0a5c2d023c126285718070") setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x6800000000000000, 0x60, &(0x7f00000001c0)={0x0, 'bridge_slave_0\x00'}, 0x18) 22:44:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={0x0, 0x0, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) [ 1050.846573] audit: type=1326 audit(1544654697.265:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4968 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a4da code=0x0 22:44:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6, 0x0) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000026ff8)='./file0\x00', &(0x7f00000013c0)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000280)='./file0\x00') mount(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x201000, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0), 0x0) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x40000) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f00000003c0)='./file0\x00') setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 22:44:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'ip6_vti0\x00', 0x245}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000440)={{0x5, 0x1}, 'port1\x00', 0x14, 0x20002, 0x10000, 0xffffffffffff8725, 0xf, 0x9, 0x0, 0x0, 0x7, 0x80}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_bond\x00'}}) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x4, 0x6, 0x4, 0x7fffffff, 0x1, r2}) writev(r0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000380)={0x20, 0x8}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f00000002c0)=0x4) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x0, 0x0) r4 = semget(0x0, 0x3, 0x4) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000000)=""/182) clock_gettime(0x200000000000007, &(0x7f0000000000)) 22:44:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000415fc8)={0x0, 0x0, &(0x7f00000daff0)={&(0x7f0000417e08)=@newsa={0x13c, 0x10, 0x203, 0x0, 0x0, {{@in, @in=@multicast1}, {@in6=@loopback, 0x0, 0x33}, @in=@remote={0xac, 0x14, 0xffffffffffffffff}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 22:44:57 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_group_source_req(r2, 0x0, 0x19, 0x0, 0x0) 22:44:57 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000023c0)=""/49, 0x31}], 0x1}}], 0x1, 0x0, 0x0) 22:44:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) 22:44:58 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 22:44:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_group_source_req(r2, 0x0, 0x19, 0x0, 0x0) 22:44:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000280)="0f01795ec4c2fd2a4721420f01ca0ffda6990000003e0ff6e5c4a1685d567f420f01b2f19100003e440f20c766b805018ec8c744240002000000c744240200000000c7442406000000000f011c24", 0x4e}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000023c0)=""/49, 0x31}], 0x1}}], 0x1, 0x0, 0x0) 22:44:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'ip6_vti0\x00', 0x245}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000440)={{0x5, 0x1}, 'port1\x00', 0x14, 0x20002, 0x10000, 0xffffffffffff8725, 0xf, 0x9, 0x0, 0x0, 0x7, 0x80}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_bond\x00'}}) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x4, 0x6, 0x4, 0x7fffffff, 0x1, r2}) writev(r0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000380)={0x20, 0x8}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f00000002c0)=0x4) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x0, 0x0) r4 = semget(0x0, 0x3, 0x4) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000000)=""/182) clock_gettime(0x200000000000007, &(0x7f0000000000)) [ 1051.728011] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 1051.751969] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 22:44:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000023c0)=""/49, 0x31}], 0x1}}], 0x1, 0x0, 0x0) [ 1051.774399] audit: type=1326 audit(1544654698.185:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5016 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a4da code=0x0 [ 1051.817082] netlink: 'syz-executor5': attribute type 3 has an invalid length. 22:44:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_group_source_req(r2, 0x0, 0x19, 0x0, 0x0) 22:44:58 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f00000023c0)=""/49, 0x31}], 0x1}}], 0x1, 0x0, 0x0) [ 1051.852246] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 22:44:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'ip6_vti0\x00', 0x245}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000440)={{0x5, 0x1}, 'port1\x00', 0x14, 0x20002, 0x10000, 0xffffffffffff8725, 0xf, 0x9, 0x0, 0x0, 0x7, 0x80}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_bond\x00'}}) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x4, 0x6, 0x4, 0x7fffffff, 0x1, r2}) writev(r0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000380)={0x20, 0x8}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f00000002c0)=0x4) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x0, 0x0) r4 = semget(0x0, 0x3, 0x4) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000000)=""/182) clock_gettime(0x200000000000007, &(0x7f0000000000)) 22:44:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = fcntl$dupfd(r0, 0x0, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_group_source_req(r2, 0x0, 0x19, 0x0, 0x0) 22:44:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'ip6_vti0\x00', 0x245}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000440)={{0x5, 0x1}, 'port1\x00', 0x14, 0x20002, 0x10000, 0xffffffffffff8725, 0xf, 0x9, 0x0, 0x0, 0x7, 0x80}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_bond\x00'}}) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x4, 0x6, 0x4, 0x7fffffff, 0x1, r2}) writev(r0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000380)={0x20, 0x8}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f00000002c0)=0x4) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x0, 0x0) r4 = semget(0x0, 0x3, 0x4) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000000)=""/182) clock_gettime(0x200000000000007, &(0x7f0000000000)) 22:44:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) 22:44:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 22:44:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000280)="0f01795ec4c2fd2a4721420f01ca0ffda6990000003e0ff6e5c4a1685d567f420f01b2f19100003e440f20c766b805018ec8c744240002000000c744240200000000c7442406000000000f011c24", 0x4e}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:44:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'ip6_vti0\x00', 0x245}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000440)={{0x5, 0x1}, 'port1\x00', 0x14, 0x20002, 0x10000, 0xffffffffffff8725, 0xf, 0x9, 0x0, 0x0, 0x7, 0x80}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_bond\x00'}}) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x4, 0x6, 0x4, 0x7fffffff, 0x1, r2}) writev(r0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000380)={0x20, 0x8}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f00000002c0)=0x4) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x0, 0x0) r4 = semget(0x0, 0x3, 0x4) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000000)=""/182) clock_gettime(0x200000000000007, &(0x7f0000000000)) 22:44:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'ip6_vti0\x00', 0x245}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000440)={{0x5, 0x1}, 'port1\x00', 0x14, 0x20002, 0x10000, 0xffffffffffff8725, 0xf, 0x9, 0x0, 0x0, 0x7, 0x80}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_bond\x00'}}) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x4, 0x6, 0x4, 0x7fffffff, 0x1, r2}) writev(r0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000380)={0x20, 0x8}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f00000002c0)=0x4) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x0, 0x0) r4 = semget(0x0, 0x3, 0x4) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000000)=""/182) clock_gettime(0x200000000000007, &(0x7f0000000000)) 22:44:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'ip6_vti0\x00', 0x245}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000440)={{0x5, 0x1}, 'port1\x00', 0x14, 0x20002, 0x10000, 0xffffffffffff8725, 0xf, 0x9, 0x0, 0x0, 0x7, 0x80}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_bond\x00'}}) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x4, 0x6, 0x4, 0x7fffffff, 0x1, r2}) writev(r0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000380)={0x20, 0x8}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f00000002c0)=0x4) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x0, 0x0) r4 = semget(0x0, 0x3, 0x4) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000000)=""/182) clock_gettime(0x200000000000007, &(0x7f0000000000)) [ 1052.652166] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 1052.677748] audit: type=1326 audit(1544654699.095:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5051 comm="syz-executor4" exe="/root/syz-executor4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a4da code=0x0 [ 1052.714528] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 22:44:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) [ 1052.903142] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 1052.924976] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 22:44:59 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f0000016000), 0xc, &(0x7f000000b000)={&(0x7f0000000a00)=@setlink={0x3c, 0x13, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x3, [@typed={0xc, 0x0, @fd}]}]}]}, 0x3c}}, 0x0) 22:44:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'ip6_vti0\x00', 0x245}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000440)={{0x5, 0x1}, 'port1\x00', 0x14, 0x20002, 0x10000, 0xffffffffffff8725, 0xf, 0x9, 0x0, 0x0, 0x7, 0x80}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_bond\x00'}}) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x4, 0x6, 0x4, 0x7fffffff, 0x1, r2}) writev(r0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000380)={0x20, 0x8}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f00000002c0)=0x4) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x0, 0x0) r4 = semget(0x0, 0x3, 0x4) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000000)=""/182) clock_gettime(0x200000000000007, &(0x7f0000000000)) 22:44:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'ip6_vti0\x00', 0x245}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000440)={{0x5, 0x1}, 'port1\x00', 0x14, 0x20002, 0x10000, 0xffffffffffff8725, 0xf, 0x9, 0x0, 0x0, 0x7, 0x80}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_bond\x00'}}) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x4, 0x6, 0x4, 0x7fffffff, 0x1, r2}) writev(r0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000380)={0x20, 0x8}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f00000002c0)=0x4) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x0, 0x0) r4 = semget(0x0, 0x3, 0x4) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000000)=""/182) clock_gettime(0x200000000000007, &(0x7f0000000000)) 22:44:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") getrlimit(0x0, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0c0583b, &(0x7f0000000040)) [ 1053.106188] netlink: 'syz-executor5': attribute type 3 has an invalid length. [ 1053.127672] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. 22:44:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'ip6_vti0\x00', 0x245}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000440)={{0x5, 0x1}, 'port1\x00', 0x14, 0x20002, 0x10000, 0xffffffffffff8725, 0xf, 0x9, 0x0, 0x0, 0x7, 0x80}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_bond\x00'}}) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x4, 0x6, 0x4, 0x7fffffff, 0x1, r2}) writev(r0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000380)={0x20, 0x8}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f00000002c0)=0x4) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x0, 0x0) r4 = semget(0x0, 0x3, 0x4) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000000)=""/182) clock_gettime(0x200000000000007, &(0x7f0000000000)) 22:44:59 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r1, r0, 0x2, 0x0) 22:44:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000500)={0x6c07, 0x3, 0x3ff, 0x0, 0x5}) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xd) unshare(0x40000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x8, 0x0) semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000300)=""/208) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/20) unshare(0x4000000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8]}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000100)=""/94, &(0x7f00000001c0)=0x5e) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000004c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/11, 0xeb) 22:44:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x200000000000022) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000008001b00000000000800110000000000"], 0x1}}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc00c5512, &(0x7f00000001c0)={0x0, 0x5517}) 22:44:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'ip6_vti0\x00', 0x245}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000440)={{0x5, 0x1}, 'port1\x00', 0x14, 0x20002, 0x10000, 0xffffffffffff8725, 0xf, 0x9, 0x0, 0x0, 0x7, 0x80}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_bond\x00'}}) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x4, 0x6, 0x4, 0x7fffffff, 0x1, r2}) writev(r0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000380)={0x20, 0x8}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f00000002c0)=0x4) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x0, 0x0) r4 = semget(0x0, 0x3, 0x4) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000000)=""/182) clock_gettime(0x200000000000007, &(0x7f0000000000)) 22:44:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'ip6_vti0\x00', 0x245}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000440)={{0x5, 0x1}, 'port1\x00', 0x14, 0x20002, 0x10000, 0xffffffffffff8725, 0xf, 0x9, 0x0, 0x0, 0x7, 0x80}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_bond\x00'}}) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x4, 0x6, 0x4, 0x7fffffff, 0x1, r2}) writev(r0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000380)={0x20, 0x8}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f00000002c0)=0x4) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x0, 0x0) r4 = semget(0x0, 0x3, 0x4) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000000)=""/182) clock_gettime(0x200000000000007, &(0x7f0000000000)) 22:44:59 executing program 4: r0 = socket(0x40000000002, 0x8000a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) [ 1053.632422] IPVS: ftp: loaded support on port[0] = 21 22:45:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x200000000000022) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000008001b00000000000800110000000000"], 0x1}}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc00c5512, &(0x7f00000001c0)={0x0, 0x5517}) 22:45:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r1, r0, 0x2, 0x0) 22:45:00 executing program 4: r0 = socket(0x40000000002, 0x8000a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) 22:45:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r0) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000140)={[], 0x0, 0xfff, 0x3a9}) openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'ip6_vti0\x00', 0x245}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000440)={{0x5, 0x1}, 'port1\x00', 0x14, 0x20002, 0x10000, 0xffffffffffff8725, 0xf, 0x9, 0x0, 0x0, 0x7, 0x80}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth0_to_bond\x00'}}) r2 = getpid() ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={[], 0x4, 0x6, 0x4, 0x7fffffff, 0x1, r2}) writev(r0, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000380)={0x20, 0x8}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000340)) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f00000002c0)=0x4) preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x0) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x0, 0x0) r4 = semget(0x0, 0x3, 0x4) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000000)=""/182) clock_gettime(0x200000000000007, &(0x7f0000000000)) 22:45:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r1, r0, 0x2, 0x0) 22:45:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x200000000000022) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000008001b00000000000800110000000000"], 0x1}}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc00c5512, &(0x7f00000001c0)={0x0, 0x5517}) 22:45:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r1, r0, 0x2, 0x0) [ 1054.319836] IPVS: ftp: loaded support on port[0] = 21 22:45:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000500)={0x6c07, 0x3, 0x3ff, 0x0, 0x5}) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xd) unshare(0x40000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x8, 0x0) semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000300)=""/208) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/20) unshare(0x4000000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8]}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000100)=""/94, &(0x7f00000001c0)=0x5e) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000004c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/11, 0xeb) 22:45:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x200000000000022) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000008001b00000000000800110000000000"], 0x1}}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc00c5512, &(0x7f00000001c0)={0x0, 0x5517}) 22:45:00 executing program 4: r0 = socket(0x40000000002, 0x8000a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) 22:45:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r1, r0, 0x2, 0x0) 22:45:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x200000000000022) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000008001b00000000000800110000000000"], 0x1}}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc00c5512, &(0x7f00000001c0)={0x0, 0x5517}) 22:45:00 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r1, r0, 0x2, 0x0) 22:45:01 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) tee(r1, r0, 0x2, 0x0) 22:45:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000500)={0x6c07, 0x3, 0x3ff, 0x0, 0x5}) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xd) unshare(0x40000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x8, 0x0) semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000300)=""/208) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/20) unshare(0x4000000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8]}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000100)=""/94, &(0x7f00000001c0)=0x5e) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000004c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/11, 0xeb) 22:45:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x200000000000022) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000008001b00000000000800110000000000"], 0x1}}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc00c5512, &(0x7f00000001c0)={0x0, 0x5517}) 22:45:01 executing program 4: r0 = socket(0x40000000002, 0x8000a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) [ 1054.634873] IPVS: ftp: loaded support on port[0] = 21 22:45:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@abs={0x1}, 0x6e, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x400000000000095, 0x0) 22:45:01 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0xffffffa5}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2", 0x1, 0xc3, &(0x7f0000000000)=""/195}, 0x48) [ 1054.799878] IPVS: ftp: loaded support on port[0] = 21 22:45:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000500)={0x6c07, 0x3, 0x3ff, 0x0, 0x5}) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xd) unshare(0x40000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x8, 0x0) semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000300)=""/208) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/20) unshare(0x4000000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8]}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000100)=""/94, &(0x7f00000001c0)=0x5e) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000004c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/11, 0xeb) 22:45:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@abs={0x1}, 0x6e, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x400000000000095, 0x0) 22:45:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 22:45:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x200000000000022) sendmsg$nl_route(r0, &(0x7f000001bfc8)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000008001b00000000000800110000000000"], 0x1}}, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x80000000005, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc00c5512, &(0x7f00000001c0)={0x0, 0x5517}) 22:45:01 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000f1dff8)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) 22:45:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000500)={0x6c07, 0x3, 0x3ff, 0x0, 0x5}) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xd) unshare(0x40000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x8, 0x0) semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000300)=""/208) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/20) unshare(0x4000000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8]}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000100)=""/94, &(0x7f00000001c0)=0x5e) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000004c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/11, 0xeb) 22:45:01 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@abs={0x1}, 0x6e, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x400000000000095, 0x0) [ 1055.474172] bond0: Releasing backup interface bond_slave_1 [ 1055.508253] IPVS: ftp: loaded support on port[0] = 21 [ 1055.548547] IPVS: ftp: loaded support on port[0] = 21 22:45:02 executing program 2: msgrcv(0x0, 0x0, 0x2000000, 0x0, 0xf59b5d66e1ea5b37) 22:45:02 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@abs={0x1}, 0x6e, 0x0}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x400000000000095, 0x0) 22:45:02 executing program 2: msgrcv(0x0, 0x0, 0x2000000, 0x0, 0xf59b5d66e1ea5b37) 22:45:02 executing program 2: msgrcv(0x0, 0x0, 0x2000000, 0x0, 0xf59b5d66e1ea5b37) 22:45:02 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x40000040101) write$sndseq(r0, 0x0, 0x0) r1 = epoll_create(0x105) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7d}) 22:45:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000500)={0x6c07, 0x3, 0x3ff, 0x0, 0x5}) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xd) unshare(0x40000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x8, 0x0) semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000300)=""/208) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/20) unshare(0x4000000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8]}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000100)=""/94, &(0x7f00000001c0)=0x5e) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000004c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/11, 0xeb) 22:45:02 executing program 2: msgrcv(0x0, 0x0, 0x2000000, 0x0, 0xf59b5d66e1ea5b37) 22:45:02 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x40000040101) write$sndseq(r0, 0x0, 0x0) r1 = epoll_create(0x105) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7d}) 22:45:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 22:45:02 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f7570004956f24670ff1fe1b998e8dde47ffe6243a178980411e1440dd62570ea1cd48704b17a1262adcd38f62402be075611b4a8b423a019659cd0aa0236a73e03c507ef0165ddfa2cb2417f2e3be04c156b78621b9c5e95a3954c42170655932611fdc3c6350b3481451eddd4", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)="6d656d6f72792e6d6178004ed4a03cf470e91c00000000000000000000000000000006208195906fdf3415fb7c57c5e11da2b6758794e7523970e8a0e06f253b45cd6463c5efd0b7391a9910f3c1ea6416c2801400000000000000b43f4b7102c57fc458181626578fd8450a27753fd72dce4dc72f55e6404e4fbe526cf0582e6687d9fe337449a6c3babde2e24f238e2eec3fe0d7912915efd8a84bd924c831b1de97eed0d2179bff119b14060b0c26e43e2f08d65c09384638ebffca768abac84b56e8", 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) [ 1056.496752] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 1056.543582] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1056.568371] CPU: 1 PID: 5213 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1056.575713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1056.585099] Call Trace: [ 1056.587730] dump_stack+0x244/0x39d [ 1056.591373] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1056.596584] dump_header+0x27b/0xf72 [ 1056.600335] ? mark_held_locks+0x130/0x130 [ 1056.604585] ? pagefault_out_of_memory+0x197/0x197 [ 1056.609533] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1056.615088] ? check_preemption_disabled+0x48/0x280 [ 1056.620125] ? zap_class+0x640/0x640 [ 1056.623944] ? __lock_is_held+0xb5/0x140 [ 1056.628016] ? zap_class+0x640/0x640 [ 1056.631756] ? print_usage_bug+0xc0/0xc0 [ 1056.635826] ? find_held_lock+0x36/0x1c0 [ 1056.639902] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1056.645447] ? find_held_lock+0x36/0x1c0 [ 1056.649525] ? mark_held_locks+0xc7/0x130 [ 1056.653694] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1056.658801] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1056.663909] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1056.668508] ? trace_hardirqs_on+0xbd/0x310 [ 1056.672842] ? kasan_check_read+0x11/0x20 [ 1056.676995] ? ___ratelimit+0x3b4/0x672 [ 1056.680980] ? trace_hardirqs_off_caller+0x310/0x310 [ 1056.686089] ? trace_hardirqs_on+0x310/0x310 [ 1056.690501] ? lock_downgrade+0x900/0x900 [ 1056.694676] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1056.699788] ? ___ratelimit+0x3b9/0x672 [ 1056.703769] ? idr_get_free+0xf70/0xf70 [ 1056.707763] ? _raw_spin_unlock_irq+0x27/0x80 [ 1056.712281] ? _raw_spin_unlock_irq+0x27/0x80 [ 1056.716821] oom_kill_process.cold.27+0x10/0x903 [ 1056.721600] ? _raw_spin_unlock_irq+0x27/0x80 [ 1056.726119] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1056.730730] ? oom_evaluate_task+0x540/0x540 [ 1056.735143] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1056.740688] ? cgroup_procs_next+0x70/0x70 [ 1056.744950] ? _raw_spin_unlock_irq+0x60/0x80 [ 1056.749453] ? oom_badness+0xaa0/0xaa0 [ 1056.753347] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1056.758108] ? mem_cgroup_iter_break+0x30/0x30 [ 1056.762710] ? mark_held_locks+0xc7/0x130 [ 1056.766868] out_of_memory+0xa84/0x1430 [ 1056.770845] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1056.775438] ? kasan_check_read+0x11/0x20 [ 1056.779592] ? oom_killer_disable+0x3a0/0x3a0 [ 1056.784112] mem_cgroup_out_of_memory+0x15e/0x210 [ 1056.788988] ? memory_oom_group_write+0x160/0x160 [ 1056.793834] ? page_counter_memparse+0xb5/0x1d0 [ 1056.798519] memory_max_write+0x1b4/0x3f0 [ 1056.802672] ? lock_acquire+0x1ed/0x520 [ 1056.806649] ? kernfs_fop_write+0x227/0x480 [ 1056.810985] ? mem_cgroup_write+0x400/0x400 [ 1056.815340] ? __might_fault+0x12b/0x1e0 [ 1056.819409] ? zap_class+0x640/0x640 [ 1056.823152] ? mem_cgroup_write+0x400/0x400 [ 1056.827481] cgroup_file_write+0x2f7/0x7e0 [ 1056.831746] ? cgroup_migrate_add_task+0xcd0/0xcd0 [ 1056.836705] ? __lock_is_held+0xb5/0x140 [ 1056.840786] ? cgroup_migrate_add_task+0xcd0/0xcd0 [ 1056.845741] kernfs_fop_write+0x2ba/0x480 [ 1056.849923] __vfs_write+0x119/0x9f0 [ 1056.853665] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1056.859225] ? kernfs_vma_page_mkwrite+0x230/0x230 [ 1056.864165] ? kernel_read+0x120/0x120 [ 1056.868087] ? __lock_is_held+0xb5/0x140 [ 1056.872201] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1056.877228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1056.882774] ? __sb_start_write+0x1b2/0x370 [ 1056.887102] vfs_write+0x1fc/0x560 [ 1056.890652] ksys_write+0x101/0x260 [ 1056.894286] ? __ia32_sys_read+0xb0/0xb0 [ 1056.898385] ? trace_hardirqs_off_caller+0x310/0x310 [ 1056.903498] __x64_sys_write+0x73/0xb0 [ 1056.907410] do_syscall_64+0x1b9/0x820 [ 1056.911319] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1056.916708] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1056.921643] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1056.926494] ? trace_hardirqs_on_caller+0x310/0x310 [ 1056.931517] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1056.936538] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1056.941567] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1056.946442] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1056.951656] RIP: 0033:0x457679 [ 1056.954855] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1056.973767] RSP: 002b:00007f1c159a5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1056.981504] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457679 [ 1056.988795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1056.996069] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1057.003340] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1c159a66d4 [ 1057.010609] R13: 00000000004c60dd R14: 00000000004dac78 R15: 00000000ffffffff [ 1057.058856] IPVS: ftp: loaded support on port[0] = 21 [ 1057.060040] Task in /syz3 killed as a result of limit of /syz3 [ 1057.070861] memory: usage 56520kB, limit 0kB, failcnt 8 [ 1057.080419] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1057.088477] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1057.094903] Memory cgroup stats for /syz3: cache:16304KB rss:31324KB rss_huge:28672KB shmem:16244KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:47648KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1057.119922] Memory cgroup out of memory: Kill process 32633 (syz-executor3) score 9009000 or sacrifice child [ 1057.130647] Killed process 32633 (syz-executor3) total-vm:70340kB, anon-rss:2200kB, file-rss:33708kB, shmem-rss:0kB [ 1057.170580] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 1057.182166] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1057.188149] CPU: 0 PID: 5211 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1057.195453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1057.204833] Call Trace: [ 1057.204859] dump_stack+0x244/0x39d [ 1057.204884] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1057.204916] dump_header+0x27b/0xf72 [ 1057.204941] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1057.225591] ? check_preemption_disabled+0x48/0x280 [ 1057.230622] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1057.230644] ? pagefault_out_of_memory+0x197/0x197 [ 1057.230665] ? debug_smp_processor_id+0x1c/0x20 [ 1057.245845] ? perf_trace_lock+0x14d/0x7a0 [ 1057.250098] ? debug_smp_processor_id+0x1c/0x20 [ 1057.254797] ? perf_trace_lock_acquire+0x15b/0x800 [ 1057.259743] ? lock_is_held_type+0x210/0x210 [ 1057.259764] ? perf_trace_lock+0x7a0/0x7a0 [ 1057.259787] ? debug_smp_processor_id+0x1c/0x20 [ 1057.259803] ? perf_trace_lock+0x14d/0x7a0 [ 1057.259822] ? zap_class+0x640/0x640 [ 1057.281108] ? print_usage_bug+0xc0/0xc0 [ 1057.285191] ? lock_is_held_type+0x210/0x210 [ 1057.289636] ? perf_trace_lock+0x7a0/0x7a0 [ 1057.289664] ? find_held_lock+0x36/0x1c0 [ 1057.289694] ? mark_held_locks+0xc7/0x130 [ 1057.289715] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1057.289730] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1057.289750] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1057.298051] ? trace_hardirqs_on+0xbd/0x310 [ 1057.298067] ? kasan_check_read+0x11/0x20 [ 1057.298081] ? ___ratelimit+0x3b4/0x672 [ 1057.298097] ? trace_hardirqs_off_caller+0x310/0x310 [ 1057.298116] ? trace_hardirqs_on+0x310/0x310 [ 1057.298133] ? lock_downgrade+0x900/0x900 [ 1057.298155] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1057.298173] ? ___ratelimit+0x3b9/0x672 [ 1057.325616] ? idr_get_free+0xf70/0xf70 [ 1057.325632] ? _raw_spin_unlock_irq+0x27/0x80 [ 1057.325647] ? _raw_spin_unlock_irq+0x27/0x80 [ 1057.325677] oom_kill_process.cold.27+0x10/0x903 [ 1057.325694] ? _raw_spin_unlock_irq+0x27/0x80 [ 1057.334769] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1057.334799] ? oom_evaluate_task+0x540/0x540 [ 1057.334817] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1057.334838] ? cgroup_procs_next+0x70/0x70 [ 1057.356409] ? _raw_spin_unlock_irq+0x60/0x80 [ 1057.356428] ? oom_badness+0xaa0/0xaa0 [ 1057.356455] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1057.356476] ? mem_cgroup_iter_break+0x30/0x30 [ 1057.356509] ? mark_held_locks+0xc7/0x130 [ 1057.365510] out_of_memory+0xa84/0x1430 [ 1057.365527] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1057.365545] ? kasan_check_read+0x11/0x20 [ 1057.365566] ? oom_killer_disable+0x3a0/0x3a0 [ 1057.365606] mem_cgroup_out_of_memory+0x15e/0x210 [ 1057.365626] ? memory_oom_group_write+0x160/0x160 [ 1057.406831] ? mem_cgroup_try_charge+0x627/0xe20 [ 1057.406857] ? page_counter_try_charge+0x1c1/0x220 [ 1057.406878] try_charge+0xda9/0x1700 [ 1057.406896] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1057.406913] ? kasan_check_read+0x11/0x20 [ 1057.406939] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 1057.406965] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 1057.406986] ? lock_page_memcg+0x350/0x350 [ 1057.407007] ? lock_acquire+0x1ed/0x520 [ 1057.407025] ? mem_cgroup_oom_control_write+0x100/0x100 [ 1057.407044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1057.407065] ? check_preemption_disabled+0x48/0x280 [ 1057.407086] ? kasan_check_read+0x11/0x20 [ 1057.428492] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1057.428509] ? rcu_softirq_qs+0x20/0x20 [ 1057.428546] mem_cgroup_try_charge+0x627/0xe20 [ 1057.428564] ? __anon_vma_prepare+0x325/0x6c0 [ 1057.428590] ? mem_cgroup_protected+0xa60/0xa60 [ 1057.437961] ? up_write+0x7b/0x220 [ 1057.437977] ? down_write_nested+0x130/0x130 [ 1057.438005] ? __anon_vma_prepare+0x353/0x6c0 [ 1057.438026] ? anon_vma_fork+0x820/0x820 [ 1057.438043] ? mark_held_locks+0x130/0x130 [ 1057.438063] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1057.438089] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 1057.438109] __handle_mm_fault+0x2854/0x5be0 [ 1057.438138] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1057.438166] ? vm_mmap_pgoff+0x222/0x2c0 [ 1057.438186] ? lock_downgrade+0x900/0x900 [ 1057.438214] ? zap_class+0x640/0x640 [ 1057.438229] ? zap_class+0x640/0x640 [ 1057.438265] ? userfaultfd_unmap_prep+0x660/0x660 [ 1057.438288] ? find_held_lock+0x36/0x1c0 [ 1057.438328] ? handle_mm_fault+0x42a/0xc70 [ 1057.438348] ? lock_downgrade+0x900/0x900 [ 1057.438367] ? check_preemption_disabled+0x48/0x280 [ 1057.438388] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1057.438404] ? kasan_check_read+0x11/0x20 [ 1057.438420] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1057.438437] ? rcu_softirq_qs+0x20/0x20 [ 1057.438460] ? trace_hardirqs_off_caller+0x310/0x310 [ 1057.438479] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1057.438497] ? check_preemption_disabled+0x48/0x280 [ 1057.438523] handle_mm_fault+0x54f/0xc70 [ 1057.438545] ? __handle_mm_fault+0x5be0/0x5be0 [ 1057.438568] ? find_vma+0x34/0x190 [ 1057.438598] __do_page_fault+0x5e8/0xe60 [ 1057.438614] ? trace_hardirqs_off+0xb8/0x310 [ 1057.438644] do_page_fault+0xf2/0x7e0 [ 1057.438663] ? vmalloc_sync_all+0x30/0x30 [ 1057.470625] ? error_entry+0x70/0xd0 [ 1057.470647] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1057.509765] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1057.509784] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1057.509800] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1057.509819] ? trace_hardirqs_on_caller+0x310/0x310 [ 1057.509836] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1057.509859] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1057.509878] ? page_fault+0x8/0x30 [ 1057.518474] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1057.518494] ? page_fault+0x8/0x30 [ 1057.518509] page_fault+0x1e/0x30 [ 1057.518524] RIP: 0033:0x40ed8f [ 1057.518542] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1057.518551] RSP: 002b:0000000000a3fb10 EFLAGS: 00010206 [ 1057.518566] RAX: 00007f1c15965000 RBX: 0000000000020000 RCX: 00000000004576ca [ 1057.518576] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1057.518586] RBP: 0000000000a3fbf0 R08: ffffffffffffffff R09: 0000000000000000 [ 1057.518594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a3fcd0 [ 1057.518603] R13: 00007f1c15985700 R14: 000000000072bfac R15: 000000000072bfac [ 1057.565215] Task in /syz3 killed as a result of limit of /syz3 [ 1057.591096] memory: usage 54148kB, limit 0kB, failcnt 8 [ 1057.600458] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1057.608879] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1057.618438] Memory cgroup stats for /syz3: cache:16304KB rss:29064KB rss_huge:26624KB shmem:16244KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:45500KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1057.638275] Memory cgroup out of memory: Kill process 32657 (syz-executor3) score 9009000 or sacrifice child [ 1057.652270] Killed process 32657 (syz-executor3) total-vm:70340kB, anon-rss:2200kB, file-rss:33708kB, shmem-rss:0kB [ 1057.671974] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 1057.676732] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1057.702051] CPU: 0 PID: 5213 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1057.711504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1057.711510] Call Trace: [ 1057.711533] dump_stack+0x244/0x39d [ 1057.711553] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1057.726996] dump_header+0x27b/0xf72 [ 1057.749097] ? mark_held_locks+0x130/0x130 [ 1057.749115] ? pagefault_out_of_memory+0x197/0x197 [ 1057.749131] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1057.749149] ? check_preemption_disabled+0x48/0x280 [ 1057.749172] ? zap_class+0x640/0x640 [ 1057.749185] ? __lock_is_held+0xb5/0x140 [ 1057.749204] ? zap_class+0x640/0x640 [ 1057.749222] ? print_usage_bug+0xc0/0xc0 [ 1057.749241] ? find_held_lock+0x36/0x1c0 [ 1057.761905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1057.761925] ? find_held_lock+0x36/0x1c0 [ 1057.761949] ? mark_held_locks+0xc7/0x130 [ 1057.761967] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1057.761985] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1057.797128] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1057.797146] ? trace_hardirqs_on+0xbd/0x310 [ 1057.797167] ? kasan_check_read+0x11/0x20 [ 1057.815414] ? ___ratelimit+0x3b4/0x672 [ 1057.815433] ? trace_hardirqs_off_caller+0x310/0x310 [ 1057.815456] ? trace_hardirqs_on+0x310/0x310 [ 1057.815474] ? lock_downgrade+0x900/0x900 [ 1057.815494] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1057.846735] ? ___ratelimit+0x3b9/0x672 [ 1057.846751] ? idr_get_free+0xf70/0xf70 [ 1057.846763] ? _raw_spin_unlock_irq+0x27/0x80 [ 1057.846775] ? _raw_spin_unlock_irq+0x27/0x80 [ 1057.846799] oom_kill_process.cold.27+0x10/0x903 [ 1057.846815] ? _raw_spin_unlock_irq+0x27/0x80 [ 1057.846831] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1057.846853] ? oom_evaluate_task+0x540/0x540 [ 1057.868310] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1057.868331] ? cgroup_procs_next+0x70/0x70 [ 1057.868347] ? _raw_spin_unlock_irq+0x60/0x80 [ 1057.868362] ? oom_badness+0xaa0/0xaa0 [ 1057.868379] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1057.868395] ? mem_cgroup_iter_break+0x30/0x30 [ 1057.868425] ? mark_held_locks+0xc7/0x130 [ 1057.868449] out_of_memory+0xa84/0x1430 [ 1057.880822] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1057.880846] ? oom_killer_disable+0x3a0/0x3a0 [ 1057.880878] ? preempt_schedule+0x4d/0x60 [ 1057.880895] ? ___preempt_schedule+0x16/0x18 [ 1057.880926] mem_cgroup_out_of_memory+0x15e/0x210 [ 1057.880949] ? memory_oom_group_write+0x160/0x160 [ 1057.905426] ? page_counter_memparse+0xb5/0x1d0 [ 1057.914590] memory_max_write+0x1b4/0x3f0 [ 1057.914613] ? lock_acquire+0x1ed/0x520 [ 1057.925150] ? kernfs_fop_write+0x227/0x480 [ 1057.925172] ? mem_cgroup_write+0x400/0x400 [ 1057.925193] ? __might_fault+0x12b/0x1e0 [ 1057.925212] ? zap_class+0x640/0x640 [ 1057.925231] ? mem_cgroup_write+0x400/0x400 [ 1057.933049] cgroup_file_write+0x2f7/0x7e0 [ 1057.933070] ? cgroup_migrate_add_task+0xcd0/0xcd0 [ 1057.933089] ? __lock_is_held+0xb5/0x140 [ 1057.940863] ? cgroup_migrate_add_task+0xcd0/0xcd0 [ 1057.940886] kernfs_fop_write+0x2ba/0x480 [ 1057.950490] __vfs_write+0x119/0x9f0 [ 1057.958692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1057.958708] ? kernfs_vma_page_mkwrite+0x230/0x230 [ 1057.958724] ? kernel_read+0x120/0x120 [ 1057.958743] ? __lock_is_held+0xb5/0x140 [ 1057.958769] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1057.958787] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1057.958806] ? __sb_start_write+0x1b2/0x370 [ 1057.969031] vfs_write+0x1fc/0x560 [ 1057.969051] ksys_write+0x101/0x260 [ 1057.969070] ? __ia32_sys_read+0xb0/0xb0 [ 1057.969090] ? trace_hardirqs_off_caller+0x310/0x310 [ 1057.969111] __x64_sys_write+0x73/0xb0 [ 1057.969129] do_syscall_64+0x1b9/0x820 [ 1057.969145] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1057.969165] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1057.978056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1057.978075] ? trace_hardirqs_on_caller+0x310/0x310 [ 1057.978092] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1057.978111] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1057.978139] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1057.986268] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1057.986282] RIP: 0033:0x457679 [ 1057.986308] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1057.986317] RSP: 002b:00007f1c159a5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1057.986333] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457679 [ 1057.986342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1057.986356] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1057.995860] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1c159a66d4 [ 1057.995870] R13: 00000000004c60dd R14: 00000000004dac78 R15: 00000000ffffffff [ 1058.000184] Task in /syz3 killed as a result of limit of /syz3 [ 1058.000218] memory: usage 51836kB, limit 0kB, failcnt 14 [ 1058.000229] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1058.000238] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1058.000245] Memory cgroup stats for /syz3: cache:16304KB rss:26916KB rss_huge:24576KB shmem:16244KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:43352KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1058.021073] Memory cgroup out of memory: Kill process 30987 (syz-executor3) score 9003000 or sacrifice child [ 1058.028182] Killed process 30987 (syz-executor3) total-vm:70472kB, anon-rss:2208kB, file-rss:33676kB, shmem-rss:0kB [ 1058.397915] oom_reaper: reaped process 30987 (syz-executor3), now anon-rss:0kB, file-rss:32844kB, shmem-rss:0kB [ 1058.415817] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 1058.427572] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1058.432887] CPU: 0 PID: 5213 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1058.440530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1058.440537] Call Trace: [ 1058.440561] dump_stack+0x244/0x39d [ 1058.440587] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1058.461362] dump_header+0x27b/0xf72 [ 1058.465103] ? mark_held_locks+0x130/0x130 [ 1058.469357] ? pagefault_out_of_memory+0x197/0x197 [ 1058.474307] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1058.474329] ? check_preemption_disabled+0x48/0x280 [ 1058.484897] ? zap_class+0x640/0x640 [ 1058.488622] ? __lock_is_held+0xb5/0x140 [ 1058.492709] ? zap_class+0x640/0x640 [ 1058.496430] ? print_usage_bug+0xc0/0xc0 [ 1058.496456] ? find_held_lock+0x36/0x1c0 [ 1058.496477] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1058.510124] ? find_held_lock+0x36/0x1c0 [ 1058.510148] ? mark_held_locks+0xc7/0x130 [ 1058.518349] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1058.518363] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1058.518379] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1058.518397] ? trace_hardirqs_on+0xbd/0x310 [ 1058.518413] ? kasan_check_read+0x11/0x20 [ 1058.518428] ? ___ratelimit+0x3b4/0x672 [ 1058.518455] ? trace_hardirqs_off_caller+0x310/0x310 [ 1058.550718] ? trace_hardirqs_on+0x310/0x310 [ 1058.550738] ? lock_downgrade+0x900/0x900 [ 1058.550759] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1058.564438] ? ___ratelimit+0x3b9/0x672 [ 1058.568451] ? idr_get_free+0xf70/0xf70 [ 1058.572435] ? _raw_spin_unlock_irq+0x27/0x80 [ 1058.572457] ? _raw_spin_unlock_irq+0x27/0x80 [ 1058.572480] oom_kill_process.cold.27+0x10/0x903 [ 1058.586242] ? _raw_spin_unlock_irq+0x27/0x80 [ 1058.590757] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1058.595365] ? oom_evaluate_task+0x540/0x540 [ 1058.595383] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1058.595401] ? cgroup_procs_next+0x70/0x70 [ 1058.595420] ? _raw_spin_unlock_irq+0x60/0x80 [ 1058.595435] ? oom_badness+0xaa0/0xaa0 [ 1058.595458] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1058.609636] ? mem_cgroup_iter_break+0x30/0x30 [ 1058.609674] ? mark_held_locks+0xc7/0x130 [ 1058.627366] out_of_memory+0xa84/0x1430 [ 1058.627385] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1058.627405] ? kasan_check_read+0x11/0x20 [ 1058.644230] ? oom_killer_disable+0x3a0/0x3a0 [ 1058.648741] ? preempt_schedule+0x4d/0x60 [ 1058.652901] ? ___preempt_schedule+0x16/0x18 [ 1058.657349] mem_cgroup_out_of_memory+0x15e/0x210 [ 1058.662207] ? memory_oom_group_write+0x160/0x160 [ 1058.662223] ? page_counter_memparse+0xb5/0x1d0 [ 1058.662249] memory_max_write+0x1b4/0x3f0 [ 1058.675909] ? lock_acquire+0x1ed/0x520 [ 1058.679904] ? kernfs_fop_write+0x227/0x480 [ 1058.684242] ? mem_cgroup_write+0x400/0x400 [ 1058.688579] ? __might_fault+0x12b/0x1e0 [ 1058.688598] ? zap_class+0x640/0x640 [ 1058.688619] ? mem_cgroup_write+0x400/0x400 [ 1058.700697] cgroup_file_write+0x2f7/0x7e0 [ 1058.704944] ? cgroup_migrate_add_task+0xcd0/0xcd0 [ 1058.709885] ? __lock_is_held+0xb5/0x140 [ 1058.709912] ? cgroup_migrate_add_task+0xcd0/0xcd0 [ 1058.709927] kernfs_fop_write+0x2ba/0x480 [ 1058.709949] __vfs_write+0x119/0x9f0 [ 1058.709966] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1058.709980] ? kernfs_vma_page_mkwrite+0x230/0x230 [ 1058.709996] ? kernel_read+0x120/0x120 [ 1058.710016] ? __lock_is_held+0xb5/0x140 [ 1058.732425] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1058.732453] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1058.745318] ? __sb_start_write+0x1b2/0x370 [ 1058.755865] vfs_write+0x1fc/0x560 [ 1058.763730] ksys_write+0x101/0x260 [ 1058.767372] ? __ia32_sys_read+0xb0/0xb0 [ 1058.767393] ? trace_hardirqs_off_caller+0x310/0x310 [ 1058.767414] __x64_sys_write+0x73/0xb0 [ 1058.780460] do_syscall_64+0x1b9/0x820 [ 1058.784363] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1058.789741] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1058.794684] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1058.794704] ? trace_hardirqs_on_caller+0x310/0x310 [ 1058.804563] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1058.809592] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1058.814627] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1058.819488] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1058.819501] RIP: 0033:0x457679 [ 1058.819519] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1058.819533] RSP: 002b:00007f1c159a5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1058.846827] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457679 [ 1058.846837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1058.846845] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1058.846854] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1c159a66d4 [ 1058.846862] R13: 00000000004c60dd R14: 00000000004dac78 R15: 00000000ffffffff [ 1058.848792] Task in /syz3 killed as a result of limit of /syz3 [ 1058.883545] memory: usage 49488kB, limit 0kB, failcnt 38 [ 1058.904230] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1058.911235] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1059.082932] Memory cgroup stats for /syz3: cache:16304KB rss:24740KB rss_huge:22528KB shmem:16244KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:41168KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1059.104574] Memory cgroup out of memory: Kill process 28423 (syz-executor3) score 8994000 or sacrifice child [ 1059.115473] Killed process 28423 (syz-executor3) total-vm:70472kB, anon-rss:2208kB, file-rss:33640kB, shmem-rss:0kB [ 1059.143053] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 1059.154329] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1059.159695] CPU: 0 PID: 5211 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1059.166983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1059.176358] Call Trace: [ 1059.178962] dump_stack+0x244/0x39d [ 1059.182604] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1059.187815] dump_header+0x27b/0xf72 [ 1059.191548] ? mark_held_locks+0x130/0x130 [ 1059.195794] ? pagefault_out_of_memory+0x197/0x197 [ 1059.200735] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1059.206311] ? check_preemption_disabled+0x48/0x280 [ 1059.211357] ? zap_class+0x640/0x640 [ 1059.215076] ? __lock_is_held+0xb5/0x140 [ 1059.219152] ? zap_class+0x640/0x640 [ 1059.222874] ? print_usage_bug+0xc0/0xc0 [ 1059.226945] ? find_held_lock+0x36/0x1c0 [ 1059.231018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1059.236564] ? find_held_lock+0x36/0x1c0 [ 1059.240640] ? mark_held_locks+0xc7/0x130 [ 1059.244796] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1059.249910] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1059.255027] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1059.259622] ? trace_hardirqs_on+0xbd/0x310 [ 1059.263954] ? kasan_check_read+0x11/0x20 [ 1059.268112] ? ___ratelimit+0x3b4/0x672 [ 1059.272096] ? trace_hardirqs_off_caller+0x310/0x310 [ 1059.277206] ? trace_hardirqs_on+0x310/0x310 [ 1059.281626] ? lock_downgrade+0x900/0x900 [ 1059.285789] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1059.290898] ? ___ratelimit+0x3b9/0x672 [ 1059.294877] ? idr_get_free+0xf70/0xf70 [ 1059.298853] ? _raw_spin_unlock_irq+0x27/0x80 [ 1059.303355] ? _raw_spin_unlock_irq+0x27/0x80 [ 1059.307872] oom_kill_process.cold.27+0x10/0x903 [ 1059.312730] ? _raw_spin_unlock_irq+0x27/0x80 [ 1059.317239] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1059.321836] ? oom_evaluate_task+0x540/0x540 [ 1059.326256] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1059.331804] ? cgroup_procs_next+0x70/0x70 [ 1059.336057] ? _raw_spin_unlock_irq+0x60/0x80 [ 1059.340559] ? oom_badness+0xaa0/0xaa0 [ 1059.344461] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1059.349226] ? mem_cgroup_iter_break+0x30/0x30 [ 1059.353832] ? mark_held_locks+0xc7/0x130 [ 1059.357991] out_of_memory+0xa84/0x1430 [ 1059.361971] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1059.366565] ? kasan_check_read+0x11/0x20 [ 1059.370719] ? oom_killer_disable+0x3a0/0x3a0 [ 1059.375239] mem_cgroup_out_of_memory+0x15e/0x210 [ 1059.380094] ? memory_oom_group_write+0x160/0x160 [ 1059.384937] ? mem_cgroup_try_charge+0x627/0xe20 [ 1059.389705] ? page_counter_try_charge+0x1c1/0x220 [ 1059.394648] try_charge+0xda9/0x1700 [ 1059.398373] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1059.403317] ? kasan_check_read+0x11/0x20 [ 1059.407488] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 1059.412169] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 1059.417716] ? lock_page_memcg+0x350/0x350 [ 1059.421962] ? lock_acquire+0x1ed/0x520 [ 1059.425981] ? mem_cgroup_oom_control_write+0x100/0x100 [ 1059.431354] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1059.436901] ? check_preemption_disabled+0x48/0x280 [ 1059.441932] ? kasan_check_read+0x11/0x20 [ 1059.446089] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1059.451378] ? rcu_softirq_qs+0x20/0x20 [ 1059.455383] mem_cgroup_try_charge+0x627/0xe20 [ 1059.459979] ? __anon_vma_prepare+0x325/0x6c0 [ 1059.464493] ? mem_cgroup_protected+0xa60/0xa60 [ 1059.469177] ? up_write+0x7b/0x220 [ 1059.472726] ? down_write_nested+0x130/0x130 [ 1059.477156] ? __anon_vma_prepare+0x353/0x6c0 [ 1059.481672] ? anon_vma_fork+0x820/0x820 [ 1059.485741] ? mark_held_locks+0x130/0x130 [ 1059.489987] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1059.495543] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 1059.500494] __handle_mm_fault+0x2854/0x5be0 [ 1059.504922] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1059.509781] ? vm_mmap_pgoff+0x222/0x2c0 [ 1059.513853] ? lock_downgrade+0x900/0x900 [ 1059.518021] ? zap_class+0x640/0x640 [ 1059.521740] ? zap_class+0x640/0x640 [ 1059.525465] ? userfaultfd_unmap_prep+0x660/0x660 [ 1059.530331] ? find_held_lock+0x36/0x1c0 [ 1059.534415] ? handle_mm_fault+0x42a/0xc70 [ 1059.538662] ? lock_downgrade+0x900/0x900 [ 1059.542815] ? check_preemption_disabled+0x48/0x280 [ 1059.547839] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1059.552795] ? kasan_check_read+0x11/0x20 [ 1059.556954] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1059.562240] ? rcu_softirq_qs+0x20/0x20 [ 1059.566388] ? trace_hardirqs_off_caller+0x310/0x310 [ 1059.571508] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1059.577056] ? check_preemption_disabled+0x48/0x280 [ 1059.582088] handle_mm_fault+0x54f/0xc70 [ 1059.586166] ? __handle_mm_fault+0x5be0/0x5be0 [ 1059.590764] ? find_vma+0x34/0x190 [ 1059.594327] __do_page_fault+0x5e8/0xe60 [ 1059.598399] ? trace_hardirqs_off+0xb8/0x310 [ 1059.602830] do_page_fault+0xf2/0x7e0 [ 1059.606639] ? vmalloc_sync_all+0x30/0x30 [ 1059.610791] ? error_entry+0x70/0xd0 [ 1059.614511] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1059.619530] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1059.624472] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1059.629423] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1059.634901] ? trace_hardirqs_on_caller+0x310/0x310 [ 1059.639927] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1059.645397] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1059.650421] ? page_fault+0x8/0x30 [ 1059.653978] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1059.658837] ? page_fault+0x8/0x30 [ 1059.662383] page_fault+0x1e/0x30 [ 1059.665869] RIP: 0033:0x40ed8f [ 1059.669072] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 1059.687983] RSP: 002b:0000000000a3fb10 EFLAGS: 00010206 [ 1059.693360] RAX: 00007f1c15965000 RBX: 0000000000020000 RCX: 00000000004576ca [ 1059.700672] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 1059.707931] RBP: 0000000000a3fbf0 R08: ffffffffffffffff R09: 0000000000000000 [ 1059.715187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a3fcd0 [ 1059.722447] R13: 00007f1c15985700 R14: 000000000072bfac R15: 000000000072bfac [ 1059.733369] Task in /syz3 killed as a result of limit of /syz3 [ 1059.739560] memory: usage 47116kB, limit 0kB, failcnt 38 [ 1059.745294] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1059.752062] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1059.758266] Memory cgroup stats for /syz3: cache:16304KB rss:22580KB rss_huge:20480KB shmem:16244KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:39008KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1059.779662] Memory cgroup out of memory: Kill process 32613 (syz-executor3) score 8993000 or sacrifice child [ 1059.789742] Killed process 32613 (syz-executor3) total-vm:70736kB, anon-rss:2224kB, file-rss:33620kB, shmem-rss:0kB [ 1059.801790] oom_reaper: reaped process 32613 (syz-executor3), now anon-rss:0kB, file-rss:32788kB, shmem-rss:0kB 22:45:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000500)={0x6c07, 0x3, 0x3ff, 0x0, 0x5}) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xd) unshare(0x40000000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x8, 0x0) semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000300)=""/208) semctl$GETPID(r1, 0x0, 0xb, &(0x7f0000000080)=""/20) unshare(0x4000000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8]}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000100)=""/94, &(0x7f00000001c0)=0x5e) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000004c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/11, 0xeb) 22:45:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 22:45:06 executing program 2: r0 = socket$inet6(0xa, 0x200000000000803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000002c0)) ptrace(0x10, r1) ptrace$getregset(0x21, r1, 0x0, 0x0) 22:45:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x40000040101) write$sndseq(r0, 0x0, 0x0) r1 = epoll_create(0x105) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7d}) 22:45:06 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)) write$sndseq(r0, &(0x7f0000000140)=[{0x81, 0x5, 0x0, 0x0, @time={0x77359400}, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0x30) 22:45:06 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f7570004956f24670ff1fe1b998e8dde47ffe6243a178980411e1440dd62570ea1cd48704b17a1262adcd38f62402be075611b4a8b423a019659cd0aa0236a73e03c507ef0165ddfa2cb2417f2e3be04c156b78621b9c5e95a3954c42170655932611fdc3c6350b3481451eddd4", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)="6d656d6f72792e6d6178004ed4a03cf470e91c00000000000000000000000000000006208195906fdf3415fb7c57c5e11da2b6758794e7523970e8a0e06f253b45cd6463c5efd0b7391a9910f3c1ea6416c2801400000000000000b43f4b7102c57fc458181626578fd8450a27753fd72dce4dc72f55e6404e4fbe526cf0582e6687d9fe337449a6c3babde2e24f238e2eec3fe0d7912915efd8a84bd924c831b1de97eed0d2179bff119b14060b0c26e43e2f08d65c09384638ebffca768abac84b56e8", 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) [ 1060.051620] syz-executor3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 22:45:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x40000040101) write$sndseq(r0, 0x0, 0x0) r1 = epoll_create(0x105) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x7d}) [ 1060.094764] syz-executor3 cpuset=syz3 [ 1060.106517] mems_allowed=0 [ 1060.139190] CPU: 1 PID: 23604 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1060.146600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1060.155958] Call Trace: [ 1060.158562] dump_stack+0x244/0x39d [ 1060.162202] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1060.167412] dump_header+0x27b/0xf72 [ 1060.171146] ? mark_held_locks+0x130/0x130 [ 1060.175395] ? pagefault_out_of_memory+0x197/0x197 [ 1060.180344] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1060.185898] ? check_preemption_disabled+0x48/0x280 [ 1060.190926] ? zap_class+0x640/0x640 [ 1060.194646] ? __lock_is_held+0xb5/0x140 [ 1060.198717] ? zap_class+0x640/0x640 [ 1060.202433] ? print_usage_bug+0xc0/0xc0 [ 1060.206503] ? find_held_lock+0x36/0x1c0 [ 1060.210571] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1060.216118] ? find_held_lock+0x36/0x1c0 [ 1060.220193] ? mark_held_locks+0xc7/0x130 [ 1060.224345] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1060.229458] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1060.234571] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1060.239159] ? trace_hardirqs_on+0xbd/0x310 [ 1060.243481] ? kasan_check_read+0x11/0x20 [ 1060.247635] ? ___ratelimit+0x3b4/0x672 [ 1060.251618] ? trace_hardirqs_off_caller+0x310/0x310 [ 1060.256731] ? trace_hardirqs_on+0x310/0x310 [ 1060.261146] ? lock_downgrade+0x900/0x900 [ 1060.265309] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1060.270422] ? ___ratelimit+0x3b9/0x672 [ 1060.274407] ? idr_get_free+0xf70/0xf70 [ 1060.278385] ? _raw_spin_unlock_irq+0x27/0x80 [ 1060.282885] ? _raw_spin_unlock_irq+0x27/0x80 [ 1060.287395] oom_kill_process.cold.27+0x10/0x903 [ 1060.292161] ? _raw_spin_unlock_irq+0x27/0x80 [ 1060.296666] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1060.301261] ? oom_evaluate_task+0x540/0x540 [ 1060.305679] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1060.311270] ? cgroup_procs_next+0x70/0x70 [ 1060.315526] ? _raw_spin_unlock_irq+0x60/0x80 [ 1060.320022] ? oom_badness+0xaa0/0xaa0 [ 1060.323919] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1060.328689] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1060.334229] ? mem_cgroup_iter_break+0x30/0x30 [ 1060.338826] ? cgroup_file_notify+0x226/0x2f0 [ 1060.343331] out_of_memory+0xa84/0x1430 [ 1060.347320] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1060.351908] ? kasan_check_read+0x11/0x20 [ 1060.356062] ? oom_killer_disable+0x3a0/0x3a0 [ 1060.360603] mem_cgroup_out_of_memory+0x15e/0x210 [ 1060.365457] ? memory_oom_group_write+0x160/0x160 [ 1060.370317] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 1060.375170] ? page_counter_try_charge+0x1c1/0x220 [ 1060.380104] try_charge+0xda9/0x1700 [ 1060.383835] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 1060.388510] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1060.393444] ? kasan_check_read+0x11/0x20 [ 1060.397599] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1060.402877] ? rcu_softirq_qs+0x20/0x20 [ 1060.406867] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 1060.412409] ? __kernel_text_address+0xd/0x40 [ 1060.416910] ? lock_page_memcg+0x350/0x350 [ 1060.421155] ? lock_acquire+0x1ed/0x520 [ 1060.425133] ? mem_cgroup_oom_control_write+0x100/0x100 [ 1060.430502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1060.436177] ? check_preemption_disabled+0x48/0x280 [ 1060.441210] memcg_kmem_charge_memcg+0x7c/0x120 [ 1060.445894] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1060.450398] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1060.455779] memcg_kmem_charge+0x149/0x350 [ 1060.460023] __alloc_pages_nodemask+0x75e/0xea0 [ 1060.464698] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1060.469990] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 1060.475007] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1060.480551] ? check_preemption_disabled+0x48/0x280 [ 1060.485586] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1060.491133] ? rcu_pm_notify+0xc0/0xc0 [ 1060.495098] ? copy_process+0x2026/0x87a0 [ 1060.499261] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1060.504283] ? kmem_cache_alloc_node+0x349/0x730 [ 1060.509058] copy_process+0xa09/0x87a0 [ 1060.512954] ? zap_class+0x640/0x640 [ 1060.516671] ? mark_held_locks+0x130/0x130 [ 1060.520920] ? load_balance+0x157d/0x39a0 [ 1060.525083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1060.530623] ? reuse_swap_page+0x4bd/0x1520 [ 1060.534953] ? swp_swapcount+0x530/0x530 [ 1060.539020] ? find_held_lock+0x36/0x1c0 [ 1060.543094] ? __cleanup_sighand+0x70/0x70 [ 1060.547337] ? find_held_lock+0x36/0x1c0 [ 1060.551423] ? try_to_wake_up+0x11c/0x1440 [ 1060.555668] ? lock_downgrade+0x900/0x900 [ 1060.559847] ? zap_class+0x640/0x640 [ 1060.563565] ? trace_hardirqs_off+0xb8/0x310 [ 1060.567984] ? kasan_check_read+0x11/0x20 [ 1060.572140] ? do_raw_spin_unlock+0xa7/0x330 [ 1060.576557] ? trace_hardirqs_on+0x310/0x310 [ 1060.580979] ? lock_acquire+0x1ed/0x520 [ 1060.584970] ? find_held_lock+0x36/0x1c0 [ 1060.589062] ? do_wp_page+0x127c/0x2920 [ 1060.593042] ? lock_downgrade+0x900/0x900 [ 1060.597198] ? wake_up_page_bit+0x6f0/0x6f0 [ 1060.601529] ? print_usage_bug+0xc0/0xc0 [ 1060.605601] ? kasan_check_read+0x11/0x20 [ 1060.609752] ? do_raw_spin_unlock+0xa7/0x330 [ 1060.614183] ? do_raw_spin_trylock+0x270/0x270 [ 1060.618827] ? pgd_free+0x380/0x380 [ 1060.622470] ? _raw_spin_unlock+0x2c/0x50 [ 1060.626625] ? do_wp_page+0x528/0x2920 [ 1060.630523] ? __lock_acquire+0x62f/0x4c20 [ 1060.634767] ? finish_mkwrite_fault+0x650/0x650 [ 1060.639447] ? __lock_acquire+0x62f/0x4c20 [ 1060.643684] ? mark_held_locks+0x130/0x130 [ 1060.647921] ? lock_downgrade+0x900/0x900 [ 1060.652089] ? __lock_acquire+0x62f/0x4c20 [ 1060.656341] ? mark_held_locks+0x130/0x130 [ 1060.660579] ? rcu_softirq_qs+0x20/0x20 [ 1060.664573] ? mark_held_locks+0x130/0x130 [ 1060.668841] ? zap_class+0x640/0x640 [ 1060.672562] ? mark_held_locks+0x130/0x130 [ 1060.676808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1060.682351] ? check_preemption_disabled+0x48/0x280 [ 1060.687381] ? __lock_is_held+0xb5/0x140 [ 1060.691447] ? print_usage_bug+0xc0/0xc0 [ 1060.695525] ? print_usage_bug+0xc0/0xc0 [ 1060.699591] ? print_usage_bug+0xc0/0xc0 [ 1060.703656] ? print_usage_bug+0xc0/0xc0 [ 1060.707781] ? __inode_attach_wb+0x13f0/0x13f0 [ 1060.712382] ? find_held_lock+0x36/0x1c0 [ 1060.716460] ? __lock_acquire+0x62f/0x4c20 [ 1060.720699] ? __lock_acquire+0x62f/0x4c20 [ 1060.724957] ? mark_held_locks+0x130/0x130 [ 1060.729200] ? kasan_check_read+0x11/0x20 [ 1060.733352] ? do_raw_spin_lock+0x14f/0x350 [ 1060.737675] ? rwlock_bug.part.2+0x90/0x90 [ 1060.741909] ? touch_atime+0x1d8/0x320 [ 1060.745801] ? lock_downgrade+0x900/0x900 [ 1060.749971] ? __handle_mm_fault+0xa57/0x5be0 [ 1060.754475] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1060.759329] ? zap_class+0x640/0x640 [ 1060.763044] ? touch_atime+0x103/0x320 [ 1060.766934] ? zap_class+0x640/0x640 [ 1060.770653] ? atime_needs_update+0x710/0x710 [ 1060.775152] ? zap_class+0x640/0x640 [ 1060.778881] ? find_held_lock+0x36/0x1c0 [ 1060.782961] _do_fork+0x1cb/0x11d0 [ 1060.786512] ? fork_idle+0x1d0/0x1d0 [ 1060.790224] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1060.795155] ? kasan_check_read+0x11/0x20 [ 1060.799328] ? kasan_check_read+0x11/0x20 [ 1060.803480] ? _copy_to_user+0xc8/0x110 [ 1060.807462] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1060.813003] ? put_timespec64+0x10f/0x1b0 [ 1060.817158] ? nsecs_to_jiffies+0x30/0x30 [ 1060.821314] ? do_syscall_64+0x9a/0x820 [ 1060.825291] ? do_syscall_64+0x9a/0x820 [ 1060.829283] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1060.833878] ? trace_hardirqs_on+0xbd/0x310 [ 1060.838204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1060.843741] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1060.849111] ? trace_hardirqs_off_caller+0x310/0x310 [ 1060.854223] __x64_sys_clone+0xbf/0x150 [ 1060.858208] do_syscall_64+0x1b9/0x820 [ 1060.862097] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1060.867467] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1060.872398] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1060.877243] ? trace_hardirqs_on_caller+0x310/0x310 [ 1060.882269] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1060.887312] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1060.892168] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1060.897360] RIP: 0033:0x455c2a [ 1060.900560] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1060.919473] RSP: 002b:0000000000a3fd50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1060.927187] RAX: ffffffffffffffda RBX: 0000000000a3fd50 RCX: 0000000000455c2a [ 1060.934456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1060.941734] RBP: 0000000000a3fd90 R08: 0000000000000001 R09: 0000000000c92940 22:45:07 executing program 2: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x800) socket$rds(0x15, 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6, @in=@loopback}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@random={'security.', 'lo\x00'}, &(0x7f0000000380)=""/91, 0x5b) getgid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @multicast2}, {0x0, @dev}, 0x0, {0x2, 0x0, @remote}, 'lo\x00'}) r1 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x1f, 0x101201) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) [ 1060.949004] R10: 0000000000c92c10 R11: 0000000000000246 R12: 0000000000000001 [ 1060.956276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 22:45:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/16) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x531, 0x0, 0x3}, 0x14) getrlimit(0x0, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000400)={0xf, 0x8, 0xfa00, {r1, 0x200000000007}}, 0x10) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x100000000, 0x101000) getrandom(&(0x7f00000001c0), 0x5c0699e775d81eda, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22}}, 0xfffffffffffffffd, 0x8, 0x8000000000000, 0x1, 0x20}, &(0x7f0000000340)=0x98) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000240)={0x4, 0xde83, 0x8, 0x185f, 0x2, 0x66, 0x1, 0x6, 0xf060, 0x2, 0x1, 0x4}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000940)={0x28c30f3b}, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000980)) perf_event_open(&(0x7f00000008c0)={0x0, 0x70, 0x9, 0x80, 0x9, 0x200000000000000, 0x0, 0x8001, 0x0, 0x1, 0x3f, 0x6, 0x0, 0xff, 0x5, 0x3, 0x3f, 0x80, 0x2, 0x8, 0x19, 0x7, 0x0, 0x5, 0x10001, 0x4, 0xdf5, 0x6, 0xc592, 0x0, 0x7d4, 0x0, 0x3b90, 0x6, 0x8, 0xffff, 0x0, 0x9, 0x0, 0x7, 0x5, @perf_config_ext={0x5, 0x1}, 0x4000, 0x3, 0x7, 0x7, 0x6, 0x40, 0x401}, 0x0, 0x2, r2, 0x3) r5 = getpid() ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000000c0)) r6 = socket$inet(0x2, 0x2000000000b, 0xfff) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000380)={0x40, 0x20, 0x200, 0xe838, 0xfffffffffffffb90, 0x10001, 0xfff}, 0x20) mq_timedreceive(r3, &(0x7f0000000180)=""/32, 0x20, 0xffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f00000001c0)=r5) getsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000100)=0x10) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'bond0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000200)={0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 22:45:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) [ 1061.006323] Task in /syz3 killed as a result of limit of /syz3 [ 1061.010801] IPVS: ftp: loaded support on port[0] = 21 22:45:07 executing program 0: r0 = socket$inet(0x2, 0x80003, 0xab) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@broute={'broute\x00', 0x20, 0x2, 0x3c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000340], 0x0, &(0x7f0000000300), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x5, 0x800, 'bond0\x00', 'vlan0\x00', 'gre0\x00', 'gretap0\x00', @link_local, [], @broadcast, [], 0xb8, 0x1e8, 0x230, [@ip={'ip\x00', 0x20}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:systemd_logind_exec_t:s0\x00'}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}, {{{0x11, 0x0, 0x0, 'bond0\x00', 'ipddp0\x00', 'yam0\x00', 'eql\x00', @local, [], @broadcast, [], 0x70, 0xa0, 0xd8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@dnat={'dnat\x00', 0x10, {{@local}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x440) [ 1061.047340] memory: usage 42448kB, limit 0kB, failcnt 47 [ 1061.071867] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1061.162394] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1061.182290] Memory cgroup stats for /syz3: cache:16304KB rss:18352KB rss_huge:16384KB shmem:16244KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:34696KB inactive_file:0KB active_file:0KB unevictable:0KB 22:45:07 executing program 4: mkdir(&(0x7f0000000200)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) utimes(&(0x7f0000000000)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) mount(&(0x7f0000000040), &(0x7f0000000140)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f00000002c0)='ceph\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000340), 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) accept(r1, &(0x7f00000009c0)=@can, &(0x7f0000000940)=0x80) sendmmsg(0xffffffffffffffff, &(0x7f000000a7c0), 0x0, 0x8000) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80389}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x4}}], 0x48}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000800), 0x4) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000680)) socketpair$nbd(0x2, 0x1, 0x0, 0x0) seccomp(0x0, 0x0, 0x0) syz_open_dev$usb(0x0, 0x80000000003, 0x1000000000000001) exit_group(0x8) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x8008550e, 0x0) r2 = creat(0x0, 0x10) getpeername$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) [ 1061.279273] Memory cgroup out of memory: Kill process 28406 (syz-executor3) score 8992000 or sacrifice child [ 1061.301669] Killed process 28406 (syz-executor3) total-vm:70340kB, anon-rss:2200kB, file-rss:33640kB, shmem-rss:0kB [ 1061.378489] syz-executor3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1061.392143] ceph: device name is missing path (no : separator in žð-ùËòöè€Ó8/) [ 1061.428055] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1061.433703] rdma_op 000000002d1db6c6 conn xmit_rdma (null) [ 1061.440376] CPU: 1 PID: 23604 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1061.447749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1061.457108] Call Trace: [ 1061.459710] dump_stack+0x244/0x39d [ 1061.463354] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1061.468574] dump_header+0x27b/0xf72 [ 1061.472323] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1061.477875] ? pagefault_out_of_memory+0x197/0x197 [ 1061.482815] ? debug_smp_processor_id+0x1c/0x20 [ 1061.487493] ? perf_trace_lock_acquire+0x15b/0x800 [ 1061.492440] ? perf_trace_lock+0x7a0/0x7a0 [ 1061.496691] ? zap_class+0x640/0x640 [ 1061.500415] ? print_usage_bug+0xc0/0xc0 [ 1061.504490] ? perf_trace_lock+0x7a0/0x7a0 [ 1061.508742] ? find_held_lock+0x36/0x1c0 [ 1061.512821] ? mark_held_locks+0xc7/0x130 [ 1061.516988] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1061.522459] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1061.527582] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1061.532174] ? trace_hardirqs_on+0xbd/0x310 [ 1061.536505] ? kasan_check_read+0x11/0x20 [ 1061.540657] ? ___ratelimit+0x3b4/0x672 [ 1061.544638] ? trace_hardirqs_off_caller+0x310/0x310 [ 1061.549751] ? trace_hardirqs_on+0x310/0x310 [ 1061.554181] ? lock_downgrade+0x900/0x900 [ 1061.558358] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1061.563472] ? ___ratelimit+0x3b9/0x672 [ 1061.567935] ? idr_get_free+0xf70/0xf70 [ 1061.571918] ? _raw_spin_unlock_irq+0x27/0x80 [ 1061.576423] ? _raw_spin_unlock_irq+0x27/0x80 [ 1061.580934] oom_kill_process.cold.27+0x10/0x903 [ 1061.585701] ? _raw_spin_unlock_irq+0x27/0x80 [ 1061.590206] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1061.594806] ? oom_evaluate_task+0x540/0x540 [ 1061.599226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1061.604785] ? cgroup_procs_next+0x70/0x70 [ 1061.609034] ? _raw_spin_unlock_irq+0x60/0x80 [ 1061.613800] ? oom_badness+0xaa0/0xaa0 [ 1061.617698] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1061.622470] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1061.628017] ? mem_cgroup_iter_break+0x30/0x30 [ 1061.632623] ? cgroup_file_notify+0x226/0x2f0 [ 1061.637132] out_of_memory+0xa84/0x1430 [ 1061.641113] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1061.645717] ? kasan_check_read+0x11/0x20 [ 1061.649904] ? oom_killer_disable+0x3a0/0x3a0 [ 1061.654439] mem_cgroup_out_of_memory+0x15e/0x210 [ 1061.659296] ? memory_oom_group_write+0x160/0x160 [ 1061.664164] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 1061.669027] ? page_counter_try_charge+0x1c1/0x220 [ 1061.673991] try_charge+0xda9/0x1700 [ 1061.677725] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 1061.682401] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1061.687340] ? kasan_check_read+0x11/0x20 [ 1061.691494] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1061.696778] ? rcu_softirq_qs+0x20/0x20 [ 1061.700777] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 1061.706335] ? __kernel_text_address+0xd/0x40 [ 1061.710844] ? lock_page_memcg+0x350/0x350 [ 1061.715096] ? lock_acquire+0x1ed/0x520 [ 1061.719084] ? mem_cgroup_oom_control_write+0x100/0x100 [ 1061.724465] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1061.730013] ? check_preemption_disabled+0x48/0x280 [ 1061.735048] memcg_kmem_charge_memcg+0x7c/0x120 [ 1061.739782] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1061.744286] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1061.749679] memcg_kmem_charge+0x149/0x350 [ 1061.753926] __alloc_pages_nodemask+0x75e/0xea0 [ 1061.758609] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1061.763901] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 1061.768943] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1061.774498] ? check_preemption_disabled+0x48/0x280 [ 1061.779540] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1061.785087] ? rcu_pm_notify+0xc0/0xc0 [ 1061.788994] ? copy_process+0x2026/0x87a0 [ 1061.793153] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1061.798178] ? kmem_cache_alloc_node+0x349/0x730 [ 1061.802965] copy_process+0xa09/0x87a0 [ 1061.806862] ? zap_class+0x640/0x640 [ 1061.810580] ? mark_held_locks+0x130/0x130 [ 1061.814820] ? load_balance+0x157d/0x39a0 [ 1061.818991] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1061.824539] ? reuse_swap_page+0x4bd/0x1520 [ 1061.828876] ? swp_swapcount+0x530/0x530 [ 1061.832943] ? find_held_lock+0x36/0x1c0 [ 1061.837031] ? __cleanup_sighand+0x70/0x70 [ 1061.841276] ? find_held_lock+0x36/0x1c0 [ 1061.845361] ? try_to_wake_up+0x11c/0x1440 [ 1061.849604] ? lock_downgrade+0x900/0x900 [ 1061.853764] ? zap_class+0x640/0x640 [ 1061.857485] ? trace_hardirqs_off+0xb8/0x310 [ 1061.861896] ? kasan_check_read+0x11/0x20 [ 1061.866047] ? do_raw_spin_unlock+0xa7/0x330 [ 1061.870464] ? trace_hardirqs_on+0x310/0x310 [ 1061.874883] ? lock_acquire+0x1ed/0x520 [ 1061.878874] ? find_held_lock+0x36/0x1c0 [ 1061.882961] ? do_wp_page+0x127c/0x2920 [ 1061.886945] ? lock_downgrade+0x900/0x900 [ 1061.891126] ? wake_up_page_bit+0x6f0/0x6f0 [ 1061.895455] ? print_usage_bug+0xc0/0xc0 [ 1061.899524] ? kasan_check_read+0x11/0x20 [ 1061.903678] ? do_raw_spin_unlock+0xa7/0x330 [ 1061.908095] ? do_raw_spin_trylock+0x270/0x270 [ 1061.912680] ? pgd_free+0x380/0x380 [ 1061.916537] ? _raw_spin_unlock+0x2c/0x50 [ 1061.920692] ? do_wp_page+0x528/0x2920 [ 1061.924584] ? __lock_acquire+0x62f/0x4c20 [ 1061.928832] ? finish_mkwrite_fault+0x650/0x650 [ 1061.933516] ? __lock_acquire+0x62f/0x4c20 [ 1061.937762] ? mark_held_locks+0x130/0x130 [ 1061.942035] ? lock_downgrade+0x900/0x900 [ 1061.946200] ? __lock_acquire+0x62f/0x4c20 [ 1061.950445] ? mark_held_locks+0x130/0x130 [ 1061.954686] ? rcu_softirq_qs+0x20/0x20 [ 1061.958683] ? mark_held_locks+0x130/0x130 [ 1061.962929] ? zap_class+0x640/0x640 [ 1061.966657] ? mark_held_locks+0x130/0x130 [ 1061.970904] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1061.976452] ? check_preemption_disabled+0x48/0x280 [ 1061.981489] ? __lock_is_held+0xb5/0x140 [ 1061.985561] ? print_usage_bug+0xc0/0xc0 [ 1061.989627] ? print_usage_bug+0xc0/0xc0 [ 1061.993697] ? print_usage_bug+0xc0/0xc0 [ 1061.997773] ? print_usage_bug+0xc0/0xc0 [ 1062.001855] ? __inode_attach_wb+0x13f0/0x13f0 [ 1062.006445] ? find_held_lock+0x36/0x1c0 [ 1062.010527] ? __lock_acquire+0x62f/0x4c20 [ 1062.014770] ? __lock_acquire+0x62f/0x4c20 [ 1062.019027] ? mark_held_locks+0x130/0x130 [ 1062.023275] ? kasan_check_read+0x11/0x20 [ 1062.027440] ? do_raw_spin_lock+0x14f/0x350 [ 1062.031772] ? rwlock_bug.part.2+0x90/0x90 [ 1062.036008] ? touch_atime+0x1d8/0x320 [ 1062.039907] ? lock_downgrade+0x900/0x900 [ 1062.044078] ? __handle_mm_fault+0xa57/0x5be0 [ 1062.048589] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1062.053446] ? zap_class+0x640/0x640 [ 1062.057166] ? touch_atime+0x103/0x320 [ 1062.061059] ? zap_class+0x640/0x640 [ 1062.064775] ? atime_needs_update+0x710/0x710 [ 1062.069283] ? zap_class+0x640/0x640 [ 1062.073021] ? find_held_lock+0x36/0x1c0 [ 1062.077110] _do_fork+0x1cb/0x11d0 [ 1062.080661] ? fork_idle+0x1d0/0x1d0 [ 1062.084409] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1062.089343] ? kasan_check_read+0x11/0x20 [ 1062.093515] ? kasan_check_read+0x11/0x20 [ 1062.097665] ? _copy_to_user+0xc8/0x110 [ 1062.101650] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1062.107197] ? put_timespec64+0x10f/0x1b0 [ 1062.111353] ? nsecs_to_jiffies+0x30/0x30 [ 1062.115511] ? do_syscall_64+0x9a/0x820 [ 1062.119490] ? do_syscall_64+0x9a/0x820 [ 1062.123471] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1062.128061] ? trace_hardirqs_on+0xbd/0x310 [ 1062.132395] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1062.137938] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1062.143326] ? trace_hardirqs_off_caller+0x310/0x310 [ 1062.148445] __x64_sys_clone+0xbf/0x150 [ 1062.152437] do_syscall_64+0x1b9/0x820 [ 1062.156341] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1062.161713] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1062.166736] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1062.171604] ? trace_hardirqs_on_caller+0x310/0x310 [ 1062.176633] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1062.181660] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1062.186518] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1062.191713] RIP: 0033:0x455c2a [ 1062.194908] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1062.213821] RSP: 002b:0000000000a3fd50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1062.221538] RAX: ffffffffffffffda RBX: 0000000000a3fd50 RCX: 0000000000455c2a [ 1062.228808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1062.236081] RBP: 0000000000a3fd90 R08: 0000000000000001 R09: 0000000000c92940 [ 1062.243355] R10: 0000000000c92c10 R11: 0000000000000246 R12: 0000000000000001 [ 1062.250628] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 1062.343473] Task in /syz3 killed as a result of limit of /syz3 [ 1062.364135] memory: usage 40000kB, limit 0kB, failcnt 53 [ 1062.369851] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1062.376801] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1062.382961] Memory cgroup stats for /syz3: cache:16304KB rss:16160KB rss_huge:14336KB shmem:16244KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:32528KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1062.405653] Memory cgroup out of memory: Kill process 1965 (syz-executor3) score 8992000 or sacrifice child [ 1062.415845] Killed process 1965 (syz-executor3) total-vm:70472kB, anon-rss:2208kB, file-rss:33632kB, shmem-rss:0kB [ 1062.436795] oom_reaper: reaped process 1965 (syz-executor3), now anon-rss:0kB, file-rss:32800kB, shmem-rss:0kB 22:45:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xfffffffffffffffb, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 22:45:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/16) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x531, 0x0, 0x3}, 0x14) getrlimit(0x0, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000400)={0xf, 0x8, 0xfa00, {r1, 0x200000000007}}, 0x10) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x100000000, 0x101000) getrandom(&(0x7f00000001c0), 0x5c0699e775d81eda, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22}}, 0xfffffffffffffffd, 0x8, 0x8000000000000, 0x1, 0x20}, &(0x7f0000000340)=0x98) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000240)={0x4, 0xde83, 0x8, 0x185f, 0x2, 0x66, 0x1, 0x6, 0xf060, 0x2, 0x1, 0x4}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000940)={0x28c30f3b}, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000980)) perf_event_open(&(0x7f00000008c0)={0x0, 0x70, 0x9, 0x80, 0x9, 0x200000000000000, 0x0, 0x8001, 0x0, 0x1, 0x3f, 0x6, 0x0, 0xff, 0x5, 0x3, 0x3f, 0x80, 0x2, 0x8, 0x19, 0x7, 0x0, 0x5, 0x10001, 0x4, 0xdf5, 0x6, 0xc592, 0x0, 0x7d4, 0x0, 0x3b90, 0x6, 0x8, 0xffff, 0x0, 0x9, 0x0, 0x7, 0x5, @perf_config_ext={0x5, 0x1}, 0x4000, 0x3, 0x7, 0x7, 0x6, 0x40, 0x401}, 0x0, 0x2, r2, 0x3) r5 = getpid() ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000000c0)) r6 = socket$inet(0x2, 0x2000000000b, 0xfff) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000380)={0x40, 0x20, 0x200, 0xe838, 0xfffffffffffffb90, 0x10001, 0xfff}, 0x20) mq_timedreceive(r3, &(0x7f0000000180)=""/32, 0x20, 0xffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f00000001c0)=r5) getsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000100)=0x10) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'bond0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000200)={0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) [ 1062.469987] syz-executor3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1062.495089] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1062.500255] CPU: 0 PID: 23604 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1062.507637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1062.516998] Call Trace: 22:45:08 executing program 4: socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000000a00)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000000)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x127f, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0) r0 = gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags=0x2}) getpgid(0xffffffffffffffff) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x200242, 0x0) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x204000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xb9d, @loopback}, {0xa, 0x4e24, 0x3, @local, 0x38}, 0xffffffffffffffff, 0x7f}}, 0x48) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) memfd_create(0x0, 0x4) [ 1062.519597] dump_stack+0x244/0x39d [ 1062.523239] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1062.528457] dump_header+0x27b/0xf72 [ 1062.532191] ? mark_held_locks+0x130/0x130 [ 1062.536438] ? pagefault_out_of_memory+0x197/0x197 [ 1062.541735] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1062.547284] ? check_preemption_disabled+0x48/0x280 [ 1062.547320] ? zap_class+0x640/0x640 [ 1062.547335] ? __lock_is_held+0xb5/0x140 [ 1062.547358] ? zap_class+0x640/0x640 [ 1062.547376] ? print_usage_bug+0xc0/0xc0 [ 1062.568023] ? find_held_lock+0x36/0x1c0 [ 1062.572102] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1062.577660] ? find_held_lock+0x36/0x1c0 [ 1062.581737] ? mark_held_locks+0xc7/0x130 [ 1062.585900] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1062.591014] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1062.596128] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1062.600731] ? trace_hardirqs_on+0xbd/0x310 [ 1062.605063] ? kasan_check_read+0x11/0x20 [ 1062.609222] ? ___ratelimit+0x3b4/0x672 [ 1062.613207] ? trace_hardirqs_off_caller+0x310/0x310 22:45:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff014}, {0x6}]}, 0x10) 22:45:09 executing program 0: socket$alg(0x26, 0x5, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x10) fsetxattr(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f00000002c0)='ns/net\x00') r1 = socket$inet6(0xa, 0x40000080808, 0x1) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="0500db44c7450000bf7c2276b30007040000f0fff8ffffff79a4dcff08000000b4060000ffffff311a25b7ecff2d020000000000e556b35eb8006504040001000000043580179dc61d000014000000009500000000000000000000000000000000000000000000"], 0x0}, 0x48) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x20000010001, &(0x7f00000004c0)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000780)=r6) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a3, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xff, 0x7f, 0x2}}, 0x44) r7 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a0205000000ac", 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r8 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) futimesat(r7, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) listen(r8, 0xffffffffffffff00) [ 1062.618330] ? trace_hardirqs_on+0x310/0x310 [ 1062.622756] ? lock_downgrade+0x900/0x900 [ 1062.626918] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1062.632036] ? ___ratelimit+0x3b9/0x672 [ 1062.636027] ? idr_get_free+0xf70/0xf70 [ 1062.640006] ? _raw_spin_unlock_irq+0x27/0x80 [ 1062.644574] ? _raw_spin_unlock_irq+0x27/0x80 [ 1062.649092] oom_kill_process.cold.27+0x10/0x903 [ 1062.653859] ? _raw_spin_unlock_irq+0x27/0x80 [ 1062.658365] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1062.662970] ? oom_evaluate_task+0x540/0x540 [ 1062.667393] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1062.672942] ? cgroup_procs_next+0x70/0x70 [ 1062.677185] ? _raw_spin_unlock_irq+0x60/0x80 [ 1062.677201] ? oom_badness+0xaa0/0xaa0 [ 1062.677224] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1062.685610] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1062.685629] ? mem_cgroup_iter_break+0x30/0x30 [ 1062.685659] ? cgroup_file_notify+0x226/0x2f0 [ 1062.685679] out_of_memory+0xa84/0x1430 [ 1062.685694] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1062.685712] ? kasan_check_read+0x11/0x20 [ 1062.685729] ? oom_killer_disable+0x3a0/0x3a0 [ 1062.685762] mem_cgroup_out_of_memory+0x15e/0x210 [ 1062.685780] ? memory_oom_group_write+0x160/0x160 [ 1062.685798] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 1062.736805] ? page_counter_try_charge+0x1c1/0x220 [ 1062.741753] try_charge+0xda9/0x1700 [ 1062.745498] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 1062.750183] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1062.755123] ? kasan_check_read+0x11/0x20 [ 1062.759280] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1062.764577] ? rcu_softirq_qs+0x20/0x20 [ 1062.768573] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 1062.774124] ? __kernel_text_address+0xd/0x40 [ 1062.778634] ? lock_page_memcg+0x350/0x350 [ 1062.782885] ? lock_acquire+0x1ed/0x520 [ 1062.786871] ? mem_cgroup_oom_control_write+0x100/0x100 [ 1062.792246] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1062.797797] ? check_preemption_disabled+0x48/0x280 [ 1062.802832] memcg_kmem_charge_memcg+0x7c/0x120 [ 1062.807515] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1062.812064] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1062.817459] memcg_kmem_charge+0x149/0x350 [ 1062.821805] __alloc_pages_nodemask+0x75e/0xea0 [ 1062.826495] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1062.831784] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 1062.836814] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1062.842362] ? check_preemption_disabled+0x48/0x280 [ 1062.847398] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1062.852950] ? rcu_pm_notify+0xc0/0xc0 [ 1062.856862] ? copy_process+0x2026/0x87a0 [ 1062.861020] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1062.866044] ? kmem_cache_alloc_node+0x349/0x730 [ 1062.870819] copy_process+0xa09/0x87a0 [ 1062.874721] ? zap_class+0x640/0x640 [ 1062.878446] ? mark_held_locks+0x130/0x130 [ 1062.882697] ? load_balance+0x157d/0x39a0 [ 1062.886868] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1062.892415] ? reuse_swap_page+0x4bd/0x1520 [ 1062.896758] ? swp_swapcount+0x530/0x530 [ 1062.900831] ? find_held_lock+0x36/0x1c0 [ 1062.904904] ? __cleanup_sighand+0x70/0x70 [ 1062.909178] ? find_held_lock+0x36/0x1c0 [ 1062.913261] ? try_to_wake_up+0x11c/0x1440 [ 1062.917503] ? lock_downgrade+0x900/0x900 [ 1062.921667] ? zap_class+0x640/0x640 [ 1062.925393] ? trace_hardirqs_off+0xb8/0x310 [ 1062.929811] ? kasan_check_read+0x11/0x20 [ 1062.933965] ? do_raw_spin_unlock+0xa7/0x330 [ 1062.938385] ? trace_hardirqs_on+0x310/0x310 [ 1062.942802] ? lock_acquire+0x1ed/0x520 [ 1062.946793] ? find_held_lock+0x36/0x1c0 [ 1062.950875] ? do_wp_page+0x127c/0x2920 [ 1062.954862] ? lock_downgrade+0x900/0x900 [ 1062.959025] ? wake_up_page_bit+0x6f0/0x6f0 [ 1062.963358] ? print_usage_bug+0xc0/0xc0 [ 1062.967433] ? kasan_check_read+0x11/0x20 [ 1062.971599] ? do_raw_spin_unlock+0xa7/0x330 [ 1062.976012] ? do_raw_spin_trylock+0x270/0x270 [ 1062.980603] ? pgd_free+0x380/0x380 [ 1062.984247] ? _raw_spin_unlock+0x2c/0x50 [ 1062.988406] ? do_wp_page+0x528/0x2920 [ 1062.992314] ? __lock_acquire+0x62f/0x4c20 [ 1062.996571] ? finish_mkwrite_fault+0x650/0x650 [ 1063.001253] ? __lock_acquire+0x62f/0x4c20 [ 1063.005498] ? mark_held_locks+0x130/0x130 [ 1063.009737] ? lock_downgrade+0x900/0x900 [ 1063.013901] ? __lock_acquire+0x62f/0x4c20 [ 1063.018162] ? mark_held_locks+0x130/0x130 [ 1063.022494] ? rcu_softirq_qs+0x20/0x20 [ 1063.026495] ? mark_held_locks+0x130/0x130 [ 1063.030746] ? zap_class+0x640/0x640 [ 1063.034477] ? mark_held_locks+0x130/0x130 [ 1063.038722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1063.044271] ? check_preemption_disabled+0x48/0x280 [ 1063.049322] ? __lock_is_held+0xb5/0x140 [ 1063.053396] ? print_usage_bug+0xc0/0xc0 [ 1063.057472] ? print_usage_bug+0xc0/0xc0 [ 1063.061543] ? print_usage_bug+0xc0/0xc0 [ 1063.065612] ? print_usage_bug+0xc0/0xc0 [ 1063.069684] ? __inode_attach_wb+0x13f0/0x13f0 [ 1063.074273] ? find_held_lock+0x36/0x1c0 [ 1063.078364] ? __lock_acquire+0x62f/0x4c20 [ 1063.082613] ? __lock_acquire+0x62f/0x4c20 [ 1063.086870] ? mark_held_locks+0x130/0x130 [ 1063.091123] ? kasan_check_read+0x11/0x20 [ 1063.095278] ? do_raw_spin_lock+0x14f/0x350 [ 1063.099622] ? rwlock_bug.part.2+0x90/0x90 [ 1063.103861] ? touch_atime+0x1d8/0x320 [ 1063.107759] ? lock_downgrade+0x900/0x900 [ 1063.111929] ? __handle_mm_fault+0xa57/0x5be0 [ 1063.116446] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1063.121320] ? zap_class+0x640/0x640 [ 1063.125042] ? touch_atime+0x103/0x320 [ 1063.128940] ? zap_class+0x640/0x640 [ 1063.132663] ? atime_needs_update+0x710/0x710 [ 1063.137176] ? zap_class+0x640/0x640 [ 1063.140914] ? find_held_lock+0x36/0x1c0 [ 1063.145001] _do_fork+0x1cb/0x11d0 [ 1063.148559] ? fork_idle+0x1d0/0x1d0 [ 1063.152282] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1063.157230] ? kasan_check_read+0x11/0x20 [ 1063.161401] ? kasan_check_read+0x11/0x20 [ 1063.165559] ? _copy_to_user+0xc8/0x110 [ 1063.169546] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1063.175091] ? put_timespec64+0x10f/0x1b0 [ 1063.179249] ? nsecs_to_jiffies+0x30/0x30 [ 1063.183414] ? do_syscall_64+0x9a/0x820 [ 1063.187404] ? do_syscall_64+0x9a/0x820 [ 1063.191394] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1063.195986] ? trace_hardirqs_on+0xbd/0x310 [ 1063.200325] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1063.205880] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1063.211266] ? trace_hardirqs_off_caller+0x310/0x310 [ 1063.216394] __x64_sys_clone+0xbf/0x150 [ 1063.220386] do_syscall_64+0x1b9/0x820 [ 1063.224286] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1063.229671] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1063.229688] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1063.229707] ? trace_hardirqs_on_caller+0x310/0x310 [ 1063.229727] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1063.229747] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1063.239511] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1063.239523] RIP: 0033:0x455c2a [ 1063.239539] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1063.239547] RSP: 002b:0000000000a3fd50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1063.239562] RAX: ffffffffffffffda RBX: 0000000000a3fd50 RCX: 0000000000455c2a [ 1063.239571] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1063.239580] RBP: 0000000000a3fd90 R08: 0000000000000001 R09: 0000000000c92940 [ 1063.239590] R10: 0000000000c92c10 R11: 0000000000000246 R12: 0000000000000001 [ 1063.239599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 1063.242154] Task in /syz3 killed as a result of limit of /syz3 [ 1063.332819] memory: usage 37652kB, limit 0kB, failcnt 191 [ 1063.338448] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1063.346687] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1063.352843] Memory cgroup stats for /syz3: cache:16304KB rss:13980KB rss_huge:12288KB shmem:16244KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:30344KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1063.352933] Memory cgroup out of memory: Kill process 32576 (syz-executor3) score 8988000 or sacrifice child [ 1063.385517] Killed process 32576 (syz-executor3) total-vm:70604kB, anon-rss:3060kB, file-rss:32768kB, shmem-rss:0kB [ 1063.400076] oom_reaper: reaped process 32576 (syz-executor3), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB [ 1063.414001] syz-executor3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1063.427108] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1063.435943] CPU: 0 PID: 23604 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1063.443325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1063.452681] Call Trace: [ 1063.455281] dump_stack+0x244/0x39d [ 1063.458928] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1063.464141] dump_header+0x27b/0xf72 [ 1063.464164] ? mark_held_locks+0x130/0x130 [ 1063.472293] ? pagefault_out_of_memory+0x197/0x197 [ 1063.477246] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1063.482789] ? check_preemption_disabled+0x48/0x280 [ 1063.482814] ? zap_class+0x640/0x640 [ 1063.482828] ? __lock_is_held+0xb5/0x140 [ 1063.482849] ? zap_class+0x640/0x640 [ 1063.491567] ? print_usage_bug+0xc0/0xc0 [ 1063.491586] ? find_held_lock+0x36/0x1c0 [ 1063.491606] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1063.499362] ? find_held_lock+0x36/0x1c0 [ 1063.499386] ? mark_held_locks+0xc7/0x130 [ 1063.499405] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1063.517084] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1063.526324] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1063.526344] ? trace_hardirqs_on+0xbd/0x310 [ 1063.526360] ? kasan_check_read+0x11/0x20 [ 1063.526374] ? ___ratelimit+0x3b4/0x672 [ 1063.526390] ? trace_hardirqs_off_caller+0x310/0x310 [ 1063.526406] ? trace_hardirqs_on+0x310/0x310 [ 1063.526421] ? lock_downgrade+0x900/0x900 [ 1063.526438] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1063.526458] ? ___ratelimit+0x3b9/0x672 [ 1063.526475] ? idr_get_free+0xf70/0xf70 [ 1063.526492] ? _raw_spin_unlock_irq+0x27/0x80 [ 1063.540482] ? _raw_spin_unlock_irq+0x27/0x80 [ 1063.548591] oom_kill_process.cold.27+0x10/0x903 [ 1063.548607] ? _raw_spin_unlock_irq+0x27/0x80 [ 1063.548623] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1063.548644] ? oom_evaluate_task+0x540/0x540 [ 1063.548660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1063.548679] ? cgroup_procs_next+0x70/0x70 [ 1063.558165] ? _raw_spin_unlock_irq+0x60/0x80 [ 1063.558180] ? oom_badness+0xaa0/0xaa0 [ 1063.558198] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1063.558216] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1063.558232] ? mem_cgroup_iter_break+0x30/0x30 [ 1063.567815] ? cgroup_file_notify+0x226/0x2f0 [ 1063.567834] out_of_memory+0xa84/0x1430 [ 1063.567849] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1063.567867] ? kasan_check_read+0x11/0x20 [ 1063.567883] ? oom_killer_disable+0x3a0/0x3a0 [ 1063.567914] mem_cgroup_out_of_memory+0x15e/0x210 [ 1063.567934] ? memory_oom_group_write+0x160/0x160 [ 1063.575874] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 1063.575898] ? page_counter_try_charge+0x1c1/0x220 [ 1063.575916] try_charge+0xda9/0x1700 [ 1063.575940] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 1063.575957] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1063.575971] ? kasan_check_read+0x11/0x20 [ 1063.575988] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1063.584958] ? rcu_softirq_qs+0x20/0x20 [ 1063.584986] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 1063.585006] ? __kernel_text_address+0xd/0x40 [ 1063.594330] ? lock_page_memcg+0x350/0x350 [ 1063.594352] ? lock_acquire+0x1ed/0x520 [ 1063.594372] ? mem_cgroup_oom_control_write+0x100/0x100 [ 1063.608878] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1063.608898] ? check_preemption_disabled+0x48/0x280 [ 1063.608924] memcg_kmem_charge_memcg+0x7c/0x120 [ 1063.608939] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1063.608953] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1063.608976] memcg_kmem_charge+0x149/0x350 [ 1063.621578] __alloc_pages_nodemask+0x75e/0xea0 [ 1063.621594] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1063.621613] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 1063.631985] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1063.641047] ? check_preemption_disabled+0x48/0x280 [ 1063.641074] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1063.641093] ? rcu_pm_notify+0xc0/0xc0 [ 1063.649639] ? copy_process+0x2026/0x87a0 [ 1063.649657] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1063.649677] ? kmem_cache_alloc_node+0x349/0x730 [ 1063.658312] copy_process+0xa09/0x87a0 [ 1063.658330] ? zap_class+0x640/0x640 [ 1063.658343] ? mark_held_locks+0x130/0x130 [ 1063.658357] ? load_balance+0x157d/0x39a0 [ 1063.658386] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1063.668042] ? reuse_swap_page+0x4bd/0x1520 [ 1063.668060] ? swp_swapcount+0x530/0x530 [ 1063.668074] ? find_held_lock+0x36/0x1c0 [ 1063.668096] ? __cleanup_sighand+0x70/0x70 [ 1063.668112] ? find_held_lock+0x36/0x1c0 [ 1063.668132] ? try_to_wake_up+0x11c/0x1440 [ 1063.668146] ? lock_downgrade+0x900/0x900 [ 1063.668166] ? zap_class+0x640/0x640 [ 1063.677921] ? trace_hardirqs_off+0xb8/0x310 [ 1063.677937] ? kasan_check_read+0x11/0x20 [ 1063.677950] ? do_raw_spin_unlock+0xa7/0x330 [ 1063.677965] ? trace_hardirqs_on+0x310/0x310 [ 1063.677981] ? lock_acquire+0x1ed/0x520 [ 1063.678003] ? find_held_lock+0x36/0x1c0 [ 1063.678027] ? do_wp_page+0x127c/0x2920 [ 1063.686384] ? lock_downgrade+0x900/0x900 [ 1063.686401] ? wake_up_page_bit+0x6f0/0x6f0 [ 1063.686416] ? print_usage_bug+0xc0/0xc0 [ 1063.686433] ? kasan_check_read+0x11/0x20 [ 1063.686446] ? do_raw_spin_unlock+0xa7/0x330 [ 1063.686468] ? do_raw_spin_trylock+0x270/0x270 [ 1063.695552] ? pgd_free+0x380/0x380 [ 1063.695575] ? _raw_spin_unlock+0x2c/0x50 [ 1063.695591] ? do_wp_page+0x528/0x2920 [ 1063.695607] ? __lock_acquire+0x62f/0x4c20 [ 1063.695627] ? finish_mkwrite_fault+0x650/0x650 [ 1063.704863] ? __lock_acquire+0x62f/0x4c20 [ 1063.704879] ? mark_held_locks+0x130/0x130 [ 1063.704897] ? lock_downgrade+0x900/0x900 [ 1063.948201] ? __lock_acquire+0x62f/0x4c20 [ 1063.952431] ? mark_held_locks+0x130/0x130 [ 1063.956657] ? rcu_softirq_qs+0x20/0x20 [ 1063.960626] ? mark_held_locks+0x130/0x130 [ 1063.964851] ? zap_class+0x640/0x640 [ 1063.968560] ? mark_held_locks+0x130/0x130 [ 1063.972795] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1063.978337] ? check_preemption_disabled+0x48/0x280 [ 1063.983358] ? __lock_is_held+0xb5/0x140 [ 1063.987418] ? print_usage_bug+0xc0/0xc0 [ 1063.991469] ? print_usage_bug+0xc0/0xc0 [ 1063.995520] ? print_usage_bug+0xc0/0xc0 [ 1063.999570] ? print_usage_bug+0xc0/0xc0 [ 1064.003622] ? __inode_attach_wb+0x13f0/0x13f0 [ 1064.008191] ? find_held_lock+0x36/0x1c0 [ 1064.012265] ? __lock_acquire+0x62f/0x4c20 [ 1064.016489] ? __lock_acquire+0x62f/0x4c20 [ 1064.020715] ? mark_held_locks+0x130/0x130 [ 1064.024937] ? kasan_check_read+0x11/0x20 [ 1064.029075] ? do_raw_spin_lock+0x14f/0x350 [ 1064.033384] ? rwlock_bug.part.2+0x90/0x90 [ 1064.037608] ? touch_atime+0x1d8/0x320 [ 1064.041493] ? lock_downgrade+0x900/0x900 [ 1064.045654] ? __handle_mm_fault+0xa57/0x5be0 [ 1064.050147] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1064.054977] ? zap_class+0x640/0x640 [ 1064.058708] ? touch_atime+0x103/0x320 [ 1064.062585] ? zap_class+0x640/0x640 [ 1064.066283] ? atime_needs_update+0x710/0x710 [ 1064.070776] ? zap_class+0x640/0x640 [ 1064.074481] ? find_held_lock+0x36/0x1c0 [ 1064.078534] _do_fork+0x1cb/0x11d0 [ 1064.082065] ? fork_idle+0x1d0/0x1d0 [ 1064.085776] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1064.090725] ? kasan_check_read+0x11/0x20 [ 1064.094891] ? kasan_check_read+0x11/0x20 [ 1064.099031] ? _copy_to_user+0xc8/0x110 [ 1064.102994] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1064.108522] ? put_timespec64+0x10f/0x1b0 [ 1064.112660] ? nsecs_to_jiffies+0x30/0x30 [ 1064.116795] ? do_syscall_64+0x9a/0x820 [ 1064.120757] ? do_syscall_64+0x9a/0x820 [ 1064.124749] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1064.129327] ? trace_hardirqs_on+0xbd/0x310 [ 1064.133654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1064.139201] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1064.144567] ? trace_hardirqs_off_caller+0x310/0x310 [ 1064.149663] __x64_sys_clone+0xbf/0x150 [ 1064.153627] do_syscall_64+0x1b9/0x820 [ 1064.157499] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1064.162850] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1064.167765] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1064.172613] ? trace_hardirqs_on_caller+0x310/0x310 [ 1064.177619] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1064.182623] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1064.187461] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1064.192634] RIP: 0033:0x455c2a [ 1064.195812] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1064.214705] RSP: 002b:0000000000a3fd50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1064.222398] RAX: ffffffffffffffda RBX: 0000000000a3fd50 RCX: 0000000000455c2a [ 1064.229675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1064.236930] RBP: 0000000000a3fd90 R08: 0000000000000001 R09: 0000000000c92940 [ 1064.244182] R10: 0000000000c92c10 R11: 0000000000000246 R12: 0000000000000001 [ 1064.251433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 1064.259615] Task in /syz3 killed as a result of limit of /syz3 [ 1064.267695] memory: usage 35340kB, limit 0kB, failcnt 245 [ 1064.284342] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1064.291199] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1064.291209] Memory cgroup stats for /syz3: cache:16304KB rss:11836KB rss_huge:10240KB shmem:16244KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:28188KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1064.319010] Memory cgroup out of memory: Kill process 32570 (syz-executor3) score 8986000 or sacrifice child [ 1064.319088] Killed process 32570 (syz-executor3) total-vm:70472kB, anon-rss:3052kB, file-rss:32768kB, shmem-rss:0kB [ 1064.337230] syz-executor3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1064.353433] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1064.358634] CPU: 0 PID: 23604 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1064.366000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1064.375352] Call Trace: [ 1064.375376] dump_stack+0x244/0x39d [ 1064.375396] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1064.375420] dump_header+0x27b/0xf72 [ 1064.375444] ? mark_held_locks+0x130/0x130 [ 1064.375466] ? pagefault_out_of_memory+0x197/0x197 [ 1064.399681] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1064.405225] ? check_preemption_disabled+0x48/0x280 [ 1064.410256] ? zap_class+0x640/0x640 [ 1064.413973] ? __lock_is_held+0xb5/0x140 [ 1064.418042] ? zap_class+0x640/0x640 [ 1064.421850] ? print_usage_bug+0xc0/0xc0 [ 1064.425922] ? find_held_lock+0x36/0x1c0 [ 1064.430014] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1064.435938] ? find_held_lock+0x36/0x1c0 [ 1064.440011] ? mark_held_locks+0xc7/0x130 [ 1064.444165] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1064.449272] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1064.454390] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1064.458984] ? trace_hardirqs_on+0xbd/0x310 [ 1064.463314] ? kasan_check_read+0x11/0x20 [ 1064.467472] ? ___ratelimit+0x3b4/0x672 [ 1064.471449] ? trace_hardirqs_off_caller+0x310/0x310 [ 1064.476565] ? trace_hardirqs_on+0x310/0x310 [ 1064.480977] ? lock_downgrade+0x900/0x900 [ 1064.485131] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1064.490237] ? ___ratelimit+0x3b9/0x672 [ 1064.494214] ? idr_get_free+0xf70/0xf70 [ 1064.498187] ? _raw_spin_unlock_irq+0x27/0x80 [ 1064.502685] ? _raw_spin_unlock_irq+0x27/0x80 [ 1064.507194] oom_kill_process.cold.27+0x10/0x903 [ 1064.511957] ? _raw_spin_unlock_irq+0x27/0x80 [ 1064.516463] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1064.521055] ? oom_evaluate_task+0x540/0x540 [ 1064.525473] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1064.531030] ? cgroup_procs_next+0x70/0x70 [ 1064.535274] ? _raw_spin_unlock_irq+0x60/0x80 [ 1064.539781] ? oom_badness+0xaa0/0xaa0 [ 1064.543677] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1064.548441] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1064.554000] ? mem_cgroup_iter_break+0x30/0x30 [ 1064.558607] ? cgroup_file_notify+0x226/0x2f0 [ 1064.563175] out_of_memory+0xa84/0x1430 [ 1064.567153] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1064.571743] ? kasan_check_read+0x11/0x20 [ 1064.575899] ? oom_killer_disable+0x3a0/0x3a0 [ 1064.580415] mem_cgroup_out_of_memory+0x15e/0x210 [ 1064.585263] ? memory_oom_group_write+0x160/0x160 [ 1064.590109] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 1064.594964] ? page_counter_try_charge+0x1c1/0x220 [ 1064.599906] try_charge+0xda9/0x1700 [ 1064.603637] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 1064.608321] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1064.613258] ? kasan_check_read+0x11/0x20 [ 1064.617407] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1064.622685] ? rcu_softirq_qs+0x20/0x20 [ 1064.626677] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 1064.632216] ? __kernel_text_address+0xd/0x40 [ 1064.636716] ? lock_page_memcg+0x350/0x350 [ 1064.640955] ? lock_acquire+0x1ed/0x520 [ 1064.644931] ? mem_cgroup_oom_control_write+0x100/0x100 [ 1064.650296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1064.655851] ? check_preemption_disabled+0x48/0x280 [ 1064.660878] memcg_kmem_charge_memcg+0x7c/0x120 [ 1064.665550] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1064.670049] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1064.675426] memcg_kmem_charge+0x149/0x350 [ 1064.679673] __alloc_pages_nodemask+0x75e/0xea0 [ 1064.684362] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1064.689650] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 1064.694671] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1064.700216] ? check_preemption_disabled+0x48/0x280 [ 1064.705244] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1064.710783] ? rcu_pm_notify+0xc0/0xc0 [ 1064.714681] ? copy_process+0x2026/0x87a0 [ 1064.718830] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1064.723850] ? kmem_cache_alloc_node+0x349/0x730 [ 1064.728623] copy_process+0xa09/0x87a0 [ 1064.732516] ? zap_class+0x640/0x640 [ 1064.736247] ? mark_held_locks+0x130/0x130 [ 1064.740488] ? load_balance+0x157d/0x39a0 [ 1064.744644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1064.750181] ? reuse_swap_page+0x4bd/0x1520 [ 1064.754509] ? swp_swapcount+0x530/0x530 [ 1064.758573] ? find_held_lock+0x36/0x1c0 [ 1064.762645] ? __cleanup_sighand+0x70/0x70 [ 1064.766884] ? find_held_lock+0x36/0x1c0 [ 1064.770957] ? try_to_wake_up+0x11c/0x1440 [ 1064.775193] ? lock_downgrade+0x900/0x900 [ 1064.779346] ? zap_class+0x640/0x640 [ 1064.783059] ? trace_hardirqs_off+0xb8/0x310 [ 1064.787477] ? kasan_check_read+0x11/0x20 [ 1064.791626] ? do_raw_spin_unlock+0xa7/0x330 [ 1064.796039] ? trace_hardirqs_on+0x310/0x310 [ 1064.800458] ? lock_acquire+0x1ed/0x520 [ 1064.804438] ? find_held_lock+0x36/0x1c0 [ 1064.808517] ? do_wp_page+0x127c/0x2920 [ 1064.812498] ? lock_downgrade+0x900/0x900 [ 1064.816651] ? wake_up_page_bit+0x6f0/0x6f0 [ 1064.820972] ? print_usage_bug+0xc0/0xc0 [ 1064.825037] ? kasan_check_read+0x11/0x20 [ 1064.829192] ? do_raw_spin_unlock+0xa7/0x330 [ 1064.833601] ? do_raw_spin_trylock+0x270/0x270 [ 1064.838186] ? pgd_free+0x380/0x380 [ 1064.841820] ? _raw_spin_unlock+0x2c/0x50 [ 1064.845971] ? do_wp_page+0x528/0x2920 [ 1064.849860] ? __lock_acquire+0x62f/0x4c20 [ 1064.854121] ? finish_mkwrite_fault+0x650/0x650 [ 1064.858800] ? __lock_acquire+0x62f/0x4c20 [ 1064.863036] ? mark_held_locks+0x130/0x130 [ 1064.867273] ? lock_downgrade+0x900/0x900 [ 1064.871440] ? __lock_acquire+0x62f/0x4c20 [ 1064.875686] ? mark_held_locks+0x130/0x130 [ 1064.879920] ? rcu_softirq_qs+0x20/0x20 [ 1064.883906] ? mark_held_locks+0x130/0x130 [ 1064.888151] ? zap_class+0x640/0x640 [ 1064.891883] ? mark_held_locks+0x130/0x130 [ 1064.896128] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1064.901673] ? check_preemption_disabled+0x48/0x280 [ 1064.906702] ? __lock_is_held+0xb5/0x140 [ 1064.910787] ? print_usage_bug+0xc0/0xc0 [ 1064.914850] ? print_usage_bug+0xc0/0xc0 [ 1064.918920] ? print_usage_bug+0xc0/0xc0 [ 1064.922982] ? print_usage_bug+0xc0/0xc0 [ 1064.927055] ? __inode_attach_wb+0x13f0/0x13f0 [ 1064.931637] ? find_held_lock+0x36/0x1c0 [ 1064.935713] ? __lock_acquire+0x62f/0x4c20 [ 1064.939955] ? __lock_acquire+0x62f/0x4c20 [ 1064.944209] ? mark_held_locks+0x130/0x130 [ 1064.948450] ? kasan_check_read+0x11/0x20 [ 1064.952610] ? do_raw_spin_lock+0x14f/0x350 [ 1064.956940] ? rwlock_bug.part.2+0x90/0x90 [ 1064.961179] ? touch_atime+0x1d8/0x320 [ 1064.965163] ? lock_downgrade+0x900/0x900 [ 1064.969343] ? __handle_mm_fault+0xa57/0x5be0 [ 1064.973854] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1064.978707] ? zap_class+0x640/0x640 [ 1064.982422] ? touch_atime+0x103/0x320 [ 1064.986325] ? zap_class+0x640/0x640 [ 1064.990041] ? atime_needs_update+0x710/0x710 [ 1064.994541] ? zap_class+0x640/0x640 [ 1064.998266] ? find_held_lock+0x36/0x1c0 [ 1065.002354] _do_fork+0x1cb/0x11d0 [ 1065.005904] ? fork_idle+0x1d0/0x1d0 [ 1065.009618] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1065.014551] ? kasan_check_read+0x11/0x20 [ 1065.018713] ? kasan_check_read+0x11/0x20 [ 1065.022863] ? _copy_to_user+0xc8/0x110 [ 1065.026849] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1065.032392] ? put_timespec64+0x10f/0x1b0 [ 1065.036546] ? nsecs_to_jiffies+0x30/0x30 [ 1065.040709] ? do_syscall_64+0x9a/0x820 [ 1065.044685] ? do_syscall_64+0x9a/0x820 [ 1065.048665] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1065.053257] ? trace_hardirqs_on+0xbd/0x310 [ 1065.057583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1065.063149] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1065.068532] ? trace_hardirqs_off_caller+0x310/0x310 [ 1065.073662] __x64_sys_clone+0xbf/0x150 [ 1065.077664] do_syscall_64+0x1b9/0x820 [ 1065.082427] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1065.087805] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1065.092736] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1065.097586] ? trace_hardirqs_on_caller+0x310/0x310 [ 1065.102609] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1065.107636] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1065.112495] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1065.117706] RIP: 0033:0x455c2a [ 1065.120906] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1065.139811] RSP: 002b:0000000000a3fd50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1065.147526] RAX: ffffffffffffffda RBX: 0000000000a3fd50 RCX: 0000000000455c2a [ 1065.154801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1065.162074] RBP: 0000000000a3fd90 R08: 0000000000000001 R09: 0000000000c92940 [ 1065.169347] R10: 0000000000c92c10 R11: 0000000000000246 R12: 0000000000000001 [ 1065.176617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 1065.199575] Task in /syz3 killed as a result of limit of /syz3 [ 1065.225159] memory: usage 32148kB, limit 0kB, failcnt 251 [ 1065.230746] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1065.245862] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1065.252035] Memory cgroup stats for [ 1065.252044] /syz3: cache:16304KB rss:8828KB rss_huge:8192KB shmem:16244KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:25172KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1065.275328] Memory cgroup out of memory: Kill process 4612 (syz-executor3) score 8781000 or sacrifice child [ 1065.285405] Killed process 4612 (syz-executor3) total-vm:70724kB, anon-rss:2224kB, file-rss:32768kB, shmem-rss:0kB [ 1065.325622] syz-executor3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1065.352560] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1065.358252] CPU: 1 PID: 23604 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1065.365624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1065.374984] Call Trace: [ 1065.377588] dump_stack+0x244/0x39d [ 1065.377607] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1065.386425] dump_header+0x27b/0xf72 [ 1065.386450] ? mark_held_locks+0x130/0x130 [ 1065.386473] ? pagefault_out_of_memory+0x197/0x197 [ 1065.394406] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1065.404852] ? check_preemption_disabled+0x48/0x280 [ 1065.409880] ? zap_class+0x640/0x640 [ 1065.409894] ? __lock_is_held+0xb5/0x140 [ 1065.409915] ? zap_class+0x640/0x640 [ 1065.417938] ? print_usage_bug+0xc0/0xc0 [ 1065.417961] ? find_held_lock+0x36/0x1c0 [ 1065.417981] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1065.425731] ? find_held_lock+0x36/0x1c0 [ 1065.425755] ? mark_held_locks+0xc7/0x130 [ 1065.425773] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1065.435345] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1065.435362] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1065.435383] ? trace_hardirqs_on+0xbd/0x310 [ 1065.443601] ? kasan_check_read+0x11/0x20 [ 1065.443619] ? ___ratelimit+0x3b4/0x672 [ 1065.453815] ? trace_hardirqs_off_caller+0x310/0x310 [ 1065.462776] ? trace_hardirqs_on+0x310/0x310 [ 1065.470870] ? lock_downgrade+0x900/0x900 [ 1065.480361] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1065.489594] ? ___ratelimit+0x3b9/0x672 [ 1065.489610] ? idr_get_free+0xf70/0xf70 [ 1065.489621] ? _raw_spin_unlock_irq+0x27/0x80 [ 1065.489634] ? _raw_spin_unlock_irq+0x27/0x80 [ 1065.489655] oom_kill_process.cold.27+0x10/0x903 [ 1065.497595] ? _raw_spin_unlock_irq+0x27/0x80 [ 1065.497611] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1065.497633] ? oom_evaluate_task+0x540/0x540 [ 1065.497654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1065.506628] ? cgroup_procs_next+0x70/0x70 [ 1065.506645] ? _raw_spin_unlock_irq+0x60/0x80 [ 1065.506664] ? oom_badness+0xaa0/0xaa0 [ 1065.515893] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1065.515911] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1065.515927] ? mem_cgroup_iter_break+0x30/0x30 [ 1065.524906] ? cgroup_file_notify+0x226/0x2f0 [ 1065.534643] out_of_memory+0xa84/0x1430 [ 1065.543007] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1065.553550] ? kasan_check_read+0x11/0x20 [ 1065.562612] ? oom_killer_disable+0x3a0/0x3a0 [ 1065.571490] mem_cgroup_out_of_memory+0x15e/0x210 [ 1065.580102] ? memory_oom_group_write+0x160/0x160 [ 1065.589748] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 1065.589770] ? page_counter_try_charge+0x1c1/0x220 [ 1065.589789] try_charge+0xda9/0x1700 [ 1065.599545] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 1065.599564] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1065.599583] ? kasan_check_read+0x11/0x20 [ 1065.616990] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1065.622254] ? rcu_softirq_qs+0x20/0x20 [ 1065.626233] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 1065.631758] ? __kernel_text_address+0xd/0x40 [ 1065.636253] ? lock_page_memcg+0x350/0x350 [ 1065.640476] ? lock_acquire+0x1ed/0x520 [ 1065.644436] ? mem_cgroup_oom_control_write+0x100/0x100 [ 1065.649794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1065.655331] ? check_preemption_disabled+0x48/0x280 [ 1065.660348] memcg_kmem_charge_memcg+0x7c/0x120 [ 1065.665027] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1065.669527] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1065.674883] memcg_kmem_charge+0x149/0x350 [ 1065.679111] __alloc_pages_nodemask+0x75e/0xea0 [ 1065.683768] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1065.689035] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 1065.694038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1065.699567] ? check_preemption_disabled+0x48/0x280 [ 1065.704576] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1065.710110] ? rcu_pm_notify+0xc0/0xc0 [ 1065.713992] ? copy_process+0x2026/0x87a0 [ 1065.718128] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1065.723148] ? kmem_cache_alloc_node+0x349/0x730 [ 1065.727899] copy_process+0xa09/0x87a0 [ 1065.731776] ? zap_class+0x640/0x640 [ 1065.735474] ? mark_held_locks+0x130/0x130 [ 1065.739699] ? load_balance+0x157d/0x39a0 [ 1065.743841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1065.749372] ? reuse_swap_page+0x4bd/0x1520 [ 1065.753685] ? swp_swapcount+0x530/0x530 [ 1065.757734] ? find_held_lock+0x36/0x1c0 [ 1065.761801] ? __cleanup_sighand+0x70/0x70 [ 1065.766023] ? find_held_lock+0x36/0x1c0 [ 1065.770077] ? try_to_wake_up+0x11c/0x1440 [ 1065.774297] ? lock_downgrade+0x900/0x900 [ 1065.778440] ? zap_class+0x640/0x640 [ 1065.782142] ? trace_hardirqs_off+0xb8/0x310 [ 1065.786532] ? kasan_check_read+0x11/0x20 [ 1065.790664] ? do_raw_spin_unlock+0xa7/0x330 [ 1065.795065] ? trace_hardirqs_on+0x310/0x310 [ 1065.799463] ? lock_acquire+0x1ed/0x520 [ 1065.803450] ? find_held_lock+0x36/0x1c0 [ 1065.807507] ? do_wp_page+0x127c/0x2920 [ 1065.811472] ? lock_downgrade+0x900/0x900 [ 1065.815610] ? wake_up_page_bit+0x6f0/0x6f0 [ 1065.820757] ? print_usage_bug+0xc0/0xc0 [ 1065.824814] ? kasan_check_read+0x11/0x20 [ 1065.828958] ? do_raw_spin_unlock+0xa7/0x330 [ 1065.833368] ? do_raw_spin_trylock+0x270/0x270 [ 1065.837937] ? pgd_free+0x380/0x380 [ 1065.841560] ? _raw_spin_unlock+0x2c/0x50 [ 1065.845791] ? do_wp_page+0x528/0x2920 [ 1065.849668] ? __lock_acquire+0x62f/0x4c20 [ 1065.853890] ? finish_mkwrite_fault+0x650/0x650 [ 1065.858550] ? __lock_acquire+0x62f/0x4c20 [ 1065.862771] ? mark_held_locks+0x130/0x130 [ 1065.867017] ? lock_downgrade+0x900/0x900 [ 1065.871157] ? __lock_acquire+0x62f/0x4c20 [ 1065.875378] ? mark_held_locks+0x130/0x130 [ 1065.879597] ? rcu_softirq_qs+0x20/0x20 [ 1065.883564] ? mark_held_locks+0x130/0x130 [ 1065.887789] ? zap_class+0x640/0x640 [ 1065.891492] ? mark_held_locks+0x130/0x130 [ 1065.895716] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1065.901243] ? check_preemption_disabled+0x48/0x280 [ 1065.906252] ? __lock_is_held+0xb5/0x140 [ 1065.910302] ? print_usage_bug+0xc0/0xc0 [ 1065.914371] ? print_usage_bug+0xc0/0xc0 [ 1065.918419] ? print_usage_bug+0xc0/0xc0 [ 1065.922466] ? print_usage_bug+0xc0/0xc0 [ 1065.926515] ? __inode_attach_wb+0x13f0/0x13f0 [ 1065.931082] ? find_held_lock+0x36/0x1c0 [ 1065.935151] ? __lock_acquire+0x62f/0x4c20 [ 1065.939370] ? __lock_acquire+0x62f/0x4c20 [ 1065.943591] ? mark_held_locks+0x130/0x130 [ 1065.947814] ? kasan_check_read+0x11/0x20 [ 1065.951945] ? do_raw_spin_lock+0x14f/0x350 [ 1065.956256] ? rwlock_bug.part.2+0x90/0x90 [ 1065.960474] ? touch_atime+0x1d8/0x320 [ 1065.964345] ? lock_downgrade+0x900/0x900 [ 1065.968489] ? __handle_mm_fault+0xa57/0x5be0 [ 1065.972978] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1065.977816] ? zap_class+0x640/0x640 [ 1065.981532] ? touch_atime+0x103/0x320 [ 1065.985404] ? zap_class+0x640/0x640 [ 1065.989279] ? atime_needs_update+0x710/0x710 [ 1065.993757] ? zap_class+0x640/0x640 [ 1065.997463] ? find_held_lock+0x36/0x1c0 [ 1066.001515] _do_fork+0x1cb/0x11d0 [ 1066.005055] ? fork_idle+0x1d0/0x1d0 [ 1066.008762] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1066.013693] ? kasan_check_read+0x11/0x20 [ 1066.017833] ? kasan_check_read+0x11/0x20 [ 1066.021971] ? _copy_to_user+0xc8/0x110 [ 1066.025937] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1066.031466] ? put_timespec64+0x10f/0x1b0 [ 1066.035603] ? nsecs_to_jiffies+0x30/0x30 [ 1066.039737] ? do_syscall_64+0x9a/0x820 [ 1066.043695] ? do_syscall_64+0x9a/0x820 [ 1066.047654] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1066.052219] ? trace_hardirqs_on+0xbd/0x310 [ 1066.056544] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1066.062155] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1066.067509] ? trace_hardirqs_off_caller+0x310/0x310 [ 1066.072600] __x64_sys_clone+0xbf/0x150 [ 1066.076562] do_syscall_64+0x1b9/0x820 [ 1066.080437] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1066.085790] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1066.090706] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1066.095539] ? trace_hardirqs_on_caller+0x310/0x310 [ 1066.100541] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1066.105567] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1066.110403] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1066.115579] RIP: 0033:0x455c2a [ 1066.118759] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1066.137667] RSP: 002b:0000000000a3fd50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1066.145367] RAX: ffffffffffffffda RBX: 0000000000a3fd50 RCX: 0000000000455c2a [ 1066.152629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1066.159890] RBP: 0000000000a3fd90 R08: 0000000000000001 R09: 0000000000c92940 [ 1066.167149] R10: 0000000000c92c10 R11: 0000000000000246 R12: 0000000000000001 [ 1066.174405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 1066.187320] Task in /syz3 killed as a result of limit of /syz3 [ 1066.193407] memory: usage 25688kB, limit 0kB, failcnt 257 [ 1066.199075] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1066.205888] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1066.205896] Memory cgroup stats for /syz3: cache:12348KB rss:6652KB rss_huge:6144KB shmem:12288KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:18884KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1066.205989] Memory cgroup out of memory: Kill process 31473 (syz-executor3) score 8779000 or sacrifice child [ 1066.206056] Killed process 31473 (syz-executor3) total-vm:70592kB, anon-rss:2216kB, file-rss:32768kB, shmem-rss:0kB [ 1066.255704] oom_reaper: reaped process 31473 (syz-executor3), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB [ 1066.257550] syz-executor3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1066.278720] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1066.283852] CPU: 1 PID: 23604 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1066.291210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1066.291216] Call Trace: [ 1066.291239] dump_stack+0x244/0x39d [ 1066.291258] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1066.291281] dump_header+0x27b/0xf72 [ 1066.291317] ? mark_held_locks+0x130/0x130 [ 1066.303263] ? pagefault_out_of_memory+0x197/0x197 [ 1066.312503] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1066.320434] ? check_preemption_disabled+0x48/0x280 [ 1066.335886] ? zap_class+0x640/0x640 [ 1066.339600] ? __lock_is_held+0xb5/0x140 [ 1066.339621] ? zap_class+0x640/0x640 [ 1066.347378] ? print_usage_bug+0xc0/0xc0 [ 1066.347394] ? find_held_lock+0x36/0x1c0 [ 1066.347411] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1066.347430] ? find_held_lock+0x36/0x1c0 [ 1066.347455] ? mark_held_locks+0xc7/0x130 [ 1066.361089] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1066.369331] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1066.379515] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1066.379532] ? trace_hardirqs_on+0xbd/0x310 [ 1066.379546] ? kasan_check_read+0x11/0x20 [ 1066.379559] ? ___ratelimit+0x3b4/0x672 [ 1066.379575] ? trace_hardirqs_off_caller+0x310/0x310 [ 1066.379590] ? trace_hardirqs_on+0x310/0x310 [ 1066.379608] ? lock_downgrade+0x900/0x900 [ 1066.388501] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1066.388516] ? ___ratelimit+0x3b9/0x672 [ 1066.388531] ? idr_get_free+0xf70/0xf70 [ 1066.388548] ? _raw_spin_unlock_irq+0x27/0x80 [ 1066.415372] ? _raw_spin_unlock_irq+0x27/0x80 [ 1066.415396] oom_kill_process.cold.27+0x10/0x903 [ 1066.415411] ? _raw_spin_unlock_irq+0x27/0x80 [ 1066.415428] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1066.415448] ? oom_evaluate_task+0x540/0x540 [ 1066.423414] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1066.432392] ? cgroup_procs_next+0x70/0x70 [ 1066.442002] ? _raw_spin_unlock_irq+0x60/0x80 [ 1066.450988] ? oom_badness+0xaa0/0xaa0 [ 1066.460748] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1066.469125] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1066.479396] ? mem_cgroup_iter_break+0x30/0x30 [ 1066.479424] ? cgroup_file_notify+0x226/0x2f0 [ 1066.479441] out_of_memory+0xa84/0x1430 [ 1066.479456] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1066.479475] ? kasan_check_read+0x11/0x20 [ 1066.479491] ? oom_killer_disable+0x3a0/0x3a0 [ 1066.488566] mem_cgroup_out_of_memory+0x15e/0x210 [ 1066.497080] ? memory_oom_group_write+0x160/0x160 [ 1066.497094] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 1066.497115] ? page_counter_try_charge+0x1c1/0x220 [ 1066.497132] try_charge+0xda9/0x1700 [ 1066.497156] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 1066.505784] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1066.505799] ? kasan_check_read+0x11/0x20 [ 1066.505813] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1066.505828] ? rcu_softirq_qs+0x20/0x20 [ 1066.505853] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 1066.515782] ? __kernel_text_address+0xd/0x40 [ 1066.515799] ? lock_page_memcg+0x350/0x350 [ 1066.515823] ? lock_acquire+0x1ed/0x520 [ 1066.525578] ? mem_cgroup_oom_control_write+0x100/0x100 [ 1066.525596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1066.525617] ? check_preemption_disabled+0x48/0x280 [ 1066.533999] memcg_kmem_charge_memcg+0x7c/0x120 [ 1066.543414] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1066.552666] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1066.562686] memcg_kmem_charge+0x149/0x350 [ 1066.570867] __alloc_pages_nodemask+0x75e/0xea0 [ 1066.581747] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1066.591417] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 1066.601279] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1066.601315] ? check_preemption_disabled+0x48/0x280 [ 1066.610227] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1066.620509] ? rcu_pm_notify+0xc0/0xc0 [ 1066.631064] ? copy_process+0x2026/0x87a0 [ 1066.640474] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1066.640494] ? kmem_cache_alloc_node+0x349/0x730 [ 1066.649646] copy_process+0xa09/0x87a0 [ 1066.649665] ? zap_class+0x640/0x640 [ 1066.649677] ? mark_held_locks+0x130/0x130 [ 1066.649691] ? load_balance+0x157d/0x39a0 [ 1066.649714] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1066.649731] ? reuse_swap_page+0x4bd/0x1520 [ 1066.658374] ? swp_swapcount+0x530/0x530 [ 1066.666301] ? find_held_lock+0x36/0x1c0 [ 1066.666335] ? __cleanup_sighand+0x70/0x70 [ 1066.666349] ? find_held_lock+0x36/0x1c0 [ 1066.666371] ? try_to_wake_up+0x11c/0x1440 [ 1066.666386] ? lock_downgrade+0x900/0x900 [ 1066.666404] ? zap_class+0x640/0x640 [ 1066.676065] ? trace_hardirqs_off+0xb8/0x310 [ 1066.676080] ? kasan_check_read+0x11/0x20 [ 1066.676095] ? do_raw_spin_unlock+0xa7/0x330 [ 1066.676109] ? trace_hardirqs_on+0x310/0x310 [ 1066.676126] ? lock_acquire+0x1ed/0x520 [ 1066.676147] ? find_held_lock+0x36/0x1c0 [ 1066.684514] ? do_wp_page+0x127c/0x2920 [ 1066.692792] ? lock_downgrade+0x900/0x900 [ 1066.701068] ? wake_up_page_bit+0x6f0/0x6f0 [ 1066.708930] ? print_usage_bug+0xc0/0xc0 [ 1066.717475] ? kasan_check_read+0x11/0x20 [ 1066.717489] ? do_raw_spin_unlock+0xa7/0x330 [ 1066.717502] ? do_raw_spin_trylock+0x270/0x270 [ 1066.717516] ? pgd_free+0x380/0x380 [ 1066.717539] ? _raw_spin_unlock+0x2c/0x50 [ 1066.717558] ? do_wp_page+0x528/0x2920 [ 1066.726350] ? __lock_acquire+0x62f/0x4c20 [ 1066.726371] ? finish_mkwrite_fault+0x650/0x650 [ 1066.726392] ? __lock_acquire+0x62f/0x4c20 [ 1066.726411] ? mark_held_locks+0x130/0x130 [ 1066.734433] ? lock_downgrade+0x900/0x900 [ 1066.742537] ? __lock_acquire+0x62f/0x4c20 [ 1066.750906] ? mark_held_locks+0x130/0x130 [ 1066.759445] ? rcu_softirq_qs+0x20/0x20 [ 1066.767657] ? mark_held_locks+0x130/0x130 [ 1066.767676] ? zap_class+0x640/0x640 [ 1066.767690] ? mark_held_locks+0x130/0x130 [ 1066.767708] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1066.767727] ? check_preemption_disabled+0x48/0x280 [ 1066.767749] ? __lock_is_held+0xb5/0x140 [ 1066.775766] ? print_usage_bug+0xc0/0xc0 [ 1066.775783] ? print_usage_bug+0xc0/0xc0 [ 1066.775799] ? print_usage_bug+0xc0/0xc0 [ 1066.775814] ? print_usage_bug+0xc0/0xc0 [ 1066.775835] ? __inode_attach_wb+0x13f0/0x13f0 [ 1066.784731] ? find_held_lock+0x36/0x1c0 [ 1066.793185] ? __lock_acquire+0x62f/0x4c20 [ 1066.801558] ? __lock_acquire+0x62f/0x4c20 [ 1066.809748] ? mark_held_locks+0x130/0x130 [ 1066.817666] ? kasan_check_read+0x11/0x20 [ 1066.817680] ? do_raw_spin_lock+0x14f/0x350 [ 1066.817694] ? rwlock_bug.part.2+0x90/0x90 [ 1066.817706] ? touch_atime+0x1d8/0x320 [ 1066.817722] ? lock_downgrade+0x900/0x900 [ 1066.817748] ? __handle_mm_fault+0xa57/0x5be0 [ 1066.827506] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1066.827526] ? zap_class+0x640/0x640 [ 1066.827538] ? touch_atime+0x103/0x320 [ 1066.827554] ? zap_class+0x640/0x640 [ 1066.827571] ? atime_needs_update+0x710/0x710 [ 1066.836627] ? zap_class+0x640/0x640 [ 1066.836651] ? find_held_lock+0x36/0x1c0 [ 1066.836679] _do_fork+0x1cb/0x11d0 [ 1066.844771] ? fork_idle+0x1d0/0x1d0 [ 1066.852878] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1066.861510] ? kasan_check_read+0x11/0x20 [ 1066.869968] ? kasan_check_read+0x11/0x20 [ 1066.878325] ? _copy_to_user+0xc8/0x110 [ 1066.878346] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1066.878361] ? put_timespec64+0x10f/0x1b0 [ 1066.878376] ? nsecs_to_jiffies+0x30/0x30 [ 1066.878393] ? do_syscall_64+0x9a/0x820 [ 1066.878411] ? do_syscall_64+0x9a/0x820 [ 1066.886947] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1066.886984] ? trace_hardirqs_on+0xbd/0x310 [ 1066.886999] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1066.887019] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1066.895040] ? trace_hardirqs_off_caller+0x310/0x310 [ 1066.895060] __x64_sys_clone+0xbf/0x150 [ 1066.895086] do_syscall_64+0x1b9/0x820 [ 1066.904405] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1066.911978] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1066.920162] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1066.927906] ? trace_hardirqs_on_caller+0x310/0x310 [ 1066.927926] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1066.927945] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1066.927978] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1066.935196] RIP: 0033:0x455c2a [ 1066.935212] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1066.935220] RSP: 002b:0000000000a3fd50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1066.935234] RAX: ffffffffffffffda RBX: 0000000000a3fd50 RCX: 0000000000455c2a [ 1066.935243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1066.935256] RBP: 0000000000a3fd90 R08: 0000000000000001 R09: 0000000000c92940 [ 1066.944314] R10: 0000000000c92c10 R11: 0000000000000246 R12: 0000000000000001 [ 1066.944328] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 1066.980806] Task in /syz3 killed as a result of limit of /syz3 [ 1066.989265] memory: usage 19260kB, limit 0kB, failcnt 263 [ 1066.999759] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1067.007853] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1067.018540] Memory cgroup stats for /syz3: cache:8252KB rss:4480KB rss_huge:4096KB shmem:8192KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:12620KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1067.028448] Memory cgroup out of memory: Kill process 31545 (syz-executor3) score 8779000 or sacrifice child [ 1067.038478] Killed process 31545 (syz-executor3) total-vm:70592kB, anon-rss:2216kB, file-rss:32768kB, shmem-rss:0kB [ 1067.177851] oom_reaper: reaped process 31545 (syz-executor3), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB [ 1067.180318] syz-executor3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1067.201141] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1067.206376] CPU: 0 PID: 23604 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1067.213746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1067.213758] Call Trace: [ 1067.225720] dump_stack+0x244/0x39d [ 1067.229367] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1067.234604] dump_header+0x27b/0xf72 [ 1067.238350] ? mark_held_locks+0x130/0x130 [ 1067.242603] ? pagefault_out_of_memory+0x197/0x197 [ 1067.247549] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1067.253104] ? check_preemption_disabled+0x48/0x280 [ 1067.258164] ? zap_class+0x640/0x640 [ 1067.261866] ? __lock_is_held+0xb5/0x140 [ 1067.265962] ? zap_class+0x640/0x640 [ 1067.269671] ? print_usage_bug+0xc0/0xc0 [ 1067.273723] ? find_held_lock+0x36/0x1c0 [ 1067.277799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1067.283337] ? find_held_lock+0x36/0x1c0 [ 1067.287393] ? mark_held_locks+0xc7/0x130 [ 1067.291528] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1067.296622] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1067.302151] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1067.306723] ? trace_hardirqs_on+0xbd/0x310 [ 1067.311029] ? kasan_check_read+0x11/0x20 [ 1067.315161] ? ___ratelimit+0x3b4/0x672 [ 1067.319122] ? trace_hardirqs_off_caller+0x310/0x310 [ 1067.324209] ? trace_hardirqs_on+0x310/0x310 [ 1067.328605] ? lock_downgrade+0x900/0x900 [ 1067.332739] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1067.337829] ? ___ratelimit+0x3b9/0x672 [ 1067.341804] ? idr_get_free+0xf70/0xf70 [ 1067.345767] ? _raw_spin_unlock_irq+0x27/0x80 [ 1067.350263] ? _raw_spin_unlock_irq+0x27/0x80 [ 1067.354752] oom_kill_process.cold.27+0x10/0x903 [ 1067.359532] ? _raw_spin_unlock_irq+0x27/0x80 [ 1067.364022] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1067.368598] ? oom_evaluate_task+0x540/0x540 [ 1067.373001] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1067.378526] ? cgroup_procs_next+0x70/0x70 [ 1067.382777] ? _raw_spin_unlock_irq+0x60/0x80 [ 1067.387261] ? oom_badness+0xaa0/0xaa0 [ 1067.391166] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1067.395912] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1067.401441] ? mem_cgroup_iter_break+0x30/0x30 [ 1067.406021] ? cgroup_file_notify+0x226/0x2f0 [ 1067.410504] out_of_memory+0xa84/0x1430 [ 1067.414467] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1067.419037] ? kasan_check_read+0x11/0x20 [ 1067.423174] ? oom_killer_disable+0x3a0/0x3a0 [ 1067.427666] mem_cgroup_out_of_memory+0x15e/0x210 [ 1067.432495] ? memory_oom_group_write+0x160/0x160 [ 1067.437329] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 1067.442163] ? page_counter_try_charge+0x1c1/0x220 [ 1067.447083] try_charge+0xda9/0x1700 [ 1067.450810] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 1067.455476] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1067.460389] ? kasan_check_read+0x11/0x20 [ 1067.464540] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1067.469819] ? rcu_softirq_qs+0x20/0x20 [ 1067.473792] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 1067.479344] ? __kernel_text_address+0xd/0x40 [ 1067.483829] ? lock_page_memcg+0x350/0x350 [ 1067.488054] ? lock_acquire+0x1ed/0x520 [ 1067.492018] ? mem_cgroup_oom_control_write+0x100/0x100 [ 1067.497371] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1067.502915] ? check_preemption_disabled+0x48/0x280 [ 1067.507946] memcg_kmem_charge_memcg+0x7c/0x120 [ 1067.512611] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1067.517108] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1067.522480] memcg_kmem_charge+0x149/0x350 [ 1067.526709] __alloc_pages_nodemask+0x75e/0xea0 [ 1067.531361] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1067.536648] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 1067.541651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1067.547175] ? check_preemption_disabled+0x48/0x280 [ 1067.552185] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1067.557713] ? rcu_pm_notify+0xc0/0xc0 [ 1067.561600] ? copy_process+0x2026/0x87a0 [ 1067.565787] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1067.570817] ? kmem_cache_alloc_node+0x349/0x730 [ 1067.575584] copy_process+0xa09/0x87a0 [ 1067.579710] ? zap_class+0x640/0x640 [ 1067.583424] ? mark_held_locks+0x130/0x130 [ 1067.587648] ? load_balance+0x157d/0x39a0 [ 1067.591789] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1067.597325] ? reuse_swap_page+0x4bd/0x1520 [ 1067.601732] ? swp_swapcount+0x530/0x530 [ 1067.605789] ? find_held_lock+0x36/0x1c0 [ 1067.609852] ? __cleanup_sighand+0x70/0x70 [ 1067.614083] ? find_held_lock+0x36/0x1c0 [ 1067.618144] ? try_to_wake_up+0x11c/0x1440 [ 1067.622368] ? lock_downgrade+0x900/0x900 [ 1067.626508] ? zap_class+0x640/0x640 [ 1067.630211] ? trace_hardirqs_off+0xb8/0x310 [ 1067.634605] ? kasan_check_read+0x11/0x20 [ 1067.638738] ? do_raw_spin_unlock+0xa7/0x330 [ 1067.643133] ? trace_hardirqs_on+0x310/0x310 [ 1067.647532] ? lock_acquire+0x1ed/0x520 [ 1067.651498] ? find_held_lock+0x36/0x1c0 [ 1067.655572] ? do_wp_page+0x127c/0x2920 [ 1067.659540] ? lock_downgrade+0x900/0x900 [ 1067.663691] ? wake_up_page_bit+0x6f0/0x6f0 [ 1067.668004] ? print_usage_bug+0xc0/0xc0 [ 1067.672057] ? kasan_check_read+0x11/0x20 [ 1067.676194] ? do_raw_spin_unlock+0xa7/0x330 [ 1067.680591] ? do_raw_spin_trylock+0x270/0x270 [ 1067.685166] ? pgd_free+0x380/0x380 [ 1067.688813] ? _raw_spin_unlock+0x2c/0x50 [ 1067.692952] ? do_wp_page+0x528/0x2920 [ 1067.696852] ? __lock_acquire+0x62f/0x4c20 [ 1067.701078] ? finish_mkwrite_fault+0x650/0x650 [ 1067.705742] ? __lock_acquire+0x62f/0x4c20 [ 1067.709966] ? mark_held_locks+0x130/0x130 [ 1067.714192] ? lock_downgrade+0x900/0x900 [ 1067.718340] ? __lock_acquire+0x62f/0x4c20 [ 1067.722565] ? mark_held_locks+0x130/0x130 [ 1067.726788] ? rcu_softirq_qs+0x20/0x20 [ 1067.730754] ? mark_held_locks+0x130/0x130 [ 1067.734975] ? zap_class+0x640/0x640 [ 1067.738678] ? mark_held_locks+0x130/0x130 [ 1067.742899] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1067.748429] ? check_preemption_disabled+0x48/0x280 [ 1067.753467] ? __lock_is_held+0xb5/0x140 [ 1067.757519] ? print_usage_bug+0xc0/0xc0 [ 1067.761565] ? print_usage_bug+0xc0/0xc0 [ 1067.765618] ? print_usage_bug+0xc0/0xc0 [ 1067.769665] ? print_usage_bug+0xc0/0xc0 [ 1067.773716] ? __inode_attach_wb+0x13f0/0x13f0 [ 1067.778284] ? find_held_lock+0x36/0x1c0 [ 1067.782368] ? __lock_acquire+0x62f/0x4c20 [ 1067.786591] ? __lock_acquire+0x62f/0x4c20 [ 1067.790826] ? mark_held_locks+0x130/0x130 [ 1067.795059] ? kasan_check_read+0x11/0x20 [ 1067.799220] ? do_raw_spin_lock+0x14f/0x350 [ 1067.803789] ? rwlock_bug.part.2+0x90/0x90 [ 1067.808027] ? touch_atime+0x1d8/0x320 [ 1067.811919] ? lock_downgrade+0x900/0x900 [ 1067.816057] ? __handle_mm_fault+0xa57/0x5be0 [ 1067.820557] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1067.825399] ? zap_class+0x640/0x640 [ 1067.829111] ? touch_atime+0x103/0x320 [ 1067.832981] ? zap_class+0x640/0x640 [ 1067.836681] ? atime_needs_update+0x710/0x710 [ 1067.841163] ? zap_class+0x640/0x640 [ 1067.844868] ? find_held_lock+0x36/0x1c0 [ 1067.848926] _do_fork+0x1cb/0x11d0 [ 1067.852465] ? fork_idle+0x1d0/0x1d0 [ 1067.856173] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1067.861088] ? kasan_check_read+0x11/0x20 [ 1067.865249] ? kasan_check_read+0x11/0x20 [ 1067.869384] ? _copy_to_user+0xc8/0x110 [ 1067.873346] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1067.878889] ? put_timespec64+0x10f/0x1b0 [ 1067.883025] ? nsecs_to_jiffies+0x30/0x30 [ 1067.887160] ? do_syscall_64+0x9a/0x820 [ 1067.891137] ? do_syscall_64+0x9a/0x820 [ 1067.895101] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1067.899673] ? trace_hardirqs_on+0xbd/0x310 [ 1067.903983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1067.909537] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1067.914896] ? trace_hardirqs_off_caller+0x310/0x310 [ 1067.919996] __x64_sys_clone+0xbf/0x150 [ 1067.923962] do_syscall_64+0x1b9/0x820 [ 1067.927838] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1067.933212] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1067.938147] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1067.942978] ? trace_hardirqs_on_caller+0x310/0x310 [ 1067.947985] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1067.952995] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1067.957830] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1067.963003] RIP: 0033:0x455c2a [ 1067.966183] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1067.985171] RSP: 002b:0000000000a3fd50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1067.992886] RAX: ffffffffffffffda RBX: 0000000000a3fd50 RCX: 0000000000455c2a [ 1068.000169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1068.007454] RBP: 0000000000a3fd90 R08: 0000000000000001 R09: 0000000000c92940 [ 1068.014727] R10: 0000000000c92c10 R11: 0000000000000246 R12: 0000000000000001 [ 1068.021987] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 1068.037589] Task in /syz3 killed as a result of limit of /syz3 [ 1068.043615] memory: usage 12752kB, limit 0kB, failcnt 269 [ 1068.049412] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1068.056297] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1068.062461] Memory cgroup stats for [ 1068.062475] /syz3: cache:4176KB rss:2372KB rss_huge:2048KB shmem:4116KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6356KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1068.086697] Memory cgroup out of memory: Kill process 31611 (syz-executor3) score 8779000 or sacrifice child [ 1068.096839] Killed process 31611 (syz-executor3) total-vm:70592kB, anon-rss:2216kB, file-rss:32768kB, shmem-rss:0kB [ 1068.108920] oom_reaper: reaped process 31611 (syz-executor3), now anon-rss:0kB, file-rss:32768kB, shmem-rss:0kB [ 1068.120346] syz-executor3 invoked oom-killer: gfp_mask=0x7080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1068.132934] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1068.138221] CPU: 1 PID: 23604 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1068.145590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1068.154951] Call Trace: [ 1068.157549] dump_stack+0x244/0x39d [ 1068.157568] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1068.157591] dump_header+0x27b/0xf72 [ 1068.157614] ? mark_held_locks+0x130/0x130 [ 1068.157630] ? pagefault_out_of_memory+0x197/0x197 [ 1068.157651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1068.184862] ? check_preemption_disabled+0x48/0x280 [ 1068.189905] ? zap_class+0x640/0x640 [ 1068.193605] ? __lock_is_held+0xb5/0x140 [ 1068.197657] ? zap_class+0x640/0x640 [ 1068.201359] ? print_usage_bug+0xc0/0xc0 [ 1068.205408] ? find_held_lock+0x36/0x1c0 [ 1068.209462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1068.214992] ? find_held_lock+0x36/0x1c0 [ 1068.219050] ? mark_held_locks+0xc7/0x130 [ 1068.223182] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1068.228268] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1068.233358] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1068.237976] ? trace_hardirqs_on+0xbd/0x310 [ 1068.242303] ? kasan_check_read+0x11/0x20 [ 1068.246446] ? ___ratelimit+0x3b4/0x672 [ 1068.250427] ? trace_hardirqs_off_caller+0x310/0x310 [ 1068.255515] ? trace_hardirqs_on+0x310/0x310 [ 1068.259912] ? lock_downgrade+0x900/0x900 [ 1068.264096] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1068.269184] ? ___ratelimit+0x3b9/0x672 [ 1068.273160] ? idr_get_free+0xf70/0xf70 [ 1068.277121] ? _raw_spin_unlock_irq+0x27/0x80 [ 1068.281598] ? _raw_spin_unlock_irq+0x27/0x80 [ 1068.286084] oom_kill_process.cold.27+0x10/0x903 [ 1068.290826] ? _raw_spin_unlock_irq+0x27/0x80 [ 1068.295319] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1068.299893] ? oom_evaluate_task+0x540/0x540 [ 1068.304289] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1068.309818] ? cgroup_procs_next+0x70/0x70 [ 1068.314038] ? _raw_spin_unlock_irq+0x60/0x80 [ 1068.318520] ? oom_badness+0xaa0/0xaa0 [ 1068.322397] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1068.327139] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1068.332664] ? mem_cgroup_iter_break+0x30/0x30 [ 1068.337238] ? cgroup_file_notify+0x226/0x2f0 [ 1068.341896] out_of_memory+0xa84/0x1430 [ 1068.345859] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1068.350429] ? kasan_check_read+0x11/0x20 [ 1068.354566] ? oom_killer_disable+0x3a0/0x3a0 [ 1068.359062] mem_cgroup_out_of_memory+0x15e/0x210 [ 1068.363898] ? memory_oom_group_write+0x160/0x160 [ 1068.368733] ? memcg_kmem_charge_memcg+0x7c/0x120 [ 1068.373564] ? page_counter_try_charge+0x1c1/0x220 [ 1068.378483] try_charge+0xda9/0x1700 [ 1068.382187] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 1068.386864] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1068.391779] ? kasan_check_read+0x11/0x20 [ 1068.395930] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1068.401200] ? rcu_softirq_qs+0x20/0x20 [ 1068.405183] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 1068.410713] ? __kernel_text_address+0xd/0x40 [ 1068.415215] ? lock_page_memcg+0x350/0x350 [ 1068.419442] ? lock_acquire+0x1ed/0x520 [ 1068.423406] ? mem_cgroup_oom_control_write+0x100/0x100 [ 1068.428760] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1068.434491] ? check_preemption_disabled+0x48/0x280 [ 1068.439505] memcg_kmem_charge_memcg+0x7c/0x120 [ 1068.444181] ? memcg_kmem_put_cache+0xb0/0xb0 [ 1068.448670] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1068.454028] memcg_kmem_charge+0x149/0x350 [ 1068.458251] __alloc_pages_nodemask+0x75e/0xea0 [ 1068.462927] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1068.468193] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 1068.473197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1068.478722] ? check_preemption_disabled+0x48/0x280 [ 1068.483729] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1068.489253] ? rcu_pm_notify+0xc0/0xc0 [ 1068.493131] ? copy_process+0x2026/0x87a0 [ 1068.497265] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1068.502266] ? kmem_cache_alloc_node+0x349/0x730 [ 1068.507011] copy_process+0xa09/0x87a0 [ 1068.510882] ? zap_class+0x640/0x640 [ 1068.514581] ? mark_held_locks+0x130/0x130 [ 1068.518800] ? load_balance+0x157d/0x39a0 [ 1068.522938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1068.528462] ? reuse_swap_page+0x4bd/0x1520 [ 1068.532768] ? swp_swapcount+0x530/0x530 [ 1068.536812] ? find_held_lock+0x36/0x1c0 [ 1068.540971] ? __cleanup_sighand+0x70/0x70 [ 1068.545195] ? find_held_lock+0x36/0x1c0 [ 1068.549247] ? try_to_wake_up+0x11c/0x1440 [ 1068.553466] ? lock_downgrade+0x900/0x900 [ 1068.557604] ? zap_class+0x640/0x640 [ 1068.561306] ? trace_hardirqs_off+0xb8/0x310 [ 1068.565707] ? kasan_check_read+0x11/0x20 [ 1068.569839] ? do_raw_spin_unlock+0xa7/0x330 [ 1068.574231] ? trace_hardirqs_on+0x310/0x310 [ 1068.578629] ? lock_acquire+0x1ed/0x520 [ 1068.582619] ? find_held_lock+0x36/0x1c0 [ 1068.586672] ? do_wp_page+0x127c/0x2920 [ 1068.590631] ? lock_downgrade+0x900/0x900 [ 1068.594766] ? wake_up_page_bit+0x6f0/0x6f0 [ 1068.599072] ? print_usage_bug+0xc0/0xc0 [ 1068.603123] ? kasan_check_read+0x11/0x20 [ 1068.607260] ? do_raw_spin_unlock+0xa7/0x330 [ 1068.611656] ? do_raw_spin_trylock+0x270/0x270 [ 1068.616227] ? pgd_free+0x380/0x380 [ 1068.619840] ? _raw_spin_unlock+0x2c/0x50 [ 1068.623978] ? do_wp_page+0x528/0x2920 [ 1068.627854] ? __lock_acquire+0x62f/0x4c20 [ 1068.632083] ? finish_mkwrite_fault+0x650/0x650 [ 1068.636740] ? __lock_acquire+0x62f/0x4c20 [ 1068.640994] ? mark_held_locks+0x130/0x130 [ 1068.645218] ? lock_downgrade+0x900/0x900 [ 1068.649355] ? __lock_acquire+0x62f/0x4c20 [ 1068.653572] ? mark_held_locks+0x130/0x130 [ 1068.657790] ? rcu_softirq_qs+0x20/0x20 [ 1068.661757] ? mark_held_locks+0x130/0x130 [ 1068.665984] ? zap_class+0x640/0x640 [ 1068.669681] ? mark_held_locks+0x130/0x130 [ 1068.673905] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1068.679447] ? check_preemption_disabled+0x48/0x280 [ 1068.684454] ? __lock_is_held+0xb5/0x140 [ 1068.688508] ? print_usage_bug+0xc0/0xc0 [ 1068.692578] ? print_usage_bug+0xc0/0xc0 [ 1068.696655] ? print_usage_bug+0xc0/0xc0 [ 1068.700729] ? print_usage_bug+0xc0/0xc0 [ 1068.704783] ? __inode_attach_wb+0x13f0/0x13f0 [ 1068.709355] ? find_held_lock+0x36/0x1c0 [ 1068.713407] ? __lock_acquire+0x62f/0x4c20 [ 1068.717629] ? __lock_acquire+0x62f/0x4c20 [ 1068.721851] ? mark_held_locks+0x130/0x130 [ 1068.726094] ? kasan_check_read+0x11/0x20 [ 1068.730231] ? do_raw_spin_lock+0x14f/0x350 [ 1068.734535] ? rwlock_bug.part.2+0x90/0x90 [ 1068.738754] ? touch_atime+0x1d8/0x320 [ 1068.742628] ? lock_downgrade+0x900/0x900 [ 1068.746794] ? __handle_mm_fault+0xa57/0x5be0 [ 1068.751302] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1068.756164] ? zap_class+0x640/0x640 [ 1068.759865] ? touch_atime+0x103/0x320 [ 1068.763740] ? zap_class+0x640/0x640 [ 1068.767457] ? atime_needs_update+0x710/0x710 [ 1068.771941] ? zap_class+0x640/0x640 [ 1068.775649] ? find_held_lock+0x36/0x1c0 [ 1068.779730] _do_fork+0x1cb/0x11d0 [ 1068.783262] ? fork_idle+0x1d0/0x1d0 [ 1068.786966] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1068.791885] ? kasan_check_read+0x11/0x20 [ 1068.796028] ? kasan_check_read+0x11/0x20 [ 1068.800192] ? _copy_to_user+0xc8/0x110 [ 1068.804161] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1068.809685] ? put_timespec64+0x10f/0x1b0 [ 1068.813817] ? nsecs_to_jiffies+0x30/0x30 [ 1068.817953] ? do_syscall_64+0x9a/0x820 [ 1068.821922] ? do_syscall_64+0x9a/0x820 [ 1068.825909] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1068.830487] ? trace_hardirqs_on+0xbd/0x310 [ 1068.834798] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1068.840330] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1068.845701] ? trace_hardirqs_off_caller+0x310/0x310 [ 1068.850803] __x64_sys_clone+0xbf/0x150 [ 1068.854768] do_syscall_64+0x1b9/0x820 [ 1068.858638] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1068.863989] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1068.868905] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1068.873735] ? trace_hardirqs_on_caller+0x310/0x310 [ 1068.878766] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1068.883776] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1068.888610] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1068.893783] RIP: 0033:0x455c2a [ 1068.897000] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1068.915918] RSP: 002b:0000000000a3fd50 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1068.923622] RAX: ffffffffffffffda RBX: 0000000000a3fd50 RCX: 0000000000455c2a [ 1068.930891] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1068.938146] RBP: 0000000000a3fd90 R08: 0000000000000001 R09: 0000000000c92940 [ 1068.945398] R10: 0000000000c92c10 R11: 0000000000000246 R12: 0000000000000001 [ 1068.952657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003 [ 1068.961541] Task in /syz3 killed as a result of limit of /syz3 [ 1068.967712] memory: usage 6244kB, limit 0kB, failcnt 275 [ 1068.973171] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1068.980007] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1068.980019] Memory cgroup stats for /syz3: cache:80KB rss:88KB rss_huge:0KB shmem:20KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:68KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1069.006152] Memory cgroup out of memory: Kill process 23604 (syz-executor3) score 8489000 or sacrifice child [ 1069.006407] Killed process 23604 (syz-executor3) total-vm:70208kB, anon-rss:108kB, file-rss:33728kB, shmem-rss:0kB [ 1069.028629] oom_reaper: reaped process 23604 (syz-executor3), now anon-rss:0kB, file-rss:32832kB, shmem-rss:0kB 22:45:15 executing program 4: r0 = memfd_create(&(0x7f0000d0bffe)="7b10", 0x3) fcntl$addseals(r0, 0x409, 0x4) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="e5", 0x1}]) 22:45:15 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0xc4100, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 22:45:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/16) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x531, 0x0, 0x3}, 0x14) getrlimit(0x0, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000400)={0xf, 0x8, 0xfa00, {r1, 0x200000000007}}, 0x10) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x100000000, 0x101000) getrandom(&(0x7f00000001c0), 0x5c0699e775d81eda, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22}}, 0xfffffffffffffffd, 0x8, 0x8000000000000, 0x1, 0x20}, &(0x7f0000000340)=0x98) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000240)={0x4, 0xde83, 0x8, 0x185f, 0x2, 0x66, 0x1, 0x6, 0xf060, 0x2, 0x1, 0x4}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000940)={0x28c30f3b}, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000980)) perf_event_open(&(0x7f00000008c0)={0x0, 0x70, 0x9, 0x80, 0x9, 0x200000000000000, 0x0, 0x8001, 0x0, 0x1, 0x3f, 0x6, 0x0, 0xff, 0x5, 0x3, 0x3f, 0x80, 0x2, 0x8, 0x19, 0x7, 0x0, 0x5, 0x10001, 0x4, 0xdf5, 0x6, 0xc592, 0x0, 0x7d4, 0x0, 0x3b90, 0x6, 0x8, 0xffff, 0x0, 0x9, 0x0, 0x7, 0x5, @perf_config_ext={0x5, 0x1}, 0x4000, 0x3, 0x7, 0x7, 0x6, 0x40, 0x401}, 0x0, 0x2, r2, 0x3) r5 = getpid() ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000000c0)) r6 = socket$inet(0x2, 0x2000000000b, 0xfff) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000380)={0x40, 0x20, 0x200, 0xe838, 0xfffffffffffffb90, 0x10001, 0xfff}, 0x20) mq_timedreceive(r3, &(0x7f0000000180)=""/32, 0x20, 0xffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x1) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f00000001c0)=r5) getsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000100)=0x10) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'bond0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000200)={0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 22:45:15 executing program 0: socket$alg(0x26, 0x5, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x10) fsetxattr(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f00000002c0)='ns/net\x00') r1 = socket$inet6(0xa, 0x40000080808, 0x1) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="0500db44c7450000bf7c2276b30007040000f0fff8ffffff79a4dcff08000000b4060000ffffff311a25b7ecff2d020000000000e556b35eb8006504040001000000043580179dc61d000014000000009500000000000000000000000000000000000000000000"], 0x0}, 0x48) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x20000010001, &(0x7f00000004c0)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000780)=r6) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a3, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xff, 0x7f, 0x2}}, 0x44) r7 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a0205000000ac", 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r8 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) futimesat(r7, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) listen(r8, 0xffffffffffffff00) 22:45:15 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0xffea) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@random="f32afebdb6e6", @dev, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @random="6f71d730a424", @dev, @dev, @broadcast}}}}, &(0x7f0000000100)) 22:45:15 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f7570004956f24670ff1fe1b998e8dde47ffe6243a178980411e1440dd62570ea1cd48704b17a1262adcd38f62402be075611b4a8b423a019659cd0aa0236a73e03c507ef0165ddfa2cb2417f2e3be04c156b78621b9c5e95a3954c42170655932611fdc3c6350b3481451eddd4", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)="6d656d6f72792e6d6178004ed4a03cf470e91c00000000000000000000000000000006208195906fdf3415fb7c57c5e11da2b6758794e7523970e8a0e06f253b45cd6463c5efd0b7391a9910f3c1ea6416c2801400000000000000b43f4b7102c57fc458181626578fd8450a27753fd72dce4dc72f55e6404e4fbe526cf0582e6687d9fe337449a6c3babde2e24f238e2eec3fe0d7912915efd8a84bd924c831b1de97eed0d2179bff119b14060b0c26e43e2f08d65c09384638ebffca768abac84b56e8", 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) 22:45:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x2, &(0x7f0000000040)=0x1000000, 0x8) close(r2) close(r1) 22:45:16 executing program 0: socket$alg(0x26, 0x5, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x10) fsetxattr(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f00000002c0)='ns/net\x00') r1 = socket$inet6(0xa, 0x40000080808, 0x1) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="0500db44c7450000bf7c2276b30007040000f0fff8ffffff79a4dcff08000000b4060000ffffff311a25b7ecff2d020000000000e556b35eb8006504040001000000043580179dc61d000014000000009500000000000000000000000000000000000000000000"], 0x0}, 0x48) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x20000010001, &(0x7f00000004c0)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000780)=r6) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a3, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xff, 0x7f, 0x2}}, 0x44) r7 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a0205000000ac", 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r8 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) futimesat(r7, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) listen(r8, 0xffffffffffffff00) [ 1069.742998] IPVS: ftp: loaded support on port[0] = 21 [ 1069.778404] IPVS: ftp: loaded support on port[0] = 21 22:45:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)=ANY=[]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[0x0, 0x9, 0x0]}) 22:45:16 executing program 0: socket$alg(0x26, 0x5, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x10) fsetxattr(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f00000002c0)='ns/net\x00') r1 = socket$inet6(0xa, 0x40000080808, 0x1) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="0500db44c7450000bf7c2276b30007040000f0fff8ffffff79a4dcff08000000b4060000ffffff311a25b7ecff2d020000000000e556b35eb8006504040001000000043580179dc61d000014000000009500000000000000000000000000000000000000000000"], 0x0}, 0x48) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x20000010001, &(0x7f00000004c0)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000780)=r6) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a3, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xff, 0x7f, 0x2}}, 0x44) r7 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a0205000000ac", 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r8 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) futimesat(r7, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{}, {0x77359400}}) listen(r8, 0xffffffffffffff00) 22:45:16 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x410, 0x0, {}, {}, {0x0, 0x0, 0x87}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "20ae6a7b649c31f7"}}, 0x48}}, 0x0) 22:45:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000080)=""/16) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0x531, 0x0, 0x3}, 0x14) getrlimit(0x0, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000400)={0xf, 0x8, 0xfa00, {r1, 0x200000000007}}, 0x10) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x100000000, 0x101000) getrandom(&(0x7f00000001c0), 0x5c0699e775d81eda, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22}}, 0xfffffffffffffffd, 0x8, 0x8000000000000, 0x1, 0x20}, &(0x7f0000000340)=0x98) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000240)={0x4, 0xde83, 0x8, 0x185f, 0x2, 0x66, 0x1, 0x6, 0xf060, 0x2, 0x1, 0x4}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000940)={0x28c30f3b}, 0x4) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000980)) perf_event_open(&(0x7f00000008c0)={0x0, 0x70, 0x9, 0x80, 0x9, 0x200000000000000, 0x0, 0x8001, 0x0, 0x1, 0x3f, 0x6, 0x0, 0xff, 0x5, 0x3, 0x3f, 0x80, 0x2, 0x8, 0x19, 0x7, 0x0, 0x5, 0x10001, 0x4, 0xdf5, 0x6, 0xc592, 0x0, 0x7d4, 0x0, 0x3b90, 0x6, 0x8, 0xffff, 0x0, 0x9, 0x0, 0x7, 0x5, @perf_config_ext={0x5, 0x1}, 0x4000, 0x3, 0x7, 0x7, 0x6, 0x40, 0x401}, 0x0, 0x2, r2, 0x3) r5 = getpid() ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000000c0)) r6 = socket$inet(0x2, 0x2000000000b, 0xfff) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000380)={0x40, 0x20, 0x200, 0xe838, 0xfffffffffffffb90, 0x10001, 0xfff}, 0x20) mq_timedreceive(r3, &(0x7f0000000180)=""/32, 0x20, 0xffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f00000009c0)=ANY=[@ANYBLOB="e00000017f000001fffffffff503ffffcf22e35892f9000000000000000000000000000000000000ff0000ff00000000000000000000000000000000000000000037ba68bb0eaebbd784c5000000000000000000000000000000ffff00ffff000000000000000000000000090003000803ff07ff000765727370616e3000000000000000000076657468315f746f5f62726964676500000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000001c00b79de1a69a683dea6df3871aa7b9abdc00000000000000000000f000200100000000000000000000000000000000000000000000000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000107000000e9000000040000000100000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000f0003801000000000000000000000000000000000000000000000000000048004c454400000000000000000000000000000000000000000000000000000073797a31000000000000000000000000000000400000000000000001020000007f00e6ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000088006d616e676c650000000000000000000000000000000000000000005707000000000000000000000000000000000000e80000000000000000000000000000000000007f0000010f000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff0000fa016aa872cb8f9303439bc41ec1cf968ff6f90c0003343bd02d2446283c9329f2928eba7452c30e1ea4bfd4a619a2c5eeeb588ae4e215f054a06cb32cba76482bf734c38a18ebf79960e244a1b6915bb14272031ae221e2adba9af35de391f9309d514a7bb28506b31bcfe91e3912e38b3c0289905779fcd7ee097450e6a20a901cf63d37705649c09cb8effb05d7ed87bd73b5944b4e9dcb0363b5503063d494ea062b824080d6843ee8a6ebf81fb0685992e751166d65e49dd3cc532aeb8a69f30d963640a1f1d8226856b12b1e68aec65652390be848b3c0d3cd0b398ba1e8e1c01c1b8e4c91a3618333709e"], 0x1) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f00000001c0)=r5) getsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000100)=0x10) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'bond0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000200)={0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) [ 1071.479388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.486213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.493682] device bridge_slave_0 entered promiscuous mode [ 1071.581506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.588171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.595868] device bridge_slave_1 entered promiscuous mode [ 1071.616937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.624027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.631714] device bridge_slave_0 entered promiscuous mode [ 1071.664861] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1071.713524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.720183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.727649] device bridge_slave_1 entered promiscuous mode [ 1071.735939] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1071.772980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1071.819663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1071.993141] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1072.011732] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1072.094477] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1072.112768] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1072.186624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1072.193654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1072.207874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1072.214896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1072.246509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1072.261451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1072.305395] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1072.312309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1072.461802] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1072.469801] team0: Port device team_slave_0 added [ 1072.484559] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1072.493143] team0: Port device team_slave_0 added [ 1072.516103] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1072.523624] team0: Port device team_slave_1 added [ 1072.535845] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1072.543602] team0: Port device team_slave_1 added [ 1072.569594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1072.589683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1073.077920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1073.090943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1073.349952] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1073.358219] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1073.365395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1073.373424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1073.381891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1073.390922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1073.643029] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1073.651399] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1073.658894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1073.672277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1073.695656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1073.703703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1075.586707] IPVS: stopping master sync thread 30625 ... [ 1075.593107] IPVS: stopping master sync thread 30589 ... [ 1075.601807] IPVS: stopping backup sync thread 31517 ... [ 1075.610556] device bridge_slave_1 left promiscuous mode [ 1075.616586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.666043] device bridge_slave_0 left promiscuous mode [ 1075.671549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.756770] device bridge_slave_1 left promiscuous mode [ 1075.762245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.836388] device bridge_slave_0 left promiscuous mode [ 1075.841887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.817970] team0 (unregistering): Port device team_slave_1 removed [ 1079.828354] team0 (unregistering): Port device team_slave_0 removed [ 1079.838785] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1079.879647] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1079.954907] bond0 (unregistering): Released all slaves [ 1080.088146] team0 (unregistering): Port device team_slave_1 removed [ 1080.099146] team0 (unregistering): Port device team_slave_0 removed [ 1080.110748] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1080.159187] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1080.239554] bond0 (unregistering): Released all slaves [ 1080.357060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.363465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.370209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.376633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.383921] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1080.392727] Left network mode [ 1080.393482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.402285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1080.409039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.415461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1080.424147] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1081.355182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1081.363058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1082.976889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.002660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.135652] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1083.166909] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1083.292662] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1083.299609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1083.314791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1083.338025] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1083.344225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1083.351947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1083.484552] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.507488] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.529507] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1084.538469] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=1000 [ 1084.565635] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1084.571045] CPU: 1 PID: 5870 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1084.578322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1084.587670] Call Trace: [ 1084.590247] dump_stack+0x244/0x39d [ 1084.593868] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1084.599065] dump_header+0x27b/0xf72 [ 1084.602784] ? mark_held_locks+0x130/0x130 [ 1084.607011] ? pagefault_out_of_memory+0x197/0x197 [ 1084.611931] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1084.617459] ? check_preemption_disabled+0x48/0x280 [ 1084.622472] ? zap_class+0x640/0x640 [ 1084.626187] ? __lock_is_held+0xb5/0x140 [ 1084.630239] ? zap_class+0x640/0x640 [ 1084.633941] ? print_usage_bug+0xc0/0xc0 [ 1084.637993] ? find_held_lock+0x36/0x1c0 [ 1084.642047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1084.647575] ? find_held_lock+0x36/0x1c0 [ 1084.651626] ? mark_held_locks+0xc7/0x130 [ 1084.655779] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1084.660867] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1084.665957] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1084.670543] ? trace_hardirqs_on+0xbd/0x310 [ 1084.674876] ? kasan_check_read+0x11/0x20 [ 1084.679011] ? ___ratelimit+0x3b4/0x672 [ 1084.682973] ? trace_hardirqs_off_caller+0x310/0x310 [ 1084.688068] ? trace_hardirqs_on+0x310/0x310 [ 1084.692468] ? lock_downgrade+0x900/0x900 [ 1084.696617] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1084.701748] ? ___ratelimit+0x3b9/0x672 [ 1084.705726] ? idr_get_free+0xf70/0xf70 [ 1084.709686] ? _raw_spin_unlock_irq+0x27/0x80 [ 1084.714217] ? _raw_spin_unlock_irq+0x27/0x80 [ 1084.718706] oom_kill_process.cold.27+0x10/0x903 [ 1084.723453] ? _raw_spin_unlock_irq+0x27/0x80 [ 1084.728111] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1084.732682] ? oom_evaluate_task+0x540/0x540 [ 1084.737075] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1084.742600] ? cgroup_procs_next+0x70/0x70 [ 1084.746825] ? _raw_spin_unlock_irq+0x60/0x80 [ 1084.751305] ? oom_badness+0xaa0/0xaa0 [ 1084.755182] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1084.759923] ? mem_cgroup_iter_break+0x30/0x30 [ 1084.764499] ? mark_held_locks+0xc7/0x130 [ 1084.768640] out_of_memory+0xa84/0x1430 [ 1084.772601] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1084.777170] ? preempt_schedule+0x4d/0x60 [ 1084.781308] ? oom_killer_disable+0x3a0/0x3a0 [ 1084.785813] ? preempt_schedule+0x4d/0x60 [ 1084.789949] ? ___preempt_schedule+0x16/0x18 [ 1084.794361] mem_cgroup_out_of_memory+0x15e/0x210 [ 1084.799208] ? memory_oom_group_write+0x160/0x160 [ 1084.804041] ? page_counter_memparse+0xb5/0x1d0 [ 1084.808704] memory_max_write+0x1b4/0x3f0 [ 1084.812842] ? lock_acquire+0x1ed/0x520 [ 1084.816803] ? kernfs_fop_write+0x227/0x480 [ 1084.821110] ? mem_cgroup_write+0x400/0x400 [ 1084.825437] ? __might_fault+0x12b/0x1e0 [ 1084.829493] ? zap_class+0x640/0x640 [ 1084.833206] ? mem_cgroup_write+0x400/0x400 [ 1084.837518] cgroup_file_write+0x2f7/0x7e0 [ 1084.841752] ? cgroup_migrate_add_task+0xcd0/0xcd0 [ 1084.846919] ? __lock_is_held+0xb5/0x140 [ 1084.851293] ? reiserfs_allocate_blocknrs+0x21b0/0x5f80 [ 1084.856656] ? cgroup_migrate_add_task+0xcd0/0xcd0 [ 1084.861575] kernfs_fop_write+0x2ba/0x480 [ 1084.865716] __vfs_write+0x119/0x9f0 [ 1084.869422] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1084.874946] ? kernfs_vma_page_mkwrite+0x230/0x230 [ 1084.879862] ? kernel_read+0x120/0x120 [ 1084.883737] ? __lock_is_held+0xb5/0x140 [ 1084.887794] ? rcu_read_lock_sched_held+0x14f/0x180 [ 1084.892800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1084.898339] ? __sb_start_write+0x1b2/0x370 [ 1084.902656] vfs_write+0x1fc/0x560 [ 1084.906208] ksys_write+0x101/0x260 [ 1084.909832] ? __ia32_sys_read+0xb0/0xb0 [ 1084.913883] ? trace_hardirqs_off_caller+0x310/0x310 [ 1084.919003] __x64_sys_write+0x73/0xb0 [ 1084.922896] do_syscall_64+0x1b9/0x820 [ 1084.926787] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1084.932143] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1084.937058] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1084.941889] ? trace_hardirqs_on_caller+0x310/0x310 [ 1084.946921] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1084.951926] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1084.956937] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1084.961810] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1084.966996] RIP: 0033:0x457679 [ 1084.970196] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1084.989113] RSP: 002b:00007f246f3a0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1084.996819] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457679 [ 1085.004105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1085.011366] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1085.018623] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f246f3a16d4 [ 1085.025899] R13: 00000000004c60dd R14: 00000000004dac78 R15: 00000000ffffffff [ 1085.043635] Task in /syz3 killed as a result of limit of /syz3 [ 1085.050748] memory: usage 7188kB, limit 0kB, failcnt 278 [ 1085.056279] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 1085.063044] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 22:45:31 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)="2e2f6367726f7570004956f24670ff1fe1b998e8dde47ffe6243a178980411e1440dd62570ea1cd48704b17a1262adcd38f62402be075611b4a8b423a019659cd0aa0236a73e03c507ef0165ddfa2cb2417f2e3be04c156b78621b9c5e95a3954c42170655932611fdc3c6350b3481451eddd4", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)="6d656d6f72792e6d6178004ed4a03cf470e91c00000000000000000000000000000006208195906fdf3415fb7c57c5e11da2b6758794e7523970e8a0e06f253b45cd6463c5efd0b7391a9910f3c1ea6416c2801400000000000000b43f4b7102c57fc458181626578fd8450a27753fd72dce4dc72f55e6404e4fbe526cf0582e6687d9fe337449a6c3babde2e24f238e2eec3fe0d7912915efd8a84bd924c831b1de97eed0d2179bff119b14060b0c26e43e2f08d65c09384638ebffca768abac84b56e8", 0x2, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$cgroup_int(r1, 0x0, 0x0) 22:45:31 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") readv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/104, 0x8e0}], 0x1) 22:45:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)=ANY=[]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[0x0, 0x9, 0x0]}) 22:45:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)=ANY=[]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[0x0, 0x9, 0x0]}) 22:45:31 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x40}}, 0x0) 22:45:31 executing program 2: ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000340)={0x0, 0x0, 0x2080}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000001c0)=0x80, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000200)=0x37, 0x80800) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000080), 0x50000000000443) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x1f086}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="00fd0000626f6eaa0000000000000046a50000000000000000000000"], 0x1}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000200)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) [ 1085.069255] Memory cgroup stats for /syz3: cache:80KB rss:2152KB rss_huge:2048KB shmem:20KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1085.089877] Memory cgroup out of memory: Kill process 5869 (syz-executor3) score 8760000 or sacrifice child [ 1085.099903] Killed process 5871 (syz-executor3) total-vm:70344kB, anon-rss:2188kB, file-rss:33500kB, shmem-rss:0kB [ 1085.111552] oom_reaper: reaped process 5871 (syz-executor3), now anon-rss:0kB, file-rss:32668kB, shmem-rss:0kB [ 1085.156974] syz-executor3 invoked oom-killer: gfp_mask=0x6000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 1085.175559] syz-executor3 cpuset=syz3 mems_allowed=0 [ 1085.180753] CPU: 0 PID: 5321 Comm: syz-executor3 Not tainted 4.20.0-rc6+ #371 [ 1085.188029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1085.197392] Call Trace: [ 1085.199995] dump_stack+0x244/0x39d [ 1085.203645] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1085.208854] ? mark_held_locks+0x130/0x130 [ 1085.213101] ? mark_held_locks+0x130/0x130 [ 1085.217362] dump_header+0x27b/0xf72 [ 1085.221099] ? pagefault_out_of_memory+0x197/0x197 [ 1085.226038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1085.231585] ? check_preemption_disabled+0x48/0x280 [ 1085.236619] ? zap_class+0x640/0x640 [ 1085.240345] ? __lock_is_held+0xb5/0x140 [ 1085.244426] ? zap_class+0x640/0x640 [ 1085.248150] ? print_usage_bug+0xc0/0xc0 [ 1085.252219] ? find_held_lock+0x36/0x1c0 [ 1085.256288] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1085.261837] ? find_held_lock+0x36/0x1c0 [ 1085.265913] ? mark_held_locks+0xc7/0x130 [ 1085.270067] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1085.275171] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1085.280286] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1085.284893] ? trace_hardirqs_on+0xbd/0x310 [ 1085.289224] ? kasan_check_read+0x11/0x20 [ 1085.293381] ? ___ratelimit+0x3b4/0x672 [ 1085.297380] ? trace_hardirqs_off_caller+0x310/0x310 [ 1085.302502] ? trace_hardirqs_on+0x310/0x310 [ 1085.306923] ? lock_downgrade+0x900/0x900 [ 1085.311086] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1085.316199] ? ___ratelimit+0x3b9/0x672 [ 1085.320186] ? idr_get_free+0xf70/0xf70 [ 1085.324167] ? _raw_spin_unlock_irq+0x27/0x80 [ 1085.328666] ? _raw_spin_unlock_irq+0x27/0x80 [ 1085.333180] oom_kill_process.cold.27+0x10/0x903 [ 1085.337943] ? _raw_spin_unlock_irq+0x27/0x80 [ 1085.342446] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1085.347053] ? oom_evaluate_task+0x540/0x540 [ 1085.351467] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1085.357016] ? cgroup_procs_next+0x70/0x70 [ 1085.361267] ? _raw_spin_unlock_irq+0x60/0x80 [ 1085.365856] ? oom_badness+0xaa0/0xaa0 [ 1085.369749] ? mem_cgroup_scan_tasks+0x1c3/0x1e0 [ 1085.374521] ? mem_cgroup_iter_break+0x30/0x30 [ 1085.379123] ? mark_held_locks+0xc7/0x130 [ 1085.383279] out_of_memory+0xa84/0x1430 [ 1085.387354] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1085.391947] ? kasan_check_read+0x11/0x20 [ 1085.396104] ? oom_killer_disable+0x3a0/0x3a0 [ 1085.400621] mem_cgroup_out_of_memory+0x15e/0x210 [ 1085.405477] ? memory_oom_group_write+0x160/0x160 [ 1085.410327] ? mem_cgroup_try_charge+0x627/0xe20 [ 1085.415103] ? page_counter_try_charge+0x1c1/0x220 [ 1085.420039] try_charge+0xda9/0x1700 [ 1085.423762] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1085.428695] ? kasan_check_read+0x11/0x20 [ 1085.432857] ? mem_cgroup_from_task+0x1f0/0x1f0 [ 1085.437552] ? get_mem_cgroup_from_mm.part.62+0x221/0x880 [ 1085.443098] ? lock_page_memcg+0x350/0x350 [ 1085.447358] ? lock_acquire+0x1ed/0x520 [ 1085.451354] ? mem_cgroup_oom_control_write+0x100/0x100 [ 1085.456731] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1085.462307] ? check_preemption_disabled+0x48/0x280 [ 1085.467352] ? kasan_check_read+0x11/0x20 [ 1085.471516] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1085.476797] ? rcu_softirq_qs+0x20/0x20 [ 1085.480792] mem_cgroup_try_charge+0x627/0xe20 [ 1085.485384] ? mem_cgroup_protected+0xa60/0xa60 [ 1085.490077] ? print_usage_bug+0xc0/0xc0 [ 1085.494154] ? mark_held_locks+0x130/0x130 [ 1085.498403] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1085.503958] mem_cgroup_try_charge_delay+0x1d/0xa0 [ 1085.508898] wp_page_copy+0x520/0x2500 [ 1085.512793] ? zap_class+0x640/0x640 [ 1085.516524] ? follow_pfn+0x2e0/0x2e0 [ 1085.520343] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1085.525888] ? reuse_swap_page+0x4bd/0x1520 [ 1085.530214] ? find_held_lock+0x36/0x1c0 [ 1085.534280] ? swp_swapcount+0x530/0x530 [ 1085.538362] ? is_bpf_text_address+0xac/0x170 [ 1085.543615] ? check_preemption_disabled+0x48/0x280 [ 1085.548646] ? kasan_check_read+0x11/0x20 [ 1085.552798] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1085.558082] ? rcu_softirq_qs+0x20/0x20 [ 1085.562066] ? print_usage_bug+0xc0/0xc0 [ 1085.566317] ? print_usage_bug+0xc0/0xc0 [ 1085.570400] ? zap_class+0x640/0x640 [ 1085.574121] ? kernel_text_address+0x79/0xf0 [ 1085.578540] ? print_usage_bug+0xc0/0xc0 [ 1085.582605] ? __kernel_text_address+0xd/0x40 [ 1085.587104] ? unwind_get_return_address+0x61/0xa0 [ 1085.592043] ? print_usage_bug+0xc0/0xc0 [ 1085.596118] ? find_held_lock+0x36/0x1c0 [ 1085.600197] ? do_wp_page+0x518/0x2920 [ 1085.604097] ? lock_downgrade+0x900/0x900 [ 1085.608254] ? wake_up_page_bit+0x6f0/0x6f0 [ 1085.612593] ? kasan_check_read+0x11/0x20 [ 1085.616747] ? do_raw_spin_unlock+0xa7/0x330 [ 1085.621160] ? do_raw_spin_trylock+0x270/0x270 [ 1085.625748] ? __pte_alloc_kernel+0x220/0x220 [ 1085.630262] do_wp_page+0x520/0x2920 [ 1085.633986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1085.639535] ? finish_mkwrite_fault+0x650/0x650 [ 1085.644214] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 1085.649762] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1085.655327] ? process_measurement+0x280/0x1bf0 [ 1085.660015] ? zap_class+0x640/0x640 [ 1085.663734] ? zap_class+0x640/0x640 [ 1085.667464] ? __lock_acquire+0x62f/0x4c20 [ 1085.671726] ? mark_held_locks+0x130/0x130 [ 1085.675972] ? mntput_no_expire+0x1ba/0xc00 [ 1085.680305] ? lock_downgrade+0x900/0x900 [ 1085.684468] ? check_preemption_disabled+0x48/0x280 [ 1085.689506] ? print_usage_bug+0xc0/0xc0 [ 1085.693571] ? print_usage_bug+0xc0/0xc0 [ 1085.697641] ? print_usage_bug+0xc0/0xc0 [ 1085.701708] ? rcu_softirq_qs+0x20/0x20 [ 1085.705691] ? lock_downgrade+0x900/0x900 [ 1085.709844] ? check_preemption_disabled+0x48/0x280 [ 1085.714880] ? __lock_acquire+0x62f/0x4c20 [ 1085.719124] ? print_usage_bug+0xc0/0xc0 [ 1085.723191] ? print_usage_bug+0xc0/0xc0 [ 1085.727267] ? mark_held_locks+0x130/0x130 [ 1085.731564] ? __lock_acquire+0x62f/0x4c20 [ 1085.735819] ? lock_acquire+0x1ed/0x520 [ 1085.739805] ? __handle_mm_fault+0x1fac/0x5be0 [ 1085.744405] ? kasan_check_read+0x11/0x20 [ 1085.748561] ? do_raw_spin_lock+0x14f/0x350 [ 1085.752894] ? rwlock_bug.part.2+0x90/0x90 [ 1085.757131] ? unwind_dump+0x190/0x190 [ 1085.761042] __handle_mm_fault+0x3bef/0x5be0 [ 1085.765472] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 1085.770328] ? find_held_lock+0x36/0x1c0 [ 1085.774415] ? __might_fault+0x12b/0x1e0 [ 1085.778496] ? zap_class+0x640/0x640 [ 1085.782218] ? zap_class+0x640/0x640 [ 1085.785947] ? find_held_lock+0x36/0x1c0 [ 1085.790023] ? handle_mm_fault+0x42a/0xc70 [ 1085.794265] ? lock_downgrade+0x900/0x900 [ 1085.798429] ? check_preemption_disabled+0x48/0x280 [ 1085.803462] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1085.808407] ? kasan_check_read+0x11/0x20 [ 1085.812560] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1085.817843] ? rcu_softirq_qs+0x20/0x20 [ 1085.821824] ? trace_hardirqs_off_caller+0x310/0x310 [ 1085.826944] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1085.832514] ? check_preemption_disabled+0x48/0x280 [ 1085.837552] handle_mm_fault+0x54f/0xc70 [ 1085.841638] ? __handle_mm_fault+0x5be0/0x5be0 [ 1085.846234] ? find_vma+0x34/0x190 [ 1085.849804] __do_page_fault+0x5e8/0xe60 [ 1085.853875] ? trace_hardirqs_off+0xb8/0x310 [ 1085.858302] do_page_fault+0xf2/0x7e0 [ 1085.862116] ? vmalloc_sync_all+0x30/0x30 [ 1085.866273] ? error_entry+0x70/0xd0 [ 1085.869992] ? trace_hardirqs_off_caller+0xbb/0x310 [ 1085.875014] ? trace_hardirqs_on_caller+0xc0/0x310 [ 1085.879953] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1085.884897] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1085.889747] ? trace_hardirqs_on_caller+0x310/0x310 [ 1085.894856] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1085.900316] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1085.905363] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1085.910389] ? page_fault+0x8/0x30 [ 1085.913941] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1085.918796] ? page_fault+0x8/0x30 [ 1085.922350] page_fault+0x1e/0x30 [ 1085.925809] RIP: 0033:0x4303de [ 1085.929006] Code: 00 00 00 48 89 d0 48 83 c4 08 5b 5d c3 0f 1f 80 00 00 00 00 be 01 00 00 00 83 3d 94 60 61 00 00 74 08 f0 0f b1 33 75 07 eb 1b <0f> b1 33 74 16 48 8d 3b 48 81 ec 80 00 00 00 e8 fe 09 fe ff 48 81 [ 1085.947917] RSP: 002b:0000000000a3ebe0 EFLAGS: 00010246 [ 1085.953290] RAX: 0000000000000000 RBX: 000000000070e640 RCX: 00000000004569e4 [ 1085.960566] RDX: 0000000000a3ec00 RSI: 0000000000000001 RDI: 0000000000008030 [ 1085.967842] RBP: 0000000000008030 R08: 0000000000000001 R09: 0000000001157940 [ 1085.975116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000a3fde0 [ 1085.982390] R13: 0000000000108c63 R14: 0000000000000000 R15: 0000000000000003 22:45:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x72, &(0x7f0000000040)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, @dccp={{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bea295", 0x0, "d20434"}}}}}}, 0x0) 22:45:32 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc0884123, &(0x7f0000000240)) [ 1086.122851] Task in /syz3 killed as a result of limit of /syz3 [ 1086.129106] memory: usage 4844kB, limit 0kB, failcnt 286 [ 1086.144520] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 22:45:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)=ANY=[]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[0x0, 0x9, 0x0]}) [ 1086.175328] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 22:45:32 executing program 2: ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000340)={0x0, 0x0, 0x2080}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000001c0)=0x80, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000200)=0x37, 0x80800) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000080), 0x50000000000443) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x1f086}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="00fd0000626f6eaa0000000000000046a50000000000000000000000"], 0x1}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000200)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 22:45:32 executing program 0: ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000340)={0x0, 0x0, 0x2080}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000001c0)=0x80, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000200)=0x37, 0x80800) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000080), 0x50000000000443) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x1f086}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="00fd0000626f6eaa0000000000000046a50000000000000000000000"], 0x1}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000200)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 22:45:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)=ANY=[]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[0x0, 0x9, 0x0]}) [ 1086.548781] Memory cgroup stats for /syz3: cache:80KB rss:0KB rss_huge:0KB shmem:20KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:36KB inactive_file:0KB active_file:0KB unevictable:0KB [ 1086.574127] Memory cgroup out of memory: Kill process 5321 (syz-executor3) score 8421000 or sacrifice child [ 1086.595215] Killed process 5321 (syz-executor3) total-vm:70212kB, anon-rss:76kB, file-rss:33488kB, shmem-rss:0kB [ 1086.614068] oom_reaper: reaped process 5321 (syz-executor3), now anon-rss:0kB, file-rss:32592kB, shmem-rss:0kB 22:45:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)=ANY=[]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[0x0, 0x9, 0x0]}) 22:45:33 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}]}, 0x80}}, 0x0) 22:45:33 executing program 2: ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000340)={0x0, 0x0, 0x2080}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000001c0)=0x80, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000200)=0x37, 0x80800) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000080), 0x50000000000443) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x1f086}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="00fd0000626f6eaa0000000000000046a50000000000000000000000"], 0x1}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000200)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 22:45:33 executing program 0: ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000340)={0x0, 0x0, 0x2080}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000001c0)=0x80, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000200)=0x37, 0x80800) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000080), 0x50000000000443) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x1f086}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="00fd0000626f6eaa0000000000000046a50000000000000000000000"], 0x1}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000200)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 22:45:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x8000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005ff0)}, 0x0) write$binfmt_misc(r1, &(0x7f0000000440)={'syz1'}, 0x1200e) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x1, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000180)=ANY=[]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[0x0, 0x9, 0x0]}) 22:45:33 executing program 3: io_submit(0x0, 0x0, 0x0) setfsuid(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000040000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000}) accept(0xffffffffffffffff, 0x0, &(0x7f0000000300)) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@remote, @empty, @dev={0xfe, 0x80, [], 0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) socket$inet6(0xa, 0x807, 0x40) 22:45:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_dump={0x47}}) close(r2) close(r1) 22:45:33 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@fragment, 0x8) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="8c5f76f4", 0x4}], 0x1}, 0x0) 22:45:33 executing program 4: clone(0x2102001fff, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x15, 0x0, 0x0, "a7bafd016ed116afccfcd2543c6d7db6"}, 0x15, 0x1) sched_setscheduler(r0, 0x5, &(0x7f0000000000)) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xfffffffffffffffe) 22:45:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2b, 0x0, @local, @local, {[], @tcp={{0x2100, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 22:45:33 executing program 2: ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000340)={0x0, 0x0, 0x2080}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000001c0)=0x80, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000200)=0x37, 0x80800) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000080), 0x50000000000443) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x1f086}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="00fd0000626f6eaa0000000000000046a50000000000000000000000"], 0x1}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000200)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) [ 1087.279256] IPVS: ftp: loaded support on port[0] = 21 22:45:33 executing program 0: ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000340)={0x0, 0x0, 0x2080}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000001c0)=0x80, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r2, 0x0, &(0x7f0000000200)=0x37, 0x80800) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00') sendfile(r3, r4, &(0x7f0000000080), 0x50000000000443) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x1f086}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="00fd0000626f6eaa0000000000000046a50000000000000000000000"], 0x1}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000200)={'veth1_to_team\x00', {0x2, 0x0, @broadcast}}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x151) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) [ 1087.319411] dccp_invalid_packet: invalid packet type 22:45:33 executing program 4: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003740)={'#! ', './file0', [{0x20, 'selinux'}, {0x20, 'ctr-twofish-3way\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'ctr-twofish-3way\x00'}]}, 0x4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000000440)=@ax25, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000740)=""/245, 0xf5}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/119, 0x77}], 0x5, &(0x7f0000000b00)=""/249, 0xf9}}, {{&(0x7f0000000f00)=@ax25, 0x80, &(0x7f0000001340)=[{&(0x7f0000001080)=""/91, 0x5b}, {&(0x7f0000001100)=""/146, 0x7fffefa5}, {&(0x7f0000001200)=""/21, 0x15}, {&(0x7f0000001240)=""/243, 0xf3}], 0x4, &(0x7f00000026c0)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 22:45:33 executing program 5: syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x34182) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@remote}, &(0x7f0000005380)=0x14) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100202e2f07006c653020237a7d3975e93a69284781c694eb902e7c671d2cf67d21f5dd6393b48ddd93a343cd0d55906785815bc329caee315d1ea03bdb5071a8966df5920a2e1dee4eb3be4af9a410f6301abd910c7610e711b133c5db8eeb9a3d7be57f2b1862f08e969dd2a78567604669b742cd9d047402331d092e28c9da9cedc90ce38ef098bdc36f582b3d658bdf3c3cd467a5a48234127b8630b7290cac6e1cd53b726c600551cd3fa8c0de8c78e40b056c95a8d80164a5c5de7c3805a71f5cda9935bcab32ce3b4fc956a1c5bcd79ed02f09bba11766578cfdbdc8a7d954ef716735d8afdff002defc7768ce51e0eb9df947a5cd7a8c0768bc5e2d2a10e18a"], 0x104) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) [ 1087.388441] device bridge_slave_1 left promiscuous mode [ 1087.393996] bridge0: port 2(bridge_slave_1) entered disabled state 22:45:33 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000200)="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", 0x200) [ 1087.480701] device bridge_slave_0 left promiscuous mode [ 1087.490277] bridge0: port 1(bridge_slave_0) entered disabled state 22:45:34 executing program 5: syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x34182) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@remote}, &(0x7f0000005380)=0x14) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x104) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) 22:45:34 executing program 1: syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x34182) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@remote}, &(0x7f0000005380)=0x14) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x104) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) [ 1087.640113] team0 (unregistering): Port device team_slave_1 removed [ 1087.703300] team0 (unregistering): Port device team_slave_0 removed [ 1087.743853] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1087.830922] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1087.884420] bond0 (unregistering): Released all slaves [ 1088.552182] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.558773] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.567418] device bridge_slave_0 entered promiscuous mode [ 1088.614455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.621038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.628909] device bridge_slave_1 entered promiscuous mode [ 1088.676800] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1088.721975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1088.861657] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1088.910383] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1088.969705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1088.976734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1089.024647] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1089.031645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1089.140735] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1089.147920] team0: Port device team_slave_0 added [ 1089.176927] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1089.184073] team0: Port device team_slave_1 added [ 1089.211735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1089.256694] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1089.303090] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1089.310553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1089.322451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1089.346792] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1089.353878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1089.363711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1089.665802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.672174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.678878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.685254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.692623] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1089.955230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1090.665568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.757271] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1090.852317] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1090.859691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1090.867337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1090.954890] 8021q: adding VLAN 0 to HW filter on device team0 22:45:38 executing program 5: syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x34182) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@remote}, &(0x7f0000005380)=0x14) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x104) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) 22:45:38 executing program 4: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003740)={'#! ', './file0', [{0x20, 'selinux'}, {0x20, 'ctr-twofish-3way\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'ctr-twofish-3way\x00'}]}, 0x4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000000440)=@ax25, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000740)=""/245, 0xf5}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/119, 0x77}], 0x5, &(0x7f0000000b00)=""/249, 0xf9}}, {{&(0x7f0000000f00)=@ax25, 0x80, &(0x7f0000001340)=[{&(0x7f0000001080)=""/91, 0x5b}, {&(0x7f0000001100)=""/146, 0x7fffefa5}, {&(0x7f0000001200)=""/21, 0x15}, {&(0x7f0000001240)=""/243, 0xf3}], 0x4, &(0x7f00000026c0)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 22:45:38 executing program 2: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003740)={'#! ', './file0', [{0x20, 'selinux'}, {0x20, 'ctr-twofish-3way\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'ctr-twofish-3way\x00'}]}, 0x4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000000440)=@ax25, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000740)=""/245, 0xf5}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/119, 0x77}], 0x5, &(0x7f0000000b00)=""/249, 0xf9}}, {{&(0x7f0000000f00)=@ax25, 0x80, &(0x7f0000001340)=[{&(0x7f0000001080)=""/91, 0x5b}, {&(0x7f0000001100)=""/146, 0x7fffefa5}, {&(0x7f0000001200)=""/21, 0x15}, {&(0x7f0000001240)=""/243, 0xf3}], 0x4, &(0x7f00000026c0)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 22:45:38 executing program 1: syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x34182) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@remote}, &(0x7f0000005380)=0x14) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x104) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) 22:45:38 executing program 3: io_submit(0x0, 0x0, 0x0) setfsuid(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000040000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000}) accept(0xffffffffffffffff, 0x0, &(0x7f0000000300)) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@remote, @empty, @dev={0xfe, 0x80, [], 0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) socket$inet6(0xa, 0x807, 0x40) 22:45:38 executing program 0: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003740)={'#! ', './file0', [{0x20, 'selinux'}, {0x20, 'ctr-twofish-3way\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'ctr-twofish-3way\x00'}]}, 0x4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000000440)=@ax25, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000740)=""/245, 0xf5}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/119, 0x77}], 0x5, &(0x7f0000000b00)=""/249, 0xf9}}, {{&(0x7f0000000f00)=@ax25, 0x80, &(0x7f0000001340)=[{&(0x7f0000001080)=""/91, 0x5b}, {&(0x7f0000001100)=""/146, 0x7fffefa5}, {&(0x7f0000001200)=""/21, 0x15}, {&(0x7f0000001240)=""/243, 0xf3}], 0x4, &(0x7f00000026c0)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 22:45:38 executing program 4: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003740)={'#! ', './file0', [{0x20, 'selinux'}, {0x20, 'ctr-twofish-3way\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'ctr-twofish-3way\x00'}]}, 0x4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000000440)=@ax25, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000740)=""/245, 0xf5}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/119, 0x77}], 0x5, &(0x7f0000000b00)=""/249, 0xf9}}, {{&(0x7f0000000f00)=@ax25, 0x80, &(0x7f0000001340)=[{&(0x7f0000001080)=""/91, 0x5b}, {&(0x7f0000001100)=""/146, 0x7fffefa5}, {&(0x7f0000001200)=""/21, 0x15}, {&(0x7f0000001240)=""/243, 0xf3}], 0x4, &(0x7f00000026c0)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 22:45:38 executing program 5: syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x34182) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@remote}, &(0x7f0000005380)=0x14) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x104) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) 22:45:38 executing program 1: syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x34182) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000005340)={@remote}, &(0x7f0000005380)=0x14) r0 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x104) close(r0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), &(0x7f0000000140)) 22:45:38 executing program 2: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003740)={'#! ', './file0', [{0x20, 'selinux'}, {0x20, 'ctr-twofish-3way\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'ctr-twofish-3way\x00'}]}, 0x4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000000440)=@ax25, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000740)=""/245, 0xf5}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/119, 0x77}], 0x5, &(0x7f0000000b00)=""/249, 0xf9}}, {{&(0x7f0000000f00)=@ax25, 0x80, &(0x7f0000001340)=[{&(0x7f0000001080)=""/91, 0x5b}, {&(0x7f0000001100)=""/146, 0x7fffefa5}, {&(0x7f0000001200)=""/21, 0x15}, {&(0x7f0000001240)=""/243, 0xf3}], 0x4, &(0x7f00000026c0)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 22:45:38 executing program 0: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003740)={'#! ', './file0', [{0x20, 'selinux'}, {0x20, 'ctr-twofish-3way\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'ctr-twofish-3way\x00'}]}, 0x4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000000440)=@ax25, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000740)=""/245, 0xf5}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/119, 0x77}], 0x5, &(0x7f0000000b00)=""/249, 0xf9}}, {{&(0x7f0000000f00)=@ax25, 0x80, &(0x7f0000001340)=[{&(0x7f0000001080)=""/91, 0x5b}, {&(0x7f0000001100)=""/146, 0x7fffefa5}, {&(0x7f0000001200)=""/21, 0x15}, {&(0x7f0000001240)=""/243, 0xf3}], 0x4, &(0x7f00000026c0)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 22:45:38 executing program 4: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003740)={'#! ', './file0', [{0x20, 'selinux'}, {0x20, 'ctr-twofish-3way\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'ctr-twofish-3way\x00'}]}, 0x4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000000440)=@ax25, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000740)=""/245, 0xf5}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/119, 0x77}], 0x5, &(0x7f0000000b00)=""/249, 0xf9}}, {{&(0x7f0000000f00)=@ax25, 0x80, &(0x7f0000001340)=[{&(0x7f0000001080)=""/91, 0x5b}, {&(0x7f0000001100)=""/146, 0x7fffefa5}, {&(0x7f0000001200)=""/21, 0x15}, {&(0x7f0000001240)=""/243, 0xf3}], 0x4, &(0x7f00000026c0)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 22:45:38 executing program 5: io_submit(0x0, 0x0, 0x0) setfsuid(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000040000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000}) accept(0xffffffffffffffff, 0x0, &(0x7f0000000300)) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@remote, @empty, @dev={0xfe, 0x80, [], 0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) socket$inet6(0xa, 0x807, 0x40) 22:45:38 executing program 2: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003740)={'#! ', './file0', [{0x20, 'selinux'}, {0x20, 'ctr-twofish-3way\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'ctr-twofish-3way\x00'}]}, 0x4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000000440)=@ax25, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000740)=""/245, 0xf5}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/119, 0x77}], 0x5, &(0x7f0000000b00)=""/249, 0xf9}}, {{&(0x7f0000000f00)=@ax25, 0x80, &(0x7f0000001340)=[{&(0x7f0000001080)=""/91, 0x5b}, {&(0x7f0000001100)=""/146, 0x7fffefa5}, {&(0x7f0000001200)=""/21, 0x15}, {&(0x7f0000001240)=""/243, 0xf3}], 0x4, &(0x7f00000026c0)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 22:45:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000002c0)=r4) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a3, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r5 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a0205000000ac", 0x0) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0x0) close(r2) r6 = dup3(r1, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f0000000180), 0x400000000000117, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r9, r10/1000+30000}, {0x77359400}}) listen(r8, 0xffffffffffffff00) munlockall() 22:45:38 executing program 0: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003740)={'#! ', './file0', [{0x20, 'selinux'}, {0x20, 'ctr-twofish-3way\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'skcipher\x00'}, {0x20, 'ctr-twofish-3way\x00'}]}, 0x4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfd06) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000000440)=@ax25, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000740)=""/245, 0xf5}, {&(0x7f0000000940)=""/161, 0xa1}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/119, 0x77}], 0x5, &(0x7f0000000b00)=""/249, 0xf9}}, {{&(0x7f0000000f00)=@ax25, 0x80, &(0x7f0000001340)=[{&(0x7f0000001080)=""/91, 0x5b}, {&(0x7f0000001100)=""/146, 0x7fffefa5}, {&(0x7f0000001200)=""/21, 0x15}, {&(0x7f0000001240)=""/243, 0xf3}], 0x4, &(0x7f00000026c0)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) 22:45:38 executing program 3: io_submit(0x0, 0x0, 0x0) setfsuid(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000040000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000}) accept(0xffffffffffffffff, 0x0, &(0x7f0000000300)) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@remote, @empty, @dev={0xfe, 0x80, [], 0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) socket$inet6(0xa, 0x807, 0x40) 22:45:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x108) 22:45:39 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) [ 1092.550672] device gretap0 left promiscuous mode [ 1092.559025] bridge0: port 3(gretap0) entered disabled state 22:45:39 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 22:45:39 executing program 5: io_submit(0x0, 0x0, 0x0) setfsuid(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000040000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000}) accept(0xffffffffffffffff, 0x0, &(0x7f0000000300)) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@remote, @empty, @dev={0xfe, 0x80, [], 0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) socket$inet6(0xa, 0x807, 0x40) 22:45:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001800)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x0, 0x3}, [@NDA_DST_IPV6={0x14}]}, 0xff3b}}, 0x0) 22:45:39 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000140)) 22:45:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a40)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 22:45:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000002c0)=r4) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a3, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r5 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a0205000000ac", 0x0) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0x0) close(r2) r6 = dup3(r1, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f0000000180), 0x400000000000117, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r9, r10/1000+30000}, {0x77359400}}) listen(r8, 0xffffffffffffff00) munlockall() 22:45:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000002c0)=r4) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a3, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r5 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a0205000000ac", 0x0) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0x0) close(r2) r6 = dup3(r1, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f0000000180), 0x400000000000117, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r9, r10/1000+30000}, {0x77359400}}) listen(r8, 0xffffffffffffff00) munlockall() 22:45:39 executing program 3: io_submit(0x0, 0x0, 0x0) setfsuid(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000040000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000}) accept(0xffffffffffffffff, 0x0, &(0x7f0000000300)) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@remote, @empty, @dev={0xfe, 0x80, [], 0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) socket$inet6(0xa, 0x807, 0x40) 22:45:39 executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0xffffffffffffffc8) syz_emit_ethernet(0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c000000000004907809000000ffffffff00000000636ff9eccce9827b41bf4b6d6b00089078c6e4f7d30d3f52dbc94136af77f9949ea0f8f1"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x210002, 0x40) timerfd_gettime(r1, &(0x7f0000000100)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r2, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000500)={0x10000, {0x2, 0x4e23, @loopback}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e21, @multicast2}, 0x8, 0x9, 0xfff, 0x9, 0x8, &(0x7f0000000100)='lo\x00', 0x685b, 0x800, 0x1}) r5 = socket$inet6(0xa, 0x0, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x13, 0x0, 0x0, 0x1, 0x0, r6, 0x1a}, 0x2c) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000000c0)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f00000007c0)={'ah\x00'}, &(0x7f0000000800)=0x1e) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x5a6b010000000000, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)={0x20, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x5, 0xb, [@typed={0x2f, 0x0, @fd}]}]}, 0x20}}, 0x0) 22:45:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000002c0)=r4) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a3, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r5 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a0205000000ac", 0x0) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0x0) close(r2) r6 = dup3(r1, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f0000000180), 0x400000000000117, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r9, r10/1000+30000}, {0x77359400}}) listen(r8, 0xffffffffffffff00) munlockall() [ 1093.080468] netlink: 4 bytes leftover after parsing attributes in process `syz-executor2'. 22:45:39 executing program 5: io_submit(0x0, 0x0, 0x0) setfsuid(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x0, 0x3ef, 0x1000000000000, 0x3f00000000040000, 0x0, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x2000000}) accept(0xffffffffffffffff, 0x0, &(0x7f0000000300)) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@remote, @empty, @dev={0xfe, 0x80, [], 0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) socket$inet6(0xa, 0x807, 0x40) 22:45:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000002c0)=r4) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a3, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r5 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a0205000000ac", 0x0) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0x0) close(r2) r6 = dup3(r1, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f0000000180), 0x400000000000117, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r9, r10/1000+30000}, {0x77359400}}) listen(r8, 0xffffffffffffff00) munlockall() 22:45:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000002c0)=r4) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a3, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r5 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a0205000000ac", 0x0) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0x0) close(r2) r6 = dup3(r1, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f0000000180), 0x400000000000117, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r9, r10/1000+30000}, {0x77359400}}) listen(r8, 0xffffffffffffff00) munlockall() 22:45:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000500)}) 22:45:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f00000002c0)={0x14, 0x18, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 22:45:39 executing program 3: socketpair$unix(0x1, 0x800000000005, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x12, 0xc0012015, 0x40000084], [0xc1]}) 22:45:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x800000d) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000000f0fff8ffffff79a4dcff08000000b4060000ff7fffff2d020000005eafe556b35eb800650404000100000004040000850000001f000001b70000140000000095000000000000000000000000000000058e5c6e6df31b89512208912fa355aaac9ac3ceb3650eeeb3d3243ba48f712c22a00705319534474476b5f9108bfe28aead7f63cfbf5f36c710c2aad2"], 0x0}, 0x48) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0xa, 0x3, 0x8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000002c0)=r4) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89a3, &(0x7f0000000180)={'bridge0\x00\x00\x00\a\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r5 = memfd_create(&(0x7f0000000140)="2b8b8a16114fdddf6b284699df92d53e6f4a0205000000ac", 0x0) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0x0) close(r2) r6 = dup3(r1, r5, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020900000200000000000000020000000576ffcdbc5042f9019133184efc17fecdc0effb4f77f9363eb314364edc6a6a7cd36bc92d518b74cc195912f3bcdf6842a7b6ccbbff822fd6f21544bc1de89b517c91449d5ffb9687d75fdeae9539940dca17ff63cc13cf00416c30ca960527f41e92ea7b1cac55c137dbeef2deac498ed23631aef3d93b581778a7df4d"], 0x8e}}, 0x40005) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010000000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmmsg(r7, &(0x7f0000000180), 0x400000000000117, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r9, r10/1000+30000}, {0x77359400}}) listen(r8, 0xffffffffffffff00) munlockall() [ 1093.514578] binder: 6401:6403 got transaction with invalid offset (0, min 0 max 0) or object. [ 1093.543910] binder: 6401:6403 transaction failed 29201/-22, size 0-8 line 3035 22:45:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f00000002c0)={0x14, 0x18, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) [ 1093.586211] binder_alloc: binder_alloc_mmap_handler: 6401 20001000-20004000 already mapped failed -16 [ 1093.609133] binder: BINDER_SET_CONTEXT_MGR already set [ 1093.614898] binder_alloc: 6401: binder_alloc_buf, no vma 22:45:40 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, '%eqiv_e(h%iniv(rfc4106(ccm_base(cbc(camellia),sha3-224-generic))'}, 0x58) [ 1093.636410] kvm [6409]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 [ 1093.647106] binder: 6401:6403 ioctl 40046207 0 returned -16 [ 1093.661473] binder: undelivered TRANSACTION_ERROR: 29201 [ 1093.668784] binder: 6401:6411 transaction failed 29189/-3, size 0-8 line 2973 22:45:40 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001680)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000001740)=""/155, 0xfffffffffffffde3}, {&(0x7f00000001c0)=""/11, 0xffb5}, {&(0x7f0000001540)=""/102, 0xfffffffffffffea3}], 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000280)=""/92, 0x5}, {&(0x7f0000000080)=""/7, 0x7}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1}}], 0x1, 0x0, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) [ 1093.707744] binder: undelivered TRANSACTION_ERROR: 29189 22:45:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f00000002c0)={0x14, 0x18, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 22:45:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000500)}) 22:45:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000500)}) 22:45:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000500)}) 22:45:40 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x1}}], 0x1, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1093.911548] binder: 6432:6433 got transaction with invalid offset (0, min 0 max 0) or object. [ 1093.946994] binder: BINDER_SET_CONTEXT_MGR already set 22:45:40 executing program 1: socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) getpgrp(0x0) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0xa0900, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000200)={r3, 0x3}) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x7f, 0xfffffffffffffffe) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000280)={"7465616d5f736c6176655f31008f00", 0xd5ac}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a40)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000002980)=0xe8) getpgrp(0x0) gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000029c0)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc, &(0x7f00000044c0), 0x0, &(0x7f00000029c0)}, 0x7fd) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000100)) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000001c00)={0x0, 0x989680}, &(0x7f0000001c40)={0x8d}, 0x8) syncfs(r2) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) [ 1093.957689] binder: 6434:6438 ioctl 40046207 0 returned -16 [ 1093.969287] binder: 6434:6438 got transaction with invalid offset (0, min 0 max 0) or object. [ 1093.978976] binder: BINDER_SET_CONTEXT_MGR already set [ 1093.979424] binder: 6434:6438 transaction failed 29201/-22, size 0-8 line 3035 [ 1093.988098] binder: 6432:6433 transaction failed 29201/-22, size 0-8 line 3035 22:45:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000013ff1)={&(0x7f00000002c0)={0x14, 0x18, 0x1, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 22:45:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000500)}) [ 1094.007757] binder: 6440:6441 ioctl 40046207 0 returned -16 [ 1094.026063] binder: undelivered TRANSACTION_ERROR: 29201 [ 1094.031787] binder: 6440:6449 got transaction with invalid offset (0, min 0 max 0) or object. [ 1094.041012] binder: undelivered TRANSACTION_ERROR: 29201 22:45:40 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x9) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) close(r0) 22:45:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000500)}) [ 1094.140481] binder: 6440:6449 transaction failed 29201/-22, size 0-8 line 3035 22:45:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x800000005452, &(0x7f0000000100)=0x5) shutdown(r1, 0x1) 22:45:40 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000500)}) [ 1094.221572] binder: undelivered TRANSACTION_ERROR: 29201 [ 1094.254652] binder: 6454:6459 got transaction with invalid offset (0, min 0 max 0) or object. [ 1094.277797] binder: 6454:6459 transaction failed 29201/-22, size 0-8 line 3035 22:45:40 executing program 0: r0 = socket$nl_crypto(0x10, 0x3, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) read$FUSE(r1, &(0x7f00000030c0), 0x1000) chroot(&(0x7f0000000180)='./file0\x00') read$FUSE(r1, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) write$FUSE_ATTR(r1, &(0x7f0000000680)={0x78, 0x0, 0x2, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000004023, 0x0, r2, r3}}}, 0x78) [ 1094.325917] binder: BINDER_SET_CONTEXT_MGR already set [ 1094.341628] binder: undelivered TRANSACTION_ERROR: 29201 [ 1094.341663] binder: 6457:6460 ioctl 40046207 0 returned -16 22:45:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000500)}) [ 1094.372591] binder: 6457:6474 got transaction with invalid offset (0, min 0 max 0) or object. [ 1094.382052] binder: 6457:6474 transaction failed 29201/-22, size 0-8 line 3035 [ 1094.406793] binder: BINDER_SET_CONTEXT_MGR already set 22:45:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000500)}) [ 1094.428755] binder: undelivered TRANSACTION_ERROR: 29201 [ 1094.434900] binder: 6469:6475 ioctl 40046207 0 returned -16 [ 1094.460122] binder: 6469:6470 transaction failed 29189/-22, size 0-8 line 2834 22:45:40 executing program 1: socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) getpgrp(0x0) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0xa0900, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000200)={r3, 0x3}) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x7f, 0xfffffffffffffffe) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000280)={"7465616d5f736c6176655f31008f00", 0xd5ac}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a40)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000002980)=0xe8) getpgrp(0x0) gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000029c0)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc, &(0x7f00000044c0), 0x0, &(0x7f00000029c0)}, 0x7fd) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000100)) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000001c00)={0x0, 0x989680}, &(0x7f0000001c40)={0x8d}, 0x8) syncfs(r2) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 22:45:40 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000044000)) nanosleep(&(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) tkill(r0, 0x1000000000016) [ 1094.550921] binder: 6479:6481 got transaction with invalid offset (0, min 0 max 0) or object. [ 1094.557961] binder: undelivered TRANSACTION_ERROR: 29189 [ 1094.585713] binder: BINDER_SET_CONTEXT_MGR already set 22:45:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x6) r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040), &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000500)}) [ 1094.601748] binder: 6482:6483 ioctl 40046207 0 returned -16 [ 1094.609477] binder: 6479:6481 transaction failed 29201/-22, size 0-8 line 3035 [ 1094.624505] binder: 6482:6483 got transaction with invalid offset (0, min 0 max 0) or object. [ 1094.646963] binder: 6482:6483 transaction failed 29201/-22, size 0-8 line 3035 [ 1094.656574] binder: undelivered TRANSACTION_ERROR: 29201 [ 1094.692197] binder: undelivered TRANSACTION_ERROR: 29201 22:45:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f00000000c0)="1e", 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) close(r0) 22:45:41 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xffff, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, {0x3012}}) 22:45:41 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7fc, 0x0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x13, 0x0, "8604b028431e50d4133ed8f1cbfc154ba61053e90ece1e04"}) [ 1094.772203] binder: 6493:6497 got transaction with invalid offset (0, min 0 max 0) or object. 22:45:41 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x1, 0x4) r1 = dup2(r0, r0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x6, @remote}, 0x1c) 22:45:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x8000000}, 0xb) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x70}], 0x1}, 0x0) 22:45:41 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0x8, 0x8, [0x0, 0x0]}) 22:45:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={&(0x7f0000000040), 0xc, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x30, 0x12, 0x301, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x4, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0) 22:45:41 executing program 5: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xffffffffffffff7f}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x15, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffb}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffdb0}, 0x8, 0x0) read(r2, &(0x7f0000481000)=""/128, 0x1d8) 22:45:41 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x3, 0x100) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$RTC_PIE_OFF(r1, 0x7006) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, &(0x7f00000ddff8), 0x102000002) lstat(&(0x7f0000000240)='./file0\x00', 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', 0x0, r4) 22:45:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x8000000}, 0xb) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x70}], 0x1}, 0x0) 22:45:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000380)="263e0f232cb9f40a00000f32650f2222b9800000c00f3235000400000f30b9800000c00f3235002000000f30c4e2053c54bba4f32e670f09b95c0300000f3266b8cf008ed8b805000000b97cc9b7940f01c1", 0x52}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000180)={0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:45:41 executing program 1: socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) getpgrp(0x0) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0xa0900, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000200)={r3, 0x3}) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x7f, 0xfffffffffffffffe) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000280)={"7465616d5f736c6176655f31008f00", 0xd5ac}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a40)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000002980)=0xe8) getpgrp(0x0) gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000029c0)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc, &(0x7f00000044c0), 0x0, &(0x7f00000029c0)}, 0x7fd) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000100)) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000001c00)={0x0, 0x989680}, &(0x7f0000001c40)={0x8d}, 0x8) syncfs(r2) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 22:45:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x8000000}, 0xb) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x70}], 0x1}, 0x0) 22:45:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x400000006940000}) rename(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file1\x00') setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x0, 0x7}, 0x8) 22:45:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000500]}, 0x0, 0x0, 0x3, 0x3}, 0x23) 22:45:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000500]}, 0x0, 0x0, 0x3, 0x3}, 0x23) 22:45:42 executing program 1: socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x2000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) getpgrp(0x0) openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0xa0900, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000200)={r3, 0x3}) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x7f, 0xfffffffffffffffe) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000280)={"7465616d5f736c6176655f31008f00", 0xd5ac}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a40)={{{@in6=@mcast2, @in6=@loopback}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000002980)=0xe8) getpgrp(0x0) gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000029c0)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000480)=@proc={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc, &(0x7f00000044c0), 0x0, &(0x7f00000029c0)}, 0x7fd) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000100)) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000001c00)={0x0, 0x989680}, &(0x7f0000001c40)={0x8d}, 0x8) syncfs(r2) write$binfmt_misc(r2, &(0x7f0000000440)={'syz1'}, 0x1200e) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000080)) 22:45:42 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f00006e9ff8)='./file0\x00', 0x80) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3, 0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', &(0x7f00000001c0)=""/140, 0xffffffffffffffc7) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @empty, 0x868}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 22:45:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x8000000}, 0xb) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/112, 0x70}], 0x1}, 0x0) 22:45:42 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x3, 0x100) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$RTC_PIE_OFF(r1, 0x7006) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, &(0x7f00000ddff8), 0x102000002) lstat(&(0x7f0000000240)='./file0\x00', 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', 0x0, r4) 22:45:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x400000006940000}) rename(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file1\x00') setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x0, 0x7}, 0x8) 22:45:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000500]}, 0x0, 0x0, 0x3, 0x3}, 0x23) 22:45:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000500]}, 0x0, 0x0, 0x3, 0x3}, 0x23) 22:45:42 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x200000000001, 0x4, {0x5, @raw_data="efaa91e861aa9431ed1253263499a0b1b370c43f9fe8f2927337a7d398c6845cb38171589b15e8d8b61dc2e54209994fec0662ed54b2baa44404f48509356f73689ffee8d5b5900744889c501420724ea72c482a9e0dd0fa701629106ab573c94c82fa974e2cc0b74e5eb5d3df1eda89581c045ae28a41b014d328db1ec69773717d52c347e1ab293032682811cc8c1a943e4ff99d6413e857409534cbeb3d5c2cef8143ea24613061aca7b83d6a2dbb623aa0cb7093e6818c917710012a3be504412cf3dc2dc008"}}) 22:45:42 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x100000000000204, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000200)=""/202) 22:45:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x400000006940000}) rename(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file1\x00') setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x0, 0x7}, 0x8) 22:45:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000001140)={0x0, 0x0, 0x2080, {0xffffffffffffffff}, [], "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", "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"}) 22:45:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @dev, 0x1, 0x4, [@remote, @dev, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}]}, 0x20) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000580), 0x4) sendmmsg(r2, &(0x7f0000001080)=[{{&(0x7f00000001c0)=@ethernet={0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x8, 0x3, [0x0, 0x6, 0xffffffffffff0000]}, &(0x7f00000003c0)=0xe) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000540)) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab55", 0x2) accept$alg(r3, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000001180)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r4 = dup3(r2, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x117, 0x5}}, 0x20) read$FUSE(r4, &(0x7f00000011c0), 0x1000) pipe(&(0x7f0000000240)) 22:45:42 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 22:45:43 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f00006e9ff8)='./file0\x00', 0x80) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3, 0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', &(0x7f00000001c0)=""/140, 0xffffffffffffffc7) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @empty, 0x868}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 22:45:43 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x3, 0x100) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$RTC_PIE_OFF(r1, 0x7006) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, &(0x7f00000ddff8), 0x102000002) lstat(&(0x7f0000000240)='./file0\x00', 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', 0x0, r4) 22:45:43 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f00006e9ff8)='./file0\x00', 0x80) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3, 0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', &(0x7f00000001c0)=""/140, 0xffffffffffffffc7) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @empty, 0x868}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 22:45:43 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_buf(r0, 0x29, 0x49, &(0x7f0000c86000), &(0x7f0000000000)=0x15c) 22:45:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=0xffffffff, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000489004bddd9de91be10eebf000ee91e18f0c76fbb232a07424ae1e901d2da75af1f0200f5ab26d7e071fb35331ce39c5a0000") ioctl$FS_IOC_FSGETXATTR(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x400000006940000}) rename(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file1\x00') setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x0, 0x7}, 0x8) 22:45:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @dev, 0x1, 0x4, [@remote, @dev, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}]}, 0x20) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000580), 0x4) sendmmsg(r2, &(0x7f0000001080)=[{{&(0x7f00000001c0)=@ethernet={0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x8, 0x3, [0x0, 0x6, 0xffffffffffff0000]}, &(0x7f00000003c0)=0xe) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000540)) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab55", 0x2) accept$alg(r3, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000001180)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r4 = dup3(r2, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x117, 0x5}}, 0x20) read$FUSE(r4, &(0x7f00000011c0), 0x1000) pipe(&(0x7f0000000240)) 22:45:43 executing program 0: ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x75bd, 0x0, 0x0, 0x0, 0x7}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:45:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0x980915, 0x2}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x88000, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)) getpeername$packet(r4, &(0x7f0000001900)={0x11, 0x0, 0x0}, &(0x7f0000001940)=0x14) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000001980)=r5) write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="ec797a31"], 0x4) [ 1097.253236] *** Guest State *** 22:45:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @dev, 0x1, 0x4, [@remote, @dev, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}]}, 0x20) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000580), 0x4) sendmmsg(r2, &(0x7f0000001080)=[{{&(0x7f00000001c0)=@ethernet={0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x8, 0x3, [0x0, 0x6, 0xffffffffffff0000]}, &(0x7f00000003c0)=0xe) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000540)) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab55", 0x2) accept$alg(r3, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000001180)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r4 = dup3(r2, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x117, 0x5}}, 0x20) read$FUSE(r4, &(0x7f00000011c0), 0x1000) pipe(&(0x7f0000000240)) [ 1097.300496] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 1097.451905] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 1097.529494] CR3 = 0x0000000000000000 [ 1097.534579] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 1097.550935] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 1097.561235] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 1097.568325] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 1097.579875] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1097.588195] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1097.606970] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 22:45:44 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f00006e9ff8)='./file0\x00', 0x80) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3, 0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', &(0x7f00000001c0)=""/140, 0xffffffffffffffc7) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @empty, 0x868}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 22:45:44 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x3, 0x100) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$RTC_PIE_OFF(r1, 0x7006) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='sit0\x00', 0x10) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) r3 = memfd_create(&(0x7f00000000c0)="000000008c00000000000000000000", 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r0, r2, &(0x7f00000ddff8), 0x102000002) lstat(&(0x7f0000000240)='./file0\x00', 0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000040)='./file0\x00', 0x0, r4) [ 1097.628846] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1097.637479] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 1097.657504] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1097.685799] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 22:45:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @dev, 0x1, 0x4, [@remote, @dev, @loopback, @dev={0xac, 0x14, 0x14, 0x1c}]}, 0x20) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x6) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0xc, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000580), 0x4) sendmmsg(r2, &(0x7f0000001080)=[{{&(0x7f00000001c0)=@ethernet={0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000e80)}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x8, 0x3, [0x0, 0x6, 0xffffffffffff0000]}, &(0x7f00000003c0)=0xe) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000540)) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab55", 0x2) accept$alg(r3, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000001180)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r4 = dup3(r2, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x117, 0x5}}, 0x20) read$FUSE(r4, &(0x7f00000011c0), 0x1000) pipe(&(0x7f0000000240)) [ 1097.728878] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 1097.807344] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1097.886760] EFER = 0x0000000000000000 PAT = 0x0007040600070406 22:45:44 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f00006e9ff8)='./file0\x00', 0x80) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3, 0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', &(0x7f00000001c0)=""/140, 0xffffffffffffffc7) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @empty, 0x868}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 22:45:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0x980915, 0x2}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x88000, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)) getpeername$packet(r4, &(0x7f0000001900)={0x11, 0x0, 0x0}, &(0x7f0000001940)=0x14) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000001980)=r5) write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="ec797a31"], 0x4) [ 1097.968049] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1098.051137] Interruptibility = 00000001 ActivityState = 00000000 [ 1098.124508] *** Host State *** [ 1098.128213] RIP = 0xffffffff812047de RSP = 0xffff888191af7390 [ 1098.134751] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1098.141449] FSBase=00007f8160997700 GSBase=ffff8881daf00000 TRBase=fffffe0000003000 [ 1098.149905] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1098.160187] CR0=0000000080050033 CR3=000000018c206000 CR4=00000000001426e0 [ 1098.167530] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87e01360 [ 1098.174452] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1098.180796] *** Control State *** [ 1098.184459] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000c2 [ 1098.191438] EntryControls=0000d1ff ExitControls=002fefff [ 1098.197225] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 1098.204402] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1098.211590] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 1098.218433] reason=80000021 qualification=0000000000000000 [ 1098.224967] IDTVectoring: info=00000000 errcode=00000000 [ 1098.230927] TSC Offset = 0xfffffdb1ac7b0a1c [ 1098.235941] EPT pointer = 0x00000001cc5ee01e 22:45:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0x980915, 0x2}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x88000, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)) getpeername$packet(r4, &(0x7f0000001900)={0x11, 0x0, 0x0}, &(0x7f0000001940)=0x14) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000001980)=r5) write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="ec797a31"], 0x4) 22:45:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0x980915, 0x2}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x88000, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)) getpeername$packet(r4, &(0x7f0000001900)={0x11, 0x0, 0x0}, &(0x7f0000001940)=0x14) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000001980)=r5) write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="ec797a31"], 0x4) 22:45:44 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = msgget(0xffffffffffffffff, 0x0) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/33) 22:45:45 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x10}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 22:45:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0x980915, 0x2}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x88000, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)) getpeername$packet(r4, &(0x7f0000001900)={0x11, 0x0, 0x0}, &(0x7f0000001940)=0x14) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000001980)=r5) write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="ec797a31"], 0x4) 22:45:45 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f00006e9ff8)='./file0\x00', 0x80) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3, 0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', &(0x7f00000001c0)=""/140, 0xffffffffffffffc7) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @empty, 0x868}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 22:45:45 executing program 4: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff86, 0x2}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) 22:45:45 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) creat(&(0x7f00006e9ff8)='./file0\x00', 0x80) setxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3, 0x18, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='security.capability\x00', &(0x7f00000001c0)=""/140, 0xffffffffffffffc7) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x7, @empty, 0x868}, 0x1c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0) 22:45:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0x980915, 0x2}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x88000, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)) getpeername$packet(r4, &(0x7f0000001900)={0x11, 0x0, 0x0}, &(0x7f0000001940)=0x14) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000001980)=r5) write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="ec797a31"], 0x4) 22:45:45 executing program 4: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff86, 0x2}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) 22:45:45 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r1, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0x980915, 0x2}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x88000, 0x0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000100)) getpeername$packet(r4, &(0x7f0000001900)={0x11, 0x0, 0x0}, &(0x7f0000001940)=0x14) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000001980)=r5) write$binfmt_misc(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="ec797a31"], 0x4) 22:45:45 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000100)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in6=@mcast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000640)) getgroups(0x2, &(0x7f0000000800)=[0xffffffffffffffff, 0xee01]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900), &(0x7f0000000940)=0xc) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)) dup2(r0, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x40000000000, 0x5, 0x0, &(0x7f0000000000)) 22:45:45 executing program 4: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff86, 0x2}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) 22:45:45 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000100)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in6=@mcast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000640)) getgroups(0x2, &(0x7f0000000800)=[0xffffffffffffffff, 0xee01]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900), &(0x7f0000000940)=0xc) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)) dup2(r0, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x40000000000, 0x5, 0x0, &(0x7f0000000000)) 22:45:45 executing program 5: socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000100)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in6=@mcast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000640)) getgroups(0x2, &(0x7f0000000800)=[0xffffffffffffffff, 0xee01]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900), &(0x7f0000000940)=0xc) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)) dup2(r0, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x40000000000, 0x5, 0x0, &(0x7f0000000000)) 22:45:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0xc, 0x2, [@IFLA_IPTUN_PROTO={0x8, 0x9, 0x14}]}}}]}, 0x3c}}, 0x0) 22:45:45 executing program 4: syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @dev, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff86, 0x2}]}}, @icmp=@timestamp_reply}}}}, &(0x7f0000000100)) [ 1099.476607] netlink: 'syz-executor3': attribute type 9 has an invalid length. 22:45:46 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x8840, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x3d, &(0x7f0000164ff0)={0x0, &(0x7f0000000080)}, 0xa) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001300)={0x0, 0x7fffffff}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001740)={r3, @in6={{0xa, 0x4e21, 0x5, @ipv4={[], [], @loopback}, 0x2}}, 0x100}, 0x88) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000680)={r3, 0x4, 0x30}, 0x290) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000200)=0x10001, 0x4) rt_sigprocmask(0x5, &(0x7f0000000580)={0x2}, &(0x7f0000000480), 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="ed5e683e4aff75573525928ec56ee3b5b639cb05d129112eac4216ea3ef2c86e003b8f1048ad68d3b3c6cc15ebb90ded100f2f4adfcd18bb2826e6ecbeb68e7ca2222e58ec1707640af76bdd6870c93188b083e037fe99a1117fcd49f1c0938f56defffac1a42583eabfae96cc32ef4da7c4b95283d08efd30952a16537473cef491214a45062c0cf58c0d42cd99c2145f9430460555acb21bedfdd668db21b8f6b4d26464912f2922099b2598b317982023a36925c3199dc493c66c6fa19f24871dabee920a44e90cf3260fd75b1ae066d230a4c5211017862a226f739d52af01e76fc5d807a13381d7ec2169dfcb5f", 0xf0, 0x1, 0x0, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000340)) fcntl$setsig(r1, 0xa, 0x6) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000600)={0x9, 0x6, 0x1a8784b}, 0xc) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) utimensat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000840)={{r5, r6/1000+10000}, {r7, r8/1000+10000}}, 0x100) r9 = socket$xdp(0x2c, 0x3, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x6) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001340)=@broute={'broute\x00', 0x20, 0x3, 0x93d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f00000003c0), &(0x7f0000002a00)=ANY=[@ANYBLOB="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"]}, 0x9b5) syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x10000) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/2, 0x2000, 0x800}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x7, 0x2009, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r10, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r10, &(0x7f0000000000), 0x0}, 0x18) socket$inet6(0xa, 0x1, 0x0) 22:45:46 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000100)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in6=@mcast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000640)) getgroups(0x2, &(0x7f0000000800)=[0xffffffffffffffff, 0xee01]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900), &(0x7f0000000940)=0xc) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)) dup2(r0, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x40000000000, 0x5, 0x0, &(0x7f0000000000)) [ 1099.751794] kernel msg: ebtables bug: please report to author: entries_size too small [ 1099.787688] kernel msg: ebtables bug: please report to author: entries_size too small 22:45:46 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000740)='trusted.overlay.origin\x00', &(0x7f0000000800)='y\x00', 0x2, 0x3) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000000c0)=0xffffffff7fffffff) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000340)={0x6c07, 0x3, 0x0, 0x5, 0x4}) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xd) unshare(0x40000000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x0, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @remote}, 0x1c) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x1ec4, 0xffe, &(0x7f0000000040)}) setsockopt$inet6_dccp_buf(r3, 0x21, 0xf, &(0x7f00000000c0), 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={0x0}, &(0x7f0000000640)=0x8) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000001880)={&(0x7f0000002000/0x4000)=nil, &(0x7f0000002000/0x200000)=nil, 0x4000}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000840)={0x7b, 0x0, [0x1, 0x0, 0x4, 0x5]}) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000580)=""/177) write$tun(r3, &(0x7f0000001000)=ANY=[@ANYBLOB="1c59957d3614017a0c9f8afda85c60597fe7e8f0c551687fbbee0b7a836ad022949c0f77c47745dbfec7042b981f7a90b32633a3e2a1c9843e370a79d281d0df37c6a2fbbee898fa1e04ae0e10399e9ecc5d0d4dcddc93fffdcf3de47aec627cb961a95796a12486bf269a1a3534f06fb1e83ca780591b3c5ce04d240c6f1e0b5fc3c2a836dbf37fff9468e76efd5f8e2a1faff979826949f2498af9df3528", @ANYRES64=r4, @ANYRESDEC, @ANYRESDEC=r4, @ANYRES16=r0, @ANYRESHEX=r4, @ANYRES16=r0], 0x7) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f00000008c0)='y\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) exit(0xd81) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x8dffffff]}, 0x9}, 0x1c) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="c1efb06e2155f9514dae4d51a8d9a7b962da3510fbe4369a40d6ca6841c9054dda47cdf45c1b6a7ad031af81fbdae2722740e619957f23aaf2e6d5ff59f720dee200f23c506048ca782f40cda04253e0b03c7f9e8928fbf27a729e8c986db97f664738aacf1c7b42287e75b676961f6259629cbd92c50fb9ce0b10680a2ce8c6303e82801b47c8eca5"], 0x89}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000140)=0x7) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000500)={0xf, 0x8}, 0x10) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x7, {{0x0, 0x0, 0x3}}}, 0x28) r5 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x18}}) 22:45:46 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000000c0)={0x0, 0x100000001, 0x4, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x1000000000001) close(r0) 22:45:46 executing program 5: socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000100)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in6=@mcast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000640)) getgroups(0x2, &(0x7f0000000800)=[0xffffffffffffffff, 0xee01]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900), &(0x7f0000000940)=0xc) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)) dup2(r0, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x40000000000, 0x5, 0x0, &(0x7f0000000000)) 22:45:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f00000000c0)="1b0000001e001f0fff07eaf9002304000a04f51108000100020100", 0x1b) 22:45:46 executing program 3: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x28) creat(0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) getpid() ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000000080), 0x0, 0x0) 22:45:46 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000100)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in6=@mcast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000640)) getgroups(0x2, &(0x7f0000000800)=[0xffffffffffffffff, 0xee01]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900), &(0x7f0000000940)=0xc) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)) dup2(r0, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x40000000000, 0x5, 0x0, &(0x7f0000000000)) 22:45:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f00000000c0)="1b0000001e001f0fff07eaf9002304000a04f51108000100020100", 0x1b) 22:45:46 executing program 5: socket$alg(0x26, 0x5, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x5, 0x100000000000d00}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000080), &(0x7f0000000100)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in6=@mcast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000640)) getgroups(0x2, &(0x7f0000000800)=[0xffffffffffffffff, 0xee01]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000900), &(0x7f0000000940)=0xc) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)) dup2(r0, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x40000000000, 0x5, 0x0, &(0x7f0000000000)) [ 1100.076523] IPVS: ftp: loaded support on port[0] = 21 22:45:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f00000000c0)="1b0000001e001f0fff07eaf9002304000a04f51108000100020100", 0x1b) 22:45:46 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x101001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 22:45:46 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000000)='\a', 0x0}, 0x18) 22:45:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = dup(r0) write(r1, &(0x7f00000000c0)="1b0000001e001f0fff07eaf9002304000a04f51108000100020100", 0x1b) [ 1100.643951] IPVS: ftp: loaded support on port[0] = 21 22:45:47 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x805, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000740)='trusted.overlay.origin\x00', &(0x7f0000000800)='y\x00', 0x2, 0x3) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000000c0)=0xffffffff7fffffff) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000340)={0x6c07, 0x3, 0x0, 0x5, 0x4}) futex(&(0x7f0000000080)=0x2, 0xf, 0x2, &(0x7f0000000380)={0x0, 0x989680}, &(0x7f00000003c0)=0x2, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000400)=""/168, 0xfffffffffffffcc0) epoll_wait(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}], 0x3, 0xd) unshare(0x40000000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x0, 0x0) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @remote}, 0x1c) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0x0, 0x1ec4, 0xffe, &(0x7f0000000040)}) setsockopt$inet6_dccp_buf(r3, 0x21, 0xf, &(0x7f00000000c0), 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={0x0}, &(0x7f0000000640)=0x8) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000001880)={&(0x7f0000002000/0x4000)=nil, &(0x7f0000002000/0x200000)=nil, 0x4000}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000840)={0x7b, 0x0, [0x1, 0x0, 0x4, 0x5]}) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000580)=""/177) write$tun(r3, &(0x7f0000001000)=ANY=[@ANYBLOB="1c59957d3614017a0c9f8afda85c60597fe7e8f0c551687fbbee0b7a836ad022949c0f77c47745dbfec7042b981f7a90b32633a3e2a1c9843e370a79d281d0df37c6a2fbbee898fa1e04ae0e10399e9ecc5d0d4dcddc93fffdcf3de47aec627cb961a95796a12486bf269a1a3534f06fb1e83ca780591b3c5ce04d240c6f1e0b5fc3c2a836dbf37fff9468e76efd5f8e2a1faff979826949f2498af9df3528", @ANYRES64=r4, @ANYRESDEC, @ANYRESDEC=r4, @ANYRES16=r0, @ANYRESHEX=r4, @ANYRES16=r0], 0x7) lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f00000008c0)='y\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) exit(0xd81) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x8dffffff]}, 0x9}, 0x1c) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="c1efb06e2155f9514dae4d51a8d9a7b962da3510fbe4369a40d6ca6841c9054dda47cdf45c1b6a7ad031af81fbdae2722740e619957f23aaf2e6d5ff59f720dee200f23c506048ca782f40cda04253e0b03c7f9e8928fbf27a729e8c986db97f664738aacf1c7b42287e75b676961f6259629cbd92c50fb9ce0b10680a2ce8c6303e82801b47c8eca5"], 0x89}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000140)=0x7) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000500)={0xf, 0x8}, 0x10) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x7, {{0x0, 0x0, 0x3}}}, 0x28) r5 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x18}}) [ 1100.784722] IPVS: ftp: loaded support on port[0] = 21 [ 1219.575835] IPVS: stopping master sync thread 22028 ... [ 1219.581569] IPVS: stopping backup sync thread 11925 ... [ 1219.588953] device bridge_slave_1 left promiscuous mode [ 1219.594552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.655924] device bridge_slave_0 left promiscuous mode [ 1219.661550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.805324] bond4 (unregistering): Released all slaves [ 1221.814567] bond3 (unregistering): Released all slaves [ 1221.828736] bond2 (unregistering): Released all slaves [ 1221.841025] bond1 (unregistering): Released all slaves [ 1221.937124] team0 (unregistering): Port device team_slave_1 removed [ 1221.948137] team0 (unregistering): Port device team_slave_0 removed [ 1221.961290] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1222.004615] bond0 (unregistering): Released all slaves [ 1255.035277] INFO: task syz-executor1:6800 blocked for more than 140 seconds. [ 1255.042492] Not tainted 4.20.0-rc6+ #371 [ 1255.047828] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1255.055888] syz-executor1 D24072 6800 22743 0x00000004 [ 1255.061588] Call Trace: [ 1255.064196] __schedule+0x8cf/0x21d0 [ 1255.068030] ? __sched_text_start+0x8/0x8 [ 1255.072190] ? preempt_schedule+0x4d/0x60 [ 1255.076416] ? preempt_schedule_common+0x1f/0xe0 [ 1255.081180] ? preempt_schedule+0x4d/0x60 [ 1255.085407] ? zap_class+0x640/0x640 [ 1255.089124] ? zap_class+0x640/0x640 [ 1255.092886] schedule+0xfe/0x460 [ 1255.096362] ? __schedule+0x21d0/0x21d0 [ 1255.100455] ? find_held_lock+0x36/0x1c0 [ 1255.104523] ? mark_held_locks+0xc7/0x130 [ 1255.108781] schedule_timeout+0x1cc/0x260 [ 1255.112942] ? usleep_range+0x1a0/0x1a0 [ 1255.117125] ? wait_for_completion+0x41f/0x8a0 [ 1255.121733] ? trace_hardirqs_off_caller+0x310/0x310 [ 1255.127226] wait_for_completion+0x427/0x8a0 [ 1255.131823] ? wait_for_completion_interruptible+0x840/0x840 [ 1255.137721] ? wake_up_q+0x100/0x100 [ 1255.141442] ? lock_release+0xa00/0xa00 [ 1255.145473] ? __init_waitqueue_head+0x9e/0x150 [ 1255.150209] ? init_wait_entry+0x1c0/0x1c0 [ 1255.154453] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1255.160112] flush_workqueue+0x742/0x1e10 [ 1255.164326] ? print_usage_bug+0xc0/0xc0 [ 1255.168633] ? cancel_delayed_work+0x3e0/0x3e0 [ 1255.173246] ? is_bpf_text_address+0xac/0x170 [ 1255.178456] ? lock_downgrade+0x900/0x900 [ 1255.182608] ? check_preemption_disabled+0x48/0x280 [ 1255.187716] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 1255.192656] ? __lock_acquire+0x62f/0x4c20 [ 1255.196972] ? rcu_softirq_qs+0x20/0x20 [ 1255.200957] ? unwind_dump+0x190/0x190 [ 1255.204883] ? zap_class+0x640/0x640 [ 1255.208708] ? mark_held_locks+0x130/0x130 [ 1255.212948] ? __kernel_text_address+0xd/0x40 [ 1255.217504] ? lock_acquire+0x1ed/0x520 [ 1255.221559] ? vim2m_release+0xbc/0x150 [ 1255.225610] ? lock_release+0xa00/0xa00 [ 1255.229638] ? perf_trace_sched_process_exec+0x860/0x860 [ 1255.235228] ? v4l2_ctrl_handler_free.part.12+0x742/0xb80 [ 1255.240786] ? lock_downgrade+0x900/0x900 [ 1255.244927] ? kfree+0xcf/0x230 [ 1255.248315] ? __mutex_lock+0x85e/0x16f0 [ 1255.252388] ? zap_class+0x640/0x640 [ 1255.256218] vim2m_stop_streaming+0x7c/0x2c0 [ 1255.260643] ? vim2m_stop_streaming+0x7c/0x2c0 [ 1255.265393] ? mark_held_locks+0xc7/0x130 [ 1255.269562] ? vim2m_buf_queue+0xa0/0xa0 [ 1255.273691] __vb2_queue_cancel+0x171/0xd20 [ 1255.278105] ? trace_hardirqs_on+0xbd/0x310 [ 1255.282432] ? kasan_check_read+0x11/0x20 [ 1255.286652] ? vb2_buffer_done+0xb90/0xb90 [ 1255.290907] ? kasan_check_read+0x11/0x20 [ 1255.295148] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1255.300272] ? v4l2_m2m_cancel_job+0x2f8/0x650 [ 1255.304858] ? v4l2_m2m_job_finish+0x4c0/0x4c0 [ 1255.310227] ? kasan_check_read+0x11/0x20 [ 1255.314392] ? mutex_destroy+0x103/0x200 [ 1255.318544] ? percpu_down_write+0x540/0x540 [ 1255.322973] ? vidioc_querycap+0xd0/0xd0 [ 1255.327154] vb2_core_queue_release+0x26/0x80 [ 1255.331664] vb2_queue_release+0x15/0x20 [ 1255.335815] v4l2_m2m_ctx_release+0x1e/0x35 [ 1255.340149] vim2m_release+0xe6/0x150 [ 1255.344007] v4l2_release+0x224/0x3a0 [ 1255.347993] ? dev_debug_store+0x140/0x140 [ 1255.352243] __fput+0x385/0xa30 [ 1255.355608] ? get_max_files+0x20/0x20 [ 1255.359504] ? trace_hardirqs_on+0xbd/0x310 [ 1255.363822] ? kasan_check_read+0x11/0x20 [ 1255.368061] ? task_work_run+0x1af/0x2a0 [ 1255.372130] ? trace_hardirqs_off_caller+0x310/0x310 [ 1255.377378] ? filp_close+0x1cd/0x250 [ 1255.381268] ____fput+0x15/0x20 [ 1255.384619] task_work_run+0x1e8/0x2a0 [ 1255.388676] ? task_work_cancel+0x240/0x240 [ 1255.393064] ? copy_fd_bitmaps+0x210/0x210 [ 1255.397420] ? do_syscall_64+0x9a/0x820 [ 1255.401413] exit_to_usermode_loop+0x318/0x380 [ 1255.406108] ? __bpf_trace_sys_exit+0x30/0x30 [ 1255.410628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1255.416331] do_syscall_64+0x6be/0x820 [ 1255.420228] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1255.425702] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1255.430646] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1255.436223] ? trace_hardirqs_on_caller+0x310/0x310 [ 1255.441253] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1255.446361] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1255.451392] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1255.456345] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1255.461542] RIP: 0033:0x457679 [ 1255.464723] Code: ff ff e8 5a 28 00 00 e9 45 fe ff ff cc cc cc cc cc 48 8b 4c 24 10 48 8b 11 64 48 8b 1c 25 f8 ff ff ff 8b b2 d8 00 00 00 8d 7e 89 ba d8 00 00 00 83 fe 01 75 13 0f b6 93 c0 00 00 00 84 d2 74 [ 1255.483859] RSP: 002b:00007fee7b87ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1255.491636] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000457679 [ 1255.498976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1255.506465] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1255.513792] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fee7b87f6d4 [ 1255.521325] R13: 00000000004f16f2 R14: 00000000004cd598 R15: 00000000ffffffff [ 1255.528691] [ 1255.528691] Showing all locks held in the system: [ 1255.535059] 2 locks held by kworker/0:1/12: [ 1255.539368] #0: 00000000fe86094c ((wq_completion)"events"){+.+.}, at: process_one_work+0xb43/0x1c40 [ 1255.548790] #1: 0000000080334cf3 ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 1255.559942] 2 locks held by kworker/1:1/22: [ 1255.564256] #0: 00000000fe86094c ((wq_completion)"events"){+.+.}, at: process_one_work+0xb43/0x1c40 [ 1255.574308] #1: 00000000e809089b ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 1255.585235] 1 lock held by khungtaskd/1019: [ 1255.589559] #0: 0000000000993f4d (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x424 [ 1255.598456] 2 locks held by kworker/1:2/2937: [ 1255.603011] #0: 00000000fe86094c ((wq_completion)"events"){+.+.}, at: process_one_work+0xb43/0x1c40 [ 1255.612470] #1: 0000000043e92aff ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 1255.623395] 1 lock held by rsyslogd/5964: [ 1255.627630] 2 locks held by getty/6053: [ 1255.631606] #0: 00000000ad14c920 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1255.639925] #1: 00000000605fbc55 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1255.649019] 2 locks held by getty/6054: [ 1255.653021] #0: 00000000bce10e4b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1255.661352] #1: 000000000433896b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1255.670262] 2 locks held by getty/6055: [ 1255.674222] #0: 000000003d4a97b4 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1255.682665] #1: 000000004835be82 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1255.691603] 2 locks held by getty/6056: [ 1255.695645] #0: 00000000945ecb60 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1255.703911] #1: 0000000036907f19 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1255.712860] 2 locks held by getty/6057: [ 1255.716869] #0: 0000000061db1e85 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1255.725177] #1: 000000005f7d6942 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1255.734043] 2 locks held by getty/6058: [ 1255.738064] #0: 000000004d3d77c4 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1255.746465] #1: 00000000febacddb (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1255.755497] 2 locks held by getty/6059: [ 1255.759470] #0: 0000000010230e3b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x32/0x40 [ 1255.767789] #1: 000000000b131da7 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1e80 [ 1255.776702] 2 locks held by kworker/0:3/6302: [ 1255.781317] #0: 00000000fe86094c ((wq_completion)"events"){+.+.}, at: process_one_work+0xb43/0x1c40 [ 1255.790678] #1: 000000002be5fa01 ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 1255.801699] 2 locks held by kworker/0:4/6308: [ 1255.806222] #0: 00000000fe86094c ((wq_completion)"events"){+.+.}, at: process_one_work+0xb43/0x1c40 [ 1255.815694] #1: 00000000c60329d6 ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 1255.826554] 2 locks held by kworker/1:3/6458: [ 1255.831152] #0: 00000000fe86094c ((wq_completion)"events"){+.+.}, at: process_one_work+0xb43/0x1c40 [ 1255.840533] #1: 00000000bdc32f17 ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 1255.851391] 2 locks held by kworker/1:4/6480: [ 1255.855986] #0: 00000000fe86094c ((wq_completion)"events"){+.+.}, at: process_one_work+0xb43/0x1c40 [ 1255.865379] #1: 000000002baea673 ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 1255.876720] 2 locks held by kworker/1:5/16072: [ 1255.881308] #0: 00000000fe86094c ((wq_completion)"events"){+.+.}, at: process_one_work+0xb43/0x1c40 [ 1255.890687] #1: 00000000a303a59b ((work_completion)(&smc->tcp_listen_work)){+.+.}, at: process_one_work+0xb9a/0x1c40 [ 1255.901544] 1 lock held by syz-executor0/2625: [ 1255.906179] #0: 00000000e3ae306f (&sig->cred_guard_mutex){+.+.}, at: prepare_bprm_creds+0x53/0x120 [ 1255.915449] 1 lock held by syz-executor0/2634: [ 1255.920016] #0: 00000000e9884b49 (&sig->cred_guard_mutex){+.+.}, at: prepare_bprm_creds+0x53/0x120 [ 1255.929342] 2 locks held by syz-executor1/6800: [ 1255.934056] #0: 00000000b54cb41e (&mdev->req_queue_mutex){+.+.}, at: v4l2_release+0x1d7/0x3a0 [ 1255.942957] #1: 00000000350f115c (&dev->dev_mutex){+.+.}, at: vim2m_release+0xbc/0x150 [ 1255.951176] [ 1255.952791] ============================================= [ 1255.952791] [ 1255.959911] NMI backtrace for cpu 0 [ 1255.963546] CPU: 0 PID: 1019 Comm: khungtaskd Not tainted 4.20.0-rc6+ #371 [ 1255.970550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1255.979899] Call Trace: [ 1255.982483] dump_stack+0x244/0x39d [ 1255.986097] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1255.991321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1255.996861] nmi_cpu_backtrace.cold.2+0x5c/0xa1 [ 1256.001599] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 1256.006780] nmi_trigger_cpumask_backtrace+0x1e8/0x22a [ 1256.012055] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1256.017234] watchdog+0xb51/0x1060 [ 1256.020775] ? hungtask_pm_notify+0xb0/0xb0 [ 1256.025089] ? __kthread_parkme+0xce/0x1a0 [ 1256.029319] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1256.034411] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1256.039561] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1256.044156] ? trace_hardirqs_on+0xbd/0x310 [ 1256.048470] ? kasan_check_read+0x11/0x20 [ 1256.052612] ? __kthread_parkme+0xce/0x1a0 [ 1256.056844] ? trace_hardirqs_off_caller+0x310/0x310 [ 1256.061944] ? trace_hardirqs_off_caller+0x310/0x310 [ 1256.067148] ? lockdep_init_map+0x9/0x10 [ 1256.071198] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1256.076305] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1256.081842] ? __kthread_parkme+0xfb/0x1a0 [ 1256.086067] ? hungtask_pm_notify+0xb0/0xb0 [ 1256.090374] kthread+0x35a/0x440 [ 1256.093725] ? kthread_stop+0x900/0x900 [ 1256.097704] ret_from_fork+0x3a/0x50 [ 1256.101547] Sending NMI from CPU 0 to CPUs 1: [ 1256.106149] NMI backtrace for cpu 1 skipped: idling at native_safe_halt+0x6/0x10 [ 1256.107092] Kernel panic - not syncing: hung_task: blocked tasks [ 1256.119846] CPU: 0 PID: 1019 Comm: khungtaskd Not tainted 4.20.0-rc6+ #371 [ 1256.126841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1256.136174] Call Trace: [ 1256.138749] dump_stack+0x244/0x39d [ 1256.142361] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1256.147597] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1256.152619] panic+0x2ad/0x55c [ 1256.155802] ? add_taint.cold.5+0x16/0x16 [ 1256.159945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1256.165543] ? nmi_trigger_cpumask_backtrace+0x1d1/0x22a [ 1256.170997] ? nmi_trigger_cpumask_backtrace+0x1c8/0x22a [ 1256.176492] watchdog+0xb62/0x1060 [ 1256.180033] ? hungtask_pm_notify+0xb0/0xb0 [ 1256.184413] ? __kthread_parkme+0xce/0x1a0 [ 1256.188648] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1256.193785] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 1256.198887] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 1256.203458] ? trace_hardirqs_on+0xbd/0x310 [ 1256.207766] ? kasan_check_read+0x11/0x20 [ 1256.211901] ? __kthread_parkme+0xce/0x1a0 [ 1256.216123] ? trace_hardirqs_off_caller+0x310/0x310 [ 1256.221213] ? trace_hardirqs_off_caller+0x310/0x310 [ 1256.226307] ? lockdep_init_map+0x9/0x10 [ 1256.230362] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 1256.235552] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1256.241094] ? __kthread_parkme+0xfb/0x1a0 [ 1256.245329] ? hungtask_pm_notify+0xb0/0xb0 [ 1256.249663] kthread+0x35a/0x440 [ 1256.253139] ? kthread_stop+0x900/0x900 [ 1256.257173] ret_from_fork+0x3a/0x50 [ 1256.262319] Kernel Offset: disabled [ 1256.265968] Rebooting in 86400 seconds..